sneak/mfer

1.0.0

New Issue

Work that blocks tagging v1.0.0: repo-policy compliance, format/correctness fixes, library and CLI hardening, test coverage, documentation, and the release mechanics themselves. Owner design questions that gate implementation are tracked as issues in this milestone too.

No due date

100% Completed

Verify Go formatting with gofumpt, not gofmt, so fmt and check agree

by clawbot was closed 2026-10-04 17:54:52 +02:00

Add .prettierrc/.prettierignore, stop reformatting REPO_POLICIES.md, and make fmt-check cover markdown

by clawbot was closed 2026-08-10 16:16:43 +02:00

Pin every developer tool install by hash; make local lint match CI

by clawbot was closed 2026-10-04 20:48:52 +02:00

Rewrite script/test to the canonical pattern (30s timeout, -race -cover, conditional verbose rerun)

by clawbot was closed 2026-09-21 15:17:51 +02:00

Add real end-to-end tests for the freshen and fetch commands

by clawbot was closed 2026-10-04 17:02:23 +02:00

Add fuzz coverage for NewManifestFromReader critical

by clawbot was closed 2026-10-04 05:31:52 +02:00

Fix -v flag collision between --verbose and --version

by clawbot was closed 2026-10-04 06:02:25 +02:00

Harden fetch: client timeout, retry with backoff, url.JoinPath

by clawbot was closed 2026-10-04 15:48:56 +02:00

Enforce real timeouts on gpg subprocess calls

by clawbot was closed 2026-10-04 04:31:55 +02:00

Validate manifest paths on read, not only on write (path traversal in Checker)

by clawbot was closed 2026-09-22 00:47:27 +02:00

Adopt golangci-lint v2.12.2 and the canonical .golangci.yml

by clawbot was closed 2026-08-10 16:06:12 +02:00

Update golangci-lint to v2.12.2 with canonical config (closes #60)

check / check (push) Successful in 53s

Details

needs-review

by clawbot was merged 2026-08-10 16:06:12 +02:00

golangci-v2.12.2

1 2