ci: standardize main pipelines and scanning #21

Merged
KofTwentyTwo merged 2 commits from feature/orb-main-hotfix-standardization into main 2026-10-21 16:28:12 +00:00
KofTwentyTwo commented 2026-10-21 15:17:46 +00:00 (Migrated from github.com)

Replace repository-defined CI workflows with the canonical qqq-orb 0.7.13 caller and manifest. Preserve the existing snapshot, RC, release-on-main, tag and hotfix rules; the central fixture matrix covers all 195 branch/tag cases.

Use the immutable branch-aware source-scanning worker owned by qqq-orb. Both main and develop callers are included in the repository rollout. Canonical validation, actionlint and diff checks passed. Merge requires exact-head CircleCI verification and shared CodeQL success.

Build repair: replace the unavailable QQQ BOM 0.40.0-SNAPSHOT with its corresponding released 0.40.0 version. Full clean verify passed with Maven 3.9.11 and Java 21: 18 tests, no failures, errors, or skips. Hosted checks must qualify the new exact head before merge.

Replace repository-defined CI workflows with the canonical qqq-orb 0.7.13 caller and manifest. Preserve the existing snapshot, RC, release-on-main, tag and hotfix rules; the central fixture matrix covers all 195 branch/tag cases. Use the immutable branch-aware source-scanning worker owned by qqq-orb. Both main and develop callers are included in the repository rollout. Canonical validation, actionlint and diff checks passed. Merge requires exact-head CircleCI verification and shared CodeQL success. Build repair: replace the unavailable QQQ BOM 0.40.0-SNAPSHOT with its corresponding released 0.40.0 version. Full clean verify passed with Maven 3.9.11 and Java 21: 18 tests, no failures, errors, or skips. Hosted checks must qualify the new exact head before merge.
Sign in to join this conversation.