ci: centralize release branch verification and workflows #48
Open
KofTwentyTwo wants to merge 1 commits from
feature/orb-standardize-release-0.1 into release/0.1
pull from: feature/orb-standardize-release-0.1
merge into: QRun-IO:release/0.1
QRun-IO:develop
QRun-IO:release/0.1
QRun-IO:merge/develop-into-release-0-1-rc13
QRun-IO:perf/policy-resolution-single-universe
QRun-IO:feat/session-policy
QRun-IO:fix/health-token-broker-develop
QRun-IO:fix/health-token-broker-only-when-tokens-on
QRun-IO:merge/develop-into-release-0-1-rc10
QRun-IO:feat/policy-1-1-deny-prefix
QRun-IO:fix/create-time-approval-20261106
QRun-IO:automation/qbit-rc-pending
QRun-IO:review/local-latest
QRun-IO:qualification/auth-bootstrap-order-20261103
QRun-IO:qualification/auth-bootstrap-threads2-20261103
QRun-IO:qualification/auth-bootstrap-threads-20261103
QRun-IO:qualification/auth-bootstrap-20261103
QRun-IO:main
QRun-IO:qualification/central-actions-20261031
QRun-IO:dependabot/maven/develop/maven-minor-and-patch-3ab577e7f8
QRun-IO:dependabot/github_actions/develop/github-actions-feffc63bfd
QRun-IO:feature/orb-0.8-track
QRun-IO:feature/orb-0.7.18
QRun-IO:feature/orb-0.7.17
QRun-IO:feature/orb-main-standardization
QRun-IO:feature/shared-codeql
QRun-IO:feature/orb-0712-stable-gate
QRun-IO:feature/orb-rc-worker
QRun-IO:feature/align-shared-workers
QRun-IO:feature/orb-0.7.11
QRun-IO:feature/central-ci
QRun-IO:feature/maintenance-service-principal
QRun-IO:feature/mapper-group-attributes-warning
QRun-IO:feature/broker-probe-token-exchange
QRun-IO:ci/release-rc-secrets-inherit
QRun-IO:fix/help-bundle-version
QRun-IO:feature/health-checks
QRun-IO:feature/help-bundle
QRun-IO:feature/tables-populated-defaults
QRun-IO:feature/policy-full-access
QRun-IO:feature/log-effective-features
QRun-IO:feature/policy-editor-preview
QRun-IO:feature/orb-0.6.9
QRun-IO:feature/token-scopes
QRun-IO:feature/guardrails-rc6
QRun-IO:feature/token-management
QRun-IO:feature/token-preferences
QRun-IO:feature/arch-rc5
QRun-IO:feature/token-spec
QRun-IO:feature/mapper-automated-sessions
QRun-IO:feature/policy-feature-permissions
QRun-IO:feature/policy-cutover
QRun-IO:feature/release-rc-automation
QRun-IO:feature/user-group-crud
QRun-IO:feature/policy-editor
QRun-IO:feature/policy-model
QRun-IO:feature/policy-spec
QRun-IO:feature/v1-lifecycle
QRun-IO:feature/ga-only-release-tags
QRun-IO:feature/snake-case-table-names
QRun-IO:chore/qrun-repo-standard
No Reviewers
Labels
Clear labels
architecture
bug
dependencies
documentation
duplicate
enhancement
github_actions
good first issue
help wanted
invalid
java
question
release:rc
secuurity
wontfix
Architecture review: coupling, cohesion, UI API
Something isn't working
Improvements or additions to documentation
This issue or pull request already exists
New feature or request
Pull requests that update GitHub Actions code
Good for newcomers
Extra attention is needed
This doesn't seem right
Pull requests that update java code
Further information is requested
Merging this develop PR cuts the next release candidate
This will not be worked on
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: QRun-IO/qbit-authentik#48
Reference in new issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Replace release/0.1's legacy CircleCI workflow graph with the published orb0.7.16 manifest and canonical setup, release-candidate, security-scanning, and schema-drift callers.
The schema job now calls the same immutable shared worker used by develop. Its original job and events matched the approved fixture before replacement; weekly scheduling, manual version input, and read-only permissions are preserved. Application files and publication policy are unchanged.
Validation: canonical caller validation, actionlint, diff checks, signed/GitHub-verified commit, and actual-commit pipeline rendering pass. The five-file CI-only change selects normal Maven verification without publishing an application version. Hosted setup, verification, and scanning must pass before normal merge, followed by live enforcement and post-merge verification.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.