Merge branch 'main' into fix/goreleaser-gitea-url

goreleaser runs several go builds at once; each spawns its own gobuildcache,
and they time out on its per-entry file locks while one holds the lock
across a slow S3 call ('failed to acquire lock: context deadline exceeded',
check-release on #997). Use Go's local cache for goreleaser.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu

.gitea/workflows/ci.yaml

@@ -61,11 +61,15 @@ jobs:
         with:
           version: '~> v2'
           args: check
-      - name: Test release build
+      - name: Install goreleaser
         uses: goreleaser/goreleaser-action@v7
         with:
           version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean
 
   build:
     needs: [check, vulnerabilities, check-release]

.gitea/workflows/goreleaser.yaml

@@ -5,9 +5,6 @@ on:
     tags:
       - 'v*'
 
-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -30,4 +27,5 @@ jobs:
         run: |
           GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
           export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean

.goreleaser.yml

@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2
 
 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
   download: https://gitea.unbound.se
 
 env:

.version

@@ -1,3 +1,3 @@
 {
-  "version": "v0.9.8"
+  "version": "v0.9.7"
 }

CHANGELOG.md

@@ -2,155 +2,7 @@
 
 All notable changes to this project will be documented in this file.
 
-## [0.9.8] - 2026-10-07
-
-### 🐛 Bug Fixes
-
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.2.0 (#835)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.0 (#836)
-- *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.2.0 (#837)
-- *(k8s)* Point OTEL endpoint to k8s-monitoring-alloy service (#839)
-- Raise Node heap cap to 512MB and bump pod memory limit (#838)
-- *(k8s)* Raise schemas CPU request from 20m to 100m (#840)
-- *(k8s)* Add scaleUp/scaleDown stabilization to schemas HPA (#844)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.3.1 (#845)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.0 (#846)
-- *(deps)* Update module golang.org/x/crypto to v0.52.0 (#848)
-- *(deps)* Update eventsourced (#849)
-- *(deps)* Update module gitlab.com/unboundsoftware/eventsourced/pg to v1.20.0 (#850)
-- Bump eventsourced/pg to v2.0.2 and harden startup error logging (#851)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.1 (#852)
-- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.19.0 (#854)
-- *(deps)* Update opentelemetry-go monorepo (#853)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.2 (#856)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.3 (#857)
-- *(deps)* Update module golang.org/x/sync to v0.21.0 (#858)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.34 (#860)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.4 (#862)
-- *(deps)* Update module golang.org/x/crypto to v0.53.0 (#863)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.5 (#865)
-- *(deps)* Update module github.com/99designs/gqlgen to v0.17.91 (#864)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.4.6 (#866)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.0 (#869)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.35 (#871)
-- *(deps)* Update module github.com/99designs/gqlgen to v0.17.92 (#873)
-- *(deps)* Update module github.com/99designs/gqlgen to v0.17.93 (#876)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.36 (#877)
-- *(deps)* Update module github.com/pressly/goose/v3 to v3.27.2 (#878)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.5.1 (#879)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.6.0 (#880)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.7.0 (#881)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.8.0 (#882)
-- *(deps)* Update module golang.org/x/sync to v0.22.0 (#883)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.0 (#884)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.1 (#885)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.9.2 (#886)
-- *(deps)* Update module golang.org/x/crypto to v0.54.0 (#888)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.10.0 (#890)
-- *(deps)* Update module github.com/99designs/gqlgen to v0.17.94 (#889)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.11.0 (#892)
-- *(deps)* Update module github.com/alecthomas/kong to v1.16.0 (#894)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.0 (#895)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.12.1 (#896)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.0 (#899)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.1 (#900)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.13.2 (#901)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.0 (#903)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.1 (#904)
-- *(deps)* Update module github.com/pressly/goose/v3 to v3.27.3 (#905)
-- *(deps)* Update module github.com/auth0/go-jwt-middleware/v3 to v3.3.0 (#907)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.14.2 (#908)
-- *(deps)* Update opentelemetry-go monorepo (#909)
-- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.0 (#911)
