chore(release): prepare for v0.3.0

Add support for the salary privilege in the privilege handler. 
Implement associated logic to process and validate the 
salary privilege in the test cases. Update the data 
structures to include the new privilege and ensure 
correct functionality in the privilege processing flow.

.gitlab-ci.yml

@@ -1,28 +1,18 @@
 include:
 - template: 'Workflows/MergeRequest-Pipelines.gitlab-ci.yml'
+- project: unboundsoftware/ci-templates
+  file: Defaults.gitlab-ci.yml
 - project: unboundsoftware/ci-templates
   file: Release.gitlab-ci.yml
+- project: unboundsoftware/ci-templates
+  file: Pre-Commit-Go.gitlab-ci.yml
 
-image: golang:1.23.2
+image: amd64/golang:1.25.1@sha256:70de49a6a9bfd1bde2b332fde29d04a8cc65047464fa97ddb94251b05e572bc0
 
 stages:
 - deps
 - test
 
-run-pre-commit:
-  stage: .pre
-  image: unbound/pre-commit
-  variables:
-    PRE_COMMIT_HOME: ${CI_PROJECT_DIR}/.cache/pre-commit
-  cache:
-  - key:
-      files:
-      - .pre-commit-config.yaml
-    paths:
-    - ${PRE_COMMIT_HOME}
-  script:
-  - pre-commit run --all-files
-
 deps:
   stage: deps
   script:
@@ -42,7 +32,7 @@ test:
 
 vulnerabilities:
   stage: test
-  image: golang:1.23.2
+  image: amd64/golang:1.25.1@sha256:70de49a6a9bfd1bde2b332fde29d04a8cc65047464fa97ddb94251b05e572bc0
   script:
   - go install golang.org/x/vuln/cmd/govulncheck@latest
   - govulncheck ./...

.golangci.yml

@@ -1,2 +1,22 @@
+version: "2"
 run:
   allow-parallel-runners: true
+linters:
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

.pre-commit-config.yaml

@@ -2,7 +2,7 @@
 # See https://pre-commit.com/hooks.html for more hooks
 repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v4.6.0
+  rev: v6.0.0
   hooks:
   - id: trailing-whitespace
   - id: end-of-file-fixer
@@ -18,7 +18,7 @@ repos:
     - --project
     - unboundsoftware/shiny/authz_client
 - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
-  rev: v9.18.0
+  rev: v9.22.0
   hooks:
   - id: commitlint
     stages: [ commit-msg ]
@@ -37,10 +37,10 @@ repos:
   - id: go-test
   - id: gofumpt
 - repo: https://github.com/golangci/golangci-lint
-  rev: v1.61.0
+  rev: v2.4.0
   hooks:
   - id: golangci-lint-full
 - repo: https://github.com/gitleaks/gitleaks
-  rev: v8.20.0
+  rev: v8.28.0
   hooks:
   - id: gitleaks

CHANGELOG.md

@@ -1,7 +1,31 @@
-# Changelog
+## [0.3.0] - 2025-09-06
 
-All notable changes to this project will be documented in this file.
+### 🚀 Features
 
+- *(ci)* Add defaults pipeline template for CI workflow
+- Add salary privilege to privilege management system
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update module github.com/sparetimecoders/goamqp to v0.3.3
+- *(deps)* Update module github.com/stretchr/testify to v1.11.0
+- *(deps)* Update module github.com/stretchr/testify to v1.11.1
+## [0.2.0] - 2025-04-11
+
+### 🚀 Features
+
+- Add timeout configuration to golangci-lint
+- Add setup method for privilege event consumers
+
+### 🐛 Bug Fixes
+
+- *(deps)* Update module github.com/stretchr/testify to v1.10.0
+- *(ci)* Update go image to amd64 architecture version
+- *(deps)* Update module github.com/sparetimecoders/goamqp to v0.3.2
+
+### 🚜 Refactor
+
+- *(ci)* Remove pre-commit job and add new template
 ## [0.1.4] - 2024-10-05
 
 ### 🐛 Bug Fixes
@@ -9,6 +33,10 @@ All notable changes to this project will be documented in this file.
 - *(deps)* Update module github.com/stretchr/testify to v1.9.0
 - *(deps)* Update module github.com/sparetimecoders/goamqp to v0.3.1
 
+### 💼 Other
+
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.2.1 to 0.3.0
+
 ### ⚙️ Miscellaneous Tasks
 
 - Update to Go 1.21.6
@@ -17,17 +45,18 @@ All notable changes to this project will be documented in this file.
 - Update golangci-lint to use full version
 - Add release flow
 - Remove old release job
-
-### Build
-
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.2.1 to 0.3.0
-
 ## [0.1.3] - 2023-12-26
 
 ### 🐛 Bug Fixes
 
 - Prohibit concurrent read/write
 
+### 💼 Other
+
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.4 to 0.1.5
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.5 to 0.2.0
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.2.0 to 0.2.1
+
 ### ⚙️ Miscellaneous Tasks
 
