test(sqlite): replace cgo sqlite driver with pure-go modernc.org/sqlite

This fixes CI OOM kills caused by memory overhead from mattn/go-sqlite3 during parallel testing. Also added depguard rule to prevent future CGO sqlite imports and restricted go test parallelism.

Author: snowdream

.golangci.yml

@@ -52,6 +52,9 @@ linters:
     - gocognit # cognitive complexity
 
     # Best practices
+    # Dependency enforcement
+    - depguard # block forbidden imports (e.g., CGO SQLite)
+
     - bodyclose # ensure HTTP response bodies are closed
     - noctx # ensure context is passed for HTTP requests
     - contextcheck # context propagation checks
@@ -125,6 +128,31 @@ linters-settings:
       - name: unreachable-code
       - name: redefines-builtin-id
 
+  # ── SQLite Driver Policy ────────────────────────────────────────────────────
+  # RULE: Only modernc.org/sqlite (pure-Go) is allowed.
+  # REASON: CGO SQLite libraries (e.g., mattn/go-sqlite3) require a C compiler,
+  #         consume 5-10x more memory under -race, and complicate cross-compilation.
+  #         In CI (GitHub Actions ubuntu-latest, ~7GB RAM) this causes OOM kills.
+  depguard:
+    rules:
+      no-cgo-sqlite:
+        list-mode: lax
+        deny:
+          - pkg: "github.com/mattn/go-sqlite3"
+            desc: >-
+              Forbidden: CGO SQLite. Use 'modernc.org/sqlite' (pure-Go) instead.
+              Reason: CGO requires a C compiler, uses 5-10x RAM under -race, and
+              causes OOM kills in CI. See .golangci.yml for the policy.
+          - pkg: "github.com/gwenn/gosqlite"
+            desc: >-
+              Forbidden: CGO SQLite. Use 'modernc.org/sqlite' (pure-Go) instead.
+          - pkg: "github.com/mxk/go-sqlite"
+            desc: >-
+              Forbidden: CGO SQLite. Use 'modernc.org/sqlite' (pure-Go) instead.
+          - pkg: "github.com/jmoiron/sqlx"
+            desc: >-
+              Avoid sqlx with CGO SQLite drivers. Use database/sql + modernc.org/sqlite.
+
   gosec:
     excludes:
       - G104 # audit errors not checked (covered by errcheck)

.unirtm.toml

@@ -154,9 +154,13 @@ unirtm exec -- pre-commit run --all-files || {
 
 [tasks.test]
 description = 'Run Go unit tests for all packages recursively'
-run = 'unirtm exec -- go test -race -v ./...'
+# -timeout 10m : prevent a single hung test from consuming the entire CI budget (default: 10m)
+# -p 4         : limit the number of packages compiled/tested in parallel to prevent CI OOM
+#                (GitHub Actions ubuntu-latest has ~7GB RAM; -race multiplies usage 5-10x)
+# CGO_ENABLED=0: force pure-Go build — all test files must use modernc.org/sqlite, not mattn/go-sqlite3
+run = 'unirtm exec -- go test -race -v -timeout 10m -p 4 ./...'
 output = 'interleaved'
-env = { GOTOOLCHAIN = 'local' }
+env = { GOTOOLCHAIN = 'local', CGO_ENABLED = '0' }
 
 [tasks.verify]
 description = 'Run full local verification (lint-all, test, audit) - runs subchecks in parallel'

go.mod

@@ -16,7 +16,6 @@ require (
 	github.com/joho/godotenv v1.5.1
 	github.com/klauspost/compress v1.18.5
 	github.com/lithammer/fuzzysearch v1.1.8
-	github.com/mattn/go-sqlite3 v1.14.28
 	github.com/pelletier/go-toml/v2 v2.3.1
 	github.com/pterm/pterm v0.12.83
 	github.com/rs/zerolog v1.35.1
@@ -32,6 +31,7 @@ require (
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1
 	gopkg.in/yaml.v3 v3.0.1
 	modernc.org/sqlite v1.50.1
+	mvdan.cc/sh/v3 v3.13.1
 )
 
 require (
@@ -151,5 +151,4 @@ require (
 	modernc.org/libc v1.72.3 // indirect
 	modernc.org/mathutil v1.7.1 // indirect
 	modernc.org/memory v1.11.0 // indirect
-	mvdan.cc/sh/v3 v3.13.1 // indirect
 )

