From a4997cf7a0ae6b8b2c6d75d09f068c13bd5879c0 Mon Sep 17 00:00:00 2001 From: Michael Welles Date: Thu, 4 Jun 2026 16:00:04 -0400 Subject: [PATCH 1/2] ci: drop redundant Dgraph standalone from -short unit job The unit-test job runs `go test -short`, which skips every test that needs a live Dgraph. Standing up a dgraph/standalone container (and setting MODUSGRAPH_TEST_ADDR) therefore adds setup the job never uses. Remove both; the integration and load suites keep their own dedicated jobs. --- .github/workflows/ci-go-unit-tests.yaml | 17 ----------------- 1 file changed, 17 deletions(-) diff --git a/.github/workflows/ci-go-unit-tests.yaml b/.github/workflows/ci-go-unit-tests.yaml index 36235384..31878ab2 100644 --- a/.github/workflows/ci-go-unit-tests.yaml +++ b/.github/workflows/ci-go-unit-tests.yaml @@ -39,22 +39,5 @@ jobs: go-version: 1.25.0 cache-dependency-path: go.sum - - name: Set up Dgraph - if: matrix.os == 'linux' - run: | - docker run -d --name dgraph-standalone -p 9080:9080 -p 8080:8080 dgraph/standalone:latest - echo "Waiting for Dgraph to be ready..." - for i in {1..30}; do - if curl -s http://localhost:8080/health > /dev/null; then - echo "Dgraph is ready!" - break - fi - echo "Attempt $i: Dgraph not ready, waiting..." - sleep 2 - done - sleep 5 - - name: Run Unit Tests - env: - MODUSGRAPH_TEST_ADDR: ${{ matrix.os == 'linux' && 'localhost:9080' || '' }} run: go test -short -race -v . From 7e97f3a2a6d1aba2a786f20837d7559225f9f77b Mon Sep 17 00:00:00 2001 From: Michael Welles Date: Wed, 17 Jun 2026 19:42:36 -0400 Subject: [PATCH 2/2] ci: pin trivy to an existing release (0.59.1 does not exist) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Trunk config pinned trivy@0.59.1, but that release does not exist on github.com/aquasecurity/trivy — Trunk's templated download (.../v0.59.1/trivy_0.59.1_Linux-64bit.tar.gz) returns HTTP 404, failing the Trunk Code Quality check on any PR whose diff trivy scans (e.g. workflow or broad changes) while reporting no actual lint issues. Bump to trivy@0.69.3, a real release with the expected Linux-64bit asset. The plugin (v1.6.7) downloads trivy via a version-templated URL, so no other change is needed. --- .trunk/trunk.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml index 8f22d46b..445cc8d9 100644 --- a/.trunk/trunk.yaml +++ b/.trunk/trunk.yaml @@ -23,7 +23,7 @@ runtimes: # This is the section where you manage your linters. (https://docs.trunk.io/check/configuration) lint: enabled: - - trivy@0.59.1 + - trivy@0.69.3 - taplo@0.9.3 - actionlint@1.7.7 - checkov@3.2.365