Skip to content

build(deps): bump nicerobot/tools.build from 2 to 2.6.1 in the github-actions group - #36

Merged
nicerobot merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-be542c593a
Aug 3, 2026
Merged

build(deps): bump nicerobot/tools.build from 2 to 2.6.1 in the github-actions group#36
nicerobot merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-be542c593a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update: nicerobot/tools.build.

Updates nicerobot/tools.build from 2 to 2.6.1

Release notes

Sourced from nicerobot/tools.build's releases.

v2.6.1

2.6.1 (2026-07-19)

Bug Fixes

  • ci: typescript gate excludes the Hugo public/ output tree (db73157)

v2.6.0

2.6.0 (2026-07-17)

Features

  • release: move the floating vMAJOR git tag automatically; gates track :vMAJOR images (#7) (c115b7b)

v2.5.0

2.5.0 (2026-07-17)

Features

  • ci: serve gates from the published pinned images; exempt CHANGELOG.md from the docs gate (#5) (e90e572)

v2.4.0

2.4.0 (2026-07-17)

Features

  • ci: node, java, and cpp gate images; GATE=1 in every gate; multi-arch developer gates (#4) (03ed7bb)
  • go: scope go vet via VET_PKGS to exclude committed generated trees (de66508)
  • go: scope staticcheck via STATICCHECK_PKGS to exclude committed generated trees (mirrors VET_PKGS) (4f9bd6f)

Bug Fixes

  • go-tooling: pin yq and make the standards ratchet fail closed (f50fe7b)
  • typescript: exclude committed build artifacts and generated code from the biome gate (619ed64)
Changelog

Sourced from nicerobot/tools.build's changelog.

2.11.0 (2026-08-02)

Features

  • stickler v0.10.0 + yze v0.31.0 — binaries gate, fuzz pair, enumdiscrim, errtext (3efa976)

2.10.0 (2026-08-02)

Features

  • yze v0.30.0 + stickler v0.9.0 — the CLI family at every depth (6907a98)

2.9.0 (2026-08-01)

Bug Fixes

  • go-tooling: make the toolchain CVE gate honest and green (a22b458)
  • vulncheck: fail when govulncheck itself fails to scan (4e0ec54)

2.8.0 (2026-08-01)

Bug Fixes

  • release: force the tag refspec so a manually cut tag can move its major alias (89e9aaf)
  • release: publish base images before the images that build FROM them (4f6e7fa)

2.7.0 (2026-08-01)

Features

  • tooling: pin stickler v0.8.6 — the analyzers: block reaches yze (28eaec9)
  • tooling: pin yze v0.29.1 — errtested and invariant see external tests (4af38b0)
  • tooling: pin yze v0.29.0, carrying cliopinion (2584321)
  • go-gate: land exhaustive, measured and soft (6d67bf1)
  • tooling: adopt the suite that can see test files (bad82be)
  • go-gate: add deadcode + tidy + exhaustive gates, shuffled/repeated tests (5f9eb47)
  • gate: cross-compile libraries too, so one cannot pass while consumers cannot build it (db8ba08)
  • bundle: publish the tag's artifacts instead of minting a version nothing builds (43872ca)
  • bundle: hugo-module bundle carrying a github-actions Dependabot config (acb8557)
  • bundle: managed Dependabot version-update config per ecosystem (43f5828)

Bug Fixes

  • go-gate: scope deadcode to this repo's own reachable code (adfd48c)
  • release: an empty goreleaser config means nothing to publish (079a6f9)

... (truncated)

Commits
  • 0263d2e chore(main): release 2.6.1 (#9)
  • 969e96a specs: internal content moves to _projects/specs/tools.build/
  • db73157 fix(ci): typescript gate excludes the Hugo public/ output tree
  • 3ddbccf typescript gate: exclude the Hugo public/ output tree
  • a73a0bc chore(main): release 2.6.0 (#8)
  • c115b7b feat(release): move the floating vMAJOR git tag automatically; gates track :v...
  • 3a814c7 chore(main): release 2.5.0 (#6)
  • e90e572 feat(ci): serve gates from the published pinned images; exempt CHANGELOG.md f...
  • bc4c3a0 chore(main): release 2.4.0 (#3)
  • 03ed7bb feat(ci): node, java, and cpp gate images; GATE=1 in every gate; multi-arch d...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 1 update: [nicerobot/tools.build](https://github.com/nicerobot/tools.build).


Updates `nicerobot/tools.build` from 2 to 2.6.1
- [Release notes](https://github.com/nicerobot/tools.build/releases)
- [Changelog](https://github.com/nicerobot/tools.build/blob/main/CHANGELOG.md)
- [Commits](nicerobot/tools.build@v2...v2.6.1)

---
updated-dependencies:
- dependency-name: nicerobot/tools.build
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@nicerobot
nicerobot merged commit 4a7c9f7 into main Aug 3, 2026
5 checks passed
@nicerobot
nicerobot deleted the dependabot/github_actions/github-actions-be542c593a branch August 3, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

1 participant