What Changed

• Updated mage-x version from v1.12.1 to v1.12.2 in the GitHub environment configuration
• Modified the CVE exclusions comment to clarify that exclusions can be passed via environment variable or command parameter
• Enhanced documentation for the MAGE_X_CVE_EXCLUDES configuration to improve developer understanding of usage options

Why It Was Necessary

• Incorporates the latest mage-x tooling improvements and bug fixes available in v1.12.2
• Improves clarity in the configuration documentation by explicitly noting that CVE exclusions can be provided through multiple methods (environment variable or parameter)
• Ensures the build and dependency audit tooling remains current with upstream improvements
• Maintains alignment with best practices for CVE exclusion management in the CI/CD pipeline

Testing Performed

• Validated syntax correctness of the .github/.env.base configuration file
• Verified that the mage-x v1.12.2 version reference is valid and available
• Confirmed that the documentation clarification for MAGE_X_CVE_EXCLUDES accurately reflects the actual usage patterns
• Checked that existing CVE exclusions (CVE-2024-38513, CVE-2023-45142) remain properly formatted

Impact / Risk

• Low Risk: Configuration-only changes that update tooling version and improve documentation
• Breaking Changes: None - version bump is a minor release and documentation changes are additive
• Performance: No performance impact expected from version update or documentation changes
• Migration: No action required - existing configurations remain compatible