ci: migrate docker build to multi-machine multi-arch matrix

.gitea/workflows/build.yml

@@ -9,7 +9,6 @@ jobs:
   test:
     name: Run Tests
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
@@ -29,16 +28,35 @@ jobs:
       - name: Run tests
         run: go test -v -p 4 ./...
 
-
+  build-amd64:
-  build-and-push:
+    name: Build (linux/amd64)
-    name: Build and Push Docker Image
+    runs-on: [ubuntu-latest, amd64]
-    runs-on: ubuntu-latest
     needs: test
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
+      - name: Extract version
+        id: version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+          echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+          echo "COMMIT=${{ github.sha }}" >> $GITHUB_OUTPUT
+
+          if echo "$VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$'; then
+            echo "MAJOR=$(echo "$VERSION" | cut -d. -f1)" >> $GITHUB_OUTPUT
+            echo "MINOR=$(echo "$VERSION" | cut -d. -f2)" >> $GITHUB_OUTPUT
+            if echo "$VERSION" | grep -q '-'; then
+              echo "IS_PRERELEASE=true" >> $GITHUB_OUTPUT
+            else
+              echo "IS_PRERELEASE=false" >> $GITHUB_OUTPUT
+            fi
+          else
+            echo "Invalid version format: $VERSION"
+            exit 1
+          fi
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -49,7 +67,42 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Extract version and determine release type
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64
+          outputs: >-
+            type=image,name=git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please,push-by-digest=true,name-canonical=true,push=true
+          build-args: |
+            VERSION=${{ steps.version.outputs.VERSION }}
+            BUILD_DATE=${{ steps.version.outputs.BUILD_DATE }}
+            COMMIT=${{ steps.version.outputs.COMMIT }}
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: https://github.com/christopherHX/gitea-upload-artifact@v4
+        with:
+          name: digests-linux-amd64
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  build-arm64:
+    name: Build (linux/arm64)
+    runs-on: [ubuntu-latest, arm64]
+    needs: test
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Extract version
         id: version
         run: |
           VERSION=${GITHUB_REF#refs/tags/v}
@@ -58,18 +111,10 @@ jobs:
           echo "COMMIT=${{ github.sha }}" >> $GITHUB_OUTPUT
 
           if echo "$VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$'; then
-            MAJOR=$(echo "$VERSION" | cut -d. -f1)
+            echo "MAJOR=$(echo "$VERSION" | cut -d. -f1)" >> $GITHUB_OUTPUT
-            MINOR=$(echo "$VERSION" | cut -d. -f2)
+            echo "MINOR=$(echo "$VERSION" | cut -d. -f2)" >> $GITHUB_OUTPUT
-            PATCH=$(echo "$VERSION" | cut -d. -f3 | cut -d- -f1)
-          
-            echo "MAJOR=$MAJOR" >> $GITHUB_OUTPUT
-            echo "MINOR=$MINOR" >> $GITHUB_OUTPUT
-            echo "PATCH=$PATCH" >> $GITHUB_OUTPUT
-          
             if echo "$VERSION" | grep -q '-'; then
-              PRERELEASE_TAG=$(echo "$VERSION" | cut -d- -f2 | cut -d. -f1)
               echo "IS_PRERELEASE=true" >> $GITHUB_OUTPUT
-              echo "PRERELEASE_TAG=$PRERELEASE_TAG" >> $GITHUB_OUTPUT
             else
               echo "IS_PRERELEASE=false" >> $GITHUB_OUTPUT
             fi
@@ -78,35 +123,101 @@ jobs:
             exit 1
           fi
 
-      - name: Build and push Docker image (release)
+      - name: Set up Docker Buildx
-        uses: docker/build-push-action@v6
+        uses: docker/setup-buildx-action@v3
-        with:
-          context: .
-          push: true
-          tags: |
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.VERSION }}
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:release
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }}
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.MAJOR }}
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:latest
-          platforms: linux/amd64,linux/arm64
-          build-args: |
-            VERSION=${{ steps.version.outputs.VERSION }}
-            BUILD_DATE=${{ steps.version.outputs.BUILD_DATE }}
-            COMMIT=${{ steps.version.outputs.COMMIT }}
-        if: steps.version.outputs.IS_PRERELEASE == 'false'
 
-      - name: Build and push Docker image (pre-release)
+      - name: Log in to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          registry: git.fossy.my.id
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Build and push by digest
+        id: build
         uses: docker/build-push-action@v6
         with:
           context: .
-          push: true
+          platforms: linux/arm64
-          tags: |
+          outputs: >-
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.VERSION }}
+            type=image,name=git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please,push-by-digest=true,name-canonical=true,push=true
-            git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:staging
-          platforms: linux/amd64,linux/arm64
           build-args: |
             VERSION=${{ steps.version.outputs.VERSION }}
             BUILD_DATE=${{ steps.version.outputs.BUILD_DATE }}
             COMMIT=${{ steps.version.outputs.COMMIT }}
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: https://github.com/christopherHX/gitea-upload-artifact@v4
+        with:
+          name: digests-linux-arm64
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  merge:
+    name: Merge Multi-Arch Manifest
+    runs-on: ubuntu-latest
+    needs: [build-amd64, build-arm64]
+    steps:
+      - name: Download all digests
+        uses: https://github.com/christopherHX/gitea-download-artifact@v4
+        with:
+          path: /tmp/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Extract version
+        id: version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+
+          if echo "$VERSION" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$'; then
+            echo "MAJOR=$(echo "$VERSION" | cut -d. -f1)" >> $GITHUB_OUTPUT
+            echo "MINOR=$(echo "$VERSION" | cut -d. -f2)" >> $GITHUB_OUTPUT
+            if echo "$VERSION" | grep -q '-'; then
+              echo "IS_PRERELEASE=true" >> $GITHUB_OUTPUT
+            else
+              echo "IS_PRERELEASE=false" >> $GITHUB_OUTPUT
+            fi
+          else
+            echo "Invalid version format: $VERSION"
+            exit 1
+          fi
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          registry: git.fossy.my.id
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Create and push manifest (release)
+        working-directory: /tmp/digests
+        if: steps.version.outputs.IS_PRERELEASE == 'false'
+        run: |
+          docker buildx imagetools create \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.VERSION }} \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:release \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }} \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.MAJOR }} \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:latest \
+            $(printf 'git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please@sha256:%s ' *)
+
+      - name: Create and push manifest (pre-release)
+        working-directory: /tmp/digests
         if: steps.version.outputs.IS_PRERELEASE == 'true'
+        run: |
+          docker buildx imagetools create \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:v${{ steps.version.outputs.VERSION }} \
+            -t git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please:staging \
+            $(printf 'git.fossy.my.id/${{ secrets.DOCKER_USERNAME }}/tunnel-please@sha256:%s ' *)

internal/grpc/client/client_test.go

@@ -13,6 +13,7 @@ import (
 	"tunnel_pls/internal/session/slug"
 	"tunnel_pls/internal/types"
 
+	"tunnel_pls/internal/port"
 	"tunnel_pls/internal/registry"
 
 	proto "git.fossy.my.id/bagas/tunnel-please-grpc/gen"
@@ -884,16 +885,16 @@ func (m *mockLifecycle) Connection() ssh.Conn {
 	return args.Get(0).(ssh.Conn)
 }
 func (m *mockLifecycle) User() string                         { return m.Called().String(0) }
-func (m *mockLifecycle) SetChannel(channel ssh.Channel) error { return m.Called(channel).Error(0) }
+func (m *mockLifecycle) SetChannel(channel ssh.Channel)       { m.Called(channel) }
 func (m *mockLifecycle) SetStatus(status types.SessionStatus) { m.Called(status) }
 func (m *mockLifecycle) IsActive() bool                       { return m.Called().Bool(0) }
 func (m *mockLifecycle) StartedAt() time.Time                 { return m.Called().Get(0).(time.Time) }
-func (m *mockLifecycle) PortRegistry() lifecycle.PortRegistry {
+func (m *mockLifecycle) PortRegistry() port.Port {
 	args := m.Called()
 	if args.Get(0) == nil {
 		return nil
 	}
-	return args.Get(0).(lifecycle.PortRegistry)
+	return args.Get(0).(port.Port)
 }
 
 type mockEventServiceClient struct {

internal/registry/registry_test.go

@@ -4,6 +4,7 @@ import (
 	"sync"
 	"testing"
 	"time"
+	"tunnel_pls/internal/port"
 	"tunnel_pls/internal/session/forwarder"
 	"tunnel_pls/internal/session/interaction"
 	"tunnel_pls/internal/session/lifecycle"
@@ -77,15 +78,15 @@ func (ml *mockLifecycle) Connection() ssh.Conn {
 	return args.Get(0).(ssh.Conn)
 }
 
