test(ci): verify automatic snapshot publication from a fresh source change

Co-Authored-By: GPT-6.1 <noreply@openai.com>

.ci/automatic-publish-proof.md

@@ -0,0 +1 @@
+Acceptance: a fresh protected-branch build must publish through the scheduled trusted publisher and resolve from an empty Maven cache.

.ci/gitea-qualification.md

@@ -0,0 +1,3 @@
+Organization-scoped CI qualification. Workflow implementation lives in platform-ci; enrollment lives in ci-policy.
+
+Shared CI tooling visibility approved and public; qualify public consumer access.

.circleci/config.yml

@@ -1,12 +1,12 @@
 version: 2.1
 setup: true
 orbs:
-  qqq-orb: kingsrook/qqq-orb@0.7.12
+  qqq-orb: kingsrook/qqq-orb@0.8
 workflows:
   setup:
     jobs:
     - qqq-orb/generate_pipeline:
-        orb_version: 0.7.12
+        orb_version: '0.8'
         filters:
           branches:
             ignore: automation/qbit-rc-pending

.gitea/workflows/release.yaml

@@ -0,0 +1,11 @@
+name: Release candidate
+on:
+  push:
+    branches: [develop]
+  pull_request:
+    branches: [develop]
+permissions:
+  contents: read
+jobs:
+  candidate:
+    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/maven-release-candidate.yaml@f415ff8f0772e40b4ec89ce49d72e89e92efef53

.github/workflows/codeql.yml

@@ -0,0 +1,23 @@
+name: CodeQL
+'on':
+  push:
+    branches:
+    - main
+    - develop
+    - release/**
+    - hotfix/**
+  pull_request: {}
+  schedule:
+  - cron: 41 16 * * 0
+  workflow_dispatch: {}
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  packages: read
+concurrency:
+  group: codeql-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+jobs:
+  analyze:
+    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22

.qqq-ci.yml

@@ -1,5 +1,5 @@
 profile: qbit
-orb_version: 0.7.12
+orb_version: '0.8'
 default_branch: develop
 java_version: '21'
 browsers: true

src/test/java/com/kingsrook/qbits/standardprocesstrace/utils/ProcessTraceBackendActivityStatsManagerTest.java

@@ -94,7 +94,18 @@ class ProcessTraceBackendActivityStatsManagerTest
       manager.add(processTraceId, key, 1, 2, 3);
       manager.setCleanupIntervalMillis(5);
       manager.setCleanupMaxAge(20);
-      SleepUtils.sleep(50, TimeUnit.MILLISECONDS);
+      // Wait for the scheduled cleanup rather than assuming a shared CI runner
+      // will schedule the background thread within 50 milliseconds.
+      long deadline = System.nanoTime() + TimeUnit.SECONDS.toNanos(2);
+      while(System.nanoTime() < deadline)
+      {
+         var messages = collectingLogger.getCollectedMessages();
+         if(!messages.isEmpty() && messages.get(messages.size() - 1).getMessage().contains("\"size\":0"))
+         {
+            break;
+         }
+         SleepUtils.sleep(5, TimeUnit.MILLISECONDS);
+      }
 
       QLogger.deactivateCollectingLoggerForClass(ProcessTraceBackendActivityStatsManager.class);
       assertThat(collectingLogger.getCollectedMessages()).anyMatch(clm -> clm.getMessage().contains("\"size\":1"));