fix: accept leading-dash Mongo credentials in Compose

Use explicit username/password option assignments in health and replica-set initialization. Reproduced the original failure and verified authenticated ping with the corrected arguments against mongo:7 and a leading-dash fixture password. Co-Authored-By: Codex <noreply@openai.com>
test: verify the HttpOnly OIDC session contract
2026-10-20 21:48:30 -05:00 · 2026-10-20 21:37:27 -05:00 · 2026-10-20 21:26:34 -05:00 · 2026-10-20 21:18:33 -05:00
3 changed files with 4 additions and 4 deletions
@@ -1,12 +1,12 @@
 version: 2.1
 setup: true
 orbs:
-  qqq-orb: kingsrook/qqq-orb@0.7.11
+  qqq-orb: kingsrook/qqq-orb@0.7.9
 workflows:
  setup:
    jobs:
    - qqq-orb/generate_pipeline:
-        orb_version: 0.7.11
+        orb_version: 0.7.9
        filters:
          branches:
            ignore: automation/qbit-rc-pending
@@ -42,7 +42,7 @@ permissions:
  checks: read
 jobs:
  release:
-    uses: QRun-IO/qqq-orb/.github/workflows/qqq-all-release.yml@0f33ddadf88b9a1b940b8883782fe2000ee1d2bd
+    uses: QRun-IO/qqq-orb/.github/workflows/qqq-all-release.yml@65265e48a4176d8fb0f4f744e2919bad587bd5ca
    with:
      version: ${{ inputs.version }}
      release_sha: ${{ inputs.release_sha }}
@@ -1,5 +1,5 @@
 profile: all
-orb_version: 0.7.11
+orb_version: 0.7.9
 default_branch: develop
 publish:
  snapshot: true
Author	SHA1	Message	Date
james.maesandCodex	4490545c4f	fix: accept leading-dash Mongo credentials in Compose Use explicit username/password option assignments in health and replica-set initialization. Reproduced the original failure and verified authenticated ping with the corrected arguments against mongo:7 and a leading-dash fixture password. Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 21:48:30 -05:00
james.maesandCodex	e13bda1d8a	test: verify the HttpOnly OIDC session contract Current QQQ omits the session UUID from JSON for HttpOnly cookies. Require the nonempty HttpOnly cookie and reject exposed UUIDs, retaining authenticated backend and permission checks. Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 21:37:27 -05:00
james.maesandCodex	654e1c265a	fix: use shared SDK v2 S3 support for MinIO Replace obsolete SDK v1 client overrides with upstream endpoint and path-style metadata. Preserve endpoint coverage for every filesystem action and local HTTP listing/write assertions. Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 21:26:34 -05:00
james.maesandCodex	718ca93b0c	ci: centralize All builds smoke checks and releases Use orb 0.7.9 and its immutable shared release worker. Build once, preserve core/full verification and conditional public GHCR delivery, and consume public Circle provenance without exporting a token. Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 21:18:33 -05:00