chore: Update ruby and actions versions

Author: alexremn

.github/workflows/docker-build.yml

@@ -13,13 +13,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Build Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: false

.github/workflows/release.yml

@@ -9,15 +9,59 @@ permissions:
   contents: write
 
 jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.4'
+
+      - name: Ruby syntax check
+        run: ruby -c src/check_coverage.rb
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: false
+          tags: simplecov-github-action:release-verify
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
   release:
+    needs: verify
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
 
       - name: Create Release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           draft: false
           prerelease: false
+          generate_release_notes: true
+
+      - name: Update major version tag
+        env:
+          REF_NAME: ${{ github.ref_name }}
+        run: |
+          MAJOR="${REF_NAME%%.*}"
+          if [[ ! "$MAJOR" =~ ^v[0-9]+$ ]]; then
+            echo "Tag '$REF_NAME' does not match vX.Y.Z; skipping major tag move."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag -f "$MAJOR" "$REF_NAME"
+          git push origin "$MAJOR" --force

.github/workflows/test.yml

@@ -6,14 +6,31 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.4'
+
+      - name: Ruby syntax check
+        run: ruby -c src/check_coverage.rb
+
   test-action:
     runs-on: ubuntu-latest
+    needs: lint
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      # Create a test SimpleCov file
       - name: Create test SimpleCov file
         run: |
           mkdir -p coverage

CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.2] - 2026-05-17
+
+### Changed
+- Upgraded Docker base image from `ruby:3.1-alpine` to `ruby:3.4-alpine`
+- Bumped `actions/checkout` to v6 across all workflows
+- Bumped `docker/build-push-action` to v7
+- Bumped `softprops/action-gh-release` to v3
+
+### Added
+- Dedicated `lint` job in CI running a Ruby syntax check (`ruby -c`) before the action self-test
+- Pre-release `verify` job (Ruby syntax + Docker build) gating the `release` job
+- Automatic release notes generation (`generate_release_notes: true`)
+- Major version tag move (e.g. `v1` pointing at latest `v1.x.y`) on release
+- Explicit least-privilege `permissions: contents: read` on the test workflow
+
 ## [1.0.1] - 2025-04-21
 
 ### Added

Dockerfile

@@ -1,4 +1,4 @@
-FROM ruby:3.1-alpine
+FROM ruby:3.4-alpine
 
 LABEL maintainer="Aleks Remniov <alexander.remniov@gmail.com>"
 LABEL org.opencontainers.image.source="https://github.com/alexremn/simplecov-github-action"