fix(ci): serialize Docker release image sets - #1621

Draft

seonghobae wants to merge 18 commits into

fix/docker-publish-pr-concurrencyfrom

autoresearch/0909

Commits on Sep 8, 2026

fix(ci): coalesce Bandit pull request scans

seonghobae
and
codex
committed
acb374e
chore(ci): defer Bandit concurrency to canonical owner
seonghobae
committed
55d601c
merge(ci): adopt protected develop while preserving Bandit provenance
seonghobae
committed
c1286c1

Commits on Sep 9, 2026

experiment: add PR-scoped concurrency to Bandit scan
seonghobae
committed
b609301
experiment: scope Docker PR validation to job-level concurrency
seonghobae
committed
f6ad4dd
experiment: standardize PR concurrency groups to workflow-repository-PR/ref
seonghobae
committed
2aa1235
fix(ci): serialize Docker tag publishes per ref, never cancel releases
seonghobae
committed
1032993
fix(ci): scope Docker PR validation concurrency per matrix component
seonghobae
committed
22f3532
fix(ci): isolate matrix image publication groups
seonghobae
committed
562338e
test(ci): pin queued release publication semantics
seonghobae
committed
55e0588
fix(ci): queue release image publishes without cross-component eviction
seonghobae
committed
12d8cac
test(ci): require whole-release image serialization
seonghobae
committed
86ea640
fix(ci): serialize whole release image sets
seonghobae
committed
c8b565e
test(ci): follow release workflow decomposition
seonghobae
committed
e4ab2ab
docs(ci): record release-set serialization decision
seonghobae
committed
2e09118
test(ci): reject prerelease latest publication
seonghobae
committed
d5b1e09
fix(ci): fail closed on prerelease latest tags
seonghobae
committed
0d45b53
docs(ci): bind stable latest to release contract
seonghobae
committed
6e1378c