Files
Munitor/docs/TODO.md
james.maesandCodex c8fd974bfd perf(ci): bound Maven caches and remove duplicate setup
Keep restore and save keys stable across release version rewrites, avoid inherited cross-version caches, skip unused OWASP setup, upload test results once and pack the orb once before gated publication.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
2026-10-19 10:40:43 -05:00

3.0 KiB

TODO: Munitor

Pending

  • Validate and publish fast Java CI patch, canary actual cache size/timings, then adopt stable orb (docs/PLAN-lean-java-ci.md).

  • Validate and release supplemental-image freshness fix, then adopt it in backend PR311 and verify all supplemental Trivy scans.

  • Release JVM runtime cache fix and adopt the stable orb in Website-Backend; verify fresh image Trivy before release.

  • Run PR image-scan script/template/BATS tests on Linux and verify a consumer PR with Docker/Trivy before publishing.

  • Add PR-only image scans for the four application templates, supplemental scan-only mode, JSON artifacts, and regression tests (uncommitted).

  • Review publishing CI fixes and merge PR19 to develop.

  • Publish v0.3.2 from main.

  • Publish v0.3.3 (atomic release versions); bump Website-Backend/Frontend pins to 0.3.3.

  • Bump Concilium (0.2) and makers4 (0.1) to 0.3.3 when next active.

  • Follow makers4 and terraform-proxmox-talos on CircleCI when those repos are next active.

  • Adopt supplemental images on an appropriate consumer.

Completed

  • Prove consolidated production write-back with Investing in Chester and QRun marketing.
  • Release v0.3.0 and move the verified consumers to the stable 0.3 line.
  • Merge repository Dockerfile preservation and consolidated GitOps write-back.
  • Validate first-class pnpm support and merge PR #6.
  • Add opt-in repository Dockerfile preservation for node-webapp (GH-7)
  • Implement first-class pnpm support (GH-5, 17 commits, 219 tests)
  • Rename all npm_* orb components to node_* (backward-incompatible, pre-1.0)
  • Thread package_manager through full job/command/script chain
  • Add corepack activation for pnpm/yarn in install_node
  • Add pnpm Dockerfile variants for node-api and node-webapp
  • Add Prisma auto-detection after dependency install
  • Support inline commands in test.setup
  • Bootstrap pnpm in secondary jobs (code-quality, coverage, e2e, security-scan, sonar, sbom)
  • Add configurable coverage_summary_path with monorepo glob support
  • Publish dev:snapshot with pnpm support
  • Implement gradle-webapp pipeline type (20 new files, 7 modified, 605+ tests)
  • Fix pack_generate_config.sh to embed gradle templates
  • Fix RC009 orb review (extract inline commands to included script)
  • Fix SC2155 shellcheck warnings in extract_munitor_vars.sh
  • Add JaCoCo diagnostic output to gradle_jacoco.sh
  • Merge gradle-webapp PR #2 to develop
  • Release v0.2.0 and publish kof22/munitor@0.2.0
  • Create GitHub Release for v0.2.0
  • Bump Concilium from dev:snapshot to @0.2 (PR #41)
  • Bump Website-Backend from @0.1 to @0.2 (PR #44)
  • Bump Website-Frontend from @0.1 to @0.2 (PR #6)
  • Onboard Concilium as first gradle-webapp consumer
  • Create GitHub Releases for v0.1.0, v0.1.1, v0.1.2
  • Publish orb kof22/munitor@0.1.2 (overridable org defaults)
  • Implement supplemental Docker image support
  • All 8 pipeline types implemented and tested
  • Full rebrand from Faber to Munitor