go.sum

@@ -122,6 +122,8 @@ github.com/containerd/console v1.0.5/go.mod h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6
 github.com/coreos/go-oidc/v3 v3.17.0 h1:hWBGaQfbi0iVviX4ibC7bk8OKT5qNr4klBaCHVNvehc=
 github.com/coreos/go-oidc/v3 v3.17.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
+github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
+github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q=
 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467/go.mod h1:uzvlm1mxhHkdfqitSA92i7Se+S9ksOn3a3qmv/kyOCw=
 github.com/danieljoos/wincred v1.2.0 h1:ozqKHaLK0W/ii4KVbbvluM91W2H3Sh0BncbUNPS7jLE=
@@ -217,6 +219,8 @@ github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJn
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
 github.com/go-playground/validator/v10 v10.30.2 h1:JiFIMtSSHb2/XBUbWM4i/MpeQm9ZK2xqPNk8vgvu5JQ=
 github.com/go-playground/validator/v10 v10.30.2/go.mod h1:mAf2pIOVXjTEBrwUMGKkCWKKPs9NheYGabeB04txQSc=
+github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
+github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
 github.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=
 github.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=
 github.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=
@@ -351,8 +355,6 @@ github.com/mattn/go-isatty v0.0.22/go.mod h1:ZXfXG4SQHsB/w3ZeOYbR0PrPwLy+n6xiMrJ
 github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
 github.com/mattn/go-runewidth v0.0.21 h1:jJKAZiQH+2mIinzCJIaIG9Be1+0NR+5sz/lYEEjdM8w=
 github.com/mattn/go-runewidth v0.0.21/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
-github.com/mattn/go-sqlite3 v1.14.28 h1:ThEiQrnbtumT+QMknw63Befp/ce/nUPgBPMlRFEum7A=
-github.com/mattn/go-sqlite3 v1.14.28/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=

internal/repository/sqlite/sqlite_more_test.go

@@ -10,13 +10,13 @@ import (
 	"testing"
 	"time"
 
-	_ "github.com/mattn/go-sqlite3"
+	_ "modernc.org/sqlite" // Use pure-Go SQLite driver (same as production code) to avoid CGO compilation overhead in CI
 	"github.com/snowdreamtech/unirtm/internal/repository"
 	"github.com/stretchr/testify/assert"
 )
 
 func getClosedDB(t *testing.T) *sql.DB {
-	db, err := sql.Open("sqlite3", filepath.Join(t.TempDir(), "test.db"))
+	db, err := sql.Open("sqlite", filepath.Join(t.TempDir(), "test.db"))
 	assert.NoError(t, err)
 	// create table so prepare statement doesn't fail immediately in some constructors if they do table checking
 	// actually constructors don't create tables in SQLite backend usually, or do they?
@@ -26,7 +26,7 @@ func getClosedDB(t *testing.T) *sql.DB {
 }
 
 func getPreparedDB(t *testing.T, initSQL string) *sql.DB {
-	db, err := sql.Open("sqlite3", filepath.Join(t.TempDir(), "test.db"))
+	db, err := sql.Open("sqlite", filepath.Join(t.TempDir(), "test.db"))
 	assert.NoError(t, err)
 	_, err = db.Exec(initSQL)
 	assert.NoError(t, err)

internal/transaction/transaction_more_test.go

@@ -10,13 +10,13 @@ import (
 	"path/filepath"
 	"testing"
 
-	_ "github.com/mattn/go-sqlite3"
+	_ "modernc.org/sqlite" // Use pure-Go SQLite driver (same as production code) to avoid CGO compilation overhead in CI
 	"github.com/snowdreamtech/unirtm/internal/repository/sqlite"
 	"github.com/stretchr/testify/assert"
 )
 
 func TestSQLiteTransactionManager_BeginError(t *testing.T) {
-	db, err := sql.Open("sqlite3", filepath.Join(t.TempDir(), "test.db"))
+	db, err := sql.Open("sqlite", filepath.Join(t.TempDir(), "test.db"))
 	assert.NoError(t, err)
 
 	m := NewSQLiteTransactionManager(db)
@@ -30,7 +30,7 @@ func TestSQLiteTransactionManager_BeginError(t *testing.T) {
 }
 
 func TestSQLiteTransactionManager_BeginRepoErrors(t *testing.T) {
-	db, err := sql.Open("sqlite3", filepath.Join(t.TempDir(), "test.db"))
+	db, err := sql.Open("sqlite", filepath.Join(t.TempDir(), "test.db"))
 	assert.NoError(t, err)
 	defer db.Close()
 

internal/transaction/transaction_test.go

@@ -10,7 +10,7 @@ import (
 	"testing"
 	"time"
 
-	_ "github.com/mattn/go-sqlite3"
+	_ "modernc.org/sqlite" // Use pure-Go SQLite driver (same as production code) to avoid CGO compilation overhead in CI
 	"github.com/snowdreamtech/unirtm/internal/database"
 	"github.com/snowdreamtech/unirtm/internal/repository"
 	"github.com/stretchr/testify/assert"