dependabot[bot]
8964acbf27
build(deps): Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml](https://github.com/qrun-io/qqq-orb ) and [QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml](https://github.com/qrun-io/qqq-orb ).
Updates `QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml` from c288a8864fe9054f68410e1d78f5863aea4c4d22 to 1c389210e6dfda1630d053c07ae4dae523dd5576
- [Release notes](https://github.com/qrun-io/qqq-orb/releases )
- [Changelog](https://github.com/QRun-IO/qqq-orb/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/qrun-io/qqq-orb/compare/c288a8864fe9054f68410e1d78f5863aea4c4d22...1c389210e6dfda1630d053c07ae4dae523dd5576 )
Updates `QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml` from cc30f599e63c8e41629c99d23395bac1adb8bc44 to 1c389210e6dfda1630d053c07ae4dae523dd5576
- [Release notes](https://github.com/qrun-io/qqq-orb/releases )
- [Changelog](https://github.com/QRun-IO/qqq-orb/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/qrun-io/qqq-orb/compare/cc30f599e63c8e41629c99d23395bac1adb8bc44...1c389210e6dfda1630d053c07ae4dae523dd5576 )
---
updated-dependencies:
- dependency-name: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml
dependency-version: 1c389210e6dfda1630d053c07ae4dae523dd5576
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml
dependency-version: 1c389210e6dfda1630d053c07ae4dae523dd5576
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-26 11:14:16 +00:00
james.maes and Codex
988f4c56b1
ci: centralize QBit source scanning ( #36 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 10:43:43 -05:00
james.maes and Codex
03ed383587
ci: adopt central orb 0.7.12 and stable gates ( #35 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 08:58:38 -05:00
james.maes and Codex
85e9ab1316
ci: centralize rc release completion in qqq orb ( #34 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 02:30:37 -05:00
james.maes and Claude Opus 5.5
4033590078
ci(release-rc): pass secrets to the shared workflow so it can sign the RC tag
...
QRun-IO/.github#2 adds a tag-and-release job that signs vX with the
QRUN_TAG_SIGNING_KEY secret after Maven Central confirms the artifact.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-15 16:19:37 -05:00
james.maes and Claude Opus 5.5
b5857dd26e
ci: automate RC releases; hotfix/* pushes no longer publish
...
Removes publish_hotfix_release: a hotfix/* branch push published a GA
release to Maven Central with no tag or review (QRun-IO/qbit-cdn#12 ,
QRun-IO/qqq#1121 ). hotfix/* branches now run test_only; a hotfix
release publishes from a reviewed vX.Y.Z tag through publish_release.
Adds .github/workflows/release-rc.yml (reusable QRun-IO/.github
qbit-release-rc): a manual dispatch, or merging a develop PR labelled
release:rc, merges develop into the release line and the release/* push
runs the existing CircleCI RC publish.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-13 14:37:07 -05:00