-func (ml *mockLifecycle) PortRegistry() lifecycle.PortRegistry {
+func (ml *mockLifecycle) PortRegistry() port.Port {
 	args := ml.Called()
 	if args.Get(0) == nil {
 		return nil
 	}
-	return args.Get(0).(lifecycle.PortRegistry)
+	return args.Get(0).(port.Port)
 }
 
-func (ml *mockLifecycle) SetChannel(channel ssh.Channel) error { return ml.Called(channel).Error(0) }
+func (ml *mockLifecycle) SetChannel(channel ssh.Channel)       { ml.Called(channel) }
 func (ml *mockLifecycle) SetStatus(status types.SessionStatus) { ml.Called(status) }
 func (ml *mockLifecycle) IsActive() bool                       { return ml.Called().Bool(0) }
 func (ml *mockLifecycle) StartedAt() time.Time                 { return ml.Called().Get(0).(time.Time) }

internal/session/interaction/interaction_test.go

@@ -1922,6 +1922,10 @@ func TestInteraction_Start_ProtocolSelection(t *testing.T) {
 			time.Sleep(50 * time.Millisecond)
 
 			i := mockInteraction.(*interaction)
+			if i.program != nil {
+				assert.NotNil(t, i.program, "program should be initialized")
+			}
+
 			i.Stop()
 
 			mockConfig.AssertExpectations(t)

internal/session/lifecycle/lifecycle.go

@@ -2,7 +2,6 @@ package lifecycle
 
 import (
 	"errors"
-	"fmt"
 	"io"
 	"net"
 	"sync"
@@ -10,6 +9,8 @@ import (
 	"tunnel_pls/internal/session/slug"
 	"tunnel_pls/internal/types"
 
+	portUtil "tunnel_pls/internal/port"
+
 	"golang.org/x/crypto/ssh"
 )
 
@@ -23,12 +24,6 @@ type SessionRegistry interface {
 	Remove(key types.SessionKey)
 }
 
-type PortRegistry interface {
-	Unassigned() (uint16, bool)
-	Claim(port uint16) bool
-	SetStatus(port uint16, assigned bool) error
-}
-
 type lifecycle struct {
 	mu              sync.Mutex
 	status          types.SessionStatus
@@ -39,18 +34,18 @@ type lifecycle struct {
 	slug            slug.Slug
 	startedAt       time.Time
 	sessionRegistry SessionRegistry
-	portRegistry    PortRegistry
+	portRegistry    portUtil.Port
 	user            string
 }
 
-func New(conn ssh.Conn, forwarder Forwarder, slugManager slug.Slug, port PortRegistry, sessionRegistry SessionRegistry, user string) Lifecycle {
+func New(conn ssh.Conn, forwarder Forwarder, slugManager slug.Slug, port portUtil.Port, sessionRegistry SessionRegistry, user string) Lifecycle {
 	return &lifecycle{
 		status:          types.SessionStatusINITIALIZING,
 		conn:            conn,
 		channel:         nil,
 		forwarder:       forwarder,
 		slug:            slugManager,
-		startedAt:       time.Time{},
+		startedAt:       time.Now(),
 		sessionRegistry: sessionRegistry,
 		portRegistry:    port,
 		user:            user,
@@ -60,16 +55,16 @@ func New(conn ssh.Conn, forwarder Forwarder, slugManager slug.Slug, port PortReg
 type Lifecycle interface {
 	Connection() ssh.Conn
 	Channel() ssh.Channel
-	PortRegistry() PortRegistry
+	PortRegistry() portUtil.Port
 	User() string
-	SetChannel(channel ssh.Channel) error
+	SetChannel(channel ssh.Channel)
 	SetStatus(status types.SessionStatus)
 	IsActive() bool
 	StartedAt() time.Time
 	Close() error
 }
 
-func (l *lifecycle) PortRegistry() PortRegistry {
+func (l *lifecycle) PortRegistry() portUtil.Port {
 	return l.portRegistry
 }
 
