12 Commits
Author SHA1 Message Date
James MaesandClaude Opus 5.5 2b04d936cf ci: build on the shared ci-workflows container workflow
container / build (push) Failing after 16s
build / container (push) Failing after 16s
Replace the retired CircleCI qqq-orb pipeline and the GitHub release
workflow (qqq-orb caller) with KofTwentyTwo/ci-workflows container.yaml@v1.
Every push runs the script unit tests, mvn verify and the packaged core
HTTP smoke check, then builds and Trivy-scans the image; develop pushes
git.kof22.com/qrun-io/qqq-all (ci-<sha>-run-<n> and develop).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-07 14:01:29 -06:00
james.maesandCodex d937b19050 ci: use central source scanning (#37)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 11:52:26 -05:00
james.maesandCodex 12ae927c33 ci: align canonical shared orb workers (#35)
Co-authored-by: Codex <noreply@openai.com>
2026-10-21 01:33:08 -05:00
james.maesandCodex cc89f73680 ci: centralize All builds smoke checks and releases (#33)
* ci: centralize All builds smoke checks and releases

Use orb 0.7.9 and its immutable shared release worker. Build once, preserve core/full verification and conditional public GHCR delivery, and consume public Circle provenance without exporting a token.

Co-Authored-By: Codex <noreply@openai.com>

* fix: use shared SDK v2 S3 support for MinIO

Replace obsolete SDK v1 client overrides with upstream endpoint and path-style metadata. Preserve endpoint coverage for every filesystem action and local HTTP listing/write assertions.

Co-Authored-By: Codex <noreply@openai.com>

* test: verify the HttpOnly OIDC session contract

Current QQQ omits the session UUID from JSON for HttpOnly cookies. Require the nonempty HttpOnly cookie and reject exposed UUIDs, retaining authenticated backend and permission checks.

Co-Authored-By: Codex <noreply@openai.com>

* fix: accept leading-dash Mongo credentials in Compose

Use explicit username/password option assignments in health and replica-set initialization. Reproduced the original failure and verified authenticated ping with the corrected arguments against mongo:7 and a leading-dash fixture password.

Co-Authored-By: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>
2026-10-20 21:56:33 -05:00
james.maes 281d1bdb07 ci(GH-992): retain sanitized full smoke diagnostics
Record startup, service and artifact identities before private cleanup. Refs QRun-IO/qqq#992; original hosted failure remains unexplained.
2026-10-01 20:57:16 -05:00
james.maes 1a8d393d03 ci: prepare exact RC1 distribution delivery
Extend the existing release gates and ship an image Compose bundle. Refs QRun-IO/qqq#921.
2026-10-01 20:12:51 -05:00
james.maes 4c6794065c feat(#8): complete runtime demos and core/full smoke gates (#19)
* ci(smoke): add core CI and prepare full conformance harness (#8)

* fix(smoke): query SFTP qbit and isolate Compose ports (#8)

* fix(smoke): require order-correlated Artemis trace and full CI job (#8)

* fix(smoke): exercise private full Compose services over HTTP (#8)

* fix(smoke): require explicit standalone full search endpoint (#8)

* fix(smoke): use Maven final jar in core CI (#8)

* test(smoke): verify Rabbit completion through ESB API

Grant full-profile admin ESB access and keep the exact process-run assertion. Part of #8.

* feat(esb): expose service observability in core profile

* feat(#21): complete runtime demos and backend modules (#22)

* feat(GH-21): complete runtime backend and JavaScript demos

* fix(GH-21): follow listener address for the API catalog

* ci(#8): pin settings-safe QQQ orb 0.6.8
2026-09-30 11:04:41 -05:00
james.maes a661610f52 ci: gate 4.1.0 release publication (#10) 2026-09-26 11:45:40 -05:00
james.maes 4b396534de ci(compose): skip image push until package is public (#7) 2026-09-26 09:56:36 -05:00
james.maes d5f7d78035 fix(compose): secure broker management and gate image publication (#7) 2026-09-26 09:51:41 -05:00
james.maes ddad68cf02 feat(compose): add core and full demo stack (#7) 2026-09-26 09:37:12 -05:00
james.maes 8390cfc535 build: bootstrap repo, Maven reactor, and CircleCI (#12)
Closes #2. Part of #1.
2026-09-26 01:50:43 -05:00