fix: merge + fix conflict

.github/golangci.yml

@@ -51,6 +51,7 @@ linters-settings:
     excludes:
       - G204 # Subprocess launched with a potential tainted input or cmd arguments
       - G306 # Expect WriteFile permissions to be 0600 or less
+      - G115 # Integer overflow conversion, no solution to check the overflow in time of convert, so linter shouldn't check the overflow.
   stylecheck:
     checks: [ "all", "-ST1022", "-ST1003" ]
   errorlint:

.github/workflows/benchmark-master-push.yml

@@ -31,7 +31,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22.x"
+          go-version-file: go.mod
 
       - name: Run benchmark
         # add more benchmarks by adding additional lines for different packages;

.github/workflows/bot.yml

@@ -14,6 +14,10 @@ on:
       - converted_to_draft
       - ready_for_review
 
+  # Watch for changes on PR reviews
+  pull_request_review:
+    types: [submitted, edited, dismissed]
+
   # Watch for changes on PR comment
   issue_comment:
     types: [created, edited, deleted]
@@ -33,8 +37,8 @@ jobs:
   # handle the parallel processing of the pull-requests
   define-prs-matrix:
     name: Define PRs matrix
-    # Prevent bot from retriggering itself
-    if: ${{ github.actor != vars.GH_BOT_LOGIN }}
+    # Prevent bot from retriggering itself and ignore event emitted by codecov
+    if: ${{ github.actor != vars.GH_BOT_LOGIN && github.actor != 'codecov[bot]' }}
     runs-on: ubuntu-latest
     permissions:
       pull-requests: read
@@ -55,13 +59,15 @@ jobs:
         working-directory: contribs/github-bot
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: echo "pr-numbers=$(go run . matrix)" >> "$GITHUB_OUTPUT"
+        run: go run . matrix -matrix-key 'pr-numbers' -verbose
 
   # This job processes each pull request in the matrix individually while ensuring
   # that a same PR cannot be processed concurrently by mutliple runners
   process-pr:
     name: Process PR
     needs: define-prs-matrix
+    # Just skip this job if PR numbers matrix is empty (prevent failed state)
+    if: ${{ needs.define-prs-matrix.outputs.pr-numbers != '[]' && needs.define-prs-matrix.outputs.pr-numbers != '' }}
     runs-on: ubuntu-latest
     strategy:
       matrix:

.github/workflows/dependabot-tidy.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22.x
+          go-version-file: go.mod
 
       - name: Tidy all Go mods
         env:

.github/workflows/docs.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22'
+          go-version-file: go.mod
 
       - name: Install dependencies
         run: go mod download

.github/workflows/fossa.yml

@@ -25,7 +25,7 @@ jobs:
         uses: coursier/[email protected]
 
       - name: Set up JDK 17
-        uses: coursier/[email protected].8
+        uses: coursier/[email protected].9
         with:
           jvm: temurin:1.17
 

.github/workflows/genesis-verify.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version-file: contribs/gnogenesis/go.mod
 
       - name: Build gnogenesis
         run: make -C contribs/gnogenesis

.github/workflows/gh-pages.yml

@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22.x"
+          go-version-file: go.mod
       - run: "cd misc/gendocs && make install gen"
       - uses: actions/configure-pages@v5
         id: pages

.github/workflows/gnovm.yml

@@ -13,8 +13,6 @@ jobs:
     uses: ./.github/workflows/main_template.yml
     with:
       modulepath: "gnovm"
-      # in pull requests, append -short so that the CI runs quickly.
-      tests-extra-args: ${{ github.event_name == 'pull_request' && '-short' || '' }}
     secrets:
       codecov-token: ${{ secrets.CODECOV_TOKEN }}
   fmt:

.github/workflows/lint_template.yml

@@ -25,4 +25,4 @@ jobs:
           working-directory: ${{ inputs.modulepath }}
           args:
             --config=${{ github.workspace }}/.github/golangci.yml
-          version: v1.59 # sync with misc/devdeps
+          version: v1.62 # sync with misc/devdeps

.github/workflows/releaser-master.yml

@@ -23,7 +23,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22.x"
+          go-version-file: go.mod
           cache: true
 
       - uses: sigstore/[email protected]

.github/workflows/releaser-nightly.yml

@@ -20,7 +20,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22.x"
+          go-version-file: go.mod
           cache: true
 
       - uses: sigstore/[email protected]

.github/workflows/releaser.yml

@@ -20,7 +20,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22.x"
+          go-version-file: go.mod
           cache: true
 
       - uses: sigstore/[email protected]

.github/workflows/test_template.yml

@@ -41,11 +41,14 @@ jobs:
             # Craft a filter flag based on the module path to avoid expanding coverage on unrelated tags.
             export filter="-pkg=github.com/gnolang/gno/${{ inputs.modulepath }}/..."
 
+            # codecov only supports "boolean" coverage (whether a line is
+            # covered or not); so using -covermode=count or atomic would be
+            # pointless here.
             # XXX: Simplify coverage of txtar - the current setup is a bit
             # confusing and meticulous. There will be some improvements in Go
             # 1.23 regarding coverage, so we can use this as a workaround until
             # then.
-            go test -covermode=atomic -timeout ${{ inputs.tests-timeout }} ${{ inputs.tests-extra-args }} ./... -test.gocoverdir=$GOCOVERDIR
+            go test -covermode=set -timeout ${{ inputs.tests-timeout }} ${{ inputs.tests-extra-args }} ./... -test.gocoverdir=$GOCOVERDIR
 
             # Print results
             (set +x; echo 'go coverage results:')

contribs/github-bot/README.md

@@ -13,25 +13,38 @@ The bot operates by defining a set of rules that are evaluated against each pull
 - **Automatic Checks**: These are rules that the bot evaluates automatically. If a pull request meets the conditions specified in the rule, then the corresponding requirements are executed. For example, ensuring that changes to specific directories are reviewed by specific team members.
 - **Manual Checks**: These require human intervention. If a pull request meets the conditions specified in the rule, then a checkbox that can be checked only by specified teams is displayed on the bot comment. For example, determining if infrastructure needs to be updated based on changes to specific files.
 
-The bot configuration is defined in Go and is located in the file [config.go](./config.go).
+The bot configuration is defined in Go and is located in the file [config.go](./internal/config/config.go).
 
 ### GitHub Token
 
 For the bot to make requests to the GitHub API, it needs a Personal Access Token. The fine-grained permissions to assign to the token for the bot to function are:
 
+#### Repository permissions
+
 - `pull_requests` scope to read is the bare minimum to run the bot in dry-run mode
 - `pull_requests` scope to write to be able to update bot comment, assign user, apply label and request review
 - `contents` scope to read to be able to check if the head branch is up to date with another one
 - `commit_statuses` scope to write to be able to update pull request bot status check
 
+#### Organization permissions
+
+- `members` scope to read to be able to list the members of a team
+
+#### Bot account role
+
+For the bot to create a commit status on a repo - and only for this feature at the time of writing this - the GitHub account of the bot must either:
+
+- have the `write` role on the repo
+- have the `owner` role in the organization that owns the repo
+
 ## Usage
 
 ```bash
 > github-bot check --help
 USAGE
   github-bot check [flags]
 
-This tool checks if the requirements for a pull request to be merged are satisfied (defined in config.go) and displays PR status checks accordingly.
+This tool checks if the requirements for a pull request to be merged are satisfied (defined in ./internal/config/config.go) and displays PR status checks accordingly.
 A valid GitHub Token must be provided by setting the GITHUB_TOKEN environment variable.
 
 FLAGS