Keep restore and save keys stable across release version rewrites, avoid inherited cross-version caches, skip unused OWASP setup, upload test results once and pack the orb once before gated publication. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>
3.0 KiB
TODO: Munitor
Pending
-
Validate and publish fast Java CI patch, canary actual cache size/timings, then adopt stable orb (docs/PLAN-lean-java-ci.md).
-
Validate and release supplemental-image freshness fix, then adopt it in backend PR311 and verify all supplemental Trivy scans.
-
Release JVM runtime cache fix and adopt the stable orb in Website-Backend; verify fresh image Trivy before release.
-
Run PR image-scan script/template/BATS tests on Linux and verify a consumer PR with Docker/Trivy before publishing.
-
Add PR-only image scans for the four application templates, supplemental scan-only mode, JSON artifacts, and regression tests (uncommitted).
-
Review publishing CI fixes and merge PR19 to develop.
-
Publish v0.3.2 from main.
-
Publish v0.3.3 (atomic release versions); bump Website-Backend/Frontend pins to 0.3.3.
-
Bump Concilium (0.2) and makers4 (0.1) to 0.3.3 when next active.
-
Follow makers4 and terraform-proxmox-talos on CircleCI when those repos are next active.
-
Adopt supplemental images on an appropriate consumer.
Completed
- Prove consolidated production write-back with Investing in Chester and QRun marketing.
- Release v0.3.0 and move the verified consumers to the stable 0.3 line.
- Merge repository Dockerfile preservation and consolidated GitOps write-back.
- Validate first-class pnpm support and merge PR #6.
- Add opt-in repository Dockerfile preservation for node-webapp (GH-7)
- Implement first-class pnpm support (GH-5, 17 commits, 219 tests)
- Rename all
npm_*orb components tonode_*(backward-incompatible, pre-1.0) - Thread package_manager through full job/command/script chain
- Add corepack activation for pnpm/yarn in install_node
- Add pnpm Dockerfile variants for node-api and node-webapp
- Add Prisma auto-detection after dependency install
- Support inline commands in test.setup
- Bootstrap pnpm in secondary jobs (code-quality, coverage, e2e, security-scan, sonar, sbom)
- Add configurable coverage_summary_path with monorepo glob support
- Publish dev:snapshot with pnpm support
- Implement gradle-webapp pipeline type (20 new files, 7 modified, 605+ tests)
- Fix pack_generate_config.sh to embed gradle templates
- Fix RC009 orb review (extract inline commands to included script)
- Fix SC2155 shellcheck warnings in extract_munitor_vars.sh
- Add JaCoCo diagnostic output to gradle_jacoco.sh
- Merge gradle-webapp PR #2 to develop
- Release v0.2.0 and publish kof22/munitor@0.2.0
- Create GitHub Release for v0.2.0
- Bump Concilium from dev:snapshot to @0.2 (PR #41)
- Bump Website-Backend from @0.1 to @0.2 (PR #44)
- Bump Website-Frontend from @0.1 to @0.2 (PR #6)
- Onboard Concilium as first gradle-webapp consumer
- Create GitHub Releases for v0.1.0, v0.1.1, v0.1.2
- Publish orb kof22/munitor@0.1.2 (overridable org defaults)
- Implement supplemental Docker image support
- All 8 pipeline types implemented and tested
- Full rebrand from Faber to Munitor