@@ -77,25 +72,11 @@ func (l *lifecycle) User() string {
 	return l.user
 }
 
-func (l *lifecycle) SetChannel(channel ssh.Channel) error {
+func (l *lifecycle) SetChannel(channel ssh.Channel) {
-	l.mu.Lock()
-	defer l.mu.Unlock()
-	if l.status == types.SessionStatusCLOSED {
-		return fmt.Errorf("lifecycle is closed")
-	}
-	if channel == nil {
-		return fmt.Errorf("channel cannot be nil")
-	}
-	if l.channel != nil {
-		return fmt.Errorf("channel already set")
-	}
 	l.channel = channel
-	return nil
 }
 
 func (l *lifecycle) Channel() ssh.Channel {
-	l.mu.Lock()
-	defer l.mu.Unlock()
 	return l.channel
 }
 
@@ -106,13 +87,7 @@ func (l *lifecycle) Connection() ssh.Conn {
 func (l *lifecycle) SetStatus(status types.SessionStatus) {
 	l.mu.Lock()
 	defer l.mu.Unlock()
-	if l.status == types.SessionStatusCLOSED {
-		return
-	}
 	l.status = status
-	if status == types.SessionStatusRUNNING && l.startedAt.IsZero() {
-		l.startedAt = time.Now()
-	}
 }
 
 func (l *lifecycle) IsActive() bool {
@@ -123,74 +98,50 @@ func (l *lifecycle) IsActive() bool {
 
 func (l *lifecycle) Close() error {
 	l.mu.Lock()
+	defer l.mu.Unlock()
 	if l.status == types.SessionStatusCLOSED {
-		closeErr := l.closeErr
+		return l.closeErr
-		l.mu.Unlock()
-		return closeErr
 	}
 	l.status = types.SessionStatusCLOSED
 
-	channel := l.channel
-	conn := l.conn
-	l.mu.Unlock()
-
 	var errs []error
-	if channel != nil {
+	tunnelType := l.forwarder.TunnelType()
-		if err := channel.Close(); err != nil && !isClosedError(err) {
+
-			errs = append(errs, err)
+	if l.channel != nil {
-		}
+		if err := l.channel.Close(); err != nil && !isClosedError(err) {
-	}
-	if conn != nil {
-		if err := conn.Close(); err != nil && !isClosedError(err) {
 			errs = append(errs, err)
 		}
 	}
 
-	l.cleanupRegistry()
+	if l.conn != nil {
-	if err := l.cleanupForwarder(); err != nil {
+		if err := l.conn.Close(); err != nil && !isClosedError(err) {
-		errs = append(errs, err)
+			errs = append(errs, err)
+		}
 	}
 
-	closeErr := errors.Join(errs...)
+	clientSlug := l.slug.String()
-
-	l.mu.Lock()
-	l.closeErr = closeErr
-	l.mu.Unlock()
-
-	return closeErr
-}
-
-func (l *lifecycle) cleanupRegistry() {
-	slugStr := l.slug.String()
-	if slugStr == "" {
-		return
-	}
 	key := types.SessionKey{
-		Id:   slugStr,
+		Id:   clientSlug,
-		Type: l.forwarder.TunnelType(),
+		Type: tunnelType,
 	}
 	l.sessionRegistry.Remove(key)
-}
 
-func (l *lifecycle) cleanupForwarder() error {
+	if tunnelType == types.TunnelTypeTCP {
-	if l.forwarder.TunnelType() != types.TunnelTypeTCP {
+		errs = append(errs, l.PortRegistry().SetStatus(l.forwarder.ForwardedPort(), false))
-		return nil
+		errs = append(errs, l.forwarder.Close())
 	}
-	var errs []error
+
-	errs = append(errs, l.portRegistry.SetStatus(l.forwarder.ForwardedPort(), false))
+	l.closeErr = errors.Join(errs...)
-	errs = append(errs, l.forwarder.Close())
+	return l.closeErr
-	return errors.Join(errs...)
 }
 
 func isClosedError(err error) bool {
 	if err == nil {
 		return false
 	}
-	return errors.Is(err, io.EOF) || errors.Is(err, net.ErrClosed)
+	return errors.Is(err, io.EOF) || errors.Is(err, net.ErrClosed) || err.Error() == "EOF"
 }
 
 func (l *lifecycle) StartedAt() time.Time {
-	l.mu.Lock()
-	defer l.mu.Unlock()
 	return l.startedAt
 }

internal/session/lifecycle/lifecycle_test.go

@@ -5,7 +5,6 @@ import (
 	"errors"
 	"io"
 	"net"
-	"sync"
 	"testing"
 	"tunnel_pls/internal/types"
 
