diff --git a/.github/workflows/module-release.yml b/.github/workflows/module-release.yml
index f8990908..54300f58 100644
--- a/.github/workflows/module-release.yml
+++ b/.github/workflows/module-release.yml
@@ -12,8 +12,10 @@ on:
           - auth
           - cache
           - chimux
+          - configwatcher
           - database
           - eventbus
+          - eventlogger
           - httpclient
           - httpserver
           - jsonschema
diff --git a/.github/workflows/release-all.yml b/.github/workflows/release-all.yml
index 222bc52f..56e1f013 100644
--- a/.github/workflows/release-all.yml
+++ b/.github/workflows/release-all.yml
@@ -42,7 +42,7 @@ jobs:
           echo "Latest core tag: $LATEST_TAG"
           HAS_CHANGES=false
           if [ -z "$LATEST_TAG" ]; then
-            FILE=$(find . -maxdepth 1 -type f \( -name '*.go' -o -name 'go.mod' -o -name 'go.sum' \) | head -1 || true)
+            FILE=$(find . -maxdepth 1 -type f \( -name '*.go' -o -name 'go.mod' \) | head -1 || true)
             if [ -n "$FILE" ]; then HAS_CHANGES=true; fi
           else
             CHANGED=$(git diff --name-only ${LATEST_TAG}..HEAD | grep -v '^modules/' || true)
@@ -53,8 +53,10 @@ jobs:
                 [[ $f == *.md ]] && continue
                 [[ $f == .github/* ]] && continue
                 [[ $f == examples/* ]] && continue
-                # Accept .go plus root go.mod/go.sum (allow optional leading ./)
-                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == go.sum ]] || [[ $f == ./go.mod ]] || [[ $f == ./go.sum ]]; then
+                # Accept .go plus root go.mod (NOT go.sum — it's a lockfile that
+                # changes whenever auto-bump runs go mod tidy and should not
+                # trigger a new core release by itself).
+                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == ./go.mod ]]; then
                   RELEVANT+="$f "
                 fi
               done <<< "$CHANGED"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45b21ed5..020571cf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,8 +63,9 @@ jobs:
           echo "Latest core tag: ${LATEST_TAG:-<none>}"
           CHANGED=false
           if [ -z "$LATEST_TAG" ]; then
-            # No prior release; treat as changed if any go files or go.mod/go.sum exist (initial release scenario)
-            if git ls-files '*.go' 'go.mod' 'go.sum' | grep -v '^modules/' | head -n1 >/dev/null 2>&1; then CHANGED=true; fi
+            # No prior release; treat as changed if any go files or go.mod exist (initial release scenario).
+            # go.sum is excluded — it's a lockfile that changes on every go mod tidy.
+            if git ls-files '*.go' 'go.mod' | grep -v '^modules/' | head -n1 >/dev/null 2>&1; then CHANGED=true; fi
           else
             DIFF=$(git diff --name-only ${LATEST_TAG}..HEAD | grep -v '^modules/' || true)
             RELEVANT=""
@@ -74,7 +75,10 @@ jobs:
                 [[ $f == *.md ]] && continue
                 [[ $f == .github/* ]] && continue
                 [[ $f == examples/* ]] && continue
-                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == go.sum ]] || [[ $f == ./go.mod ]] || [[ $f == ./go.sum ]]; then
+                # Accept .go plus root go.mod (NOT go.sum — it's a lockfile that
+                # changes whenever auto-bump runs go mod tidy and should not
+                # trigger a new core release by itself).
+                if [[ $f == *.go ]] || [[ $f == go.mod ]] || [[ $f == ./go.mod ]]; then
                   RELEVANT+="$f "
                 fi
               done <<< "$DIFF"