Bump the go group across 1 directory with 2 updates

[dependabot]

Bumps the go group with 2 updates in the /build directory: github.com/cli/go-gh/v2 and github.com/curioswitch/go-build.

Updates github.com/cli/go-gh/v2 from 2.12.0 to 2.12.1

Release notes

Sourced from github.com/cli/go-gh/v2's releases.

v2.12.1

Security

A security vulnerability has been identified in go-gh where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.

For more information, see GHSA-g9f5-x53j-h563

Full Changelog: cli/go-gh@v2.12.0...v2.12.1

Commits

• a08820a Merge commit from fork
• 1ecf6c4 Expand test cases for schem case sensitivity
• 56c6f10 Parse and examine URL, assume scheme if missing
• 055ff21 PR feedback
• 258949b Test refactor, refine errors, remove VSCode fix
• 0f8a22f Enhance OS-specific browser tests, PR feedback
• df956a6 Initial fix for browsing URLs
• See full diff in compare view

Updates github.com/curioswitch/go-build from 0.2.0 to 0.3.0

Release notes

Sourced from github.com/curioswitch/go-build's releases.

v0.3.0

This is a major release that reworks tool invocation to use go tool instead of go run. This allows tool versions to be managed in the codebase, making it easier to update them. The full dependency graph will also have checksums validated for better security.

A get-tools command is added to fetch all tools to go.mod. When updating, it can be run to quickly get setup.

GitHub actions lint now also verifies that actions use pinned versions rather than floating version tags. This check cannot be disabled without disabling the entire lint since we believe it is essential for the security of builds. The easiest way to pin versions in an existing repo is to run GITHUB_TOKEN=$(gh auth token) go tool pinact run to automatically resolve them all without rate limiting.

Finally, the output of golangci-lint is passed to reviewdog to allow formatting them as checks within PRs. This will allow errors to be printed together with the code. In the future, more lints will be passed through reviewdog.

Full Changelog: curioswitch/go-build@v0.2.0...v0.3.0

Commits

• e593998 Add get-tools command (#52)
• 950b990 Check github actions are pinned (#51)
• 8738f8e Execute lints with reviewdog (#50)
• 401432b Migrate to go tool (#49)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions