serverless-plugin-go 0.1.1 → 0.1.3

package/.cz.toml

@@ -1,7 +1,7 @@
 [tool]
 [tool.commitizen]
 name = "cz_customize"
-version = "0.1.1"
+version = "0.1.3"
 tag_format = "v$version"
 bump_message = "bump: release $current_version → $new_version [skip-ci]"
 update_changelog_on_bump = true

package/CHANGELOG.md

@@ -1,3 +1,21 @@
+## v0.1.3 (2026-11-10)
+
+
+- fix: per-function GOARCH and deterministic zip artifacts (#12)
+- - Build env is now computed per function with an explicit GOARCH
+  (arm64/amd64). Previously config.env was mutated, so once an arm64
+  function compiled, every following x86_64 function was built as ARM,
+  and x86_64 builds on Apple Silicon used the host arch.
+- Zip entries use a fixed mtime so identical binaries yield
+  byte-identical artifacts (stable hashes across builds).
+- Bump mocha 10 -> 12 (mocha 10 fails to start on Node 26).
+
+## v0.1.2 (2026-03-31)
+
+
+- chore: add support for provided.al2023 runtime (#11)
+- Co-authored-by: Ariel Santos <ariel.santos@draftea.com>
+
 ## v0.1.1 (2026-01-21)
 
 

package/README.md

@@ -31,7 +31,7 @@
     ```yaml
     functions:
       example:
-        runtime: 'provided.al2'
+        runtime: 'provided.al2023' # or provided.al2
         handler: 'functions/example/main.go' # or just functions/example
     ```
 
