Update default Go module caching to use go.mod - #705
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
This pull request updates the default Go module caching strategy to use go.mod instead of go.sum as the cache key dependency file. This change aligns with the V6 release strategy for intelligent caching that incorporates toolchain directives from go.mod.
Changes:
- Updated default dependency file pattern from
go.sumtogo.modin package manager configuration - Renamed variables in cache-restore logic from
goSumFileExiststogoModFileExistsfor clarity - Updated action.yml description to clarify support for both
go.modandgo.sum - Added comprehensive test coverage for the new default behavior
- Updated documentation to explain the change and how to use
go.sumif needed
Reviewed changes
Copilot reviewed 6 out of 9 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| src/package-managers.ts | Changed default dependencyFilePattern from 'go.sum' to 'go.mod' |
| src/cache-restore.ts | Updated variable names from goSumFileExists to goModFileExists for consistency |
| action.yml | Updated cache-dependency-path description to clarify it accepts both go.mod and go.sum |
| tests/cache-utils.test.ts | Updated test expectations to use 'go.mod' as dependency file pattern |
| tests/cache-restore.test.ts | Refactored existing tests and added new test for go.mod default behavior |
| dist/setup/index.js | Compiled distribution file reflecting source changes |
| dist/cache-save/index.js | Compiled distribution file reflecting source changes |
| README.md | Added documentation explaining the new default and how to override it |
| package-lock.json | Updated qs dependency from 6.14.0 to 6.14.1 (routine update) |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
AlekSi
reviewed
Jan 14, 2026
Updated breaking changes section with enhanced formatting and clarified toolchain management details.
mahabaleshwars
approved these changes
Jan 21, 2026
aparnajyothi-y
approved these changes
Jan 21, 2026
HarithaVattikuti
approved these changes
Jan 26, 2026
2 tasks
MissingRoberto
added a commit
to grafana/grafana
that referenced
this pull request
Mar 11, 2026
Update the reusable setup-go action to use **/*.mod instead of **/*.sum for cache-dependency-path. go.sum is an append-only checksum log that only grows and never removes entries, making it a poor cache key — it causes unnecessary cache misses when entries are added but dependencies haven't actually changed. go.mod accurately represents the actual dependency graph and is the correct file for cache invalidation. This aligns with the upstream actions/setup-go v6 default change: actions/setup-go#705 Made-with: Cursor
1 task
MissingRoberto
added a commit
to grafana/grafana
that referenced
this pull request
Mar 11, 2026
Update the reusable setup-go action to use **/*.mod instead of **/*.sum for cache-dependency-path. go.sum is an append-only checksum log that only grows and never removes entries, making it a poor cache key — it causes unnecessary cache misses when entries are added but dependencies haven't actually changed. go.mod accurately represents the actual dependency graph and is the correct file for cache invalidation. This aligns with the upstream actions/setup-go v6 default change: actions/setup-go#705 Made-with: Cursor
This was referenced Mar 11, 2026
2 tasks
PoorlyDefinedBehaviour
pushed a commit
to grafana/grafana
that referenced
this pull request
May 6, 2026
Update the reusable setup-go action to use **/*.mod instead of **/*.sum for cache-dependency-path. go.sum is an append-only checksum log that only grows and never removes entries, making it a poor cache key — it causes unnecessary cache misses when entries are added but dependencies haven't actually changed. go.mod accurately represents the actual dependency graph and is the correct file for cache invalidation. This aligns with the upstream actions/setup-go v6 default change: actions/setup-go#705 Made-with: Cursor
hoodnoah
added a commit
to hoodnoah/certmanager-porkbun-webhook
that referenced
this pull request
Jun 10, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v5` → `v6` | --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](actions/setup-go@v6.3.0...v6.4.0) ##### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams) in [#​721](actions/setup-go#721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​727](actions/setup-go#727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108) in [#​724](actions/setup-go#724) - Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams) in [#​734](actions/setup-go#734) ##### New Contributors - [@​gdams](https://github.com/gdams) made their first contribution in [#​721](actions/setup-go#721) **Full Changelog**: <actions/setup-go@v6...v6.4.0> ### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0) [Compare Source](actions/setup-go@v6.2.0...v6.3.0) ##### What's Changed - Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108) in [#​705](actions/setup-go#705) - Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba) in [#​469](actions/setup-go#469) **Full Changelog**: <actions/setup-go@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0) [Compare Source](actions/setup-go@v6.1.0...v6.2.0) ##### What's Changed ##### Enhancements - Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​696](actions/setup-go#696) - Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille) in [#​691](actions/setup-go#691) - Documentation update of actions/checkout by [@​deining](https://github.com/deining) in [#​683](actions/setup-go#683) ##### Dependency updates - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot) in [#​682](actions/setup-go#682) - Upgrade [@​actions/cache](https://github.com/actions/cache) to v5 by [@​salmanmkc](https://github.com/salmanmkc) in [#​695](actions/setup-go#695) - Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [#​686](actions/setup-go#686) - Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot) in [#​703](actions/setup-go#703) ##### New Contributors - [@​ccoVeille](https://github.com/ccoVeille) made their first contribution in [#​691](actions/setup-go#691) - [@​deining](https://github.com/deining) made their first contribution in [#​683](actions/setup-go#683) **Full Changelog**: <actions/setup-go@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0) [Compare Source](actions/setup-go@v6...v6.1.0) ##### What's Changed ##### Enhancements - Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai) in [#​665](actions/setup-go#665) - Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​673](actions/setup-go#673) - Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars) in [#​674](actions/setup-go#674) ##### Dependency updates - Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​617](actions/setup-go#617) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot) in [#​641](actions/setup-go#641) - Upgrade semver and [@​types/semver](https://github.com/types/semver) by [@​dependabot](https://github.com/dependabot) in [#​652](actions/setup-go#652) ##### New Contributors - [@​nicholasngai](https://github.com/nicholasngai) made their first contribution in [#​665](actions/setup-go#665) - [@​priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#​673](actions/setup-go#673) - [@​mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#​674](actions/setup-go#674) **Full Changelog**: <actions/setup-go@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-go/releases/tag/v6.0.0) [Compare Source](actions/setup-go@v6...v6) ##### What's Changed ##### Breaking Changes - Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​460](actions/setup-go#460) - Upgrade Nodejs runtime from node20 to node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​624](actions/setup-go#624) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency Upgrades - Upgrade [@​types/jest](https://github.com/types/jest) from 29.5.12 to 29.5.14 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​589](actions/setup-go#589) - Upgrade [@​actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​591](actions/setup-go#591) - Upgrade [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.31.1 to 8.35.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​590](actions/setup-go#590) - Upgrade undici from 5.28.5 to 5.29.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​594](actions/setup-go#594) - Upgrade typescript from 5.4.2 to 5.8.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](actions/setup-go#538) - Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​603](actions/setup-go#603) - Upgrade `form-data` to bring in fix for critical vulnerability by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​618](actions/setup-go#618) - Upgrade actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​631](actions/setup-go#631) ##### New Contributors - [@​matthewhughes934](https://github.com/matthewhughes934) made their first contribution in [#​618](actions/setup-go#618) - [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​624](actions/setup-go#624) **Full Changelog**: <actions/setup-go@v5...v6.0.0> ### [`v6`](actions/setup-go@v5.6.0...v6) [Compare Source](actions/setup-go@v5.6.0...v6) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: hoodn <hood.noah@gmail.com> Reviewed-on: https://gitea.k3s.noah-hood.io/hoodn/certmanager-porkbun-webhook/pulls/7 Co-authored-by: renovate-bot <renovate-bot@example.local> Co-committed-by: renovate-bot <renovate-bot@example.local>
This was referenced Jun 17, 2026
mergify Bot
added a commit
to ArcadeData/arcadedb
that referenced
this pull request
Jul 5, 2026
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.5.0 to 6.5.0. Release notes *Sourced from [actions/setup-go's releases](https://github.com/actions/setup-go/releases).* > v6.5.0 > ------ > > What's Changed > -------------- > > ### Dependency update > > * Upgrade actions dependencies by [`@priyagupta108`](https://github.com/priyagupta108) with [`@Copilot`](https://github.com/Copilot) in [actions/setup-go#744](https://redirect.github.com/actions/setup-go/pull/744) > * Upgrade `@types/node` and typescript-eslint dependencies to resolve npm audit findings by [`@HarithaVattikuti`](https://github.com/HarithaVattikuti) in [actions/setup-go#755](https://redirect.github.com/actions/setup-go/pull/755) > * Upgrade `@actions/cache` to 5.1.0, log cache write denied by [`@jasongin`](https://github.com/jasongin) in [actions/setup-go#758](https://redirect.github.com/actions/setup-go/pull/758) > * Upgrade version to 6.5.0 in package.json and package-lock.json by [`@HarithaVattikuti`](https://github.com/HarithaVattikuti) in [actions/setup-go#762](https://redirect.github.com/actions/setup-go/pull/762) > > New Contributors > ---------------- > > * [`@priyagupta108`](https://github.com/priyagupta108) with [`@Copilot`](https://github.com/Copilot) made their first contribution in [actions/setup-go#744](https://redirect.github.com/actions/setup-go/pull/744) > * [`@jasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-go#758](https://redirect.github.com/actions/setup-go/pull/758) > > **Full Changelog**: <actions/setup-go@v6...v6.5.0> > > v6.4.0 > ------ > > What's Changed > -------------- > > ### Enhancement > > * Add go-download-base-url input for custom Go distributions by [`@gdams`](https://github.com/gdams) in [actions/setup-go#721](https://redirect.github.com/actions/setup-go/pull/721) > > ### Dependency update > > * Upgrade minimatch from 3.1.2 to 3.1.5 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-go#727](https://redirect.github.com/actions/setup-go/pull/727) > > ### Documentation update > > * Rearrange README.md, add advanced-usage.md by [`@priyagupta108`](https://github.com/priyagupta108) in [actions/setup-go#724](https://redirect.github.com/actions/setup-go/pull/724) > * Fix Microsoft build of Go link by [`@gdams`](https://github.com/gdams) in [actions/setup-go#734](https://redirect.github.com/actions/setup-go/pull/734) > > New Contributors > ---------------- > > * [`@gdams`](https://github.com/gdams) made their first contribution in [actions/setup-go#721](https://redirect.github.com/actions/setup-go/pull/721) > > **Full Changelog**: <actions/setup-go@v6...v6.4.0> > > v6.3.0 > ------ > > What's Changed > -------------- > > * Update default Go module caching to use go.mod by [`@priyagupta108`](https://github.com/priyagupta108) in [actions/setup-go#705](https://redirect.github.com/actions/setup-go/pull/705) > * Fix golang download url to go.dev by [`@178inaba`](https://github.com/178inaba) in [actions/setup-go#469](https://redirect.github.com/actions/setup-go/pull/469) > > **Full Changelog**: <actions/setup-go@v6...v6.3.0> > > v6.2.0 > ------ > > What's Changed > -------------- > > ### Enhancements > > * Example for restore-only cache in documentation by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-go#696](https://redirect.github.com/actions/setup-go/pull/696) > * Update Node.js version in action.yml by [`@ccoVeille`](https://github.com/ccoVeille) in [actions/setup-go#691](https://redirect.github.com/actions/setup-go/pull/691) > * Documentation update of actions/checkout by [`@deining`](https://github.com/deining) in [actions/setup-go#683](https://redirect.github.com/actions/setup-go/pull/683) > > ### Dependency updates > > * Upgrade js-yaml from 3.14.1 to 3.14.2 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-go#682](https://redirect.github.com/actions/setup-go/pull/682) > * Upgrade `@actions/cache` to v5 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-go#695](https://redirect.github.com/actions/setup-go/pull/695) > * Upgrade actions/checkout from 5 to 6 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-go#686](https://redirect.github.com/actions/setup-go/pull/686) > * Upgrade qs from 6.14.0 to 6.14.1 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-go#703](https://redirect.github.com/actions/setup-go/pull/703) ... (truncated) Commits * [`924ae3a`](actions/setup-go@924ae3a) chore: bump version to 6.5.0 in package.json and package-lock.json ([#762](https://redirect.github.com/actions/setup-go/issues/762)) * [`e91cc3b`](actions/setup-go@e91cc3b) Bump `@actions/cache` to 5.1.0, log cache write denied ([#758](https://redirect.github.com/actions/setup-go/issues/758)) * [`4a2405e`](actions/setup-go@4a2405e) chore: update `@types/node` and [`@typescript-eslint`](https://github.com/typescript-eslint) dependencies to latest versi... * [`78961f6`](actions/setup-go@78961f6) chore: update [`@actions`](https://github.com/actions) dependencies and refresh license cache ([#744](https://redirect.github.com/actions/setup-go/issues/744)) * [`4a36011`](actions/setup-go@4a36011) docs: fix Microsoft build of Go link ([#734](https://redirect.github.com/actions/setup-go/issues/734)) * [`8f19afc`](actions/setup-go@8f19afc) feat: add go-download-base-url input for custom Go distributions ([#721](https://redirect.github.com/actions/setup-go/issues/721)) * [`27fdb26`](actions/setup-go@27fdb26) Bump minimatch from 3.1.2 to 3.1.5 ([#727](https://redirect.github.com/actions/setup-go/issues/727)) * [`def8c39`](actions/setup-go@def8c39) Rearrange README.md, add advanced-usage.md ([#724](https://redirect.github.com/actions/setup-go/issues/724)) * [`4b73464`](actions/setup-go@4b73464) Fix golang download url to go.dev ([#469](https://redirect.github.com/actions/setup-go/issues/469)) * [`a5f9b05`](actions/setup-go@a5f9b05) Update default Go module caching to use go.mod ([#705](https://redirect.github.com/actions/setup-go/issues/705)) * Additional commits viewable in [compare view](actions/setup-go@d35c59a...924ae3a) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
This was referenced Jul 16, 2026
wu
pushed a commit
to wu/keyop-messenger
that referenced
this pull request
Jul 18, 2026
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v5` → `v6` | `v7.0.0` (+1) | --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v6.5.0`](https://github.com/actions/setup-go/releases/tag/v6.5.0) [Compare Source](actions/setup-go@v6.4.0...v6.5.0) #### What's Changed ##### Dependency update - Upgrade actions dependencies by [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) in [#​744](actions/setup-go#744) - Upgrade [@​types/node](https://github.com/types/node) and typescript-eslint dependencies to resolve npm audit findings by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​755](actions/setup-go#755) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​758](actions/setup-go#758) - Upgrade version to 6.5.0 in package.json and package-lock.json by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​762](actions/setup-go#762) #### New Contributors - [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​744](actions/setup-go#744) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​758](actions/setup-go#758) **Full Changelog**: <actions/setup-go@v6...v6.5.0> ### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](actions/setup-go@v6.3.0...v6.4.0) #### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams) in [#​721](actions/setup-go#721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​727](actions/setup-go#727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108) in [#​724](actions/setup-go#724) - Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams) in [#​734](actions/setup-go#734) #### New Contributors - [@​gdams](https://github.com/gdams) made their first contribution in [#​721](actions/setup-go#721) **Full Changelog**: <actions/setup-go@v6...v6.4.0> ### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0) [Compare Source](actions/setup-go@v6.2.0...v6.3.0) #### What's Changed - Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108) in [#​705](actions/setup-go#705) - Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba) in [#​469](actions/setup-go#469) **Full Changelog**: <actions/setup-go@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0) [Compare Source](actions/setup-go@v6.1.0...v6.2.0) #### What's Changed ##### Enhancements - Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​696](actions/setup-go#696) - Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille) in [#​691](actions/setup-go#691) - Documentation update of actions/checkout by [@​deining](https://github.com/deining) in [#​683](actions/setup-go#683) ##### Dependency updates - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot) in [#​682](actions/setup-go#682) - Upgrade [@​actions/cache](https://github.com/actions/cache) to v5 by [@​salmanmkc](https://github.com/salmanmkc) in [#​695](actions/setup-go#695) - Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [#​686](actions/setup-go#686) - Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot) in [#​703](actions/setup-go#703) #### New Contributors - [@​ccoVeille](https://github.com/ccoVeille) made their first contribution in [#​691](actions/setup-go#691) - [@​deining](https://github.com/deining) made their first contribution in [#​683](actions/setup-go#683) **Full Changelog**: <actions/setup-go@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0) [Compare Source](actions/setup-go@v6...v6.1.0) #### What's Changed ##### Enhancements - Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai) in [#​665](actions/setup-go#665) - Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​673](actions/setup-go#673) - Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars) in [#​674](actions/setup-go#674) ##### Dependency updates - Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​617](actions/setup-go#617) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot) in [#​641](actions/setup-go#641) - Upgrade semver and [@​types/semver](https://github.com/types/semver) by [@​dependabot](https://github.com/dependabot) in [#​652](actions/setup-go#652) #### New Contributors - [@​nicholasngai](https://github.com/nicholasngai) made their first contribution in [#​665](actions/setup-go#665) - [@​priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#​673](actions/setup-go#673) - [@​mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#​674](actions/setup-go#674) **Full Changelog**: <actions/setup-go@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-go/releases/tag/v6.0.0) [Compare Source](actions/setup-go@v6...v6) #### What's Changed ##### Breaking Changes - Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​460](actions/setup-go#460) - Upgrade Nodejs runtime from node20 to node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​624](actions/setup-go#624) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency Upgrades - Upgrade [@​types/jest](https://github.com/types/jest) from 29.5.12 to 29.5.14 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​589](actions/setup-go#589) - Upgrade [@​actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​591](actions/setup-go#591) - Upgrade [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.31.1 to 8.35.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​590](actions/setup-go#590) - Upgrade undici from 5.28.5 to 5.29.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​594](actions/setup-go#594) - Upgrade typescript from 5.4.2 to 5.8.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](actions/setup-go#538) - Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​603](actions/setup-go#603) - Upgrade `form-data` to bring in fix for critical vulnerability by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​618](actions/setup-go#618) - Upgrade actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​631](actions/setup-go#631) #### New Contributors - [@​matthewhughes934](https://github.com/matthewhughes934) made their first contribution in [#​618](actions/setup-go#618) - [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​624](actions/setup-go#624) **Full Changelog**: <actions/setup-go@v5...v6.0.0> ### [`v6`](actions/setup-go@v5.6.0...v6) [Compare Source](actions/setup-go@v5.6.0...v6) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Los_Angeles) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: Renovate Bot <renovate-bot@geekfarm.org> Reviewed-on: https://git.geekfarm.org/wu/keyop-messenger/pulls/10
GiteaBot
pushed a commit
to go-gitea/terraform-provider-gitea
that referenced
this pull request
