Nats server version bump, riscv64, armv7 arch added

.dockerignore

@@ -1,3 +1,5 @@
 test.yaml
 bin
-.DS_Store
+.DS_Store
+.cursor
+AGENTS.md

.github/actions/set-build-env/action.yml

@@ -0,0 +1,49 @@
+name: Set NATS build environment
+description: Resolves NATS image registry, container image, OCI source, distribution, and GitHub repo from workflow env or github.repository.
+
+runs:
+  using: composite
+  steps:
+    - name: Set image registry and OCI source
+      shell: bash
+      run: |
+        REGISTRY="${{ env.IMAGE_REGISTRY }}"
+        OCI_SOURCE="${{ env.OCI_SOURCE_REPO }}"
+        NATS_IMAGE="${{ env.NATS_CONTAINER_IMAGE }}"
+        if [ -z "$REGISTRY" ] || [ -z "$OCI_SOURCE" ] || [ -z "$NATS_IMAGE" ]; then
+          case "${{ github.repository }}" in
+            eclipse-iofog/nats-server)
+              REGISTRY="${REGISTRY:-ghcr.io/eclipse-iofog}"
+              OCI_SOURCE="${OCI_SOURCE:-https://github.com/eclipse-iofog/nats-server}"
+              NATS_IMAGE="${NATS_IMAGE:-ghcr.io/eclipse-iofog/nats}"
+              ;;
+            *)
+              REGISTRY="${REGISTRY:-ghcr.io/datasance}"
+              OCI_SOURCE="${OCI_SOURCE:-https://github.com/Datasance/nats-server}"
+              NATS_IMAGE="${NATS_IMAGE:-ghcr.io/datasance/nats}"
+              ;;
+          esac
+        fi
+        echo "IMAGE_REGISTRY=$REGISTRY" >> "${GITHUB_ENV}"
+        echo "OCI_SOURCE_REPO=$OCI_SOURCE" >> "${GITHUB_ENV}"
+        echo "NATS_CONTAINER_IMAGE=$NATS_IMAGE" >> "${GITHUB_ENV}"
+
+    - name: Set NATS distribution
+      shell: bash
+      run: |
+        DISTRIBUTION="${{ env.NATS_DISTRIBUTION }}"
+        GITHUB_REPO="${{ env.NATS_GITHUB_REPO }}"
+        if [ -z "$DISTRIBUTION" ] || [ -z "$GITHUB_REPO" ]; then
+          case "${{ github.repository }}" in
+            eclipse-iofog/nats-server)
+              DISTRIBUTION="${DISTRIBUTION:-iofog}"
+              GITHUB_REPO="${GITHUB_REPO:-eclipse-iofog/nats-server}"
+              ;;
+            *)
+              DISTRIBUTION="${DISTRIBUTION:-datasance}"
+              GITHUB_REPO="${GITHUB_REPO:-Datasance/nats-server}"
+              ;;
+          esac
+        fi
+        echo "NATS_DISTRIBUTION=$DISTRIBUTION" >> "${GITHUB_ENV}"
+        echo "NATS_GITHUB_REPO=$GITHUB_REPO" >> "${GITHUB_ENV}"

.github/workflows/ci.yml

@@ -0,0 +1,108 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [develop]
+    paths-ignore:
+      - README.md
+      - CHANGELOG.md
+      - LICENSE
+  push:
+    branches: [develop]
+    paths-ignore:
+      - README.md
+      - CHANGELOG.md
+      - LICENSE
+  workflow_dispatch:
+
+permissions: read-all
+
+env:
+  GO_VERSION: '1.26.4'
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Set up Go
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache-dependency-path: go.sum
+
+      - run: go version
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
+        with:
+          version: v2.12.2
+          args: --timeout=5m0s --config .golangci.yaml
+
+      - name: Static security analysis
+        run: make security-code
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Set up Go
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache-dependency-path: go.sum
+
+      - run: go version
+
+      - name: Run unit tests
+        run: make test
+
+      - name: Check formatting
+        run: make fmt-check
+
+  docker-build-smoke:
+    name: Docker build smoke
+    runs-on: ubuntu-latest
+    needs: [lint, test]
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - uses: ./.github/actions/set-build-env
+        env:
+          IMAGE_REGISTRY: ${{ vars.IMAGE_REGISTRY }}
+          NATS_CONTAINER_IMAGE: ${{ vars.NATS_CONTAINER_IMAGE }}
+          OCI_SOURCE_REPO: ${{ vars.OCI_SOURCE_REPO }}
+          NATS_DISTRIBUTION: ${{ vars.NATS_DISTRIBUTION }}
+          NATS_GITHUB_REPO: ${{ vars.NATS_GITHUB_REPO }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+
+      - name: Build UBI image (amd64, arm64)
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          file: Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: ${{ env.NATS_CONTAINER_IMAGE }}:ci
+
+      - name: Build edge image (arm/v7, riscv64)
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          file: Dockerfile.edge
+          platforms: linux/arm/v7,linux/riscv64
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: ${{ env.NATS_CONTAINER_IMAGE }}:ci-edge

.github/workflows/govulncheck.yml

@@ -0,0 +1,28 @@
+name: govulncheck
+
+on:
+  schedule:
+    - cron: "0 0 * * 0"
+  workflow_dispatch: {}
+
+permissions: read-all
+
+env:
+  GO_VERSION: '1.26.4'
+
+jobs:
+  govulncheck:
+    name: govulncheck
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Set up Go
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache-dependency-path: go.sum
+
+      - name: Run govulncheck
+        run: make vulncheck