feat: update mixpanel integation

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,28 +1,28 @@
 ### Description
 
-<!-- Briefly describe what this PR does -->
+<!-- Required: One-line summary of what the PR is about -->
 
 ### Type of Change
 
-<!-- Check the relevant option -->
+<!-- Required: Check the relevant option, keep unselected ones -->
 
 - [ ] 🐛 Bug fix
 - [ ] ✨ New feature
 - [ ] 💥 Breaking change
 - [ ] 📝 Documentation
 - [ ] ♻️ Refactoring
-- [ ] ⚡ Performance
+- [ ] 🏃‍➡️ Performance
 - [ ] ✅ Tests
 - [ ] 🔐 Security
 - [ ] 🔧 Build/CI
 
-### Related Issue
+### Related Issues
 
-<!-- Link related issues: Fixes #123, Closes #456 -->
+<!-- Optional: List of links to related issues: Fixes #123, Closes #456 -->
 
 ### Changes
 
-<!-- List key changes -->
+<!-- Optional: List of one-line key changes -->
 
 ### Checklist
 
@@ -31,6 +31,6 @@
 - [ ] I have commented on my code, particularly in hard-to-understand areas.
 - [ ] I have made corresponding changes to the documentation.
 
-### Notes
+#### Notes
 
 <!-- Optional: Add additional context -->

.github/dependabot.yml

@@ -1,50 +1,64 @@
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+# yaml-language-server: $schema=https://json.schemastore.org/dependabot-2.0.json
 version: 2
 
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 updates:
   - package-ecosystem: github-actions
-    open-pull-requests-limit: 1
-    commit-message: { prefix: 'chore(deps)' }
+    commit-message: { prefix: sec(gha) }
+    open-pull-requests-limit: 0
     directory: '/'
     schedule:
       interval: daily
+      timezone: Europe/Berlin
     groups:
-      github-actions:
+      security:
+        applies-to: security-updates
+        group-by: dependency-name
         patterns: ['*']
     cooldown:
       default-days: 3
 
-  - package-ecosystem: docker
-    open-pull-requests-limit: 1
-    commit-message: { prefix: 'sec(deps)' }
+  - package-ecosystem: gomod
+    commit-message: { prefix: sec(gomod) }
+    open-pull-requests-limit: 0
     directory: '/'
     schedule:
       interval: daily
+      timezone: Europe/Berlin
     groups:
       security:
         applies-to: security-updates
-        update-types: [ minor, patch ]
+        group-by: dependency-name
         patterns: ['*']
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
     cooldown:
       default-days: 3
 
-  - package-ecosystem: gomod
-    open-pull-requests-limit: 1
-    commit-message: { prefix: 'sec(deps)' }
+  - package-ecosystem: docker
+    commit-message: { prefix: sec(docker) }
+    open-pull-requests-limit: 0
     directory: '/'
     schedule:
       interval: daily
+      timezone: Europe/Berlin
+    groups:
+      security:
+        applies-to: security-updates
+        group-by: dependency-name
+        patterns: ['*']
+    cooldown:
+      default-days: 3
+
+  - package-ecosystem: npm
+    commit-message: { prefix: sec(npm) }
+    open-pull-requests-limit: 0
+    directory: '/docs'
+    schedule:
+      interval: daily
+      timezone: Europe/Berlin
     groups:
       security:
         applies-to: security-updates
-        update-types: [ minor, patch ]
+        group-by: dependency-name
         patterns: ['*']
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
     cooldown:
       default-days: 3

.github/workflows/docs.yml

@@ -7,20 +7,23 @@ on:
   workflow_dispatch:
 
 permissions:
+  contents: read
   pages: write
-  contents: write
   id-token: write
 
 jobs:
   docs:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/checkout@v6
+      # https://github.com/actions/checkout/releases
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
-      - uses: oven-sh/setup-bun@v2
+      # https://github.com/oven-sh/setup-bun/releases
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
 
       - name: Install dependencies
         working-directory: docs
@@ -30,12 +33,15 @@ jobs:
         working-directory: docs
         run: bun run build
 
-      - uses: actions/configure-pages@v6
+      # https://github.com/actions/configure-pages/releases
+      - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
 
-      - uses: actions/upload-pages-artifact@v5
+      # https://github.com/actions/upload-pages-artifact/releases
+      - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
         with:
           path: docs/.vitepress/dist
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
+        # https://github.com/actions/deploy-pages/releases
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5

.github/workflows/release.yml

@@ -12,31 +12,40 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      # https://github.com/actions/checkout/releases
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
-      - uses: jdx/mise-action@v4
 
-      - uses: actions/setup-go@v6
+      # https://github.com/jdx/mise-action/releases
+      - uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4
+
+      # https://github.com/actions/setup-go/releases
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           check-latest: true
           go-version-file: go.mod
 
-      - uses: docker/setup-qemu-action@v4
+      # https://github.com/docker/setup-qemu-action/releases
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4
 
-      - uses: docker/setup-buildx-action@v4
+      # https://github.com/docker/setup-buildx-action/releases
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
 
+      # https://github.com/tibdex/github-app-token/releases
       - id: app_token
-        uses: tibdex/github-app-token@v2
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2
         with:
           app_id: ${{ secrets.TOKEN_APP_ID }}
           private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
 
       - name: Login to docker.io
         run: docker login -u ${{ secrets.DOCKERHUB_USERNAME }} -p ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - uses: goreleaser/goreleaser-action@v7
+      # https://github.com/goreleaser/goreleaser-action/releases
+      - uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7
         with:
           version: '~> v2'
           args: release --clean

.github/workflows/test.yml

@@ -18,18 +18,23 @@ concurrency:
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      # https://github.com/actions/checkout/releases
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
-      - uses: jdx/mise-action@v4
+      # https://github.com/jdx/mise-action/releases
+      - uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4
 
-      - uses: actions/setup-go@v6
+      # https://github.com/actions/setup-go/releases
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           check-latest: true
           go-version-file: go.mod
 
       - name: Setup golangci-lint cache
-        uses: actions/cache@v5
+        # https://github.com/actions/cache/releases
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: ~/.cache/golangci-lint
           key: golangci-lint-${{ runner.os }}-${{ hashFiles('**/go.mod') }}
@@ -47,3 +52,11 @@ jobs:
 
       - name: Run tests
         run: make test
+
+      # https://github.com/codecov/codecov-action/releases
+      - uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+        if: success() && github.ref == 'refs/heads/main'
+        with:
+          fail_ci_if_error: false
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./coverage.out

.golangci.yaml

@@ -56,9 +56,6 @@ linters:
 
   # https://golangci-lint.run/docs/linters/
   settings:
-    # https://golangci-lint.run/docs/linters/configuration/#exhaustive
-    exhaustive:
-      default-signifies-exhaustive: true
     # https://golangci-lint.run/docs/linters/configuration/#gosec
     gosec:
       severity: medium
@@ -72,7 +69,11 @@ linters:
     gocritic:
       disabled-checks:
         - ifElseChain
+    # https://golangci-lint.run/docs/linters/configuration/#exhaustive
+    exhaustive:
+      default-signifies-exhaustive: true
   exclusions:
+    generated: lax
     presets:
       - comments
       - common-false-positives
@@ -83,8 +84,13 @@ linters:
         linters:
           - forbidigo
     paths:
-      - docs
-      - tmp
+      - (^|/)\..*
+      - (^|/)bin/
+      - (^|/)tmp/
+      - (^|/)docs/
+      - (^|/)node_modules/
+
+# https://golangci-lint.run/docs/formatters/
 formatters:
   enable:
     - gofmt