Jul 23, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v7.0.0`](https://github.com/actions/setup-go/releases/tag/v7.0.0) [Compare Source](actions/setup-go@v7.0.0...v7.0.0) ##### What's Changed - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​763](actions/setup-go#763) - chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​771](actions/setup-go#771) ##### New Contributors - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​771](actions/setup-go#771) **Full Changelog**: <actions/setup-go@v6...v7.0.0> ### [`v7`](actions/setup-go@v6.5.0...v7.0.0) [Compare Source](actions/setup-go@v6.5.0...v7.0.0) ### [`v6.5.0`](https://github.com/actions/setup-go/releases/tag/v6.5.0) [Compare Source](actions/setup-go@v6.4.0...v6.5.0) #### What's Changed ##### Dependency update - Upgrade actions dependencies by [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) in [#​744](actions/setup-go#744) - Upgrade [@​types/node](https://github.com/types/node) and typescript-eslint dependencies to resolve npm audit findings by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​755](actions/setup-go#755) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​758](actions/setup-go#758) - Upgrade version to 6.5.0 in package.json and package-lock.json by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​762](actions/setup-go#762) #### New Contributors - [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​744](actions/setup-go#744) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​758](actions/setup-go#758) **Full Changelog**: <actions/setup-go@v6...v6.5.0> ### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](actions/setup-go@v6.3.0...v6.4.0) ##### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams) in [#​721](actions/setup-go#721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​727](actions/setup-go#727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108) in [#​724](actions/setup-go#724) - Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams) in [#​734](actions/setup-go#734) ##### New Contributors - [@​gdams](https://github.com/gdams) made their first contribution in [#​721](actions/setup-go#721) **Full Changelog**: <actions/setup-go@v6...v6.4.0> ### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0) [Compare Source](actions/setup-go@v6.2.0...v6.3.0) ##### What's Changed - Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108) in [#​705](actions/setup-go#705) - Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba) in [#​469](actions/setup-go#469) **Full Changelog**: <actions/setup-go@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0) [Compare Source](actions/setup-go@v6.1.0...v6.2.0) ##### What's Changed ##### Enhancements - Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​696](actions/setup-go#696) - Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille) in [#​691](actions/setup-go#691) - Documentation update of actions/checkout by [@​deining](https://github.com/deining) in [#​683](actions/setup-go#683) ##### Dependency updates - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot) in [#​682](actions/setup-go#682) - Upgrade [@​actions/cache](https://github.com/actions/cache) to v5 by [@​salmanmkc](https://github.com/salmanmkc) in [#​695](actions/setup-go#695) - Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [#​686](actions/setup-go#686) - Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot) in [#​703](actions/setup-go#703) ##### New Contributors - [@​ccoVeille](https://github.com/ccoVeille) made their first contribution in [#​691](actions/setup-go#691) - [@​deining](https://github.com/deining) made their first contribution in [#​683](actions/setup-go#683) **Full Changelog**: <actions/setup-go@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0) [Compare Source](actions/setup-go@v6...v6.1.0) ##### What's Changed ##### Enhancements - Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai) in [#​665](actions/setup-go#665) - Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​673](actions/setup-go#673) - Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars) in [#​674](actions/setup-go#674) ##### Dependency updates - Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​617](actions/setup-go#617) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot) in [#​641](actions/setup-go#641) - Upgrade semver and [@​types/semver](https://github.com/types/semver) by [@​dependabot](https://github.com/dependabot) in [#​652](actions/setup-go#652) ##### New Contributors - [@​nicholasngai](https://github.com/nicholasngai) made their first contribution in [#​665](actions/setup-go#665) - [@​priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#​673](actions/setup-go#673) - [@​mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#​674](actions/setup-go#674) **Full Changelog**: <actions/setup-go@v6...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTEuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE5MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.com/gitea/terraform-provider-gitea/pulls/181 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Renovate Bot <renovate-bot@gitea.com>
chhe
pushed a commit
to chhe/act_runner
that referenced
this pull request
Jul 23, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v7.0.0`](https://github.com/actions/setup-go/releases/tag/v7.0.0) [Compare Source](actions/setup-go@v7.0.0...v7.0.0) ##### What's Changed - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​763](actions/setup-go#763) - chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​771](actions/setup-go#771) ##### New Contributors - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​771](actions/setup-go#771) **Full Changelog**: <actions/setup-go@v6...v7.0.0> ### [`v7`](actions/setup-go@v6.5.0...v7.0.0) [Compare Source](actions/setup-go@v6.5.0...v7.0.0) ### [`v6.5.0`](https://github.com/actions/setup-go/releases/tag/v6.5.0) [Compare Source](actions/setup-go@v6.4.0...v6.5.0) ##### What's Changed ##### Dependency update - Upgrade actions dependencies by [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) in [#​744](actions/setup-go#744) - Upgrade [@​types/node](https://github.com/types/node) and typescript-eslint dependencies to resolve npm audit findings by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​755](actions/setup-go#755) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​758](actions/setup-go#758) - Upgrade version to 6.5.0 in package.json and package-lock.json by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​762](actions/setup-go#762) ##### New