Merge branch 'main' into fix/goreleaser-gitea-url

ci: run goreleaser without the runner's GOCACHEPROG
goreleaser runs several go builds at once; each spawns its own gobuildcache, and they time out on its per-entry file locks while one holds the lock across a slow S3 call ('failed to acquire lock: context deadline exceeded', check-release on #997). Use Go's local cache for goreleaser. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
2026-10-07 19:25:48 +00:00 · 2026-10-07 16:57:18 +02:00 · 2026-10-07 16:13:23 +02:00
4 changed files with 10 additions and 8 deletions
@@ -61,11 +61,15 @@ jobs:
        with:
          version: '~> v2'
          args: check
-      - name: Test release build
+      - name: Install goreleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean

  build:
    needs: [check, vulnerabilities, check-release]
@@ -5,9 +5,6 @@ on:
    tags:
      - 'v*'

-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
  release:
    runs-on: ubuntu-latest
@@ -30,4 +27,5 @@ jobs:
        run: |
          GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
          export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean
@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2

 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
  download: https://gitea.unbound.se

 env:
@@ -1,4 +1,4 @@
-FROM amd64/golang:1.27.1@sha256:45639bcd15a6137281761fd9451302c5ea6bd591fa493be3da58b1308fa194d5 as modules
+FROM amd64/golang:1.27.1@sha256:2c9f73fbc9fe381c63ba57bcbab4ea1c9135604011985a0891bc5fe5d1febfca as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download
Author	SHA1	Message	Date
argoyle	f63752ba66	Merge branch 'main' into fix/goreleaser-gitea-url pre-commit / pre-commit (pull_request) Successful in 4m46s Details schemas / build (pull_request) Successful in 18m34s Details schemas / vulnerabilities (pull_request) Successful in 3m3s Details schemas / deploy-prod (pull_request) Skipped Details schemas / check (pull_request) Successful in 2m46s Details schemas / check-release (pull_request) Successful in 3m42s Details	2026-10-07 19:25:48 +00:00
argoyleandClaude Opus 5.5	3921de91a6	ci: run goreleaser without the runner's GOCACHEPROG schemas / vulnerabilities (pull_request) Successful in 3m32s Details schemas / check (pull_request) Successful in 5m5s Details schemas / check-release (pull_request) Successful in 5m12s Details pre-commit / pre-commit (pull_request) Failing after 11m14s Details schemas / build (pull_request) Successful in 15m19s Details schemas / deploy-prod (pull_request) Skipped Details goreleaser runs several go builds at once; each spawns its own gobuildcache, and they time out on its per-entry file locks while one holds the lock across a slow S3 call ('failed to acquire lock: context deadline exceeded', check-release on #997). Use Go's local cache for goreleaser. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu	2026-10-07 16:57:18 +02:00
argoyleandClaude Opus 5.5	00160e172d	fix: release to the Gitea API on its public URL schemas / vulnerabilities (pull_request) Successful in 2m9s Details schemas / check-release (pull_request) Failing after 3m3s Details schemas / check (pull_request) Successful in 4m8s Details schemas / build (pull_request) Skipped Details schemas / deploy-prod (pull_request) Skipped Details pre-commit / pre-commit (pull_request) Failing after 13m43s Details schemas / check (push) Skipped schemas / vulnerabilities (push) Skipped schemas / check-release (push) Skipped schemas / build (push) Skipped pre-commit / pre-commit (push) Skipped goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu	2026-10-07 16:13:23 +02:00