ci: lock down versions in lint.sh and fix ci (#523)

.github/workflows/ci.yml

@@ -26,6 +26,8 @@ jobs:
       - uses: actions/checkout@v4
       - run: go version
       - uses: actions/setup-go@v5
+        with:
+          go-version-file: ./go.mod
       - run: ./ci/lint.sh
 
   test:
@@ -42,7 +44,7 @@ jobs:
         with:
           go-version-file: ./go.mod
       - run: ./ci/test.sh
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: coverage.html
           path: ./ci/out/coverage.html

.github/workflows/daily.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           go-version-file: ./go.mod
       - run: AUTOBAHN=1 ./ci/test.sh
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: coverage.html
           path: ./ci/out/coverage.html
@@ -60,7 +60,7 @@ jobs:
         with:
           go-version-file: ./go.mod
       - run: AUTOBAHN=1 ./ci/test.sh
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: coverage-dev.html
           path: ./ci/out/coverage.html

ci/lint.sh

 #!/bin/sh
+set -x
 set -eu
 cd -- "$(dirname "$0")/.."
 
 go vet ./...
 GOOS=js GOARCH=wasm go vet ./...
 
-go install honnef.co/go/tools/cmd/staticcheck@latest
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.7
 staticcheck ./...
 GOOS=js GOARCH=wasm staticcheck ./...
 
@@ -15,7 +16,7 @@ govulncheck() {
 		cat "$tmpf"
 	fi
 }
-go install golang.org/x/vuln/cmd/govulncheck@latest
+go install golang.org/x/vuln/cmd/govulncheck@v1.1.1
 govulncheck ./...
 GOOS=js GOARCH=wasm govulncheck ./...