ci: centralize release branch verification and workflows #23

2026-10-21T17:30:20Z

KofTwentyTwo commented

2026-10-21 17:30:20 +00:00

(Migrated from github.com)

Replace the legacy release/0.4 CI graph with the published and registry-verified orb0.7.16 manifest, canonical RC caller, and shared scanner. Preserve the existing application release and tag policy.

The dependency repair is merged. Its prior publisher calculated an RC but published a SNAPSHOT because the project version is literal; orb0.7.16 now aligns and verifies the effective Maven coordinate centrally. This migration adopts that fix without changing the application POM or cutting another release. The intended application RC remains unverified and is not claimed complete here.

The signed CI-only commit is based on the current release head, changes only four CI declarations, and renders only normal Maven verification. Canonical validation, actionlint, diff checks, POM preservation, and actual-commit pipeline selection passed. Require hosted setup, verify and shared scanning before normal merge and post-merge enforcement verification.

Replace the legacy release/0.4 CI graph with the published and registry-verified orb0.7.16 manifest, canonical RC caller, and shared scanner. Preserve the existing application release and tag policy. The dependency repair is merged. Its prior publisher calculated an RC but published a SNAPSHOT because the project version is literal; orb0.7.16 now aligns and verifies the effective Maven coordinate centrally. This migration adopts that fix without changing the application POM or cutting another release. The intended application RC remains unverified and is not claimed complete here. The signed CI-only commit is based on the current release head, changes only four CI declarations, and renders only normal Maven verification. Canonical validation, actionlint, diff checks, POM preservation, and actual-commit pipeline selection passed. Require hosted setup, verify and shared scanning before normal merge and post-merge enforcement verification.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-customizable-table-views#23