6 Commits

Include renames

Author	SHA1	Message	Date
warkanum	96281c9f03	chore(ci): add govulncheck, staticcheck, go vet, gofumpt gates ... * Add lint/format checks to the Gitea release workflow and Makefile (targets: vet, fmt, fmt-check, staticcheck, govulncheck, check) * Switch .golangci.json formatter from gofmt to gofumpt (extra.group-params) * Bump golang.org/x/text 0.37.0 -> 0.39.0 for GO-2026-5970; re-vendor * Fix staticcheck S1011 in pkg/diff; drop unused pgsql writer helpers * Fix gocritic unnamedResult (pkg/diff) and rangeValCopy (pkg/pgsql) * Apply gofumpt + goimports formatting across the tree	2026-09-03 21:17:03 +02:00
Hein	17ae8e050a	fix(assetloader): name embedDirectiveLiteral return values to satisfy gocritic	2026-07-20 13:59:19 +02:00
warkanum	1c217b546c	Merge pull request 'feat(scripts): support external file embedding' (#12) from issue-6-external-file-embedding into master ... Reviewed-on: #12 Reviewed-by: Warky <2+warkanum@noreply@warky.dev>	2026-07-20 11:09:39 +00:00
SG Command	1bcdf29206	feat(scripts): support external file embedding	2026-07-20 00:13:05 +02:00
warkanum	7d93bee4bd	chore: Fixed linitng issues	2026-07-18 22:41:23 +02:00
warkanumandClaude Sonnet 4.6	60c5cc40b2	feat(assets): add native Go asset/file loader for migrate-apply ... Implements a new `relspec assets` command (list/execute subcommands) that loads local binary and text asset files into PostgreSQL by binding file bytes as native pgx query parameters — never as SQL text literals — so binary data stays byte-exact with no escaping overhead. Key design points: - YAML manifest (assets.yaml) colocated with files describes each entry: file path, SQL call with :bytes/:filename/:param named placeholders, and optional static params map. - Placeholder substitution converts :name to positional $N params; PostgreSQL ::cast syntax is protected before substitution to avoid false matches. - Directory scan follows the existing {priority}_{sequence}_{name} naming convention, enabling asset-loading steps to be correctly interleaved with relspec scripts execute in a migrate-apply pipeline. - Symlink components and path traversal (../) are silently skipped to prevent directory escape attacks. - 14 unit tests cover manifest loading, directory scanning, ordering, symlink skipping, path traversal rejection, placeholder substitution edge cases (repeated, cast protection, binary byte-exact, unknown). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-17 01:14:11 +02:00