Contributors - [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​744](actions/setup-go#744) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​758](actions/setup-go#758) **Full Changelog**: <actions/setup-go@v6...v6.5.0> ### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](actions/setup-go@v6.3.0...v6.4.0) ##### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams) in [#​721](actions/setup-go#721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​727](actions/setup-go#727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108) in [#​724](actions/setup-go#724) - Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams) in [#​734](actions/setup-go#734) ##### New Contributors - [@​gdams](https://github.com/gdams) made their first contribution in [#​721](actions/setup-go#721) **Full Changelog**: <actions/setup-go@v6...v6.4.0> ### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0) [Compare Source](actions/setup-go@v6.2.0...v6.3.0) ##### What's Changed - Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108) in [#​705](actions/setup-go#705) - Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba) in [#​469](actions/setup-go#469) **Full Changelog**: <actions/setup-go@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0) [Compare Source](actions/setup-go@v6.1.0...v6.2.0) ##### What's Changed ##### Enhancements - Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​696](actions/setup-go#696) - Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille) in [#​691](actions/setup-go#691) - Documentation update of actions/checkout by [@​deining](https://github.com/deining) in [#​683](actions/setup-go#683) ##### Dependency updates - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot) in [#​682](actions/setup-go#682) - Upgrade [@​actions/cache](https://github.com/actions/cache) to v5 by [@​salmanmkc](https://github.com/salmanmkc) in [#​695](actions/setup-go#695) - Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [#​686](actions/setup-go#686) - Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot) in [#​703](actions/setup-go#703) ##### New Contributors - [@​ccoVeille](https://github.com/ccoVeille) made their first contribution in [#​691](actions/setup-go#691) - [@​deining](https://github.com/deining) made their first contribution in [#​683](actions/setup-go#683) **Full Changelog**: <actions/setup-go@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0) [Compare Source](actions/setup-go@v6...v6.1.0) ##### What's Changed ##### Enhancements - Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai) in [#​665](actions/setup-go#665) - Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​673](actions/setup-go#673) - Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars) in [#​674](actions/setup-go#674) ##### Dependency updates - Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​617](actions/setup-go#617) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot) in [#​641](actions/setup-go#641) - Upgrade semver and [@​types/semver](https://github.com/types/semver) by [@​dependabot](https://github.com/dependabot) in [#​652](actions/setup-go#652) ##### New Contributors - [@​nicholasngai](https://github.com/nicholasngai) made their first contribution in [#​665](actions/setup-go#665) - [@​priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#​673](actions/setup-go#673) - [@​mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#​674](actions/setup-go#674) **Full Changelog**: <actions/setup-go@v6...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTEuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE5MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://gitea.com/gitea/runner/pulls/1102 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Renovate Bot <renovate-bot@gitea.com>
This was referenced Aug 2, 2026
EricAndrechek
added a commit
to Wave-RF/WaveHouse
that referenced
this pull request
Aug 11, 2026
Two corrections from review, both checkable and both wrong in exactly the dimension this PR argues about. setup-go's bundled cache is NOT go.sum-keyed at the pinned v7 — it keys on the root go.mod. actions/setup-go#705 (Jan 2026) changed dependencyFilePattern from 'go.sum' to 'go.mod', and the live entry proves it: its key ends 9e56ecf5..., and sha256(sha256(go.mod)) = 9e56ecf5... exactly, while sha256(sha256(go.sum)) = 136f5059... — the hash in every gobuild-v2 key. Four places said go.sum-keyed. Worse, the CHANGELOG contrasted "both Go keys now hash go.mod alongside go.sum" against that "go.sum-keyed" entry, which reads as upstream having the toolchain staleness bug this PR fixes, when upstream fixed precisely that and errs the other way. And the release.yml argument stopped a step short. Cache writes are scoped to the ref that made them, so a save from refs/tags/v1.0.0 can never be read by refs/tags/v1.0.1 — or by anything else, ever. Re-enabling the bundled cache there isn't just a cold miss plus a save; it is a ~1 GB write-only entry burned on every tagged release, permanently unreadable. That is the strongest argument for the opt-out and it was missing. Same fact sharpens the escape hatch: "an exact hit never saves" holds only for an exact hit — a restore-keys prefix match would save, tag-scoped and unreadable. The README now prescribes actions/cache/restore (restore-only) for that lever, which has no save step at all. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QFfYUaPp3Pv3gLjniiHCpm
EricAndrechek
added a commit
to Wave-RF/WaveHouse
that referenced
this pull request
Aug 11, 2026