 - Update Go version
@@ -39,31 +68,31 @@ All notable changes to this project will be documented in this file.
 - Use 1.21.1 in go.mod for Dependabot
 - Update to go 1.21.3 and remove patch level
 - Update version of Go
-
-### Build
-
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.4 to 0.1.5
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.5 to 0.2.0
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.2.0 to 0.2.1
-
 ## [0.1.2] - 2023-06-04
 
+### 💼 Other
+
+- *(deps)* Bump github.com/stretchr/testify from 1.8.2 to 1.8.3
+- *(deps)* Bump github.com/stretchr/testify from 1.8.3 to 1.8.4
+
 ### ⚙️ Miscellaneous Tasks
 
 - Update pre-commit and fix golangci-lint
 - Update golangci-lint
-
-### Build
-
-- *(deps)* Bump github.com/stretchr/testify from 1.8.2 to 1.8.3
-- *(deps)* Bump github.com/stretchr/testify from 1.8.3 to 1.8.4
-
 ## [0.1.1] - 2023-05-11
 
 ### 🐛 Bug Fixes
 
 - Run builds with Go 1.19.2 to fix vulnerabilities
 
+### 💼 Other
+
+- *(deps)* Bump github.com/stretchr/testify from 1.8.0 to 1.8.1
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.1 to 0.1.2
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.2 to 0.1.3
+- *(deps)* Bump github.com/stretchr/testify from 1.8.1 to 1.8.2
+- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.3 to 0.1.4
+
 ### ⚙️ Miscellaneous Tasks
 
 - Add vulnerability-check
@@ -77,29 +106,13 @@ All notable changes to this project will be documented in this file.
 - Update Go verion for vulnerabilities scan
 - Update to Go 1.20.3
 - Update Go version and fix gitlabci lint
-
-### Build
-
-- *(deps)* Bump github.com/stretchr/testify from 1.8.0 to 1.8.1
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.1 to 0.1.2
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.2 to 0.1.3
-- *(deps)* Bump github.com/stretchr/testify from 1.8.1 to 1.8.2
-- *(deps)* Bump github.com/sparetimecoders/goamqp from 0.1.3 to 0.1.4
-
 ## [0.1.0] - 2022-07-20
 
 ### 🐛 Bug Fixes
 
 - Pipeline
 
-### ⚙️ Miscellaneous Tasks
+### 💼 Other
-
-- Add dependabot config
-- Remove dependabot-standalone
-- Change to codecov binary instead of bash uploader
-- Switch to moved goamqp
-
-### Build
 
 - Add params to codecov
 - *(deps)* Bump github.com/stretchr/testify from 1.7.0 to 1.7.1
@@ -109,6 +122,12 @@ All notable changes to this project will be documented in this file.
 - *(deps)* Bump github.com/stretchr/testify from 1.7.4 to 1.7.5
 - *(deps)* Bump github.com/stretchr/testify from 1.7.5 to 1.8.0
 
+### ⚙️ Miscellaneous Tasks
+
+- Add dependabot config
+- Remove dependabot-standalone
+- Change to codecov binary instead of bash uploader
+- Switch to moved goamqp
 ## [0.0.8] - 2021-05-15
 
 ### ⚙️ Miscellaneous Tasks
@@ -120,7 +139,6 @@ All notable changes to this project will be documented in this file.
 - Rename master -> main
 - Group imports
 - Update to latest version of goamqp
-
 ## [0.0.7] - 2020-04-12
 
 ### 🐛 Bug Fixes
@@ -128,7 +146,6 @@ All notable changes to this project will be documented in this file.
 - Update to Go 1.14 to fix test errors
 - Use go mod download
 - Sort companies before comparing since map-iteration is not stable
-
 ## [0.0.6] - 2020-04-12
 
 ### 🐛 Bug Fixes
@@ -139,25 +156,21 @@ All notable changes to this project will be documented in this file.
 
 - Add tests
 - Modify event structure
-
 ## [0.0.5] - 2019-12-31
 
 ### 🚀 Features
 
 - Add handling of removed privilege
-
 ## [0.0.4] - 2019-12-08
 
 ### 🚀 Features
 
 - Add name and registration number to event
-
 ## [0.0.3] - 2019-11-22
 
 ### 🐛 Bug Fixes
 
 - Print unexpected messages
-
 ## [0.0.2] - 2019-11-06
 
 ### 🚀 Features
@@ -167,5 +180,3 @@ All notable changes to this project will be documented in this file.
 ### 🐛 Bug Fixes
 
 - Rename module
-
-<!-- generated by git-cliff -->

client.go

@@ -20,6 +20,7 @@ type CompanyPrivileges struct {
 	Invoicing  bool `json:"invoicing"`
 	Accounting bool `json:"accounting"`
 	Supplier   bool `json:"supplier"`
+	Salary     bool `json:"salary"`
 }
 
 // PrivilegeHandler processes PrivilegeAdded-events and fetches the initial set of privileges from an authz-service
@@ -75,6 +76,15 @@ func (h *PrivilegeHandler) Fetch() error {
 	return nil
 }
 
