Skip to content

Repo cleanup: drop Dependabot, pin setup-go, add golangci config - #401

Merged
andygrunwald merged 3 commits into
mainfrom
andygrunwald/repo-cleanup
May 2, 2026
Merged

Repo cleanup: drop Dependabot, pin setup-go, add golangci config#401
andygrunwald merged 3 commits into
mainfrom
andygrunwald/repo-cleanup

Conversation

@andygrunwald

Copy link
Copy Markdown
Contributor

Summary

Three small, isolated cleanups identified during a side-by-side comparison with awesome-software-engineering-games:

  • Remove .github/dependabot.yml. Renovate is already configured here and its config:recommended preset covers the same gomod and github-actions ecosystems. Running both bots produces duplicate update PRs; Renovate is now the single source of truth.
  • Pin actions/setup-go to v6.4.0 in testing.yml. The other workflows (podcast-data.yml, render-readme.yml) already pin this version; only testing.yml used the floating major @v6. All workflows now use the same explicit version.
  • Add app/.golangci.yml. Previously golangci-lint ran with built-in defaults; the explicit config makes the active linter set visible and aligns this repo's lint posture with awesome-software-engineering-games. The enabled set is the standard errcheck, govet, ineffassign, unused, misspell. staticcheck is intentionally disabled here because it's run separately via make staticcheck.

No behavior changes apart from the new lint config. If golangci-lint flags pre-existing code, follow-up commits can fix those issues without touching this PR's intent.

Test plan

  • Testing workflow runs green (golangci-lint with the new config in particular)
  • YAML lint workflow runs green
  • Render README workflow runs green
  • Confirm no Dependabot PRs are opened going forward; Renovate continues to open update PRs

🤖 Generated with Claude Code

This repo already uses Renovate (renovate.json), and Renovate's
config:recommended preset covers both gomod and github-actions —
the same ecosystems Dependabot was configured for. Running both
bots produces duplicate update PRs against the same dependencies.
Dropping Dependabot leaves Renovate as the single source of truth
and aligns this repo with awesome-software-engineering-games, which
uses only Renovate.
Other workflows in this repo (podcast-data.yml, render-readme.yml)
already pin setup-go to v6.4.0, while testing.yml used the floating
major @v6. Aligning all workflows on the same explicit version makes
the CI environment fully reproducible and lets Renovate manage the
upgrade in one place.
Previously golangci-lint ran with its built-in defaults. Adding an
explicit config makes the active linter set visible in the repo and
keeps the lint posture aligned with awesome-software-engineering-games.

The enabled linters (errcheck, govet, ineffassign, unused, misspell)
are the standard set. staticcheck is disabled here because it is run
separately via 'make staticcheck' against the standalone binary, so
having it in golangci-lint would double-report. The errcheck
exclusion for (*net/http.Response).Body.Close avoids noise on a
common Go idiom.
@andygrunwald
andygrunwald merged commit b421e44 into main May 2, 2026
5 checks passed
@andygrunwald
andygrunwald deleted the andygrunwald/repo-cleanup branch May 2, 2026 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant