fix: stop false-positive core detection in release-all workflow (#89)

* fix: stop false-positive core detection in release-all workflow

The auto-bump-modules workflow runs `go mod tidy` on root, which changes
go.sum and potentially go.mod. These lockfile/tidy changes were counted
as "core changes" on subsequent release-all runs, causing:
1. Spurious core releases every run
2. Module releases stuck behind the core release chain
   (release-modules-no-core-change skipped because core_changed=true)

Fixes:
- Exclude go.sum from core change detection (lockfile, not source)
- Exclude cmd/* from core change detection (tooling, not library)
- Add configwatcher and eventlogger to module-release dropdown

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address PR review — remove cmd/* exclusion, align release.yml

- Remove cmd/* exclusion from release-all.yml core detection since cmd/
  is part of the root module and not independently versioned
- Align release.yml core detection to also exclude go.sum, keeping both
  workflows consistent

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: intel352

.github/workflows/module-release.yml

@@ -12,8 +12,10 @@ on:
           - auth
           - cache
           - chimux
+          - configwatcher
           - database
           - eventbus
+          - eventlogger
           - httpclient
           - httpserver
           - jsonschema

.github/workflows/release-all.yml

@@ -42,7 +42,7 @@ jobs:
           echo "Latest core tag: $LATEST_TAG"
           HAS_CHANGES=false
           if [ -z "$LATEST_TAG" ]; then
-            FILE=$(find . -maxdepth 1 -type f \( -name '*.go' -o -name 'go.mod' -o -name 'go.sum' \) | head -1 || true)
+            FILE=$(find . -maxdepth 1 -type f \( -name '*.go' -o -name 'go.mod' \) | head -1 || true)
             if [ -n "$FILE" ]; then HAS_CHANGES=true; fi
           else
             CHANGED=$(git diff --name-only ${LATEST_TAG}..HEAD | grep -v '^modules/' || true)
@@ -53,8 +53,10 @@ jobs:
                 [[ $f == *.md ]] && continue
                 [[ $f == .github/* ]] && continue
                 [[ $f == examples/* ]] && continue
-                # Accept .go plus root go.mod/go.sum (allow optional leading ./)
-                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == go.sum ]] || [[ $f == ./go.mod ]] || [[ $f == ./go.sum ]]; then
+                # Accept .go plus root go.mod (NOT go.sum — it's a lockfile that
+                # changes whenever auto-bump runs go mod tidy and should not
+                # trigger a new core release by itself).
+                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == ./go.mod ]]; then
                   RELEVANT+="$f "
                 fi
               done <<< "$CHANGED"

.github/workflows/release.yml

@@ -63,8 +63,9 @@ jobs:
           echo "Latest core tag: ${LATEST_TAG:-<none>}"
           CHANGED=false
           if [ -z "$LATEST_TAG" ]; then
-            # No prior release; treat as changed if any go files or go.mod/go.sum exist (initial release scenario)
-            if git ls-files '*.go' 'go.mod' 'go.sum' | grep -v '^modules/' | head -n1 >/dev/null 2>&1; then CHANGED=true; fi
+            # No prior release; treat as changed if any go files or go.mod exist (initial release scenario).
+            # go.sum is excluded — it's a lockfile that changes on every go mod tidy.
+            if git ls-files '*.go' 'go.mod' | grep -v '^modules/' | head -n1 >/dev/null 2>&1; then CHANGED=true; fi
           else
             DIFF=$(git diff --name-only ${LATEST_TAG}..HEAD | grep -v '^modules/' || true)
             RELEVANT=""
@@ -74,7 +75,10 @@ jobs:
                 [[ $f == *.md ]] && continue
                 [[ $f == .github/* ]] && continue
                 [[ $f == examples/* ]] && continue
-                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == go.sum ]] || [[ $f == ./go.mod ]] || [[ $f == ./go.sum ]]; then
+                # Accept .go plus root go.mod (NOT go.sum — it's a lockfile that
+                # changes whenever auto-bump runs go mod tidy and should not
+                # trigger a new core release by itself).
+                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == ./go.mod ]]; then
                   RELEVANT+="$f "
                 fi
               done <<< "$DIFF"