+func (h *PrivilegeHandler) Setup() []goamqp.Setup {
+	return []goamqp.Setup{
+		goamqp.TransientEventStreamConsumer("User.Added", h.Process, UserAdded{}),
+		goamqp.TransientEventStreamConsumer("User.Removed", h.Process, UserRemoved{}),
+		goamqp.TransientEventStreamConsumer("Privilege.Added", h.Process, PrivilegeAdded{}),
+		goamqp.TransientEventStreamConsumer("Privilege.Removed", h.Process, PrivilegeRemoved{}),
+	}
+}
+
 // Process privilege-related events and update the internal state
 func (h *PrivilegeHandler) Process(msg interface{}, _ goamqp.Headers) (interface{}, error) {
 	switch ev := msg.(type) {
@@ -130,6 +140,8 @@ func (h *PrivilegeHandler) setPrivileges(email, companyId string, privilege Priv
 				c.Accounting = set
 			case PrivilegeSupplier:
 				c.Supplier = set
+			case PrivilegeSalary:
+				c.Salary = set
 			}
 		} else {
 			priv[companyId] = &CompanyPrivileges{}

client_test.go

@@ -236,6 +236,18 @@ func TestPrivilegeHandler_IsAllowed_Return_True_If_Privilege_Exists(t *testing.T
 	})
 
 	assert.True(t, result)
+
+	_, _ = handler.Process(&PrivilegeAdded{
+		Email:     "jim@example.org",
+		CompanyID: "abc-123",
+		Privilege: PrivilegeSalary,
+	}, goamqp.Headers{})
+
+	result = handler.IsAllowed("jim@example.org", "abc-123", func(privileges CompanyPrivileges) bool {
+		return privileges.Salary
+	})
+
+	assert.True(t, result)
 }
 
 func TestPrivilegeHandler_Fetch_Error_Response(t *testing.T) {
@@ -289,7 +301,8 @@ func TestPrivilegeHandler_Fetch_Valid(t *testing.T) {
       "time": true,
       "invoicing": true,
       "accounting": false,
-      "supplier": false
+      "supplier": false,
+      "salary": true
     }
   }
 }`
@@ -313,6 +326,7 @@ func TestPrivilegeHandler_Fetch_Valid(t *testing.T) {
 				Invoicing:  true,
 				Accounting: false,
 				Supplier:   false,
+				Salary:     true,
 			},
 		},
 	}

events.go

@@ -23,6 +23,7 @@ const (
 	PrivilegeInvoicing  = "INVOICING"
 	PrivilegeAccounting = "ACCOUNTING"
 	PrivilegeSupplier   = "SUPPLIER"
+	PrivilegeSalary     = "SALARY"
 )
 
 var AllPrivilege = []Privilege{
@@ -33,11 +34,12 @@ var AllPrivilege = []Privilege{
 	PrivilegeInvoicing,
 	PrivilegeAccounting,
 	PrivilegeSupplier,
+	PrivilegeSalary,
 }
 
 func (e Privilege) IsValid() bool {
 	switch e {
-	case PrivilegeAdmin, PrivilegeCompany, PrivilegeConsumer, PrivilegeTime, PrivilegeInvoicing, PrivilegeAccounting, PrivilegeSupplier:
+	case PrivilegeAdmin, PrivilegeCompany, PrivilegeConsumer, PrivilegeTime, PrivilegeInvoicing, PrivilegeAccounting, PrivilegeSupplier, PrivilegeSalary:
 		return true
 	}
 	return false

go.mod

@@ -1,10 +1,12 @@
 module gitlab.com/unboundsoftware/shiny/authz_client
 
-go 1.21
+go 1.22.12
+
+toolchain go1.25.1
 
 require (
-	github.com/sparetimecoders/goamqp v0.3.1
+	github.com/sparetimecoders/goamqp v0.3.3
-	github.com/stretchr/testify v1.9.0
+	github.com/stretchr/testify v1.11.1
 )
 
 require (

go.sum

@@ -8,10 +8,10 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rabbitmq/amqp091-go v1.10.0 h1:STpn5XsHlHGcecLmMFCtg7mqq0RnD+zFr4uzukfVhBw=
 github.com/rabbitmq/amqp091-go v1.10.0/go.mod h1:Hy4jKW5kQART1u+JkDTF9YYOQUHXqMuhrgxOEeS7G4o=
-github.com/sparetimecoders/goamqp v0.3.1 h1:NCzdyAz84G679HlO+ivhyoI1aMgXEe3qfqpn4EChu1s=
+github.com/sparetimecoders/goamqp v0.3.3 h1:z/nfTPmrjeU/rIVuNOgsVLCimp3WFoNFvS3ZzXRJ6HE=
-github.com/sparetimecoders/goamqp v0.3.1/go.mod h1:PjkgrmsuMVgRbiQDTLs0pCWYrcQgqcUee38JjCDZdlk=
+github.com/sparetimecoders/goamqp v0.3.3/go.mod h1:W9NRCpWLE+Vruv2dcRSbszNil2O826d2Nv6kAkETW5o=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=