Upstream updates

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,8 @@
+<!--
+
+WARNING:
+
+Pull requests from a fork inside a GitHub organization are not allowed.
+Only pull requests from personal forks are allowed. 
+
+-->

.github/workflows/codeql.yaml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head of the pull request.

.github/workflows/test.yml

@@ -11,10 +11,13 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24.x
       - if: ${{ !(github.event_name == 'pull_request' && (github.event.pull_request.user.id == 49699333 || contains(github.event.pull_request.labels.*.name, 'dependencies'))) }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - if: github.event_name == 'pull_request' && (github.event.pull_request.user.id == 49699333 || contains(github.event.pull_request.labels.*.name, 'dependencies'))
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.ref }}
@@ -54,15 +57,18 @@ jobs:
         version:
           - ""
           - "latest"
-          - "v1.63" # TODO(ldez): it should be updated for v2.
-          - "v1.63.4" # TODO(ldez): it should be updated for v2.
+          - "v2.1"
+          - "v2.1.0"
     runs-on: ${{ matrix.os }}
     permissions:
       contents: read
       pull-requests: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24.x
+      - uses: actions/setup-go@v6
         with:
           go-version: oldstable
       - uses: ./
@@ -83,15 +89,18 @@ jobs:
         version:
           - ""
           - "latest"
-          - "v1.63.4" # TODO(ldez): it should be updated for v2.
-          - "95c39ac1fbaf66475705c06c16259ffd9d6bf9a2" # TODO(ldez): it should be updated for v2.
+          - "v2.1.0"
+          - "f6c2e6c999dfae444d1fe7f1b0d49becdae44547"
     runs-on: ${{ matrix.os }}
     permissions:
       contents: read
       pull-requests: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24.x
+      - uses: actions/setup-go@v6
         with:
           go-version: oldstable
       - uses: ./
@@ -117,8 +126,11 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24.x
+      - uses: actions/setup-go@v6
         with:
           go-version: oldstable
       - uses: ./

.golangci.yml

@@ -1,6 +1,7 @@
+version: "2"
+
 output:
   show-stats: true
-  sort-results: true
   sort-order:
+    - file
     - linter
-    - file