@@ -87,7 +87,7 @@ Change architecture field from `provider` or function configuration to `arm64`:
 ```yaml
 provider:
   architecture: 'arm64'
-  runtime: 'provided.al2'
+  runtime: 'provided.al2023' # or provided.al2
 
 # If you define architecture at function level, this will have preference instead the provider configuration
 

package/index.js

@@ -8,10 +8,13 @@ import AdmZip from "adm-zip";
 import { readFileSync } from "fs";
 
 // SupportedRuntimes Runtimes that are allowed to run Golang lambdas.
-const supportedRuntimes = ["provided.al2"];
+const supportedRuntimes = ["provided.al2", "provided.al2023"];
 
 const logPrefix = "GoPlugin";
 
+// DOS zip timestamps can't go before 1980.
+const zipEpoch = new Date(1980, 0, 1);
+
 export default class Go {
   constructor(serverless, options) {
     this.readFileSync = readFileSync;
@@ -149,9 +152,12 @@ export default class Go {
       return;
     }
 
-    if (arch === "arm64") {
-      config.env["GOARCH"] = "arm64";
-    }
+    // Per-function env: never mutate shared config, and always set GOARCH so the
+    // host arch (e.g. Apple Silicon) never leaks into an x86_64 Lambda.
+    const env = {
+      ...config.env,
+      GOARCH: arch === "arm64" ? "arm64" : "amd64",
+    };
 
     const absHandler = path.resolve(config.baseDir);
     const absBin = path.resolve(config.binDir);
@@ -172,7 +178,7 @@ export default class Go {
       compileBinPath = path.relative(cwd, compileBinPath);
     }
 
-    this.logDebug(`[${name}] env: ${JSON.stringify(config.env)}`);
+    this.logDebug(`[${name}] env: ${JSON.stringify(env)}`);
     this.logDebug(`[${name}] cwd: ${cwd}`);
     this.logDebug(`[${name}] arch: ${arch}`);
 
@@ -181,7 +187,7 @@ export default class Go {
       compileBinPath,
       handler,
       cwd,
-      config.env,
+      env,
       arch,
     );
 
@@ -261,6 +267,8 @@ export default class Go {
    */
   packageBootstrap(name, binPath) {
     this.zip.addFile("bootstrap", this.readFileSync(binPath), "", 0o755);
+    // Fixed mtime so identical binaries produce byte-identical zips (stable hashes).
+    this.zip.getEntry("bootstrap").header.time = zipEpoch;
 
     const zipPath = binPath + ".zip";
     this.zip.writeZip(zipPath);

package/index.test.js

@@ -2,6 +2,11 @@ import sinon from "sinon";
 import chai from "chai";
 import sinonChai from "sinon-chai";
 
+import AdmZip from "adm-zip";
+import fs from "fs";
+import os from "os";
+import path from "path";
+
 import Go from "./index.js";
 import ServerlessMock from "./mocks/serverless.mock.js";
 
@@ -27,6 +32,7 @@ describe("Go Plugin", () => {
     admZipStub = {
       addFile: sinon.stub(),
       writeZip: sinon.stub(),
+      getEntry: sinon.stub().returns({ header: {} }),
     };
   });
 
@@ -57,6 +63,16 @@ describe("Go Plugin", () => {
         runtime: "go1.x",
         handler: "functions/func4",
       },
+      testFunc5: {
+        name: "testFunc5",
+        runtime: "provided.al2023",
+        handler: "functions/func5/main.go",
+      },
+      testFunc6: {
+        name: "testFunc6",
+        runtime: "provided.al2023",
+        handler: "functions/func6",
+      },
     });
 
     const plugin = new Go(config);
@@ -76,7 +92,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc2 functions/func2/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -88,7 +107,40 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc3 functions/func3`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
+      },
+    );
+
+    expect(config.service.functions.testFunc5.handler).to.equal(
+      `.bin/testFunc5`,
+    );
+
+    expect(execStub).to.have.been.calledWith(
+      `go build -ldflags="-s -w" -o .bin/testFunc5 functions/func5/main.go`,
+      {
+        cwd: ".",
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
+      },
+    );
+
+    expect(config.service.functions.testFunc6.handler).to.equal(
+      `.bin/testFunc6`,
+    );
+
+    expect(execStub).to.have.been.calledWith(
+      `go build -ldflags="-s -w" -o .bin/testFunc6 functions/func6`,
+      {
+        cwd: ".",
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -121,7 +173,10 @@ describe("Go Plugin", () => {
       `go build -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -188,7 +243,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../.bin/testFunc1 functions/func1/main.go`,
       {
         cwd: "gopath",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -243,6 +301,30 @@ describe("Go Plugin", () => {
     expect(execStub).to.have.been.calledOnce;
   });
 
+  it("Compiles Go function with global runtime provided.al2023 defined", async () => {
+    config.service
+      .setProvider({
+        runtime: "provided.al2023",
+      })
+      .setFunctions({
+        testFunc1: {
+          name: "testFunc1",
+          handler: "functions/func1/main.go",
+        },
+      });
+
+    const plugin = new Go(config);
+    plugin.exec = execStub;
+    plugin.readFileSync = readFileSyncStub;
+    plugin.zip = admZipStub;
+
+    // when
+    await plugin.hooks["before:package:createDeploymentArtifacts"]();
+
+    // then
+    expect(execStub).to.have.been.calledOnce;
+  });
+
   it("Compiles single Go function", async () => {
     config.service.setFunctions({
       testFunc1: {
@@ -265,7 +347,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -307,7 +392,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../../.bin/testFunc1 .`,
       {
         cwd: "functions/func1",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -319,7 +407,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../../.bin/testFunc2 main.go`,
       {
         cwd: "functions/func2",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -445,14 +536,20 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
     expect(execStub).to.have.been.calledWith(
       `go build -ldflags="-s -w" -o .bin/testFunc2 functions/func2/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -499,7 +596,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -546,11 +646,62 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
     // Total calls should be 3: 2 beforeBuild commands + 1 compilation command
     expect(execStub.callCount).to.equal(3);
   });
+  it("Does not leak arm64 GOARCH into x86_64 functions", async () => {
+    config.service.setFunctions({
+      armFunc: {
+        name: "armFunc",
+        runtime: "provided.al2023",
+        architecture: "arm64",
+        handler: "functions/arm",
+      },
+      x86Func: {
+        name: "x86Func",
+        runtime: "provided.al2023",
+        handler: "functions/x86",
+      },
+    });
+
+    const plugin = new Go(config);
+    plugin.exec = execStub;
+    plugin.readFileSync = readFileSyncStub;
+    plugin.zip = admZipStub;
+
+    await plugin.compileFunctions();
+
+    const envOf = (bin) =>
+      execStub.getCalls().find((c) => c.args[0].includes(bin)).args[1].env;
+    expect(envOf(".bin/armFunc").GOARCH).to.equal("arm64");
+    expect(envOf(".bin/x86Func").GOARCH).to.equal("amd64");
+    expect(plugin.config.env.GOARCH).to.equal(undefined);
+  });
+
+  it("Produces byte-identical zips for identical binaries", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "sp-go-"));
+    const bin = path.join(dir, "fn");
+    fs.writeFileSync(bin, "fake binary content");
+    config.service.setFunctions({ fn: { name: "fn", handler: "fn" } });
+
+    const plugin = new Go(config);
+    plugin.zip = new AdmZip();
+
+    plugin.packageBootstrap("fn", bin);
+    const first = fs.readFileSync(bin + ".zip");
+    await new Promise((r) => setTimeout(r, 2100)); // DOS mtime has 2s resolution
+    plugin.zip = new AdmZip();
+    plugin.packageBootstrap("fn", bin);
+    const second = fs.readFileSync(bin + ".zip");
+
+    fs.rmSync(dir, { recursive: true });
+    expect(first.equals(second)).to.equal(true);
+  }).timeout(5000);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "serverless-plugin-go",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "description": "Serverless Framework plugin that compiles Go functions on the fly",
   "main": "index.js",
@@ -54,7 +54,7 @@
     "eslint-plugin-import": "^2.29.0",
     "eslint-plugin-prettier": "^5.0.1",
     "fs": "^0.0.1-security",
-    "mocha": "^10.2.0",
+    "mocha": "^12.0.3",
     "prettier": "^3.0.3",
     "sinon": "^17.0.0",
     "sinon-chai": "^3.7.0"