.lefthook.yaml

@@ -13,14 +13,10 @@ pre-commit:
           echo "Error: Branch name must start with 'feature/' or 'fix/'. Your branch: $branch_name"
           exit 1
         fi
-    golangci-fmt:
+    golangci:
       glob: "*.go"
       run: golangci-lint fmt {staged_files}
       stage_fixed: true
-    golangci-lint:
-      glob: "*.go"
-      run: golangci-lint run --new --fast-only
-      stage_fixed: false
 
 commit-msg:
   skip: [ merge, rebase ]

.mise.toml

@@ -1,10 +1,12 @@
+#:schema https://mise.jdx.dev/schema/mise.json
+
 [settings]
 minimum_release_age = "3d"
 
 [tools]
 # https://mise-tools.jdx.dev/tools/bun
 bun = "1.3.14"
-# https://mise-tools.jdx.dev/tools/lefthook
-lefthook = "2.1.8"
 # https://mise-tools.jdx.dev/tools/golangci-lint
 golangci-lint = "2.12.2"
+# https://mise-tools.jdx.dev/tools/lefthook
+lefthook = "2.1.9"

README.md

@@ -1,7 +1,9 @@
-[![Build Status](https://github.com/foomo/sesamy-cli/actions/workflows/test.yml/badge.svg?branch=main&event=push)](https://github.com/foomo/sesamy-cli/actions/workflows/test.yml)
-[![Go Report Card](https://goreportcard.com/badge/github.com/foomo/sesamy-cli)](https://goreportcard.com/report/github.com/foomo/sesamy-cli)
-[![GoDoc](https://godoc.org/github.com/foomo/sesamy-cli?status.svg)](https://godoc.org/github.com/foomo/sesamy-cli)
-[![goreleaser](https://github.com/foomo/sesamy-cli/actions/workflows/release.yml/badge.svg)](https://github.com/foomo/sesamy-cli/actions)
+[![Go Report Card](https://goreportcard.com/badge/github.com/foomo/sesamy-cli?style=flat-square)](https://goreportcard.com/report/github.com/foomo/sesamy-cli)
+[![GoDoc](https://img.shields.io/badge/GoDoc-✓-informational.svg?style=flat-square&logo=go)](https://godoc.org/github.com/foomo/sesamy-cli)
+[![Coverage](https://img.shields.io/codecov/c/github/foomo/sesamy-cli?style=flat-square&logo=github)](https://app.codecov.io/gh/foomo/sesamy-cli)
+[![GitHub Downloads](https://img.shields.io/github/downloads/foomo/sesamy-cli/total.svg?style=flat-square&logo=github)](https://github.com/foomo/sesamy-cli/releases)
+[![Docker Pulls](https://img.shields.io/docker/pulls/foomo/sesamy-cli.svg?style=flat-square&logo=docker)](https://hub.docker.com/r/foomo/sesamy-cli)
+[![GitHub Stars](https://img.shields.io/github/stars/foomo/sesamy-cli.svg?style=flat-square&logo=github)](https://github.com/foomo/sesamy-cli)
 
 <p align="center">
   <img alt="sesamy" src="docs/public/logo.png" width="400" height="400"/>

cmd/sesamy-cli-docs/main.go

@@ -12,6 +12,7 @@ import (
 
 func main() {
 	out := flag.String("out", "docs/reference/cli", "output directory")
+
 	flag.Parse()
 
 	if err := os.MkdirAll(*out, 0o755); err != nil {

docs/providers/mixpanel.md

@@ -12,6 +12,7 @@ mixpanel:
     enabled: true
     mode: analytics_storage
   serverContainer:
+    userId: user_id
     track:
       directory: .
       packages:
@@ -35,4 +36,5 @@ mixpanel:
 |-------|---------|
 | `projectToken` | Mixpanel project token. |
 | `googleConsent.mode` | Defaults to `analytics_storage`. |
+| `serverContainer.userId` | Event-data property holding the user ID, forwarded to Mixpanel. |
 | `serverContainer.track.packages` | Events to forward to Mixpanel's `/track` endpoint. |