@@ -178,14 +177,8 @@ func TestLifecycle_SetChannel(t *testing.T) {
 
 	mockSSHChannel := &MockSSHChannel{}
 
-	err := mockLifecycle.SetChannel(mockSSHChannel)
+	mockLifecycle.SetChannel(mockSSHChannel)
-	assert.NoError(t, err)
-	assert.Equal(t, mockSSHChannel, mockLifecycle.Channel())
 
-	anotherChannel := &MockSSHChannel{}
-	err = mockLifecycle.SetChannel(anotherChannel)
-	assert.Error(t, err)
-	assert.Contains(t, err.Error(), "channel already set")
 	assert.Equal(t, mockSSHChannel, mockLifecycle.Channel())
 }
 
@@ -283,15 +276,14 @@ func TestLifecycle_Close(t *testing.T) {
 			mockLifecycle := New(mockSSHConn, mockForwarder, mockSlug, mockPort, mockSessionRegistry, "mas-fuad")
 
 			mockLifecycle.SetStatus(types.SessionStatusRUNNING)
-			err := mockLifecycle.SetChannel(mockSSHChannel)
+			mockLifecycle.SetChannel(mockSSHChannel)
-			assert.NoError(t, err)
 
 			if tt.alreadyClosed {
-				err = mockLifecycle.Close()
+				err := mockLifecycle.Close()
 				assert.NoError(t, err)
 			}
 
-			err = mockLifecycle.Close()
+			err := mockLifecycle.Close()
 
 			if tt.expectErr {
 				assert.Error(t, err)
@@ -309,116 +301,3 @@ func TestLifecycle_Close(t *testing.T) {
 		})
 	}
 }
-
-func TestLifecycle_ConcurrentClose(t *testing.T) {
-	mockSSHConn := &MockSSHConn{}
-	mockSSHConn.On("Close").Return(nil)
-
-	mockForwarder := &MockForwarder{}
-	mockForwarder.On("TunnelType").Return(types.TunnelTypeHTTP)
-
-	mockSlug := &MockSlug{}
-	mockSlug.On("String").Return("test-slug")
-
-	mockPort := &MockPort{}
-
-	mockSessionRegistry := &MockSessionRegistry{}
-	mockSessionRegistry.On("Remove", mock.Anything).Return()
-
-	mockSSHChannel := &MockSSHChannel{}
-	mockSSHChannel.On("Close").Return(nil)
-
-	mockLifecycle := New(mockSSHConn, mockForwarder, mockSlug, mockPort, mockSessionRegistry, "mas-fuad")
-	mockLifecycle.SetStatus(types.SessionStatusRUNNING)
-	err := mockLifecycle.SetChannel(mockSSHChannel)
-	assert.NoError(t, err)
-
-	const numGoroutines = 10
-	var wg sync.WaitGroup
-	errChan := make(chan error, numGoroutines)
-
-	for i := 0; i < numGoroutines; i++ {
-		wg.Add(1)
-		go func() {
-			defer wg.Done()
-			err := mockLifecycle.Close()
-			errChan <- err
-		}()
-	}
-
-	wg.Wait()
-	close(errChan)
-
-	for err := range errChan {
-		assert.NoError(t, err)
-	}
-
-	assert.False(t, mockLifecycle.IsActive())
-}
-
-func TestLifecycle_SetChannel_AfterClose(t *testing.T) {
-	mockSSHConn := new(MockSSHConn)
-	mockSSHConn.On("Close").Return(nil)
-	mockForwarder := &MockForwarder{}
-	mockForwarder.On("TunnelType").Return(types.TunnelTypeHTTP)
-	mockSlug := &MockSlug{}
-	mockSlug.On("String").Return("test-slug")
-	mockPort := &MockPort{}
-	mockSessionRegistry := &MockSessionRegistry{}
-	mockSessionRegistry.On("Remove", mock.Anything).Return()
-	mockSSHChannel := &MockSSHChannel{}
-	mockSSHChannel.On("Close").Return(nil)
-
-	mockLifecycle := New(mockSSHConn, mockForwarder, mockSlug, mockPort, mockSessionRegistry, "mas-fuad")
-	mockLifecycle.SetStatus(types.SessionStatusRUNNING)
-	err := mockLifecycle.SetChannel(mockSSHChannel)
-	assert.NoError(t, err)
-
-	err = mockLifecycle.Close()
-	assert.NoError(t, err)
-
-	anotherChannel := &MockSSHChannel{}
-	err = mockLifecycle.SetChannel(anotherChannel)
-	assert.Error(t, err)
-	assert.Contains(t, err.Error(), "lifecycle is closed")
-}
-
-func TestLifecycle_SetChannel_Nil(t *testing.T) {
-	mockSSHConn := new(MockSSHConn)
-	mockForwarder := &MockForwarder{}
-	mockSlug := &MockSlug{}
-	mockPort := &MockPort{}
-	mockSessionRegistry := &MockSessionRegistry{}
-
-	mockLifecycle := New(mockSSHConn, mockForwarder, mockSlug, mockPort, mockSessionRegistry, "mas-fuad")
-
-	err := mockLifecycle.SetChannel(nil)
-	assert.Error(t, err)
-	assert.Contains(t, err.Error(), "channel cannot be nil")
-}
-
-func TestLifecycle_SetStatus_AfterClose(t *testing.T) {
-	mockSSHConn := new(MockSSHConn)
-	mockSSHConn.On("Close").Return(nil)
-	mockForwarder := &MockForwarder{}
-	mockForwarder.On("TunnelType").Return(types.TunnelTypeHTTP)
-	mockSlug := &MockSlug{}
-	mockSlug.On("String").Return("test-slug")
-	mockPort := &MockPort{}
-	mockSessionRegistry := &MockSessionRegistry{}
-	mockSessionRegistry.On("Remove", mock.Anything).Return()
-	mockSSHChannel := &MockSSHChannel{}
-	mockSSHChannel.On("Close").Return(nil)
-
-	mockLifecycle := New(mockSSHConn, mockForwarder, mockSlug, mockPort, mockSessionRegistry, "mas-fuad")
-	mockLifecycle.SetStatus(types.SessionStatusRUNNING)
-	err := mockLifecycle.SetChannel(mockSSHChannel)
-	assert.NoError(t, err)
-
-	err = mockLifecycle.Close()
-	assert.NoError(t, err)
-	assert.False(t, mockLifecycle.IsActive())
-
-	mockLifecycle.SetStatus(types.SessionStatusRUNNING)
-	assert.False(t, mockLifecycle.IsActive(), "SetStatus should be ignored after Close")
-}

