2026-09-07 - 2026-09-10
Overview
4 Pull requests merged by 1 user
Merged
#55 Migrate canonical .golangci.yml to gomodguard_v2, with a block list
Merged
#34 Milestone next: check-cache busting, build-context hygiene, lint in a container
Merged
#45 Add -count=1 to the canonical Go make test example
Merged
#59 Enable depguard so a non-test file cannot import test support
9 Issues closed from 1 user
Closed
#33 DECISION NEEDED: canonical script/bootstrap pins NODE_VERSION and YARN_VERSION but policy tells it to skip on any version found — the pins are decorative
Closed
#46 Decision: vmsetup and secpol are tracked projects with no repo on the instance
Closed
#25 canonical .golangci.yml emits a gomodguard deprecation warning under golangci-lint v2.12+
Closed
#27 canonical .dockerignore omits .claude/, so agent worktrees land in the Docker build context
Closed
#28 script/bootstrap installs the pinned golangci-lint only if missing, so version pins are inert on any machine that already has the tool
Closed
#29 SECURITY: canonical .dockerignore does not exclude .env, *.pem or *.key, so local secrets ship into the Docker build context
Closed
#30 script/lint shares one golangci-lint cache across all concurrent sessions, producing cross-contaminated results
Closed
#26 script/cibuild reports a green it did not earn: Docker serves the make check layer from cache
Closed
#40 All linting must run in Docker: canonicalise homoicon's Dockerfile.lint + script/lint pattern
1 Issue created by 1 user
Opened
#60 PROPAGATION: roll the new canonical .golangci.yml bytes (gomodguard_v2 migration) into every consuming repository
5 Unresolved Conversations
Open
#36
Operational consequence of CHECK_EPOCH: every check layer is unreusable by construction, so builder-cache growth is unbounded across the fleet
Open
#37
DECISION NEEDED: should pinned Go tools be go install-with-commit-pin, or tracked as go.mod tool dependencies?
Open
#44
Canonical Go make test example omits -count=1, shipping a false green to every repo
Open
#35
PROPAGATION: roll the Docker build-context trio (#26 CHECK_EPOCH, #29 .dockerignore secrets, #27 .claude/) into every consuming repo — as ONE commit per repo
Open
#39
PROPAGATION: roll the Go tooling fixes (#28 bootstrap version enforcement, #30 lint cache/lock isolation) into every Go repo — as ONE commit per repo