Update Go dependencies, builder images, GHAs:

.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:00"
+      timezone: "America/Denver"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:10"
+      timezone: "America/Denver"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:30"
+      timezone: "America/Denver"
+    open-pull-requests-limit: 10

.github/workflows/ci.yml

@@ -6,16 +6,57 @@ on:
       - "!main"
   pull_request: {}
   workflow_dispatch: {}
+env:
+  GO_VERSION: "1.26"
 jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache: true
+
+      - name: Run tests
+        run: go test -race ./...
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache: true
+
+      - name: Run linters
+        run: make lint
+
   build:
     name: Build
     runs-on: ubuntu-latest
     strategy:
       matrix:
         platform: [amd64]
-        action: [archive2disk,cexec,grub2disk,image2disk,kexec,oci2disk,qemuimg2disk,rootio,slurp,syslinux,writefile]
+        action:
+          - archive2disk
+          - cexec
+          - grub2disk
+          - image2disk
+          - kexec
+          - oci2disk
+          - qemuimg2disk
+          - rootio
+          - slurp
+          - syslinux
+          - writefile
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Build linux/${{ matrix.platform }}
         run: make ${{ matrix.action }} -j$(nproc) GOOS=linux GOARCH=${{ matrix.platform }}

.github/workflows/release.yml

@@ -14,18 +14,29 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        action: [archive2disk,cexec,grub2disk,image2disk,kexec,oci2disk,qemuimg2disk,rootio,slurp,syslinux,writefile]
+        action:
+          - archive2disk
+          - cexec
+          - grub2disk
+          - image2disk
+          - kexec
+          - oci2disk
+          - qemuimg2disk
+          - rootio
+          - slurp
+          - syslinux
+          - writefile
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      
+        uses: docker/setup-qemu-action@v4
+
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Quay.io
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ secrets.QUAY_USERNAME }}
@@ -35,4 +46,4 @@ jobs:
         run: make prepare-release
 
       - name: Run Release
-        run: make release-${{ matrix.action }} -j $(nprox)
+        run: make release-${{ matrix.action }} -j $(nproc)