From d7a646323caabc276e62824651e8a7591894c5a1 Mon Sep 17 00:00:00 2001 From: Sam Calder-Mason Date: Fri, 12 Jun 2026 12:03:17 +1000 Subject: [PATCH 1/2] fix(server): harden HTTP server timeouts --- pkg/checkpointz/checkpointz.go | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/pkg/checkpointz/checkpointz.go b/pkg/checkpointz/checkpointz.go index 375a47ec..cddc7754 100644 --- a/pkg/checkpointz/checkpointz.go +++ b/pkg/checkpointz/checkpointz.go @@ -79,8 +79,12 @@ func (s *Server) Start(ctx context.Context) error { server := &http.Server{ Addr: s.Cfg.GlobalConfig.ListenAddr, - ReadHeaderTimeout: 3 * time.Minute, - WriteTimeout: 15 * time.Minute, + ReadHeaderTimeout: 30 * time.Second, + ReadTimeout: 60 * time.Second, + // Sized for beacon state downloads, which can be hundreds of MB + // and take minutes on slow links. + WriteTimeout: 5 * time.Minute, + IdleTimeout: 120 * time.Second, } // Gzip any content longer than 1024 bytes if requested via the Accept-Encoding header From b3c9133beb1ec466b008f17fe73942b420c36dfc Mon Sep 17 00:00:00 2001 From: Sam Calder-Mason Date: Fri, 12 Jun 2026 12:53:43 +1000 Subject: [PATCH 2/2] ci(lint): only flag issues introduced by the PR --- .github/workflows/golangci-lint.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml index ce7054a8..85af0445 100644 --- a/.github/workflows/golangci-lint.yaml +++ b/.github/workflows/golangci-lint.yaml @@ -9,7 +9,7 @@ on: permissions: contents: read # Optional: allow read access to pull request. Use with `only-new-issues` option. - # pull-requests: read + pull-requests: read jobs: golangci: name: lint @@ -32,7 +32,7 @@ jobs: # args: --issues-exit-code=0 # Optional: show only new issues if it's a pull request. The default value is `false`. - # only-new-issues: true + only-new-issues: true # Optional: if set to true then the all caching functionality will be complete disabled, # takes precedence over all other caching options.