Third pass at the same sentence, and the version boundary was wrong. Verified against the upstream tree rather than inferred this time: v6.2.0 dependencyFilePattern: 'go.sum' v6.3.0 dependencyFilePattern: 'go.mod' <- the switch v7.0.0 dependencyFilePattern: 'go.mod' actions/setup-go#705 merged 2026-01-26 and shipped in v6.3.0. Saying "go.sum through v6" is worse than vague: the floating v6 tag resolves to v6.5.0 today, which keys on go.mod, so it tells a reader that pinning @v6 gets go.sum keying. All four sites now say v6.2.0 / v6.3.0. Also drops an absolute that isn't true. "A save from refs/tags/v1.0.0 can never be read by anything else, permanently unreadable" overstates the scoping rule it cites: a re-run of that same tag's workflow runs at the same ref and does restore it — and a re-run is the realistic case here, since release.yml chains buildx, GHCR login, GoReleaser and attestation. Now: unreadable by another tag, by main, or by a PR — only by a retry. The conclusion is unchanged; the claim is now falsifiable-proof. And fixes a link that rendered as literal text: [actions/setup-go#705] was a shortcut reference with no definition in the file. markdownlint doesn't catch it (MD052's shortcut_syntax defaults false), and every other external reference in that README is inline. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QFfYUaPp3Pv3gLjniiHCpm
EricAndrechek
added a commit
to Wave-RF/WaveHouse
that referenced
this pull request
Aug 11, 2026
## Why The repo hit **10.53 GB against GitHub's hard 10 GB Actions cache cap** after #438's 24-module bump. Past the cap GitHub LRU-evicts, so warm entries disappear mid-run and builds get slower and less predictable — silently. `setup-env` cached the Go module cache and build cache together under a per-flavor key: ```yaml path: | ~/go/pkg/mod # pure function of go.sum — identical for every flavor ~/.cache/go-build # genuinely flavor-specific key: gobuild-v2-<os>-go<suffix>-<go.sum hash> ``` `~/go/pkg/mod` measures **1.6 GB on disk** for the current `go.sum` and is byte-identical across all five suffixes, so it was stored five times over — five entries of ~0.9–1.2 GB each, **~5.2 GB per generation**. Two live generations is the *normal* steady state (a bump mints a new set while the previous is still warm), so ~10 GB was the expected footprint. #438 tipped it over: ``` 1210MB gobuild-v2-Linux-go-lint-136f5059… 1068MB gobuild-v2-Linux-go-unit-136f5059… 1067MB gobuild-v2-Linux-go-integration-136f5059… 1058MB gobuild-v2-Linux-go-unit-1a18a4a1… <- previous generation 1033MB gobuild-v2-Linux-go-e2e-cov-136f5059… 929MB gobuild-v2-Linux-go-cov-1a18a4a1… <- previous generation 928MB gobuild-v2-Linux-go-cov-136f5059… ``` The action's header already noted the duplication — *"Cross-suffix restore-keys still share the (identical) module cache on a cold start"* — without drawing the sizing conclusion. ## What Split the one cache into two: | | key | path | scope | | --- | --- | --- | --- | | modules | `gomod-v1-<os>-<go.mod+go.sum hash>` | `~/go/pkg/mod` | **unsuffixed** — one entry, every Go job | | build objects | `gobuild-v3-<os>-go<suffix>-<go.mod+go.sum hash>` | `~/.cache/go-build` | per compile flavor, as before | **Measured on this branch's own runs: 5.18 GB → 1.05 GB per generation** (a 4.9× reduction) — `gomod-v1` at 0.48 GB plus five `gobuild-v3` entries totalling 0.57 GB (25–152 MB each). Two generations now fit with room to spare. All sizes are stored-archive bytes ÷ 2³⁰, the unit the README's own usage check prints. (The 0.48 GB module entry is a cold first save with no restore-key fallback; it drifts up as superseded module versions accumulate through the restore→save chain, so budget nearer ~1 GB for it in steady state.) Two details worth review attention: - **`v3` on the build key is required.** Saves fire only on an exact-key miss, so without the bump the old `v2` entry — which still contains the module cache — would exact-hit forever and the new, smaller content would never be saved. Same reasoning as the v2 bump documented at the top of the action. - **`gobuild-v3` drops the bare-prefix restore-key.** `gobuild-v2-<os>-go-` existed to borrow *another flavor's* copy of the shared module cache on a cold start. That job now belongs to `gomod-v1`, and another flavor's build objects aren't reusable here, so the fallback would only restore bytes that get thrown away. `gomod-v1` keeps a prefix restore-key: a bump moves a handful of modules, so a stale generation is still worth restoring and `go mod download` fetches only the delta. **Both keys hash `go.mod` as well as `go.sum`** (CodeRabbit review). `GOTOOLCHAIN=auto` lands the toolchain in `~/go/pkg/mod/golang.org/toolchain` and `go.sum` records no entry for it — this repo's `go.sum` has zero `golang.org/toolchain` lines. A `go`-directive bump would therefore leave a `go.sum`-only key byte-identical (verified: `bcc16701da2c001f` before and after `go 1.26.5` → `1.27.0`), exact-hit a toolchain-less archive, and — saves firing only on an exact-key *miss* — never save the freshly fetched toolchain, re-downloading it every run until some unrelated dependency bump moved `go.sum`. The same bump also invalidates every cached build object, since the compiler build ID feeds every action hash. ## The sixth copy (from review) Consolidating five copies left a sixth outside `setup-env` entirely: `actions/setup-go` caches `~/go/pkg/mod` + `~/.cache/go-build` by default, so `publish-dev.yml` carries a live **0.97 GB** entry (keyed on the root `go.mod` — setup-go hashed `go.sum` through v6.2.0 and `go.mod` from v6.3.0, [actions/setup-go#705](actions/setup-go#705)) — larger than the `gomod-v1` entry this PR consolidates to, and a direct violation of the sizing rule the PR introduces. It is re-saved on each cache miss (every dependency bump), so the cost is ~1.95 GB across the two generations the repo holds in steady state. `release.yml` carried the same default. Both now pass `cache: false`, matching the call `goreleaser-validate.yml` already made. **But `publish-dev.yml` re-caches the half that pays for itself.