Update repo from latest copier template

.github/dependabot.yml

@@ -2,14 +2,12 @@ version: 2
 
 updates:
   - package-ecosystem: github-actions
-    directory: "/"
+    directory: /
     schedule:
-      interval: daily
+      interval: weekly
 
   - package-ecosystem: gomod
-    directory: "/"
+    directory: /
     rebase-strategy: auto
-    allow:
-      - dependency-type: all
     schedule:
-      interval: daily
+      interval: weekly

.github/labels.yml

@@ -22,6 +22,10 @@
   description: Improvements or additions to documentation
   color: 0075ca
 
+- name: duplicate
+  description: This issue or pull request already exists
+  color: cfd3d7
+
 - name: enhancement
   description: New feature or request
   color: a2eeef
@@ -30,6 +34,14 @@
   description: Good for newcomers
   color: 7057ff
 
+- name: help wanted
+  description: Extra attention is needed
+  color: 008672
+
+- name: invalid
+  description: This doesn't seem right
+  color: e4e669
+
 - name: performance
   description: Performance
   color: "016175"
@@ -50,6 +62,14 @@
   description: Style
   color: c120e5
 
+- name: chore
+  description: General project admin
+  color: cfd3d7
+
 - name: testing
   description: Testing
   color: b1fc6f
+
+- name: wontfix
+  description: This will not be worked on
+  color: ffffff

.github/workflows/CI.yml

@@ -1,23 +1,24 @@
 name: CI
 
 on:
+  workflow_call:
   pull_request:
   push:
     branches:
       - main
-    tags:
-      - v*
 
 concurrency:
-  group: ${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-permissions: read-all
+permissions: {}
 
 jobs:
   test:
     name: Test
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     strategy:
       matrix:
         os:
@@ -39,6 +40,8 @@ jobs:
   cov:
     name: CodeCov
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout Code
@@ -56,10 +59,13 @@ jobs:
         uses: codecov/codecov-action@v4
         with:
           files: ./coverage.out
+          token: ${{ secrets.CODECOV_TOKEN }}
 
   lint:
     name: Lint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout Code
@@ -77,58 +83,3 @@ jobs:
         uses: golangci/golangci-lint-action@v6
         with:
           version: latest
-
-  release:
-    name: Release
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    needs:
-      - test
-      - cov
-      - lint
-
-    if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
-
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Fetch Existing Tags
-        run: git fetch --force --tags
-
-      - name: Install Syft
-        uses: jaxxstorm/action-install-gh-release@v1.12.0
-        with:
-          repo: anchore/syft
-
-      - name: Parse Release Version
-        id: version
-        run: |
-          VERSION=${GITHUB_REF#refs/tags/v}
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version-file: go.mod
-
-      - name: Publish Draft Release
-        uses: release-drafter/release-drafter@v6
-        with:
-          version: ${{ steps.version.outputs.version }}
-          publish: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          version: latest
-          args: release --clean
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}

.github/workflows/labeler.yml

@@ -21,4 +21,4 @@ jobs:
       - name: Run Labeler
         uses: crazy-max/ghaction-github-labeler@v5
         with:
-          skip-delete: true
+          skip-delete: false

.github/workflows/release.yml

@@ -0,0 +1,68 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+'
+
+permissions: {}
+
+jobs:
+  ci:
+    name: CI
+    uses: FollowTheProcess/gowc/.github/workflows/CI.yml@main
+    secrets: inherit
+    permissions:
+      contents: read
+
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: read
+
+    needs:
+      - ci
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Fetch Existing Tags
+        run: git fetch --force --tags
+
+      - name: Install Syft
+        uses: jaxxstorm/action-install-gh-release@v1.12.0
+        with:
+          repo: anchore/syft
+
+      - name: Parse Release Version
+        id: version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Publish Draft Release
+        uses: release-drafter/release-drafter@v6
+        with:
+          version: ${{ steps.version.outputs.version }}
+          publish: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}

.github/workflows/release_drafter.yml

@@ -18,6 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      pull-requests: read
     steps:
       - name: Run Release Drafter
         uses: release-drafter/release-drafter@v6

.gitignore

@@ -19,6 +19,13 @@
 *.out
 coverage.html
 
+# Taskfile
+.task
+
+# Comparative benchmarks
+before.txt
+after.txt
+
 # Dependency directories (remove the comment below to include it)
 # vendor/