test: verify CI works without upload-artifact

.gitea/workflows/ci.yaml

@@ -11,37 +11,24 @@ concurrency:
 
 jobs:
   test:
-    runs-on: docker
+    runs-on: golang
     container:
-      image: golang:1.25
+      image: golang:1.26
     env:
       GOPRIVATE: forgejo.riotpiao.com
       GOFLAGS: -mod=readonly
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
     steps:
-      # actions/checkout is a Node-based action; golang:1.25 has no node on PATH.
+      # actions/checkout is a Node-based action; install node for Actions support.
       - name: install node (required by JS-based actions)
         run: apt-get update && apt-get install -y --no-install-recommends nodejs ca-certificates git
 
       - uses: actions/checkout@v4
 
       # kmsvc-proto lives in another private repo on the same Forgejo instance.
-      # GITHUB_TOKEN is auto-injected by Forgejo Actions and has read access to all repos.
       - name: configure git auth for private module fetch
         run: |
-          git config --global url."https://oauth2:${GITHUB_TOKEN}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: cache go modules + build cache
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: go-${{ runner.os }}-${{ hashFiles('go.sum') }}
-          restore-keys: |
-            go-${{ runner.os }}-
+          git config --global url."https://oauth2:${REGISTRY_PAT}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
 
       - name: gofmt
         run: |
@@ -63,9 +50,3 @@ jobs:
 
       - name: coverage summary
         run: go tool cover -func=coverage.out | tail -1
-
-      - name: upload coverage
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage
-          path: coverage.out

.gitea/workflows/release.yaml

@@ -10,9 +10,9 @@ permissions:
 
 jobs:
   release:
-    runs-on: docker
+    runs-on: golang
     container:
-      image: golang:1.25
+      image: golang:1.26
     env:
       GOPRIVATE: forgejo.riotpiao.com
     steps:
@@ -23,9 +23,9 @@ jobs:
 
       - name: configure git auth for private module fetch
         run: |
-          git config --global url."https://oauth2:${GITHUB_TOKEN}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
+          git config --global url."https://oauth2:${REGISTRY_PAT}@forgejo.riotpiao.com".insteadOf "https://forgejo.riotpiao.com"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REGISTRY_PAT: ${{ secrets.GITHUB_TOKEN }}
 
       # A tag is the public contract for `go get [email protected]` — re-run the full
       # gate before publishing a release, never trust that main was green.

README.md

@@ -56,3 +56,6 @@ go test ./... -race
 ```
 
 No `buf`/`protoc` install needed — `kmsvc-proto`'s generated Go code is consumed as a plain module dependency.
+# Final test - clean cache removal
+# Final CI validation - Forgejo ready
+# CI cleanup - removed upload-artifact

go.mod

@@ -1,6 +1,6 @@
 module forgejo.riotpiao.com/rock/kmsvc-sdk
 
-go 1.25.0
+go 1.26.0
 
 require (
 	forgejo.riotpiao.com/rock/kmsvc-proto v1.4.0