ci: add more release workflow + minor updates

Author: vba-excel

.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: sunday
+      time: "05:00"
+      timezone: "Europe/Lisbon"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: sunday
+      time: "05:30"
+      timezone: "Europe/Lisbon"
+    open-pull-requests-limit: 5

.github/release-drafter.yml

@@ -0,0 +1,36 @@
+name-template: "v$RESOLVED_VERSION"
+tag-template: "v$RESOLVED_VERSION"
+
+# Sugerimos next patch por omissão; podes mudar para $NEXT_MINOR_VERSION
+version-resolver:
+  major:
+    labels: ["major"]
+  minor:
+    labels: ["minor", "feature", "enhancement"]
+  patch:
+    labels: ["patch", "bug", "fix", "chore", "docs", "internal"]
+  default: patch
+
+categories:
+  - title: "✨ Novidades"
+    labels: ["feature", "enhancement"]
+  - title: "🐛 Correções"
+    labels: ["bug", "fix"]
+  - title: "🧹 Chores / Interno"
+    labels: ["chore", "internal", "refactor"]
+  - title: "📝 Docs"
+    labels: ["docs"]
+  - title: "🛡️ Segurança"
+    labels: ["security"]
+
+change-template: "- $TITLE (#$NUMBER) by @$AUTHOR"
+no-changes-template: "_Sem alterações categorizadas_"
+
+template: |
+  ## 🚀 Release $RESOLVED_VERSION
+
+  $CHANGES
+
+  ### 📦 Notas
+  - Versão Go recomendada: **1.22+**
+  - Binários e checksums estão na página da release.

.github/workflows/release-drafter.yml

@@ -0,0 +1,21 @@
+name: Release Drafter
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    types: [opened, reopened, synchronize, labeled, unlabeled, closed]
+    branches: [ main ]
+
+permissions:
+  contents: write
+
+jobs:
+  update_release_draft:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: release-drafter/release-drafter@v6
+        with:
+          config-name: release-drafter.yml
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/status.yml

@@ -0,0 +1,59 @@
+name: CI
+
+on:
+  push:
+    branches: ["**"]
+    tags-ignore: ["**"]     # as releases por tag já estão noutro workflow
+  pull_request:
+    branches: ["**"]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build-lint-test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.22.x"
+          cache: true
+
+      - name: Go env
+        run: go env
+
+      - name: Download deps
+        run: go mod download
+
+      - name: Build (all pkgs)
+        run: go build ./...
+
+      - name: Vet
+        run: go vet ./...
+
+      - name: Lint (golangci-lint)
+        uses: golangci/golangci-lint-action@v6
+        with:
+          version: latest
+          args: >
+            --timeout=5m
+            --out-format=colored-line-number
+          only-new-issues: false
+
+      - name: Security scan (govulncheck)
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-input: "1.22.x"
+          args: "./..."
+
+      - name: Test
+        run: go test -race -count=1 ./...

Readme.md

@@ -1,5 +1,34 @@
 # sharepoint-client
 
+[![Release](https://img.shields.io/github/v/release/vba-excel/sharepoint-go?logo=github&sort=semver)](https://github.com/vba-excel/sharepoint-go/releases/latest)
+[![Build](https://github.com/vba-excel/sharepoint-go/actions/workflows/release.yml/badge.svg)](https://github.com/vba-excel/sharepoint-go/actions/workflows/release.yml)
+[![Go](https://img.shields.io/badge/Go-1.22%2B-00ADD8)](https://go.dev/dl/)
+
+> **Downloads & integridade**
+>
+> - Binários prontos: ver a secção **Releases** do GitHub.  
+> - Cada release inclui um ficheiro `checksums_<versão>.txt` com os SHA‑256 de todos os artefactos.
+>
+> **Verificar no Linux/macOS**
+> ```bash
+> # Exemplo para a versão vX.Y.Z
+> VER="vX.Y.Z"
+> curl -sL "https://github.com/vba-excel/sharepoint-go/releases/download/${VER}/checksums_${VER}.txt" -o checksums.txt
+> sha256sum -c checksums.txt   # deve dizer OK para o(s) ficheiro(s) que tens localmente
+> ```
+>
+> **Verificar no Windows (PowerShell)**
+> ```powershell
+> $ver = 'vX.Y.Z'
+> $zip = "sharepoint-client_$ver_windows_amd64.zip"
+> $expected = (Invoke-WebRequest -UseBasicParsing "https://github.com/vba-excel/sharepoint-go/releases/download/$ver/checksums_$ver.txt").Content |
+>   Select-String $zip | ForEach-Object { ($_ -split ' ')[0] }
+> $actual = (Get-FileHash $zip -Algorithm SHA256).Hash.ToLower()
+> if ($actual -eq $expected) { "OK: $zip" } else { "FALHOU: $zip`nexpected=$expected`nactual  =$actual"; exit 1 }
+> ```
+
+#
+ 
 `sharepoint-client` é um utilitário de linha de comandos em Go para ler e escrever listas do SharePoint Online, com tolerância a throttling, paginação automática e formatos de saída pensados para pipelines (`json`, `jsonl`, `csv`).
 
 Funciona bem com:

cmd/sharepoint-client/main.go

@@ -25,7 +25,7 @@ import (
 
 // Nome e versão por omissão (podem ser sobrepostos por ldflags no build)
 const appName = "sharepoint-client"
-const defaultVersion = "v1.0.4"
+const defaultVersion = "v1.0.5"
 
 // Estes três são **injetados** pelo build (ldflags -X main.buildVersion=... etc.)
 // Valores de fallback para execuções locais (go run / go build sem ldflags).