11 Commits

Include renames

Author	SHA1	Message	Date
James MaesandClaude Opus 5.5	2b04d936cf	ci: build on the shared ci-workflows container workflow ... Replace the retired CircleCI qqq-orb pipeline and the GitHub release workflow (qqq-orb caller) with KofTwentyTwo/ci-workflows container.yaml@v1. Every push runs the script unit tests, mvn verify and the packaged core HTTP smoke check, then builds and Trivy-scans the image; develop pushes git.kof22.com/qrun-io/qqq-all (ci-<sha>-run-<n> and develop). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-07 14:01:29 -06:00
james.maesandCodex	d937b19050	ci: use central source scanning (#37) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 11:52:26 -05:00
james.maesandCodex	12ae927c33	ci: align canonical shared orb workers (#35) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 01:33:08 -05:00
james.maesandCodex	cc89f73680	ci: centralize All builds smoke checks and releases (#33) ... * ci: centralize All builds smoke checks and releases Use orb 0.7.9 and its immutable shared release worker. Build once, preserve core/full verification and conditional public GHCR delivery, and consume public Circle provenance without exporting a token. Co-Authored-By: Codex <noreply@openai.com> * fix: use shared SDK v2 S3 support for MinIO Replace obsolete SDK v1 client overrides with upstream endpoint and path-style metadata. Preserve endpoint coverage for every filesystem action and local HTTP listing/write assertions. Co-Authored-By: Codex <noreply@openai.com> * test: verify the HttpOnly OIDC session contract Current QQQ omits the session UUID from JSON for HttpOnly cookies. Require the nonempty HttpOnly cookie and reject exposed UUIDs, retaining authenticated backend and permission checks. Co-Authored-By: Codex <noreply@openai.com> * fix: accept leading-dash Mongo credentials in Compose Use explicit username/password option assignments in health and replica-set initialization. Reproduced the original failure and verified authenticated ping with the corrected arguments against mongo:7 and a leading-dash fixture password. Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>	2026-10-20 21:56:33 -05:00
james.maes	281d1bdb07	ci(GH-992): retain sanitized full smoke diagnostics ... Record startup, service and artifact identities before private cleanup. Refs QRun-IO/qqq#992; original hosted failure remains unexplained.	2026-10-01 20:57:16 -05:00
james.maes	1a8d393d03	ci: prepare exact RC1 distribution delivery ... Extend the existing release gates and ship an image Compose bundle. Refs QRun-IO/qqq#921.	2026-10-01 20:12:51 -05:00
james.maes	4c6794065c	feat(#8): complete runtime demos and core/full smoke gates (#19) ... * ci(smoke): add core CI and prepare full conformance harness (#8) * fix(smoke): query SFTP qbit and isolate Compose ports (#8) * fix(smoke): require order-correlated Artemis trace and full CI job (#8) * fix(smoke): exercise private full Compose services over HTTP (#8) * fix(smoke): require explicit standalone full search endpoint (#8) * fix(smoke): use Maven final jar in core CI (#8) * test(smoke): verify Rabbit completion through ESB API Grant full-profile admin ESB access and keep the exact process-run assertion. Part of #8. * feat(esb): expose service observability in core profile * feat(#21): complete runtime demos and backend modules (#22) * feat(GH-21): complete runtime backend and JavaScript demos * fix(GH-21): follow listener address for the API catalog * ci(#8): pin settings-safe QQQ orb 0.6.8	2026-09-30 11:04:41 -05:00
james.maes	a661610f52	ci: gate 4.1.0 release publication (#10)	2026-09-26 11:45:40 -05:00
james.maes	4b396534de	ci(compose): skip image push until package is public (#7)	2026-09-26 09:56:36 -05:00
james.maes	d5f7d78035	fix(compose): secure broker management and gate image publication (#7)	2026-09-26 09:51:41 -05:00
james.maes	ddad68cf02	feat(compose): add core and full demo stack (#7)	2026-09-26 09:37:12 -05:00