Skip to content

Comments

build: pin tool installs in make tools#16546

Merged
pelikhan merged 1 commit intogithub:mainfrom
davidahmann:codex/pin-tools-versions
Feb 18, 2026
Merged

build: pin tool installs in make tools#16546
pelikhan merged 1 commit intogithub:mainfrom
davidahmann:codex/pin-tools-versions

Conversation

@davidahmann
Copy link
Contributor

Problem

make agent-finish can fail during make tools because the current go install pipeline resolves tool builds through the repo module graph, causing actionlint compilation to break under local dependency/toolchain combinations.

Why now

This currently blocks local completion of required pre-commit validation.

What changed

  • Replaced the dynamic grep ... | xargs go install pipeline in Makefile tools target.
  • Added explicit pinned installs for each build tool:
    • actionlint@v1.7.11
    • gosec@v2.23.0
    • gopls@v0.21.1
    • govulncheck@v1.1.4

Validation

  • make tools

@pelikhan pelikhan merged commit 3dcd05c into github:main Feb 18, 2026
41 of 43 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants