mcc0nnell commented on PR #845:
URL: https://github.com/apache/celix/pull/845#issuecomment-5666327004

   Addressed the remaining lockfile request in `ca060752b`.
   
   All dependency-resolving Conan CI commands now use 
`conan/safe-defaults.lock`, including the regular Ubuntu/macOS builds, 
coverage, fuzzing, containers, `conan create`, and the dependency-deduction 
builds.
   
   While validating this, I found the original Linux/GCC/Release lock was not 
sufficient for the full CI matrix: testing adds `gtest`/`benchmark`/`ccache` 
dependencies, and macOS adds `gettext`/`libgettext`. I expanded the committed 
lockfile to the union of the supported CI recipe revisions, while keeping the 
published CycloneDX SBOM explicitly scoped to the documented Linux/GCC/Release 
graph.
   
   Validation covered Linux GCC, Linux Clang, Debug/RelWithDebInfo, fuzzing, 
and a macOS-resolved graph. YAML parses cleanly and every Conan `build`, 
`create`, and `install` invocation in the workflows now has the explicit 
lockfile.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to