I noticed some warning around Node v20 usage from the old version so I bumped to the currently latest one (v7 moved to Node v24). Signed-off-by: Marvin Drees <marvin.drees@9elements.com>
- Rename go.yml to ci.yaml - Pin all actions to full commit SHAs (checkout v6.0.2, setup-go v6.4.0, codecov v6.0.0, setup-tinygo v2.0.1, github-action-benchmark v1.22.0) - Add dedicated benchmark job with regression detection via benchmark-action/github-action-benchmark (120% alert threshold) - Set workflow-level permissions: read-all with per-job write grants Signed-off-by: Marvin Drees <marvin.drees@9elements.com>