imbajin opened a new pull request, #820: URL: https://github.com/apache/hugegraph-toolchain/pull/820
## Purpose of the PR PRs changing only `go.mod` or `go.sum` skipped the dependency audit, so its dependency-review job never ran. Both manifests now select the existing dependency audit and PR dependency review. Go runtime validation remains scoped to Go, and the configured CodeQL languages remain unchanged. Follow-up to [the dependency-selection review](https://github.com/hugegraph/hugegraph-toolchain/pull/51#discussion_r4213989797). The CI guide now names the Go manifest inputs. ## Verifying these changes Both manifest-only regression cases failed before the fix and pass afterward, including checks that ordinary Go source edits do not select the audit or enable unrelated scans. The existing CI script test suite and diff checks passed. Independent reviews found no blocking issue. ## Does this PR potentially affect the following parts? - [x] Other affects: CI dependency-audit selection. ## Documentation Status - [x] `Doc - Done` Organization counterpart: https://github.com/hugegraph/hugegraph-toolchain/pull/73. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
