You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hugegraph.apache.org by "imbajin (via GitHub)" <gi...@apache.org> on 2026/10/14 18:17:43 UTC

[PR] fix(ci): review Go dependency manifest changes [hugegraph-toolchain]

imbajin opened a new pull request, #820:
URL: https://github.com/apache/hugegraph-toolchain/pull/820

   ## Purpose of the PR
   
   PRs changing only `go.mod` or `go.sum` skipped the dependency audit, so its dependency-review job never ran. Both manifests now select the existing dependency audit and PR dependency review. Go runtime validation remains scoped to Go, and the configured CodeQL languages remain unchanged.
   
   Follow-up to [the dependency-selection review](https://github.com/hugegraph/hugegraph-toolchain/pull/51#discussion_r4213989797). The CI guide now names the Go manifest inputs.
   
   ## Verifying these changes
   
   Both manifest-only regression cases failed before the fix and pass afterward, including checks that ordinary Go source edits do not select the audit or enable unrelated scans. The existing CI script test suite and diff checks passed. Independent reviews found no blocking issue.
   
   ## Does this PR potentially affect the following parts?
   
   - [x] Other affects: CI dependency-audit selection.
   
   ## Documentation Status
   
   - [x] `Doc - Done`
   
   Organization counterpart: https://github.com/hugegraph/hugegraph-toolchain/pull/73.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For additional commands, e-mail: issues-help@hugegraph.apache.org


Re: [PR] fix(ci): review Go dependency manifest changes [hugegraph-toolchain]

Posted by "imbajin (via GitHub)" <gi...@apache.org>.
imbajin merged PR #820:
URL: https://github.com/apache/hugegraph-toolchain/pull/820


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For additional commands, e-mail: issues-help@hugegraph.apache.org