-- *(deps)* Update module github.com/alecthomas/kong to v1.16.1 (#914)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.0 (#915)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.15.1 (#917)
-- *(deps)* Update module golang.org/x/crypto to v0.55.0 (#918)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.16.0 (#919)
-- *(deps)* Update module github.com/stretchr/testify to v1.12.0 (#920)
-- *(deps)* Update module github.com/stretchr/testify to v1.12.1 (#923)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.17.0 (#925)
-- *(deps)* Update opentelemetry-go monorepo (#929)
-- *(deps)* Update module go.opentelemetry.io/contrib/bridges/otelslog to v0.20.1 (#930)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.18.0 (#932)
-- *(deps)* Update module golang.org/x/crypto to v0.56.0 [security] (#934)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.37 (#935)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.19.0 (#936)
-- *(deps)* Update module github.com/pressly/goose/v3 to v3.28.0 (#938)
-- *(deps)* Update module github.com/99designs/gqlgen to v0.17.95 (#937)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.0 (#939)
-- *(deps)* Update module golang.org/x/sync to v0.23.0 (#940)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.2 (#943)
-- *(deps)* Update module golang.org/x/crypto to v0.57.0 (#945)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.20.3 (#947)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.21.0 (#957)
-- *(deps)* Update module codeberg.org/messaging/go-messaging-amqp to v0.0.6 (#959)
-- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.2.0 (#961)
-- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.2.1 (#963)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.21.1 (#964)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.22.0 (#970)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.22.1 (#972)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.23.0 (#974)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.58 (#976)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.24.0 (#977)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.25.0 (#982)
-- *(deps)* Update module github.com/wundergraph/graphql-go-tools/v2 to v2.26.0 (#984)
-- *(deps)* Update module github.com/vektah/gqlparser/v2 to v2.5.59 (#988)
-- *(deps)* Update module codeberg.org/eventsourced/pg/v2 to v2.3.0 (#991)
-- *(deps)* Update opentelemetry-go monorepo (#990)
-- *(monitoring)* Use otel.SetLoggerProvider (#998)
-
-### 🚜 Refactor
-
-- Migrate eventsourced to codeberg and go-messaging-amqp (#949)
-
-### ⚡ Performance
-
-- *(graph)* Cache merged SDL and SchemaUpdate per ref (#841)
-- *(graph)* Warm schema cache on startup to kill cold-start spikes (#843)
-
-### ⚙️ Miscellaneous Tasks
-
-- *(deps)* Update golang:1.26.3 docker digest to 54d3246 (#842)
-- *(deps)* Update node.js to v24.16.0 (#847)
-- *(deps)* Update golang docker tag to v1.26.4 (#855)
-- *(deps)* Update node.js to fb71d01 (#859)
-- *(deps)* Update golang:1.26.4 docker digest to 62df9f3 (#861)
-- *(deps)* Update node.js to 21f403a (#867)
-- *(deps)* Update actions/checkout action to v7 (#868)
-- *(deps)* Update node.js to v24.17.0 (#870)
-- *(deps)* Update golang:1.26.4 docker digest to f83d235 (#872)
-- *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.26.0 (#874)
-- *(deps)* Update node.js to v24.18.0 (#875)
-- *(deps)* Update golang docker tag to v1.26.5 (#887)
-- *(deps)* Update golang:1.26.5 docker digest to adde241 (#891)
-- *(deps)* Update actions/setup-go action to v7 (#897)
-- *(deps)* Update actions/setup-node action to v7 (#893)
-- *(deps)* Update actions/setup-python action to v7 (#902)
-- *(deps)* Update node.js to v24.18.1 (#906)
-- *(deps)* Update node.js to v24.19.0 (#910)
-- *(deps)* Update golang:1.26.5 docker digest to 046e320 (#912)
-- *(deps)* Update golang:1.26.5 docker digest to e8ab809 (#913)
-- *(deps)* Update golang docker tag to v1.26.6 (#916)
-- *(deps)* Update golang docker tag to v1.26.7 (#921)
-- *(deps)* Update golang docker tag to v1.27.0 (#922)
-- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.13.1 (#924)
-- *(deps)* Update golang:1.27.0 docker digest to 47526c1 (#926)
-- *(deps)* Update node.js to v24.20.0 (#927)
-- *(deps)* Update node.js to e67514e (#928)
-- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.13.2 (#931)
-- *(deps)* Update golang docker tag to v1.27.1 (#933)
-- *(deps)* Update node.js to v24.21.0 (#941)
-- *(deps)* Update node.js to 4b2d7ee (#951)
-- *(deps)* Update node.js to ebfe2f9 (#953)
-- *(deps)* Update golang:1.27.1 docker digest to 2c9f73f (#955)
-- *(deps)* Update dependency goreleaser/goreleaser to v2.18.2 (#965)
-- *(deps)* Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.27.0 (#968)
-- *(deps)* Update pre-commit hook golangci/golangci-lint to v2.14.0 (#980)
-- *(k8s)* Take the image reference from build-tools (#986)
-- *(deps)* Update golang:1.27.1 docker digest to 45639bc (#996)
-
-## [0.9.7] - 2026-05-14
+## [0.9.7] - 2026-05-11
 
 ### 🐛 Bug Fixes
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM amd64/golang:1.27.1@sha256:45639bcd15a6137281761fd9451302c5ea6bd591fa493be3da58b1308fa194d5 as modules
+FROM amd64/golang:1.27.1@sha256:2c9f73fbc9fe381c63ba57bcbab4ea1c9135604011985a0891bc5fe5d1febfca as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download