debt: Update dependencies to latest stable versions.

.github/workflows/ci.yaml

@@ -45,7 +45,7 @@ jobs:
 
       # Ref: https://github.com/actions/checkout
       - name: Checkout Source
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -75,7 +75,7 @@ jobs:
 
       # Ref: https://github.com/SonarSource/sonarqube-scan-action
       - name: Scan with SonarQube
-        uses: sonarsource/sonarqube-scan-action@v7
+        uses: sonarsource/sonarqube-scan-action@v8
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           GITHUB_USER: ${{ github.actor }}

.github/workflows/codeql-analysis.yaml

@@ -61,7 +61,7 @@ jobs:
 
       # Ref: https://github.com/actions/checkout
       - name: Checkout Source
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/release.yaml

@@ -38,7 +38,7 @@ jobs:
 
       # Ref: https://github.com/actions/checkout
       - name: "Checkout Source"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -54,7 +54,7 @@ jobs:
 
       # Ref: https://github.com/sigstore/cosign-installer
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v4.0.0 # v4.0.0
+        uses: sigstore/cosign-installer@v4.1.2
 
       # Ref: https://github.com/anchore/sbom-action
       - name: Generate SBOM via Syft
@@ -65,7 +65,7 @@ jobs:
 
       # Ref: https://github.com/goreleaser/goreleaser-action
       - name: "Release"
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           version: latest
           args: release --clean ${{ env.flags }}

CHANGELOG.md

@@ -17,6 +17,19 @@ Date format: `YYYY-MM-DD`
 ### Fixed
 ### Security
 
+---
+## [0.12.2] - 2026-07-12
+
+### Added
+### Changed
+### Deprecated
+- **debt:** Deprecated the use of `golang.org/x/exp/constraints`.
+
+### Removed
+### Fixed
+### Security
+- **debt:** Upgraded dependencies to their latest stable versions.
+
 ---
 ## [0.12.1] - 2026-01-16
 
@@ -203,7 +216,8 @@ Date format: `YYYY-MM-DD`
 ### Fixed
 ### Security
 
-[Unreleased]: https://github.com/sixafter/graph/compare/v0.12.1...HEAD
+[Unreleased]: https://github.com/sixafter/graph/compare/v0.12.2...HEAD
+[0.12.2]: https://github.com/sixafter/graph/compare/v0.12.1...v0.12.2
 [0.12.1]: https://github.com/sixafter/graph/compare/v0.12.0...v0.12.1
 [0.12.0]: https://github.com/sixafter/graph/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/sixafter/graph/compare/v0.10.0...v0.11.0

README.md

@@ -57,10 +57,10 @@ This Go-based graph library is designed for versatility, performance, and extens
 To verify the integrity of the release tarball, you can use Cosign to check the signature and checksums. Follow these steps:
 
 ```sh
-# Fetch the latest release tag from GitHub API (e.g., "v0.12.0")
+# Fetch the latest release tag from GitHub API (e.g., "v0.12.2")
 TAG=$(curl -s https://api.github.com/repos/sixafter/graph/releases/latest | jq -r .tag_name)
 
-# Remove leading "v" for filenames (e.g., "v0.12.0" -> "0.12.0")
+# Remove leading "v" for filenames (e.g., "v0.12.2" -> "0.12.2")
 VERSION=${TAG#v}
 
 # ---------------------------------------------------------------------

go.mod

@@ -5,12 +5,9 @@
 
 module github.com/sixafter/graph
 
-go 1.25
+go 1.26
 
-require (
-	github.com/stretchr/testify v1.11.1
-	golang.org/x/exp v0.0.0-20260112195511-716be5621a96
-)
+require github.com/stretchr/testify v1.11.1
 
 require (
 	github.com/davecgh/go-spew v1.1.1 // indirect

go.sum

@@ -4,8 +4,6 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
-golang.org/x/exp v0.0.0-20260112195511-716be5621a96 h1:Z/6YuSHTLOHfNFdb8zVZomZr7cqNgTJvA8+Qz75D8gU=
-golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

graph.go

@@ -8,14 +8,13 @@
 package graph
 
 import (
+	"cmp"
 	"context"
-
-	"golang.org/x/exp/constraints"
 )
 
 type Ordered interface {
 	comparable // Ensures equality (`==`, `!=`) is supported.
-	constraints.Ordered
+	cmp.Ordered
 }
 
 // Interface represents a generic graph metadata structure consisting of vertices of

vendor/modules.txt

@@ -8,9 +8,6 @@ github.com/pmezard/go-difflib/difflib
 ## explicit; go 1.17
 github.com/stretchr/testify/assert
 github.com/stretchr/testify/assert/yaml
-# golang.org/x/exp v0.0.0-20260112195511-716be5621a96
-## explicit; go 1.24.0
-golang.org/x/exp/constraints
 # gopkg.in/yaml.v3 v3.0.1
 ## explicit
 gopkg.in/yaml.v3