Release: sync main with dev/integration

.github/pull_request_template.md

@@ -0,0 +1,22 @@
+## Summary
+- [ ] FE / [ ] BE / [ ] CONTRACT / [ ] HOTFIX
+
+### 변경 요약
+(간단히 무엇을 왜 변경했는지)
+
+## Tests
+- [ ] Unit
+- [ ] Integration (DB/S3)
+- [ ] E2E (선택)
+
+## Breaking?
+- [ ] OpenAPI 변경 (브레이킹 여부: Yes / No)
+- [ ] DB 마이그레이션(Flyway)
+
+## Checklist
+- [ ] 변경 라인수 ±300 내 유지
+- [ ] 관련 문서/주석 업데이트
+- [ ] 필요 시 피처 플래그 추가/조정
+
+## Screenshots / API Samples (Optional)
+(필요하면 첨부)

.github/workflows/be-ci.yml

@@ -0,0 +1,27 @@
+name: BE CI
+on:
+  pull_request:
+    branches: [ "dev/integration", "main" ]
+    paths:
+      - 'build.gradle.kts'
+      - 'settings.gradle*'
+      - 'gradle/**'
+      - 'src/**'
+      - '.github/workflows/be-ci.yml'
+jobs:
+  be:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '21'
+          cache: gradle
+      - name: Gradle Test
+        run: |
+          ./gradlew --version
+          ./gradlew clean test -i

.github/workflows/be-integration.yml

@@ -0,0 +1,34 @@
+name: BE Integration (Optional)
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [ "dev/integration", "main" ]
+    paths:
+      - 'src/**'
+      - 'build.gradle.kts'
+      - '.github/workflows/be-integration.yml'
+jobs:
+  integration-tests:
+    runs-on: ubuntu-latest
+    services:
+      mysql:
+        image: mysql:8
+        env:
+          MYSQL_DATABASE: app
+          MYSQL_ROOT_PASSWORD: root
+        ports:
+          - 3306:3306
+        options: >-
+          --health-cmd="mysqladmin ping -h 127.0.0.1 -proot"
+          --health-interval=10s --health-timeout=5s --health-retries=10
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '21'
+          cache: gradle
+      - name: Run Integration Tests
+        run: |
+          ./gradlew test -i -Pintegration

.github/workflows/contract-check.yml

@@ -0,0 +1,42 @@
+name: Contract Check
+on:
+  pull_request:
+    branches: [ "dev/integration", "main" ]
+    paths:
+      - 'build.gradle.kts'
+      - 'src/**'
+      - '.github/workflows/contract-check.yml'
+jobs:
+  openapi-diff:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '21'
+          cache: gradle
+      - name: Generate OpenAPI (springdoc plugin)
+        run: |
+          VER=$(./gradlew properties -q | grep '^version:' | awk '{print $2}')
+          export APP_VERSION=${VER}
+          ./gradlew generateOpenApiDocs -q || ./gradlew generateOpenApiDocs
+          ls -R build/openapi || true
+      - name: Copy generated spec
+        run: |
+          cp build/openapi/openapi.yaml openapi-pr.yaml || echo '{}' > openapi-pr.yaml
+      - name: Fetch base spec from dev/integration
+        run: |
+          git fetch origin dev/integration:refs/remotes/origin/dev/integration
+          git show origin/dev/integration:build/openapi/openapi.yaml > openapi-base.yaml || echo '{}' > openapi-base.yaml
+      - name: Setup Node for diff
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - name: Install redocly CLI & diff
+        run: |
+          npm i -g @redocly/cli
+          redocly diff openapi-base.yaml openapi-pr.yaml --fail-on='breaking-changes' || { echo 'OpenAPI breaking changes detected'; exit 1; }

.github/workflows/fe-ci.yml

@@ -0,0 +1,37 @@
+name: FE CI
+on:
+  pull_request:
+    branches: [ "dev/integration", "main" ]
+    paths:
+      - 'itdaing-web/**'
+      - '.github/workflows/fe-ci.yml'
+jobs:
+  fe:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: itdaing-web
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'pnpm'
+          cache-dependency-path: 'itdaing-web/pnpm-lock.yaml'
+      - name: Enable corepack & install deps
+        run: |
+          corepack enable
+          corepack prepare pnpm@9.15.0 --activate
+          pnpm --version
+          pnpm install --frozen-lockfile
+      - name: Lint
+        run: pnpm lint
+      - name: Typecheck
+        run: pnpm typecheck
+      - name: Unit Tests
+        run: pnpm test
+      - name: Build
+        run: pnpm build