internal/session/session.go

@@ -164,9 +164,7 @@ func (s *session) setupInteractiveMode(channel ssh.NewChannel) error {
 		}
 	}()
 
-	if err = s.lifecycle.SetChannel(ch); err != nil {
+	s.lifecycle.SetChannel(ch)
-		return err
-	}
 	s.interaction.SetChannel(ch)
 	s.interaction.SetMode(types.InteractiveModeINTERACTIVE)
 

internal/transport/http_test.go

@@ -55,7 +55,8 @@ func TestHTTPServer_Serve(t *testing.T) {
 
 	go func() {
 		time.Sleep(100 * time.Millisecond)
-		_ = listener.Close()
+		err = listener.Close()
+		assert.NoError(t, err)
 	}()
 
 	err = srv.Serve(listener)

internal/transport/https_test.go

@@ -63,7 +63,8 @@ func TestHTTPSServer_Serve(t *testing.T) {
 
 	go func() {
 		time.Sleep(100 * time.Millisecond)
-		_ = listener.Close()
+		err = listener.Close()
+		assert.NoError(t, err)
 	}()
 
 	err = srv.Serve(listener)

internal/transport/tcp_test.go

@@ -45,7 +45,8 @@ func TestTCPServer_Serve(t *testing.T) {
 
 	go func() {
 		time.Sleep(100 * time.Millisecond)
-		_ = listener.Close()
+		err = listener.Close()
+		assert.NoError(t, err)
 	}()
 
 	err = srv.Serve(listener)

renovate.json

@@ -2,6 +2,8 @@
   "extends": [
     "config:recommended"
   ],
+  "prConcurrentLimit": 1,
+  "prHourlyLimit": 1,
   "packageRules": [
     {
       "matchUpdateTypes": [
@@ -10,9 +12,10 @@
         "pin",
         "digest"
       ],
+      "groupName": "all-dependencies",
       "automerge": true,
-      "baseBranchPatterns": [
+      "matchPackageNames": [
-        "staging"
+        "*"
       ]
     }
   ]