build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 #83

	name: ci

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7

	- uses: actions/setup-go@v6
	with:
	go-version: '1.25'
	cache: true

	- name: gofmt (formatting gate)
	run: \|
	unformatted=$(gofmt -l .)
	if [ -n "$unformatted" ]; then
	echo "These files are not gofmt-clean:"; echo "$unformatted"
	echo "Run: gofmt -w ."; exit 1
	fi

	- name: go vet
	run: go vet ./...

	- name: Cross-compile for prod target (linux/arm64)
	# Production runs on a GH200 (linux/arm64). Pure-Go + CGO_ENABLED=0
	# means this is a clean cross-compile on the amd64 runner — no QEMU,
	# no self-hosted runner. Catches a compile break on the prod arch
	# that the host-arch test build would miss.
	run: CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build ./cmd/cosift

	- name: Run tests with coverage
	# cosift's internal/crawler hits ~25s; allow 5m total headroom.
	run: go test -race -coverprofile=coverage.out -covermode=atomic -timeout 5m ./...

	- name: Upload coverage to Codecov
	uses: codecov/codecov-action@v7
	with:
	files: ./coverage.out
	flags: unittests
	name: cosift
	fail_ci_if_error: false
	# No token needed — Codecov GitHub App is installed on the org.

	- name: Coverage summary
	run: go tool cover -func=coverage.out \| tail -20

	- uses: actions/upload-artifact@v7
	with:
	name: coverage-cosift
	path: coverage.out
	retention-days: 30

Provide feedback