8 commits

Author	SHA1	Message	Date
Pier-Jean Malandrino	19fa3e31a8	fix(ci): download only required artifacts in release summary ... The Release summary job was downloading ALL artifacts (~780 MB) including Docker images it never uses. The 648 MB docker-image-local consistently timed out after 5 retries. Now downloads only the 4 small artifacts actually needed (~2 KB total).	2026-04-10 09:58:33 +02:00
Pier-Jean Malandrino	ce6661ddcf	fix(ci): pin GitHub Actions to Node 24-compatible versions ... checkout v4 → v4.3.1, upload-artifact v4 → v4.6.2, download-artifact v4 → v4.3.0 — fixes artifact download failures caused by Node.js 20 deprecation on GitHub runners.	2026-04-10 09:41:25 +02:00
Pier-Jean Malandrino	527bf0b6cd	revert: restore @critical tag for e2e UI tests in release-gate	2026-04-10 08:40:51 +02:00
Pier-Jean Malandrino	81d4c445e1	fix(ci): use @ui tag instead of @critical for e2e UI tests	2026-04-09 17:23:59 +02:00
Pier-Jean Malandrino	0e5e088438	fix(ci): fix Trivy action version (v0.35.0)	2026-04-09 13:36:49 +02:00
Pier-Jean Malandrino	2aa56d8ca2	fix(ci): fix audit-checks crash (set -e + grep exit code + ANSI in output)	2026-04-09 13:25:15 +02:00
Pier-Jean Malandrino	3c9d09c4e2	ci: remove duplicate push trigger from release-gate	2026-04-09 13:22:25 +02:00
Pier-Jean Malandrino	941028e705	ci: add release-gate pipeline, fix CI duplication, add OSS playbook docs ... - Add release-gate.yml: 11-job pipeline (lint, tests, Docker build/smoke, Trivy scan, dep audit, audit checks, e2e API+UI, PR summary comment) - Fix CI double-trigger on release branches (push + PR) - Add CODE_OF_CONDUCT.md, SECURITY.md, PR template - Add docs: git-workflow, architecture (ADR), release, operations, community - Add profiles/fastapi-vue for automated audit checks - Add docs/PROCESSES.md: index of 19 available processes	2026-04-09 13:20:43 +02:00