.github/workflows/publish-docs.yml

@@ -0,0 +1,120 @@
+name: Publish API Docs (OpenAPI + Swagger UI)
+
+# 단일 워크플로로 통합하여 gh-pages 경쟁/취소 문제 해결
+# actions/upload-pages-artifact + actions/deploy-pages 사용 (GitHub Pages 권장 방식)
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ dev/integration, main, master ]
+    paths:
+      - 'src/**'
+      - 'docs/**'
+      - 'README.md'
+      - 'build.gradle.kts'
+      - 'settings.gradle.kts'
+      - 'src/main/resources/application-openapi.yml'
+      - '.github/workflows/publish-docs.yml'
+
+permissions:
+  contents: read      # 소스 읽기
+  pages: write        # Pages 배포 권한
+  id-token: write     # deploy-pages OIDC 필요
+
+concurrency:
+  group: pages-publish
+  cancel-in-progress: true
+
+jobs:
+  build-docs:
+    runs-on: ubuntu-latest
+    env:
+      SPRING_PROFILES_ACTIVE: openapi
+      SERVER_PORT: 8080
+      JWT_SECRET: ci-docs-secret-please-replace-0123456789-abcdefghijklmnopqrstuvwxyz-long-key
+      JWT_ISSUER: itdaing-server
+      JWT_ACCESS_TOKEN_EXPIRATION: "900000"
+      JWT_REFRESH_TOKEN_EXPIRATION: "604800000"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '21'
+
+      - name: Prepare Gradle wrapper
+        run: chmod +x ./gradlew
+
+      - name: Generate OpenAPI spec
+        run: |
+          VER=$(./gradlew properties -q | grep '^version:' | awk '{print $2}')
+          export APP_VERSION=${VER}
+          ./gradlew --no-daemon clean generateOpenApiDocs
+          ls -lah build/openapi || true
+
+      - name: Assemble static site
+        run: |
+          SITE=site
+          mkdir -p "$SITE"
+          cp build/openapi/openapi.yaml "$SITE/openapi.yaml"
+          cat > "$SITE/index.html" <<'EOF'
+          <!doctype html>
+          <html lang="ko">
+          <head>
+            <meta charset="utf-8" />
+            <meta name="viewport" content="width=device-width, initial-scale=1" />
+            <title>DA-ITDAING API Docs</title>
+            <link rel="stylesheet" href="https://unpkg.com/swagger-ui-dist@5/swagger-ui.css" />
+            <style>body{margin:0;font-family:system-ui,-apple-system} .topbar{display:none}</style>
+          </head>
+          <body>
+            <div id="swagger-ui"></div>
+            <script src="https://unpkg.com/swagger-ui-dist@5/swagger-ui-bundle.js"></script>
+            <script>
+              fetch('./openapi.yaml')
+                .then(r => r.json())
+                .then(spec => {
+                  document.title = `${(spec.info?.title||'API Docs')} - ${(spec.info?.version||'v')}`;
+                  window.ui = SwaggerUIBundle({
+                    spec,
+                    dom_id: '#swagger-ui',
+                    layout: 'BaseLayout'
+                  });
+                });
+            </script>
+          </body>
+          </html>
+          EOF
+          echo "Site assembled: $(ls -1 $SITE)"
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: site
+
+  deploy:
+    needs: build-docs
+    runs-on: ubuntu-latest
+    # dev/integration은 환경 보호 규칙으로 배포 금지되어 있어 스킵
+    if: ${{ github.ref_name == 'main' || github.ref_name == 'master' }}
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
+
+  note-when-skipped:
+    needs: build-docs
+    runs-on: ubuntu-latest
+    if: ${{ github.ref_name != 'main' && github.ref_name != 'master' }}
+    steps:
+      - name: Note skipped deploy
+        env:
+          REF_NAME: ${{ github.ref_name }}
+        run: |
+          echo "Deploy skipped: Branch '${REF_NAME}' is not permitted to deploy to GitHub Pages by environment protection rules. Artifact uploaded instead."

.github/workflows/publish-openapi.yml

@@ -1,16 +1,8 @@
-name: Publish OpenAPI to GitHub Pages
+name: (legacy) Publish OpenAPI to GitHub Pages
 
 on:
+  # 수동으로만 실행되도록 전환 (자동 푸시는 publish-docs.yml 단일 워크플로 사용)
   workflow_dispatch:
-  push:
-    branches: [ backend, main, master ]
-    paths:
-      - 'src/**'
-      - 'docs/**'
-      - 'README.md'
-      - 'build.gradle.kts'
-      - 'settings.gradle.kts'
-      - '.github/workflows/publish-openapi.yml'
 
 # Ensure the GITHUB_TOKEN can push to gh-pages
 permissions:
@@ -46,7 +38,10 @@ jobs:
         uses: gradle/actions/setup-gradle@v3
 
       - name: Generate OpenAPI docs
-        run: ./gradlew --no-daemon clean generateOpenApiDocs
+        run: |
+          VER=$(./gradlew properties -q | grep '^version:' | awk '{print $2}')
+          export APP_VERSION=${VER}
+          ./gradlew --no-daemon clean generateOpenApiDocs
 
       - name: Prepare static Swagger site
         run: |