merge

.claude/settings.json

@@ -0,0 +1,11 @@
+{
+    "permissions": {
+        "allow": [
+            "Bash(go:*)",
+            "Bash(golangci-lint:*)",
+            "Bash(git:*)",
+            "Bash(make:*)"
+        ],
+        "deny": []
+    }
+}

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/ci.yml

@@ -1,29 +1,33 @@
+permissions:
+  contents: read
 name: CI
 on:
   push:
     branches:
-      - master
+      - main
   pull_request:
     branches:
-      - master
+      - main
 
 jobs:
   build:
     name: Build
     runs-on: ${{ matrix.os }}
     timeout-minutes: 10
+    permissions:
+      contents: read
 
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
 
     steps:
-      - uses: actions/setup-go@v1
+      - uses: actions/setup-go@v6
         with:
-          go-version: 1.15
-      - uses: actions/checkout@v1
+          go-version: 1.25
+      - uses: actions/checkout@v6
       - run: make build
-      - uses: actions/upload-artifact@v1
+      - uses: actions/upload-artifact@v6
         with:
           name: podsync-${{ matrix.os }}
           path: bin/
@@ -32,12 +36,14 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    permissions:
+      contents: read
 
     steps:
-      - uses: actions/setup-go@v1
+      - uses: actions/setup-go@v6
         with:
-          go-version: 1.15
-      - uses: actions/checkout@v1
+          go-version: 1.25
+      - uses: actions/checkout@v6
       - env:
           VIMEO_TEST_API_KEY: ${{ secrets.VIMEO_ACCESS_TOKEN }}
           YOUTUBE_TEST_API_KEY: ${{ secrets.YOUTUBE_API_KEY }}
@@ -47,12 +53,18 @@ jobs:
     name: Checks
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    permissions:
+      # Required: allow read access to the content for analysis.
+      # See https://github.com/golangci/golangci-lint-action?tab=readme-ov-file#annotations
+      contents: read
+      pull-requests: read
 
     steps:
-      - uses: actions/setup-go@v1
+      - uses: actions/setup-go@v6
         with:
-          go-version: 1.15
-      - uses: actions/checkout@v1
+          go-version: 1.25
+      - uses: actions/checkout@v6
+      - uses: golangci/golangci-lint-action@v9
 
       - name: Go mod
         env:
@@ -68,5 +80,3 @@ jobs:
             echo
             exit 1
           fi
-
-      - run: make lint

.github/workflows/claude.yml

@@ -0,0 +1,47 @@
+name: Claude
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+          # Allow Go development tools and file operations for code changes and PRs
+          claude_args: |
+            --allowedTools Edit Read Write Glob Grep "Bash(go:*)" "Bash(golangci-lint:*)" "Bash(make:*)" "Bash(git:*)" "Bash(gh:*)" mcp__github
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read

.github/workflows/dedup.yml

@@ -0,0 +1,64 @@
+name: Issue Deduplication
+
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  deduplicate:
+    name: Check
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      issues: write
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+
+      - name: Check for duplicate issues
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          prompt: |
+            Analyze this new issue and check if it's a duplicate of existing issues in the repository.
+
+            Issue: #${{ github.event.issue.number }}
+            Repository: ${{ github.repository }}
+
+            Your task:
+            1. Use mcp__github__get_issue to get details of the current issue (#${{ github.event.issue.number }})
+            2. Search for similar existing issues using mcp__github__search_issues with relevant keywords from the issue title and body
+            3. Compare the new issue with existing ones to identify potential duplicates
+
+            Criteria for duplicates:
+            - Same bug or error being reported
+            - Same feature request (even if worded differently)
+            - Same question being asked
+            - Issues describing the same root problem
+
+            If you find duplicates:
+            - Add a comment on the new issue linking to the original issue(s)
+            - Apply a "duplicate" label to the new issue
+            - Be polite and explain why it's a duplicate
+            - Suggest the user follow the original issue for updates
+
+            If it's NOT a duplicate:
+            - Don't add any comments
+            - You may apply appropriate topic labels based on the issue content
+
+            Use these tools:
+            - mcp__github__get_issue: Get issue details
+            - mcp__github__search_issues: Search for similar issues
+            - mcp__github__list_issues: List recent issues if needed
+            - mcp__github__create_issue_comment: Add a comment if duplicate found
+            - mcp__github__update_issue: Add labels
+
+            Be thorough but efficient. Focus on finding true duplicates, not just similar issues.
+
+          claude_args: |
+            --allowedTools "mcp__github__get_issue,mcp__github__search_issues,mcp__github__list_issues,mcp__github__create_issue_comment,mcp__github__update_issue,mcp__github__get_issue_comments"

.github/workflows/nightly.yml

@@ -0,0 +1,48 @@
+name: Nightly
+
+on:
+  schedule:
+    - cron: "0 0 * * *" # Every day at midnight
+  push:
+    paths:
+      - ".github/workflows/nightly.yml"
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  publish:
+    name: Nightly
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: 📦 Checkout repository
+        uses: actions/checkout@v6
+
+      - name: 🧪 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: 🔒 Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: 🏗️ Build and push
+        uses: docker/build-push-action@v6
+        env:
+          TAG: nightly
+          COMMIT: ${{ github.sha }}
+        with:
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:nightly

.github/workflows/release.yml

@@ -5,30 +5,53 @@ on:
     tags:
       - 'v*'
 
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
 jobs:
   publish:
     name: Publish
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 20
+
+    permissions:
+      contents: write
+      packages: write
 
     steps:
-      - uses: actions/checkout@v2
+      - name: 📦 Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
 
-      # Required for the changelog to work correctly
-      - run: git fetch --prune --unshallow
+      - name: 🧪 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
-      - uses: actions/setup-go@v1
+      - name: 🔒 Log in to the Container registry
+        uses: docker/login-action@v3
         with:
-          go-version: 1.15
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      - env:
-          DOCKER_LOGIN: ${{ secrets.DOCKER_LOGIN }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
-        run: docker login --username "$DOCKER_LOGIN" --password "$DOCKER_PASSWORD"
+      - name: 🏗️ Build container and push
+        uses: docker/build-push-action@v6
+        env:
+          TAG: ${{ github.ref_name }}
+          COMMIT: ${{ github.sha }}
+        with:
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest, ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}
 
-      - uses: goreleaser/goreleaser-action@v1
+      - name: 🚧️ Make release
+        uses: goreleaser/goreleaser-action@v6
+        if: startsWith(github.ref, 'refs/tags/')
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           version: latest
-          args: release --rm-dist
-        env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          args: release --clean