.envrc

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: 2019–2020 Target, Copyright 2021 The Nix Community
+# SPDX-License-Identifier: Apache-2.0
+if type -P lorri &>/dev/null; then
+  eval "$(lorri direnv)"
+elif type -P nix &>/dev/null; then
+  use nix
+else
+  echo "Found no nix binary. Skipping activating nix-shell..."
+fi

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# same as on https://github.com/sapcc/helm-charts/tree/master/openstack/swift
+* @sumitarora2786 @crenduchinta88 @majewsky @SuperSandro2000 @VoigtS @wagnerd3

.github/renovate.json

@@ -1,8 +1,9 @@
 {
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base",
+    "config:recommended",
     "default:pinDigestsDisabled",
-    "github>whitesource/merge-confidence:beta",
+    "mergeConfidence:all-badges",
     "docker:disable"
   ],
   "assignees": [
@@ -11,8 +12,10 @@
   ],
   "commitMessageAction": "Renovate: Update",
   "constraints": {
-    "go": "1.21"
+    "go": "1.24"
   },
+  "dependencyDashboardOSVVulnerabilitySummary": "all",
+  "osvVulnerabilityAlerts": true,
   "postUpdateOptions": [
     "gomodTidy",
     "gomodUpdateImportPaths"
@@ -22,21 +25,19 @@
       "matchPackageNames": [
         "golang"
       ],
-      "allowedVersions": "1.21.x"
+      "allowedVersions": "1.24.x"
     },
     {
-      "matchPackagePatterns": [
-        "^github\\.com\\/sapcc\\/.*"
+      "matchPackageNames": [
+        "/^github\\.com\\/sapcc\\/.*/"
       ],
       "automerge": true,
       "groupName": "github.com/sapcc"
     },
     {
-      "excludePackagePatterns": [
-        "^github\\.com\\/sapcc\\/.*"
-      ],
-      "matchPackagePatterns": [
-        ".*"
+      "matchPackageNames": [
+        "!/^github\\.com\\/sapcc\\/.*/",
+        "/.*/"
       ],
       "groupName": "External dependencies"
     }

.github/workflows/checks.yaml

@@ -3,6 +3,9 @@
 # Edit Makefile.maker.yaml instead.                                            #
 ################################################################################
 
+# Copyright 2024 SAP SE
+# SPDX-License-Identifier: Apache-2.0
+
 name: Checks
 "on":
   push:
@@ -11,6 +14,7 @@ name: Checks
   pull_request:
     branches:
       - '*'
+  workflow_dispatch: {}
 permissions:
   checks: write
   contents: read
@@ -22,19 +26,20 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: "1.21"
-      - name: Dependency Review
-        uses: actions/dependency-review-action@v3
+          go-version: 1.24.0
+      - name: Run golangci-lint
+        uses: golangci/golangci-lint-action@v6
         with:
-          base-ref: ${{ github.event.pull_request.base.sha || 'master' }}
-          deny-licenses: AGPL-1.0, AGPL-3.0, GPL-1.0, GPL-2.0, GPL-3.0, LGPL-2.0, LGPL-2.1, LGPL-3.0, BUSL-1.1
-          fail-on-severity: moderate
-          head-ref: ${{ github.event.pull_request.head.sha || github.ref }}
+          version: latest
+      - name: Dependency Licenses Review
+        run: make check-dependency-licenses
+      - name: Install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
       - name: Run govulncheck
-        uses: golang/govulncheck-action@v1
+        run: govulncheck -format text ./...
       - name: Check for spelling errors
         uses: reviewdog/action-misspell@v1
         with:
@@ -44,7 +49,4 @@ jobs:
           ignore: importas
           reporter: github-check
       - name: Check if source code files have license header
-        run: |
-          shopt -s globstar
-          go install github.com/google/addlicense@latest
-          addlicense --check -ignore "vendor/**" -- **/*.go
+        run: make check-license-headers

.github/workflows/ci.yaml

@@ -3,6 +3,9 @@
 # Edit Makefile.maker.yaml instead.                                            #
 ################################################################################
 
+# Copyright 2024 SAP SE
+# SPDX-License-Identifier: Apache-2.0
+
 name: CI
 "on":
   push:
@@ -15,39 +18,36 @@ name: CI
       - '*'
     paths-ignore:
       - '**.md'
+  workflow_dispatch: {}
 permissions:
   contents: read
 jobs:
-  buildAndLint:
-    name: Build & Lint
+  build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: "1.21"
+          go-version: 1.24.0
       - name: Build all binaries
         run: make build-all
-      - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v3
-        with:
-          version: latest
   test:
     name: Test
     needs:
-      - buildAndLint
+      - build
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: "1.21"
+          go-version: 1.24.0
       - name: Run tests and generate coverage report
         run: make build/cover.out
       - name: Upload coverage report to Coveralls

.github/workflows/codeql.yaml

@@ -3,6 +3,9 @@
 # Edit Makefile.maker.yaml instead.                                            #
 ################################################################################
 
+# Copyright 2024 SAP SE
+# SPDX-License-Identifier: Apache-2.0
+
 name: CodeQL
 "on":
   push:
@@ -13,27 +16,29 @@ name: CodeQL
       - master
   schedule:
     - cron: '00 07 * * 1'
+  workflow_dispatch: {}
 permissions:
   actions: read
   contents: read
   security-events: write
 jobs:
   analyze:
-    name: Analyze
+    name: CodeQL
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
         uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: "1.21"
+          go-version: 1.24.0
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: go
+          queries: security-extended
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3

.github/workflows/goreleaser.yaml

@@ -3,11 +3,14 @@
 # Edit Makefile.maker.yaml instead.                                            #
 ################################################################################
 
+# Copyright 2024 SAP SE
+# SPDX-License-Identifier: Apache-2.0
+
 name: goreleaser
 "on":
   push:
     tags:
-      - v[0-9]+.[0-9]+.[0-9]+
+      - '*'
 permissions:
   contents: write
   packages: write
@@ -21,17 +24,17 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: "1.21"
+          go-version: 1.24.0
       - name: Generate release info
         run: |
           go install github.com/sapcc/go-bits/tools/release-info@latest
           mkdir -p build
-          release-info CHANGELOG.md $(git describe --tags --abbrev=0) > build/release-info
+          release-info CHANGELOG.md "$(git describe --tags --abbrev=0)" > build/release-info
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v5
+        uses: goreleaser/goreleaser-action@v6
         with:
           args: release --clean --release-notes=./build/release-info
           version: latest