Merge pull request 'ci: use ci-workflows@v1 again' (#66) from ci/pin-v1 into develop

v1 now contains node.yaml publishing (ci-workflows 0e0f145).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.circleci/config.yml

@@ -1,14 +0,0 @@
-version: 2.1
-setup: true
-orbs:
-  qqq-orb: kingsrook/qqq-orb@0.8
-workflows:
-  setup:
-    jobs:
-    - qqq-orb/generate_pipeline:
-        orb_version: '0.8'
-        filters:
-          branches:
-            ignore: automation/qbit-rc-pending
-          tags:
-            only: /.*/

.gitea/workflows/build.yaml

@@ -0,0 +1,17 @@
+name: build
+on:
+  push:
+jobs:
+  node:
+    # @main until the owner moves ci-workflows v1 onto the publishing node.yaml; then back to @v1.
+    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/node.yaml@v1
+    secrets: inherit
+    with:
+      node-version: '24'
+      commands: |
+        npm run lint
+        npm test
+        npm run prepublishOnly
+      # A vX.Y.Z[-RC.N] tag equal to package.json publishes @qrunio/qqq-frontend-core to the
+      # QRun-IO Gitea npm registry (RC -> dist-tag next). Branches only verify.
+      publish: true

.gitea/workflows/qrun-release.yaml

@@ -1,37 +0,0 @@
-name: QRun original Node release
-on:
-  push:
-    branches: ['**']
-  create:
-  workflow_dispatch:
-# Thin caller default stays READ.
-permissions:
-  contents: read
-  actions: read
-jobs:
-  release:
-    # Tag creation bypasses the forge's [skip ci] push suppression. Push is branch-only, so a tag has one route.
-    if: ${{ github.event_name != 'create' || (github.event.ref_type == 'tag' && github.event.ref == github.ref && (startsWith(github.ref, 'refs/tags/publish') || startsWith(github.ref, 'refs/tags/v'))) }}
-    # Ceiling only: the callee's isolated version and cleanup jobs declare their own contents: write; every other callee job is READ.
-    # No NPM_TOKEN, no OIDC, no registry secret is passed. Not rolled out to any caller.
-    permissions:
-      contents: write
-      actions: read
-    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/qrun-node-release.yaml@qrun-release-v1
-    with:
-      runner: linux-small
-  postpublish:
-    needs: release
-    if: ${{ success() && needs.release.outputs.computed-version != '' }}
-    permissions:
-      contents: write
-      actions: read
-    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/qrun-node-finalize.yaml@qrun-release-v1
-    with:
-      runner: linux-small
-      mode: ${{ needs.release.outputs.mode }}
-      version: ${{ needs.release.outputs.computed-version }}
-      dist-tag: ${{ needs.release.outputs.dist-tag }}
-      built-commit: ${{ needs.release.outputs.built-commit }}
-      build-job-id: ${{ needs.release.outputs.build-job-id }}
-      run-attempt: ${{ needs.release.outputs.run-attempt }}

.qqq-ci.yml

@@ -1,4 +0,0 @@
-profile: frontend-core
-orb_version: '0.8'
-default_branch: develop
-node_version: '24.21'

README.md

@@ -35,6 +35,17 @@ If you want a ready-to-use admin UI, use [qqq-frontend-material-dashboard](https
 npm install @qrunio/qqq-frontend-core
 ```
 
+Releases are published to the QRun-IO Gitea npm registry (release candidates under the `next`
+dist-tag). Point the scope there in `.npmrc`:
+
+```ini
+@qrunio:registry=https://git.kof22.com/api/packages/QRun-IO/npm/
+//git.kof22.com/api/packages/QRun-IO/npm/:_authToken=${GITEA_TOKEN}
+```
+
+To release: set the version (`npm version 0.41.0-RC.1 --no-git-tag-version`), merge, and tag the
+merge commit `v<version>`; CI verifies the tag equals `package.json`, runs the checks and publishes.
+
 ```typescript
 import { QController } from '@qrunio/qqq-frontend-core';
 

package-lock.json

@@ -1,12 +1,12 @@
 {
    "name": "@qrunio/qqq-frontend-core",
-   "version": "0.40.21-SNAPSHOT",
+   "version": "0.40.27-RC.1",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
       "": {
          "name": "@qrunio/qqq-frontend-core",
-         "version": "0.40.21-SNAPSHOT",
+         "version": "0.40.27-RC.1",
          "license": "Apache-2.0",
          "dependencies": {
             "axios": "0.34.0",

package.json

@@ -1,6 +1,6 @@
 {
    "name": "@qrunio/qqq-frontend-core",
-   "version": "0.40.27-SNAPSHOT",
+   "version": "0.40.27-RC.1",
    "description": "",
    "main": "lib-cjs/qqq-frontend-core.js",
    "module": "lib/qqq-frontend-core.js",
@@ -33,7 +33,7 @@
       "url": "https://github.com/QRun-IO/qqq-frontend-core"
    },
    "publishConfig": {
-      "registry": "https://registry.npmjs.org/"
+      "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
    },
    "devDependencies": {
       "@types/jest": "^27.0.2",