Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Aleksa Sarai (2):
  VERSION: back to development
  VERSION: release v0.3.6

LGTMs: cyphar

The default setting could result in us testing against old patch
releases of Go versions, so force actions/setup-go to check if the
cached version is the latest.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

If a user provides an unclean root path, we will implicitly clean it at
the end of SecureJoin (which may result in a path that doesn't exist or
has "escaped" the root). Such usage is fundamentally unsafe so we should
just return an error.

Reported-by: Erik Sjölund <erik.sjolund@gmail.com>
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Aleksa Sarai (1):
  join: return an error if root is unclean path

LGTMs: cyphar

This is mostly a cosmetic change for most users, but libpathrs uses
os.FileMode as well and most Go users are more used to using
os.FileMode. The only thing that users need to watch out for is that
they need to switch from unix.S_ISVTX to os.ModeSticky if they are using
that bit (since os.FileMode and unix.S_* bits have a different layout).

This will also help with building on 32-bit architectures without
switching the argument type to uint32 explicitly.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

Aleksa Sarai (2):
  gha: add GOARCH=386 build check
  mkdirall: switch to os.FileMode argument

LGTMs: cyphar kolyshkin

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>