ci: run goreleaser without the runner's GOCACHEPROG

goreleaser runs several go builds at once; each spawns its own gobuildcache, and they time out on its per-entry file locks while one holds the lock across a slow S3 call ('failed to acquire lock: context deadline exceeded', check-release on #997). Use Go's local cache for goreleaser. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
fix: release to the Gitea API on its public URL
2026-10-07 16:57:18 +02:00 · 2026-10-07 16:13:23 +02:00
5 changed files with 12 additions and 10 deletions
@@ -61,11 +61,15 @@ jobs:
        with:
          version: '~> v2'
          args: check
-      - name: Test release build
+      - name: Install goreleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean

  build:
    needs: [check, vulnerabilities, check-release]
@@ -5,9 +5,6 @@ on:
    tags:
      - 'v*'

-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
  release:
    runs-on: ubuntu-latest
@@ -30,4 +27,5 @@ jobs:
        run: |
          GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
          export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean
@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2

 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
  download: https://gitea.unbound.se

 env:
@@ -19,7 +19,7 @@ require (
 	github.com/pressly/goose/v3 v3.28.0
 	github.com/rs/cors v1.11.1
 	github.com/stretchr/testify v1.12.1
-	github.com/vektah/gqlparser/v2 v2.5.60
+	github.com/vektah/gqlparser/v2 v2.5.59
 	github.com/wundergraph/graphql-go-tools/v2 v2.26.0
 	go.opentelemetry.io/contrib/bridges/otelslog v0.20.1
 	go.opentelemetry.io/otel v1.47.0
@@ -217,8 +217,8 @@ github.com/urfave/cli/v3 v3.11.0 h1:P/euJp99kb9p0tlVY+iYTLYYTAQlfl0hR2gUO1Img1Q=
 github.com/urfave/cli/v3 v3.11.0/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso=
 github.com/valyala/fastjson v1.6.7 h1:ZE4tRy0CIkh+qDc5McjatheGX2czdn8slQjomexVpBM=
 github.com/valyala/fastjson v1.6.7/go.mod h1:CLCAqky6SMuOcxStkYQvblddUtoRxhYMGLrsQns1aXY=
-github.com/vektah/gqlparser/v2 v2.5.60 h1:2ML8Zwt/NFXzbW3kc+r7ecjfm9GdnwAjj2cFlKRcHJY=
-github.com/vektah/gqlparser/v2 v2.5.60/go.mod h1:JNK+plRwKdXLsF/qPFPe5tE0z4s1WeroD9S5LR8um/Q=
+github.com/vektah/gqlparser/v2 v2.5.59 h1:7BfPIupBJ2yIKxD91/zv30d6chKQkerS4ylKmVy8r4g=
+github.com/vektah/gqlparser/v2 v2.5.59/go.mod h1:JNK+plRwKdXLsF/qPFPe5tE0z4s1WeroD9S5LR8um/Q=
 github.com/wundergraph/astjson v1.1.0 h1:xORDosrZ87zQFJwNGe/HIHXqzpdHOFmqWgykCLVL040=
 github.com/wundergraph/astjson v1.1.0/go.mod h1:h12D/dxxnedtLzsKyBLK7/Oe4TAoGpRVC9nDpDrZSWw=
 github.com/wundergraph/go-arena v1.3.0 h1:n0ng5a1vbd8YGq1u3rMr0vPU5f6AZ1BXIiUhL1UIok8=
Author	SHA1	Message	Date
argoyleandClaude Opus 5.5	3921de91a6	ci: run goreleaser without the runner's GOCACHEPROG schemas / vulnerabilities (pull_request) Successful in 3m32s Details schemas / check (pull_request) Successful in 5m5s Details schemas / check-release (pull_request) Successful in 5m12s Details pre-commit / pre-commit (pull_request) Failing after 11m14s Details schemas / build (pull_request) Successful in 15m19s Details schemas / deploy-prod (pull_request) Skipped Details goreleaser runs several go builds at once; each spawns its own gobuildcache, and they time out on its per-entry file locks while one holds the lock across a slow S3 call ('failed to acquire lock: context deadline exceeded', check-release on #997). Use Go's local cache for goreleaser. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu	2026-10-07 16:57:18 +02:00
argoyleandClaude Opus 5.5	00160e172d	fix: release to the Gitea API on its public URL schemas / vulnerabilities (pull_request) Successful in 2m9s Details schemas / check-release (pull_request) Failing after 3m3s Details schemas / check (pull_request) Successful in 4m8s Details schemas / build (pull_request) Skipped Details schemas / deploy-prod (pull_request) Skipped Details pre-commit / pre-commit (pull_request) Failing after 13m43s Details schemas / check (push) Skipped schemas / vulnerabilities (push) Skipped schemas / check-release (push) Skipped schemas / build (push) Skipped pre-commit / pre-commit (push) Skipped goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu	2026-10-07 16:13:23 +02:00