ci: enroll shared Gitea lifecycle

ci: add the isolated postpublish job to the QRun release caller
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>
2026-11-03 17:31:36 +00:00 · 2026-11-02 15:51:57 +00:00 · 2026-11-02 06:19:49 +00:00 · 2026-11-02 04:13:42 +00:00 · 2026-10-21 19:53:35 -05:00 · 2026-10-21 12:18:33 -05:00
4 changed files with 51 additions and 3 deletions
@@ -1,12 +1,12 @@
 version: 2.1
 setup: true
 orbs:
-  qqq-orb: kingsrook/qqq-orb@0.7.12
+  qqq-orb: kingsrook/qqq-orb@0.8
 workflows:
  setup:
    jobs:
    - qqq-orb/generate_pipeline:
-        orb_version: 0.7.12
+        orb_version: '0.8'
        filters:
          branches:
            ignore: automation/qbit-rc-pending
@@ -0,0 +1,25 @@
+# Standard QRun release caller (v2, thin contract): every push and manual dispatch delegates to the protected qrun-release-v1 channel. Do not edit per repository.
+name: qrun-release
+on:
+  push: {}
+  workflow_dispatch: {}
+permissions:
+  contents: read
+  actions: read
+jobs:
+  release:
+    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/java-docker.yaml@qrun-release-v1
+    with:
+      runner: linux-small
+      docker-runner: container-build
+      browsers: true
+      browser-runner: browser-build
+  postpublish:
+    if: ${{ needs.release.outputs.capture == 'true' }}
+    needs: release
+    permissions:
+      contents: write
+      actions: write
+    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/qrun-source-version.yaml@qrun-release-v1
+    with:
+      runner: linux-small
@@ -0,0 +1,23 @@
+name: CodeQL
+'on':
+  push:
+    branches:
+    - main
+    - develop
+    - release/**
+    - hotfix/**
+  pull_request: {}
+  schedule:
+  - cron: 41 16 * * 0
+  workflow_dispatch: {}
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  packages: read
+concurrency:
+  group: codeql-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+jobs:
+  analyze:
+    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22
@@ -1,5 +1,5 @@
 profile: qbit
-orb_version: 0.7.12
+orb_version: '0.8'
 default_branch: develop
 java_version: '21'
 browsers: true
Author	SHA1	Message	Date
forge-recovery	89c36c48f0	ci: enroll shared Gitea lifecycle QRun-IO/ci-policy: ci / fork-guard (push) Skipped Details QRun-IO/ci-policy: ci / head-profile (push) Skipped Details QRun-IO/ci-policy: ci / application-template-0 (push) Skipped Details QRun-IO/ci-policy: ci / gradle-1 (push) Skipped Details QRun-IO/ci-policy: ci / java-docker-4 (push) Skipped Details QRun-IO/ci-policy: ci / java-frontend-browser-5 (push) Skipped Details QRun-IO/ci-policy: ci / java-maven-6 (push) Skipped Details QRun-IO/ci-policy: ci / java-maven-7 (push) Skipped Details QRun-IO/ci-policy: ci / node-8 (push) Skipped Details QRun-IO/ci-policy: ci / node-9 (push) Skipped Details QRun-IO/ci-policy: ci / node-10 (push) Skipped Details QRun-IO/ci-policy: ci / node-playwright-11 (push) Skipped Details QRun-IO/ci-policy: ci / repository-policy-12 (push) Skipped Details QRun-IO/ci-policy: ci / source-config-13 (push) Skipped Details QRun-IO/ci-policy: ci / source-config-14 (push) Skipped Details QRun-IO/ci-policy: ci / android-0 (push) Skipped Details QRun-IO/ci-policy: ci / original-business (push) Skipped Details QRun-IO/ci-policy: ci / original-mcp (push) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (push) Skipped Details QRun-IO/ci-policy: native / fork-deny (push) Skipped Details QRun-IO/ci-policy: native / dotnet-0 (push) Skipped Details QRun-IO/ci-policy: native / native-result (push) Successful in 9s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (push) Successful in 23s Details QRun-IO/ci-policy: ci / repository-policy (push) Skipped Details QRun-IO/ci-policy: ci / java-core-2-head (push) Skipped Details Shared Java Maven CI with Docker / secrets (push) Successful in 24s Details QRun-IO/ci-policy: ci / java-docker-3-head (push) Skipped Details QRun-IO/ci-policy: ci / java-maven-6-head (push) Skipped Details QRun-IO/ci-policy: ci / java-maven-7-head (push) Skipped Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (push) Successful in 53s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (push) Successful in 12s Details QRun-IO/ci-policy: ci / java-docker-3 (push) Successful in 20m43s Details QRun-IO/ci-policy: ci / ci-result (push) Successful in 5s Details Shared Java Maven CI with Docker / verify (push) Successful in 1m21s Details Shared Java Maven CI with Docker / gate (push) Successful in 10s Details qrun-release / release (push) Successful in 21m10s Details qrun-release / postpublish (push) Skipped Details	2026-11-03 17:31:36 +00:00
