audit: comprehensive hygiene, bug fixes, and new features#19

Merged

KingPin merged 19 commits intomainfrom

pr/refactor-getbody-retry-ci

Apr 5, 2026

Commits on Mar 10, 2026

fix(sendRequest): handle nil GetBody, close response on retry, and constant-format logging

KingPin
authored and
KingPin
committed
test: use closed localhost port for deterministic network-error test

KingPin
authored and
KingPin
committed
docs: add copilot instructions and docker-only + atomic commits guidance

KingPin
authored and
KingPin
committed
refactor: pre-read request body when GetBody missing; improve retry detection (net/url errors)

KingPin
authored and
KingPin
committed
fix(gosec): guard uint64<->int64 conversions for MAX_BODY_SIZE display and parsing

KingPin
authored and
KingPin
committed
fix(gosec): remove unused math import

KingPin
authored and
KingPin
committed
fix(gosec): guard uint64->int64 conversion for MAX_BODY_SIZE

KingPin
authored and
KingPin
committed
fix(gosec): validate target URLs and annotate jitter/client.Do for gosec

KingPin
authored and
KingPin
committed
fix(gosec): suppress SSRF warning at request creation, use http.Server with timeouts to satisfy G114

KingPin
authored and
KingPin
committed
fix(gosec): avoid log injection and handle encoder/close errors

KingPin
authored and
KingPin
committed
fix(gosec): avoid log injection and handle Close/Encode errors

KingPin
authored and
KingPin
committed

Commits on Apr 5, 2026

fix: remove deprecated rand.Seed, min func shadow, net.Error.Temporary()

KingPin
authored and
KingPin
committed
perf/fix: cache startup config; record bodySize for all body paths; reduce log noise

KingPin
authored and
KingPin
committed
feat: X-Request-ID correlation; latency_seconds encoding; truncation detection

KingPin
authored and
KingPin
committed
fix: implement -healthcheck flag; move flag handling before server setup

KingPin
authored and
KingPin
committed
test: adapt tests for cached config vars; restore maxRetries global state

KingPin
authored and
KingPin
committed
ci: enforce lint/vet gate; add gosec scan to binary-release workflow

KingPin
authored and
KingPin
committed
fix: address Copilot review comments

KingPin
authored and
KingPin
committed
chore: merge main (Dependabot action bumps)

KingPin
authored and
KingPin
committed