Add the reviewed immutable shared CodeQL caller. Preserve existing source languages and add Actions scanning. Local actionlint and actual source-inventory selection passed. Merge requires accepted exact-head scanner uploads and existing CI gates. Use a ci: squash commit so the published orb selects test-only CI maintenance without artifact publication.
Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Every job hung in "Install Java 21" on the needrestart dialog until the
10m no-output timeout. Adds the standard's configure-package-install
command (QRUN-QBIT-REPO-STANDARD C1) as a pre-step to each orb job.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Removes publish_hotfix_release: a hotfix/* branch push published a GA
release to Maven Central with no tag or review (QRun-IO/qbit-cdn#12,
QRun-IO/qqq#1121). hotfix/* branches now run test_only; a hotfix
release publishes from a reviewed vX.Y.Z tag through publish_release.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Architecture audit pass 2026-05-21. Minimal CODEOWNERS file
making the implicit ownership explicit.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Adds the missing README and LICENSE files identified by an
architecture audit on 2026-05-21. README marks the repo as
experimental/scaffold given current 0.9999.0 sentinel-version
deps; LICENSE matches the Apache 2.0 declaration in pom.xml.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
james.maes