Adding upstream version 2.6.3.

Signed-off-by: Daniel Baumann <daniel@debian.org>

.github/workflows/golangci-lint.yml

@@ -0,0 +1,27 @@
+name: golangci-lint
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - master
+      - main
+  pull_request:
+jobs:
+  golangci:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.x
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@2226d7cb06a077cd73e56eedd38eecad18e5d837  #v6.5.0
+        env:
+          GOTOOLCHAIN: local
+        with:
+          version: v1.64

.github/workflows/main.yml

@@ -0,0 +1,32 @@
+on: [push]
+name: test and build
+jobs:
+  editorconfig_lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: eclint-action
+        uses: greut/eclint-action@v0
+  go-test:
+    runs-on: ubuntu-latest
+    name: test
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.22.x
+      - name: go test
+        run: go test -v ./...
+  core-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+
+      - name: core test
+        uses: ./.github/actions/core-test

.github/workflows/semgrep.yml

@@ -0,0 +1,20 @@
+# Name of this GitHub Actions workflow.
+name: Semgrep
+
+on:
+  pull_request: {}
+
+jobs:
+  semgrep:
+    name: Scan
+    runs-on: ubuntu-latest
+    container:
+      image: returntocorp/semgrep
+    # Skip any PR created by dependabot to avoid permission issues
+    if: (github.actor != 'dependabot[bot]')
+    steps:
+      - uses: actions/checkout@v4
+
+      - run: semgrep ci
+        env:
+          SEMGREP_RULES: p/default p/golang p/secrets