* Add goai – Go SDK for building AI applications. One SDK, 20+ providers.
Add goai – Go SDK for building AI applications. One SDK, 20+ providers.
https://github.com/zendev-sh/goai
* Add goai – Go SDK for building AI applications. One SDK, 20+ providers.
Add goai – Go SDK for building AI applications. One SDK, 20+ providers.
https://github.com/zendev-sh/goai
Add ribbonGo (https://github.com/RibbonGo/ribbonGo) - first pure Go
implementation of Ribbon filters for space-efficient approximate set
membership queries.
* Add hotplex to Artificial Intelligence section
hotplex is an AI Agent runtime engine that provides long-lived sessions for CLI AI tools like Claude Code and OpenCode. It offers full-duplex streaming, multi-platform integrations (Slack, Feishu, Telegram, Discord), and secure sandbox.
* Update hotplex entry: shorten description, add pi-mono support
---------
Co-authored-by: 黄飞虹 <aaronwong1989@gmail.com>
The pull_request_target workflow checked out and executed Go scripts from
the PR head, allowing attackers to inject arbitrary code via init()
functions with access to a write-scoped GITHUB_TOKEN. This was confirmed
exploited in the wild (ref: StepSecurity blog).
Checkout now targets the base branch so only trusted scripts execute.
PR head SHA is fetched as data-only for diffing via a new PR_HEAD_SHA
env var. Write operations (comments, labels) are isolated in a separate
report job that never checks out code. All job permissions follow least
privilege — quality runs read-only, report holds the write token.
fixed: #6083
Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>
Co-Authored-By: Thierry Abalea <thierry.abalea@shipfox.io>
This PR adds music-theory to the Audio and Music section.
**Package links:**
- pkg.go.dev: https://pkg.go.dev/gopkg.in/music-theory.v0
- Go Report Card: https://goreportcard.com/report/gopkg.in/music-theory.v0
**Coverage:**
- key package: 100%
- scale package: 100%
- note package: 81.4%
- chord package: 72.9%
**Description:**
music-theory is a Go library for music theory models including notes, keys, chords, and scales. It provides comprehensive functionality for working with musical concepts programmatically and includes a command-line utility for demonstrating the library capabilities.
TG - Telegram Bot Framework for Go
## We want to ensure high quality of the packages. Make sure that you've checked the boxes below before sending a pull request.
- [x] I have read the [Contribution Guidelines](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md#contribution-guidelines)
- [x] I have read the [Maintainers Note](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md#maintainers)
- [x] I have read the [Quality Standards](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md#quality-standards)
_Not every repository (project) will require every option, but most projects should. Check the Contribution Guidelines for details._
- [x] The repo documentation has a pkg.go.dev link.
- [x] The repo documentation has a coverage service link.
- [x] The repo documentation has a goreportcard link.
- [x] The repo has a version-numbered release and a go.mod file.
- [x] The repo has a continuous integration process that automatically runs tests that must pass before new pull requests are merged.
- [x] Continuous integration is used to attempt to catch issues prior to releasing this package to end-users.
## Please provide some links to your package to ease the review
- [x] forge link (github.com, gitlab.com, etc): https://github.com/enetx/tg
- [x] pkg.go.dev: https://pkg.go.dev/github.com/enetx/tg
- [x] goreportcard.com: https://goreportcard.com/report/github.com/enetx/tg
- [x] coverage service link: https://coveralls.io/github/enetx/tg?branch=main
## Pull Request content
- [x] The package has been added to the list in alphabetical order.
- [x] The package has an appropriate description with correct grammar.
- [x] As far as I know, the package has not been listed here before.
## Category quality
_Note that new categories can be added only when there are 3 packages or more._
Packages added a long time ago might not meet the current guidelines anymore. It would be very helpful if you could check 3-5 packages above and below your submission to ensure that they also still meet the Quality Standards.
Please delete one of the following lines:
- [x] The packages around my addition still meet the Quality Standards.
Thanks for your PR, you're awesome! 😎