forge-recovery Claude Sonnet 5.5 Codex	8a308ed112	ci: add the isolated postpublish job to the QRun release caller QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / head-profile (pull_request) Skipped Details QRun-IO/ci-policy: ci / application-template-0 (pull_request) Skipped Details QRun-IO/ci-policy: ci / gradle-1 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-docker-4 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-frontend-browser-5 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-6 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-7 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-8 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-9 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-10 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-playwright-11 (pull_request) Skipped Details QRun-IO/ci-policy: ci / repository-policy-12 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-13 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-14 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details QRun-IO/ci-policy: native / fork-deny (pull_request) Skipped Details QRun-IO/ci-policy: native / dotnet-0 (pull_request) Skipped Details Shared Java Maven CI with Docker / secrets (push) Successful in 15s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (pull_request) Successful in 11s Details QRun-IO/ci-policy: ci / repository-policy (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-core-2-head (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-docker-3-head (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-6-head (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-7-head (pull_request) Skipped Details QRun-IO/ci-policy: native / native-result (pull_request) Successful in 4s Details Shared Java Maven CI with Docker / gate (push) Canceled after 0s Details Shared Java Maven CI with Docker / verify (push) Canceled after 0s Details qrun-release / release (push) Canceled after 2h31m30s Details qrun-release / postpublish (push) Canceled after 0s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (pull_request) Successful in 1m15s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (pull_request) Successful in 11s Details QRun-IO/ci-policy: ci / java-docker-3 (pull_request) Successful in 3h1m22s Details QRun-IO/ci-policy: ci / ci-result (pull_request) Successful in 6s Details Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 15:51:57 +00:00
forge-recovery Claude Sonnet 5.5 Codex	05f136da97	ci: move the QRun release caller to the thin v2 contract Shared Java Maven CI with Docker / secrets (push) Successful in 19s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (pull_request) Successful in 25s Details QRun-IO/ci-policy: native / native-result (pull_request) Successful in 8s Details QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / application-template-0 (pull_request) Skipped Details QRun-IO/ci-policy: ci / gradle-1 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-frontend-browser-3 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-4 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-5 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-6 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-7 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-playwright-8 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-9 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details QRun-IO/ci-policy: native / fork-deny (pull_request) Skipped Details QRun-IO/ci-policy: native / dotnet-0 (pull_request) Skipped Details QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 3s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (pull_request) Canceled after 0s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (pull_request) Canceled after 0s Details QRun-IO/ci-policy: ci / java-docker-2 (pull_request) Canceled after 29m51s Details Shared Java Maven CI with Docker / gate (push) Canceled after 0s Details Shared Java Maven CI with Docker / verify (push) Canceled after 0s Details qrun-release / release (push) Canceled after 29m56s Details Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 06:19:49 +00:00
forge-recoveryandCodex	e45639da42	ci: add the identical QRun release caller QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (pull_request) Failing after 52s Details QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / application-template-0 (pull_request) Skipped Details QRun-IO/ci-policy: ci / gradle-1 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-frontend-browser-3 (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-4 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-5 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-6 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-playwright-7 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-8 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (pull_request) Failing after 14s Details QRun-IO/ci-policy: ci / java-docker-2 (pull_request) Failing after 48m18s Details QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 4s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (pull_request) Failing after 2s Details Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 04:13:42 +00:00
james.maesandCodex	c931d6fa0c	ci: enroll in the shared QQQ orb (#17 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 19:53:35 -05:00
james.maesandCodex	7aa9608df8	ci: centralize branch verification and source scanning (#12 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 12:18:33 -05:00