fix CI checks

.github/workflows/ci.yml

@@ -20,15 +20,16 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
         with:
-          go-version: '1.24'
+          go-version: '1.26'
           cache: true
           cache-dependency-path: go.sum
 
       - name: Install golangci-lint
-        uses: golangci/golangci-lint-action@8564da7cb3c6866ed1da648ca8f00a258ef0c802 # v6.5.2
+        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20
+ # v9.2.0
         with:
           version: v2.11.4
-          skip-install: true
+          install-only: true
 
       - name: Run linter
         run: make lint
@@ -43,7 +44,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
         with:
-          go-version: '1.24'
+          go-version: '1.26'
           cache: true
           cache-dependency-path: go.sum
 
@@ -63,7 +64,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
         with:
-          go-version: '1.24'
+          go-version: '1.26'
           cache: true
           cache-dependency-path: go.sum
 

.gitignore

@@ -0,0 +1,11 @@
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+kmir
+*.test
+*.out
+coverage.*
+coverage.html
+

Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM --platform=$BUILDPLATFORM golang:1.24-alpine AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26-alpine AS builder
 ARG TARGETOS
 ARG TARGETARCH
 

Makefile

@@ -26,11 +26,11 @@ test-short: ## Run short tests only
 
 lint: ## Run linters
 	@echo "Running linters..."
-	$(LINTER) run --timeout 5m ./...; \
+	$(LINTER) run --timeout 5m ./...
 
 fix: ## Auto-fix linting issues
 	@echo "Fixing linting issues..."
-	$(LINTER) run --fix --timeout 5m ./...; \
+	$(LINTER) run --fix --timeout 5m ./...
 
 coverage: ## Generate coverage report
 	@echo "Generating coverage report..."

README.md

@@ -73,7 +73,7 @@ kmir --source-brokers=localhost:9092 --sink-brokers=localhost:9093 --client-id=m
 
 ### Prerequisites
 
-- Go 1.24 or later
+- Go 1.26 or later
 - golangci-lint v2.11.4 or later
 
 ### Setup

config.go

@@ -1,3 +1,4 @@
+// Package main provides functionality for mirroring Kafka topics.
 package main
 
 import (
@@ -76,16 +77,16 @@ func toFranzOptions(brokerOpts BrokerOptions) ([]kgo.Opt, error) {
 	out = append(out, kgo.SeedBrokers(brokerOpts.Brokers...))
 	out = append(out, kgo.DialTimeout(brokerOpts.Timeout))
 
-	if brokerOpts.Tls.Enabled {
+	if brokerOpts.TLS.Enabled {
 		tlsConfig := &tls.Config{
 			MinVersion:         tls.VersionTLS12,
 			Renegotiation:      tls.RenegotiateFreelyAsClient,
 			RootCAs:            x509.NewCertPool(),
-			InsecureSkipVerify: brokerOpts.Tls.Insecure,
+			InsecureSkipVerify: brokerOpts.TLS.Insecure, // #nosec G402
 		}
 
-		if brokerOpts.Tls.Cert != "" {
-			if ok := tlsConfig.RootCAs.AppendCertsFromPEM([]byte(brokerOpts.Tls.Cert)); !ok {
+		if brokerOpts.TLS.Cert != "" {
+			if ok := tlsConfig.RootCAs.AppendCertsFromPEM([]byte(brokerOpts.TLS.Cert)); !ok {
 				return nil, fmt.Errorf("failed to append cert to root CAs")
 			}
 		}

config_test.go

@@ -248,7 +248,7 @@ func BenchmarkParseTopicOffset(b *testing.B) {
 	for _, tt := range tests {
 		b.Run(tt, func(b *testing.B) {
 			for i := 0; i < b.N; i++ {
-				parseTopicOffset(tt)
+				_, _ = parseTopicOffset(tt)
 			}
 		})
 	}
@@ -264,7 +264,7 @@ func BenchmarkToTopic(b *testing.B) {
 	for _, tt := range tests {
 		b.Run(tt, func(b *testing.B) {
 			for i := 0; i < b.N; i++ {
-				toTopic(tt)
+				_, _, _ = toTopic(tt)
 			}
 		})
 	}

go.mod

@@ -1,6 +1,6 @@
 module github.com/mortezaPRK/kmir
 
-go 1.24.0
+go 1.26.0
 
 tool golang.org/x/vuln/cmd/govulncheck
 

main.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"log/slog"
+	"math"
 	"time"
 
 	"github.com/twmb/franz-go/pkg/kadm"
@@ -211,7 +212,11 @@ func createTopic(rootCtx context.Context, client *kadm.Client, dt kadm.TopicDeta
 	ctx, cancel := context.WithTimeout(rootCtx, config.Timeout)
 	defer cancel()
 
-	partitions := int32(len(dt.Partitions))
+	numPartitions := len(dt.Partitions)
+	if numPartitions > int(math.MaxInt32) {
+		return fmt.Errorf("number of partitions %d exceeds maximum int32 value", numPartitions)
+	}
+	partitions := int32(numPartitions) // #nosec G115
 
 	if _, err := client.CreateTopic(ctx, partitions, -1, nil, topic); err != nil {
 		return fmt.Errorf("failed to create topic %q: %w", topic, err)

main_test.go

@@ -99,6 +99,6 @@ func BenchmarkWait(b *testing.B) {
 
 	b.ResetTimer()
 	for i := 0; i < b.N; i++ {
-		wait(time.Second, fn)
+		_ = wait(time.Second, fn)
 	}
 }

types.go

@@ -15,8 +15,8 @@ type Sasl struct {
 	Mechanism string `long:"mechanism" env:"MECHANISM" description:"SASL mechanism"`
 }
 
-// Tls defines the TLS configuration for a broker.
-type Tls struct {
+// TLS defines the TLS configuration for a broker.
+type TLS struct {
 	Enabled  bool   `long:"enabled" env:"ENABLED" description:"Enable TLS"`
 	Cert     string `long:"cert" env:"CERT" description:"TLS certificate"`
 	Insecure bool   `long:"insecure" env:"INSECURE" description:"Skip TLS verification"`
@@ -25,7 +25,7 @@ type Tls struct {
 // BrokerOptions defines the configuration for a Kafka broker.
 type BrokerOptions struct {
 	Brokers []string      `long:"brokers" env:"BROKERS" env-delim:"," description:"Comma-separated list of Kafka brokers" required:"true"`
-	Tls     Tls           `group:"TLS" namespace:"tls" env-namespace:"TLS"`
+	TLS     TLS           `group:"TLS" namespace:"tls" env-namespace:"TLS"`
 	Sasl    Sasl          `group:"SASL" namespace:"sasl" env-namespace:"SASL"`
 	Timeout time.Duration `long:"timeout" env:"TIMEOUT" description:"Timeout for Kafka" default:"10s"`
 }