fix: address linter errors (#286)

* chore: disable deprecated linter

* fix: remove unnecessary copy of loop variable

* fix: audit and address potential integer overflows

.golangci.yml

@@ -12,6 +12,7 @@ linters:
   disable:
     # Deprecated.
     - execinquery
+    - exportloopref
     - gomnd
 
     # Handle formatting separately.

cmd/gdenv/main.go

@@ -166,7 +166,7 @@ func setUpLogger() error {
 // ANSI escape color.
 //
 // NOTE: This function assumes that the width of the level strings is '5'.
-func newStyleWithColor(name string, ansiColor int) lipgloss.Style {
+func newStyleWithColor(name string, ansiColor uint) lipgloss.Style {
 	if name == "" {
 		panic("missing style name")
 	}

internal/client/client.go

@@ -206,10 +206,11 @@ func (c *Client) Exists(ctx context.Context, urlBaseRaw string, urlPartsRaw ...s
 // provided context.
 func (c *Client) Download(ctx context.Context, u *url.URL, w ...io.Writer) error {
 	return c.get(ctx, u, func(r *resty.Response) error {
-		if r.RawResponse.ContentLength > 0 { // No progress to report if '0'.
+		// No progress to report if '0'.
+		if contentLength := r.RawResponse.ContentLength; contentLength > 0 {
 			// Report progress if set on the context.
 			if p, ok := ctx.Value(progressKey{}).(*progress.Progress); ok && p != nil {
-				if err := p.SetTotal(uint64(r.RawResponse.ContentLength)); err != nil {
+				if err := p.SetTotal(uint64(contentLength)); err != nil { //nolint:gosec
 					return err
 				}
 
@@ -239,10 +240,11 @@ func (c *Client) DownloadTo(ctx context.Context, u *url.URL, out string) error {
 	return c.get(ctx, u, func(r *resty.Response) error {
 		var w io.Writer = f
 
-		if r.RawResponse.ContentLength > 0 { // No progress to report if '0'.
+		// No progress to report if '0'.
+		if contentLength := r.RawResponse.ContentLength; contentLength > 0 {
 			// Report progress if set on the context.
 			if p, ok := ctx.Value(progressKey{}).(*progress.Progress); ok && p != nil {
-				if err := p.SetTotal(uint64(r.RawResponse.ContentLength)); err != nil {
+				if err := p.SetTotal(uint64(contentLength)); err != nil { //nolint:gosec
 					return err
 				}
 

internal/osutil/file.go

@@ -3,6 +3,7 @@ package osutil
 import (
 	"context"
 	"errors"
+	"fmt"
 	"io"
 	"io/fs"
 	"os"
@@ -13,6 +14,8 @@ import (
 // Only write to 'out'; create a new file/overwrite an existing.
 const copyFileWriteFlag = os.O_WRONLY | os.O_CREATE | os.O_TRUNC
 
+var ErrValueOutOfRange = errors.New("value out of range")
+
 /* -------------------------------------------------------------------------- */
 /*                             Function: CopyFile                             */
 /* -------------------------------------------------------------------------- */
@@ -101,5 +104,10 @@ func SizeOf(path string) (uint64, error) {
 		return 0, err
 	}
 
-	return uint64(info.Size()), nil
+	size := info.Size()
+	if size < 0 {
+		return 0, fmt.Errorf("%w: size: expected value >= 0: %d", ErrValueOutOfRange, size)
+	}
+
+	return uint64(size), nil
 }

pkg/godot/mirror/mirror.go

@@ -84,8 +84,6 @@ func Select[T artifact.Artifact](
 	selected := make(chan Mirror[T])
 
 	for _, m := range mirrors {
-		m := m // Prevent capture of loop variable.
-
 		eg.Go(func() error {
 			ok, err := checkIfExists(ctx, m, a)
 			if err != nil {