** Reviewing this surfaced a measured regression: across its last 20 runs, GoReleaser takes **36–246 s with setup-go's cache warm and 401–446 s cold** — zero overlap between the two groups. Dropping it outright would cost **roughly 2.5–7 minutes (mean delta ≈4.8 min) on every push to main**, and the value is entirely in the `~/.cache/go-build` half (8-target cross-compile), not the module tree. So that job now caches `~/.cache/go-build` alone under `gobuild-v3-<os>-go-release-` (~0.5 GB instead of ~0.97 GB). The duplicate module tree — the actual #443 complaint — is gone; the cross-compile stays warm. **And it keeps the module tree warm too.** The 36–246 s timings were measured with setup-go's *bundled* entry, which held `~/go/pkg/mod` as well — so caching only the build half would have left the module tree cold on every push (~90 modules, ~112 MB re-downloaded) and landed the job above its own documented range. `publish-dev` therefore also **restores** `gomod-v1` via `actions/cache/restore`: read-only, reading `ci.yml`'s entry from `main`'s scope. It writes nothing, so it costs 0 GB of budget and — importantly — cannot write a partial module tree to the key every `ci.yml` Go job shares. The `-release` suffix keeps those objects separate from CI's native-only flavors, which can't use them. `release.yml` keeps the plain opt-out — and re-enabling it there would be strictly negative, not merely unhelpful: cache writes are scoped to the ref that made them, so a save from `refs/tags/v1.0.0` can never be read by `refs/tags/v1.0.1`, by `main`, or by a PR — only by a re-run of that same tag. It would be a ~1 GB entry per release that nothing but a retry can ever read. If release wall-clock ever matters, the lever is `actions/cache/restore` (restore-only) on `publish-dev`'s key. ## Docs `.github/workflows/README.md` gets the updated inventory rows plus a **sizing policy** section — the 10 GB cap, the two-generations rule, the `gh api` one-liners to check the current footprint, and the rule that content which is a pure function of a lockfile gets keyed once, unsuffixed. That's the part that stops this recurring. Two additions from review: - **A narrowing-rotation exception to the key-versioning policy.** The existing policy says to keep old prefixes as transitional restore-keys; `gobuild-v3` deliberately doesn't, because a v2 archive still contains `~/go/pkg/mod` and restoring it would re-materialize exactly what the rotation removes. The doc now prescribes what the code does. - **The CodeQL caches are listed.** `codeql-dependencies-*` / `codeql-overlay-base-database-*` (~0.4 GB) are minted by GHAS default setup, outside this repo's workflows. They were invisible in the inventory, so a maintainer doing the two-generations check was seeing ~85% of the real budget. ## Verification - `make ci` green on this tree (full pipeline incl. integration + e2e) - `make verify` clean — markdownlint over the README + CHANGELOG, and actionlint over `.github/workflows/**`. **Note:** `make lint-gha` globs workflows only, so `.github/actions/setup-env/action.yml` gets no actionlint and no shellcheck — pointed at it directly, actionlint rejects a composite action as a malformed workflow. The new guard step's inline `run:` is therefore hand-verified, not tool-verified: the `if:` predicate is byte-identical to the two `actions/cache` steps' own conditions, and all 8 call sites were audited (5 suffixed, 3 `go: "false"`). - Both pre-push reviewers run, no skips - No change to what any job *does*; only which cache keys hold which paths Expect the first run on `main` after merge to be a cold miss on both new keys (one-time repopulation), then warm. Don't read that run's timing as a regression. ## Post-merge **Purge the orphaned entries** — the five dead `gobuild-v2-*` (5.18 GB) **and** the `setup-go-*` entry (0.97 GB) that `cache: false` orphans. Nothing restores or refreshes either family after this lands. The repo is at **9.27 GB / 10 GB across 24 entries** with them still resident. This branch's own runs add a ~1.05 GB generation on the PR ref (pre-merge peak ~9.3 GB), and merging adds another ~1.05 GB generation plus the ~0.5 GB release cache on `main` — so if the PR-scope entries haven't been reclaimed yet the transient peak is **~10.3 GB, over the cap this PR exists to defend**. Purge immediately at merge, not later — this is load-bearing, not housekeeping. The orphans would clear on the 7-day idle sweep, but not necessarily before the next dependency bump. ```bash gh api repos/Wave-RF/WaveHouse/actions/caches --paginate \ -q '.actions_caches[]|select(.key|startswith("gobuild-v2-") or startswith("setup-go-"))|.id' \ | xargs -I{} gh api -X DELETE repos/Wave-RF/WaveHouse/actions/caches/{} ``` Do this **after** merge, not before — `main` still uses the v2 keys until then, so an early purge just forces a cold repopulate of caches we're about to abandon. ## Notes - GitHub's LRU eviction reclaimed the previous generation on its own mid-investigation (10.53 GB → 7.19 GB), so this isn't currently breaking builds — it recurs on the next dependency bump. Usage has since climbed to 9.27 GB as this branch's runs added entries, which is why the post-merge purge above matters. - Pre-existing docs drift surfaced by the `docs-reviewer` gate (unrelated to this branch) is tracked in #444 rather than folded in here. Closes #443 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description:
This pull request updates the default Go module caching strategy in the action to use go.mod as the cache key.
Related issue:
#478
Check list: