5 Commits

Include renames

Author	SHA1	Message	Date
timothyandClaude Opus 4.8	d9cdff8154	docs: record Central Package Management + scheduled vuln scan (#14) [skip ci] ... - ci-cd.md: new "Dependency management" section (CPM, NuGet audit, scheduled dependency-scan.yml); Dockerfile notes now list Directory.Packages.props and why it's required before restore. - CLAUDE.md: dependency convention (edit central Directory.Packages.props, never re-add Version=); correct the test framework note (NUnit, not xUnit). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-27 01:33:44 +02:00
timothyandClaude Opus 4.8	0e5e6ebc72	docs: note Gitea drops runs on rapid back-to-back pushes [skip ci] ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 00:44:23 +02:00
timothyandClaude Opus 4.8	c7aad4689e	docs: enshrine the fork versioning scheme ... Document upstream's vYY.<release-seq>.<patch> scheme (year, sequential release-in-year, patch) in docs/ci-cd.md + CLAUDE.md so we follow it going forward: <release-seq> is NOT the calendar month (v25.2.0 shipped in June, v26.3.0 in Feb), it's a per-year counter that resets each January. v26.3.1 = our infra-only rebuild of upstream 26.3.0; v26.4.0 reserved for the first release with app changes. Also notes the [skip ci]-on-a-tagged-commit gotcha. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 00:29:13 +02:00
timothy	45627ede82	ci: harden build pipeline per adversarial review ... - Add concurrency group so the single jazz runner can't run the push-main-then-push-tag release flow in parallel (shared :buildcache + smoke container would collide). - Add pull_request trigger running the test job only (PRs had no gate); skip the build job on PRs. - Only push images from main or a v* tag (workflow_dispatch from other refs now builds without publishing, instead of clobbering :latest/:prod). - Replace the log-grep smoke check with a real HTTP readiness probe (docker exec python3 -> http://localhost:8409/), unique container name, and trap-based cleanup to avoid leaks on cancel. - dotnet test now runs -c Release --no-build (was rebuilding in Debug). - Directory.Build.props: WarningsAsErrors=NU1904 so critical NuGet advisories block in every project, not just ones with TreatWarningsAsErrors. - Dockerfile copies global.json + .editorconfig too, so the image build matches CI's SDK pin and analyzer severities. - Remove dead .github/dependabot.yml + FUNDING.yml (upstream-pointed). - Rewrite docs/ci-cd.md to the implemented pipeline. Refs #4, #3, #8.	2026-06-27 00:01:22 +02:00
timothyandClaude Opus 4.6	e58bb9af21	Move CI/CD reference docs from memory to in-repo docs/ ... Moves ci-cd.md (59 lines) from Claude memory into docs/ alongside existing architecture docs. Slims MEMORY.md from 42 to 18 lines by removing sections duplicated in CLAUDE.md (Tech Stack, Key Patterns, Architecture Docs index). Total memory load per session: 101 → 18 lines. Fixes #7 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 20:03:31 +01:00