[Sync] Update project files from source repository (1f83ec3)

[mrz1836]

What Changed

• Updated mage-x version from v1.11.0 to v1.12.2 in the base environment configuration
• Added new MAGE_X_CVE_EXCLUDES environment variable for govulncheck/magex CVE exclusions
• Synchronized 27 GitHub Actions workflow files with latest configurations
• Enhanced CVE exclusion support to work with magex deps:audit command in addition to Nancy scanner

Why It Was Necessary

• The mage-x v1.12.2 release includes important bug fixes and improvements to the build tooling
• Adding MAGE_X_CVE_EXCLUDES provides a standardized way to exclude known acceptable vulnerabilities when running govulncheck through magex, improving consistency with existing Nancy exclusion patterns
• Workflow synchronization ensures all CI/CD pipelines benefit from the latest mage-x features and security improvements
• The new exclusion mechanism allows developers to pass CVE exclusions either through environment variables or command-line parameters for greater flexibility

Testing Performed

• Validated YAML syntax of all 27 modified GitHub Actions workflow files
• Verified environment variable format and documentation in .github/.env.base
• Confirmed backward compatibility with existing NANCY_EXCLUDES configuration
• Reviewed mage-x v1.12.2 release notes for breaking changes (none affecting current usage)
• Validated that CVE exclusion format matches expected comma-separated CVE ID pattern

Impact / Risk

• Low Risk: Standard dependency version update and configuration enhancement
• No Breaking Changes: New MAGE_X_CVE_EXCLUDES variable is additive and doesn't modify existing behavior
• CI/CD Impact: Workflows will use updated mage-x tooling with potential performance and reliability improvements
• Migration: None required - existing configurations remain functional and new exclusion variable is optional

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud