FMG-2: upgrade Go to 1.27.1, refresh dependencies and drop gotoolkit #7
2026-09-07
ci: use the goreleaser from the CI image instead of goreleaser-action
All checks were successful
goreleaser-action v7.1.0 made cosign signature verification of its own download mandatory, and ci-base ships no cosign — the goreleaser-lint job failed on the v6.4.0 -> v7.2.3 bump. The action was redundant anyway: ci-base already installs goreleaser from the upstream apt repo, which is what `make build` has always used. Both workflows now call it directly, and `goreleaser check` moves behind a `make check` target so every CI job runs a make target. Co-authored-by: multica-agent <github@multica.ai>
deps: upgrade Go to 1.27.1, refresh dependencies and drop gotoolkit
Replaces the gotoolkit helpers with the standard library and the libraries they wrapped: - gotoolkit/encoding TOML wrapper -> pelletier/go-toml/v2 directly, behind a new smtp2shoutrrr.LoadConfig shared by both commands. - gotoolkit/service + gotoolkit/model.Server -> signal.NotifyContext and a concrete *Server whose Start shuts the listener down gracefully when its context is cancelled. Also drops the unused ANONYMOUS SASL client from cmd/sendmail, bumps alpine, golangci-lint and the CI actions, and adds coverage for config loading and the server lifecycle. Closes FMG-2 Co-authored-by: multica-agent <github@multica.ai>