Update from upstream

.github/ISSUE_TEMPLATE/config.yml

@@ -1,8 +1,8 @@
 blank_issues_enabled: false
 contact_links:
   - name: Questions
-    url: https://github.com/anduril/golangci-lint/discussions
-    about: If you have a question, or are looking for advice, please post on our discussions forum!
+    url: https://github.com/golangci/golangci-lint/discussions
+    about: If you have a question, or are looking for advice, please post on our Discussions forum!
   - name: golangci-lint documentation
     url: https://golangci-lint.run
-    about: Please take a look to our documenation.
+    about: Please take a look to our documentation.

.github/dependabot.yml

@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+      day: "sunday"
+      time: "11:00" # 11am UTC
     ignore:
       # ignore forked linters because of their versioning issues. TODO: fix it.
       - dependency-name: "github.com/golangci/*"

.github/workflows/codeql.yaml

@@ -19,28 +19,21 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
 
+    permissions:
+      # required for all workflows
+      security-events: write
+
     strategy:
       fail-fast: false
       matrix:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
         # TODO: Enable for javascript later
-        language: [ 'go' ]
-        # Learn more...
-        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+        language: [ 'go']
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
-        with:
-          # We must fetch at least the immediate parents so that if this is
-          # a pull request then we can checkout the head.
-          fetch-depth: 2
-
-      # If this run was triggered by a pull request event, then checkout
-      # the head of the pull request instead of the merge commit.
-      - run: git checkout HEAD^2
-        if: ${{ github.event_name == 'pull_request' }}
+        uses: actions/checkout@v3
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
@@ -52,8 +45,5 @@ jobs:
           # Prefix the list here with "+" to use these queries and those in the config file.
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-      # Use manual build instead of auto build
-      - run: make build test
-
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@v1

.github/workflows/post-release.yml

@@ -10,16 +10,17 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GOLANGCI_LINT_TOKEN }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Install Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.16
+          # stable: 'false' # Keep this line to be able to use rc and beta version of Go (ex: 1.18.0-rc1).
+          go-version: 1.18
 
       - name: Update GitHub action config
         run: make assets/github-action-config.json
 
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v3
         with:
           node-version: "15"
           check-latest: true

.github/workflows/pr-extra.yml

@@ -1,18 +1,20 @@
 name: Extra
 on:
   push:
-    tags:
-      - v*
     branches:
       - master
   pull_request:
+
 jobs:
   vulns:
     name: Vulnerability scanner
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions/setup-go@v2
+        with:
+          # stable: 'false' # Keep this line to be able to use rc and beta version of Go (ex: 1.18.0-rc1).
+          go-version: 1.18
       - name: Run go list
         run: go list -json -m all > go.list
       - name: Nancy