serverless-plugin-go 0.1.2 → 0.1.3

package/.cz.toml

@@ -1,7 +1,7 @@
 [tool]
 [tool.commitizen]
 name = "cz_customize"
-version = "0.1.2"
+version = "0.1.3"
 tag_format = "v$version"
 bump_message = "bump: release $current_version → $new_version [skip-ci]"
 update_changelog_on_bump = true

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## v0.1.3 (2026-11-10)
+
+
+- fix: per-function GOARCH and deterministic zip artifacts (#12)
+- - Build env is now computed per function with an explicit GOARCH
+  (arm64/amd64). Previously config.env was mutated, so once an arm64
+  function compiled, every following x86_64 function was built as ARM,
+  and x86_64 builds on Apple Silicon used the host arch.
+- Zip entries use a fixed mtime so identical binaries yield
+  byte-identical artifacts (stable hashes across builds).
+- Bump mocha 10 -> 12 (mocha 10 fails to start on Node 26).
+
 ## v0.1.2 (2026-03-31)
 
 

package/index.js

@@ -12,6 +12,9 @@ const supportedRuntimes = ["provided.al2", "provided.al2023"];
 
 const logPrefix = "GoPlugin";
 
+// DOS zip timestamps can't go before 1980.
+const zipEpoch = new Date(1980, 0, 1);
+
 export default class Go {
   constructor(serverless, options) {
     this.readFileSync = readFileSync;
@@ -149,9 +152,12 @@ export default class Go {
       return;
     }
 
-    if (arch === "arm64") {
-      config.env["GOARCH"] = "arm64";
-    }
+    // Per-function env: never mutate shared config, and always set GOARCH so the
+    // host arch (e.g. Apple Silicon) never leaks into an x86_64 Lambda.
+    const env = {
+      ...config.env,
+      GOARCH: arch === "arm64" ? "arm64" : "amd64",
+    };
 
     const absHandler = path.resolve(config.baseDir);
     const absBin = path.resolve(config.binDir);
@@ -172,7 +178,7 @@ export default class Go {
       compileBinPath = path.relative(cwd, compileBinPath);
     }
 
-    this.logDebug(`[${name}] env: ${JSON.stringify(config.env)}`);
+    this.logDebug(`[${name}] env: ${JSON.stringify(env)}`);
     this.logDebug(`[${name}] cwd: ${cwd}`);
     this.logDebug(`[${name}] arch: ${arch}`);
 
@@ -181,7 +187,7 @@ export default class Go {
       compileBinPath,
       handler,
       cwd,
-      config.env,
+      env,
       arch,
     );
 
@@ -261,6 +267,8 @@ export default class Go {
    */
   packageBootstrap(name, binPath) {
     this.zip.addFile("bootstrap", this.readFileSync(binPath), "", 0o755);
+    // Fixed mtime so identical binaries produce byte-identical zips (stable hashes).
+    this.zip.getEntry("bootstrap").header.time = zipEpoch;
 
     const zipPath = binPath + ".zip";
     this.zip.writeZip(zipPath);

package/index.test.js

@@ -2,6 +2,11 @@ import sinon from "sinon";
 import chai from "chai";
 import sinonChai from "sinon-chai";
 
+import AdmZip from "adm-zip";
+import fs from "fs";
+import os from "os";
+import path from "path";
+
 import Go from "./index.js";
 import ServerlessMock from "./mocks/serverless.mock.js";
 
@@ -27,6 +32,7 @@ describe("Go Plugin", () => {
     admZipStub = {
       addFile: sinon.stub(),
       writeZip: sinon.stub(),
+      getEntry: sinon.stub().returns({ header: {} }),
     };
   });
 
@@ -86,7 +92,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc2 functions/func2/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -98,7 +107,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc3 functions/func3`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -110,7 +122,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc5 functions/func5/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -122,7 +137,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc6 functions/func6`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -155,7 +173,10 @@ describe("Go Plugin", () => {
       `go build -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -222,7 +243,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../.bin/testFunc1 functions/func1/main.go`,
       {
         cwd: "gopath",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -323,7 +347,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -365,7 +392,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../../.bin/testFunc1 .`,
       {
         cwd: "functions/func1",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -377,7 +407,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o ../../.bin/testFunc2 main.go`,
       {
         cwd: "functions/func2",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
   });
@@ -503,14 +536,20 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
     expect(execStub).to.have.been.calledWith(
       `go build -ldflags="-s -w" -o .bin/testFunc2 functions/func2/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -557,7 +596,10 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
@@ -604,11 +646,62 @@ describe("Go Plugin", () => {
       `go build -ldflags="-s -w" -o .bin/testFunc1 functions/func1/main.go`,
       {
         cwd: ".",
-        env: { ...process.env, ...{ CGO_ENABLED: "0", GOOS: "linux" } },
+        env: {
+          ...process.env,
+          ...{ CGO_ENABLED: "0", GOOS: "linux", GOARCH: "amd64" },
+        },
       },
     );
 
     // Total calls should be 3: 2 beforeBuild commands + 1 compilation command
     expect(execStub.callCount).to.equal(3);
   });
+  it("Does not leak arm64 GOARCH into x86_64 functions", async () => {
+    config.service.setFunctions({
+      armFunc: {
+        name: "armFunc",
+        runtime: "provided.al2023",
+        architecture: "arm64",
+        handler: "functions/arm",
+      },
+      x86Func: {
+        name: "x86Func",
+        runtime: "provided.al2023",
+        handler: "functions/x86",
+      },
+    });
+
+    const plugin = new Go(config);
+    plugin.exec = execStub;
+    plugin.readFileSync = readFileSyncStub;
+    plugin.zip = admZipStub;
+
+    await plugin.compileFunctions();
+
+    const envOf = (bin) =>
+      execStub.getCalls().find((c) => c.args[0].includes(bin)).args[1].env;
+    expect(envOf(".bin/armFunc").GOARCH).to.equal("arm64");
+    expect(envOf(".bin/x86Func").GOARCH).to.equal("amd64");
+    expect(plugin.config.env.GOARCH).to.equal(undefined);
+  });
+
+  it("Produces byte-identical zips for identical binaries", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "sp-go-"));
+    const bin = path.join(dir, "fn");
+    fs.writeFileSync(bin, "fake binary content");
+    config.service.setFunctions({ fn: { name: "fn", handler: "fn" } });
+
+    const plugin = new Go(config);
+    plugin.zip = new AdmZip();
+
+    plugin.packageBootstrap("fn", bin);
+    const first = fs.readFileSync(bin + ".zip");
+    await new Promise((r) => setTimeout(r, 2100)); // DOS mtime has 2s resolution
+    plugin.zip = new AdmZip();
+    plugin.packageBootstrap("fn", bin);
+    const second = fs.readFileSync(bin + ".zip");
+
+    fs.rmSync(dir, { recursive: true });
+    expect(first.equals(second)).to.equal(true);
+  }).timeout(5000);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "serverless-plugin-go",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "description": "Serverless Framework plugin that compiles Go functions on the fly",
   "main": "index.js",
@@ -54,7 +54,7 @@
     "eslint-plugin-import": "^2.29.0",
     "eslint-plugin-prettier": "^5.0.1",
     "fs": "^0.0.1-security",
-    "mocha": "^10.2.0",
+    "mocha": "^12.0.3",
     "prettier": "^3.0.3",
     "sinon": "^17.0.0",
     "sinon-chai": "^3.7.0"