From caa5de60c4363c79b1b0785a8ef9b0f6846e3f6c Mon Sep 17 00:00:00 2001 From: roottool Date: Sun, 15 Feb 2026 15:54:13 +0900 Subject: [PATCH 1/4] fix(ci): add missing dependency-review job to CI workflow The wc-dependency-review.yml reusable workflow was defined but never invoked from ci.yml, causing dependency review to be silently skipped. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/ci.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3e0818e..f62ac72 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -70,6 +70,11 @@ jobs: secrets: CODECOV_TOKEN: "${{ secrets.CODECOV_TOKEN }}" + dependency-review: + needs: [setup] + if: ${{ needs.setup.outputs.dependencies == 'true' && github.event_name == 'pull_request' }} + uses: ./.github/workflows/wc-dependency-review.yml + export-validation: needs: [setup, lint-format, type-check, test] if: always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled') @@ -79,7 +84,7 @@ jobs: name: Status Check runs-on: ubuntu-slim timeout-minutes: 1 - needs: [setup, lint-format, type-check, test, export-validation] + needs: [setup, lint-format, type-check, test, export-validation, dependency-review] if: always() && (contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')) steps: - run: exit 1 From 3c4fd91b399ea9fe914be23e34e5f8617874aac8 Mon Sep 17 00:00:00 2001 From: roottool Date: Sun, 15 Feb 2026 16:06:41 +0900 Subject: [PATCH 2/4] fix(ci): remove unnecessary pull-requests permission from dependency-review Remove comment-summary-in-pr feature and the pull-requests: write permission it required. The dependency-review-action only needs contents: read without the comment feature. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/wc-dependency-review.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/wc-dependency-review.yml b/.github/workflows/wc-dependency-review.yml index e0209f2..0b99ae1 100644 --- a/.github/workflows/wc-dependency-review.yml +++ b/.github/workflows/wc-dependency-review.yml @@ -5,7 +5,6 @@ on: workflow_call permissions: contents: read - pull-requests: write defaults: run: @@ -27,4 +26,4 @@ jobs: with: deny-licenses: GPL-2.0, GPL-3.0 fail-on-severity: moderate - comment-summary-in-pr: always + From ab360a541ae9b6c313df5ddf81fad0de3ba8769b Mon Sep 17 00:00:00 2001 From: roottool Date: Sun, 15 Feb 2026 16:08:00 +0900 Subject: [PATCH 3/4] style: Trim line --- .github/workflows/wc-dependency-review.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/wc-dependency-review.yml b/.github/workflows/wc-dependency-review.yml index 0b99ae1..8460fc2 100644 --- a/.github/workflows/wc-dependency-review.yml +++ b/.github/workflows/wc-dependency-review.yml @@ -26,4 +26,3 @@ jobs: with: deny-licenses: GPL-2.0, GPL-3.0 fail-on-severity: moderate - From eecd15782104e31afedc7b42dbb2bf191b82e634 Mon Sep 17 00:00:00 2001 From: roottool Date: Sun, 15 Feb 2026 16:10:49 +0900 Subject: [PATCH 4/4] style: Format --- .github/workflows/ci.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f62ac72..5a17ed2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -84,7 +84,15 @@ jobs: name: Status Check runs-on: ubuntu-slim timeout-minutes: 1 - needs: [setup, lint-format, type-check, test, export-validation, dependency-review] + needs: + [ + setup, + lint-format, + type-check, + test, + export-validation, + dependency-review, + ] if: always() && (contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')) steps: - run: exit 1