Commit Graph
24 Commits
Author SHA1 Message Date
dependabot[bot] e51a7237fa build(deps): Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml](https://github.com/qrun-io/qqq-orb) and [QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml](https://github.com/qrun-io/qqq-orb).


Updates `QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml` from c288a8864fe9054f68410e1d78f5863aea4c4d22 to 1c389210e6dfda1630d053c07ae4dae523dd5576
- [Release notes](https://github.com/qrun-io/qqq-orb/releases)
- [Changelog](https://github.com/QRun-IO/qqq-orb/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/qrun-io/qqq-orb/compare/c288a8864fe9054f68410e1d78f5863aea4c4d22...1c389210e6dfda1630d053c07ae4dae523dd5576)

Updates `QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml` from cc30f599e63c8e41629c99d23395bac1adb8bc44 to 1c389210e6dfda1630d053c07ae4dae523dd5576
- [Release notes](https://github.com/qrun-io/qqq-orb/releases)
- [Changelog](https://github.com/QRun-IO/qqq-orb/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/qrun-io/qqq-orb/compare/cc30f599e63c8e41629c99d23395bac1adb8bc44...1c389210e6dfda1630d053c07ae4dae523dd5576)

---
updated-dependencies:
- dependency-name: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml
  dependency-version: 1c389210e6dfda1630d053c07ae4dae523dd5576
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: QRun-IO/qqq-orb/.github/workflows/qbit-release-rc.yml
  dependency-version: 1c389210e6dfda1630d053c07ae4dae523dd5576
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-10-29 13:25:12 +00:00
james.maesandCodex 8fed18ee3b ci: adopt managed orb 0.8 patch track (#13)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 15:19:31 -05:00
james.maesandCodex 3110a88740 ci: adopt shared orb 0.7.18 (#12)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 14:42:39 -05:00
james.maesandCodex 8c63969d2f ci: adopt shared orb 0.7.17 (#11)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 14:07:23 -05:00
james.maesandCodex 6927174050 ci: use central source scanning (#9)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 11:44:37 -05:00
james.maesandCodex 7febdd3330 ci: adopt central orb 0.7.12 and stable gates (#7)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 08:53:45 -05:00
james.maesandCodex 1ffd25af7e ci: centralize rc release completion in qqq orb (#6)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 02:25:15 -05:00
james.maesandCodex a1c6c4171a ci: adopt shared orb 0.7.11 (#5)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 00:59:17 -05:00
james.maes 69d14364f3 Merge pull request #4 from QRun-IO/feature/central-ci
ci: adopt shared QQQ orb standard
2026-10-20 19:19:03 -05:00
james.maesandCodex 0ca4e9cf02 ci: adopt verified central QQQ orb 0.7.3
Co-Authored-By: Codex <noreply@openai.com>
2026-10-20 19:08:02 -05:00
james.maes a143d31deb Merge pull request #3 from QRun-IO/feature/service-principal
feat(runtime): run qbit work as the release-notes service principal
2026-10-16 13:39:48 -05:00
james.maesandClaude Opus 5.5 c811f8630b fix(ui-api): regenerate the release-notes extension document for QQQ 4.1.0-RC.19
QQQ UI API 1.6.0 adds the shared BasicErrorResponseV1 schema to every
extension document. Regenerate release-notes.yaml and let the contract test
accept that core schema next to the ReleaseNotes*V1 schemas (additive).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-16 13:36:18 -05:00
james.maesandClaude Opus 5.5 a15846e6b7 build: QQQ 4.1.0-RC.19
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-16 13:19:15 -05:00
james.maesandClaude Opus 5.5 212a12c304 feat(runtime): run qbit work as the release-notes service principal
With the host's principal declared, detection, drafting and publishing
run as it instead of the system user. Undeclared: unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-16 08:33:04 -05:00
james.maes bdd0139ddb Merge pull request #2 from QRun-IO/ci/release-rc-secrets-inherit
ci(release-rc): pass secrets so the shared workflow can sign the RC tag
2026-10-16 08:20:16 -05:00
james.maesandClaude Opus 5.5 14a46dca18 Merge develop into ci/release-rc-secrets-inherit
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-16 08:13:51 -05:00
james.maes f113075a5b Merge pull request #1 from QRun-IO/feature/release-notes
feat: release notes qbit (detection, drafting, approval, notification, What's new UI API)
2026-10-15 16:58:03 -05:00
james.maesandClaude Opus 5.5 36980c848f ci(release-rc): pass secrets to the shared workflow so it can sign the RC tag
QRun-IO/.github#2 adds a tag-and-release job that signs vX with the
QRUN_TAG_SIGNING_KEY secret after Maven Central confirms the artifact.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 16:19:48 -05:00
james.maesandClaude Opus 5.5 209099f3b3 fix(metadata): mark qbit-owned metadata, distinct nav icons, items widget help
Tables, processes, app, possible values, join and widget carry the source
qbit name so hosts can tell them from their own; each table has its own nav
icon; the release items list widget has a label help entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 15:48:41 -05:00
james.maesandClaude Opus 5.5 7734da4ece feat(schema): items reference their release by foreign key
Hosts that require referential integrity (kof22's foreign key guardrail) get
fk_release_notes_item_release_id from the qbit itself (ON DELETE CASCADE).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 14:52:21 -05:00
james.maesandClaude Opus 5.5 f6d435fb09 fix(metadata): plain Settings label (admin nav labels never repeat the app name)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 14:40:37 -05:00
james.maesandClaude Opus 5.5 08b2d0fd00 feat(platform): component versions from the jars' Maven metadata, plus QQQ
Producer VERSION constants lag the published RCs, so compare the versions
Maven recorded in each qbit jar (falling back to the producer's) and include
qqq-backend-core.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 14:36:57 -05:00
james.maesandClaude Opus 5.5 c8f6f59505 feat: release notes qbit (detection, drafting, approval, notification, What's new UI API)
Standard release_notes_ tables with a Liquibase changelog (no foreign
keys) and seeded settings; once-per-version detection guarded by a unique
app + version key; GitHub and platform-component sources behind a
ReleaseSource SPI; a deterministic rule-based drafter and a sanitizer that
keeps internal references, personal data and secrets out of published
text; Publish, Skip and Redraft record actions and Check for new release;
one RELEASE notification per published release via QAlerts.notify; and the
release-notes UI API extension (releases, summary, seen) with a committed
OpenAPI contract and a complete help bundle.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 14:33:00 -05:00
james.maesandClaude Opus 5.5 ccab4fbc4c chore: repository scaffold and SPEC.md (QRun qbit repository standard)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 14:32:22 -05:00