chore(release): Helios v1.8.0 by FelixTJDietrich · Pull Request #1192 · ls1intum/Helios

FelixTJDietrich · 2026-07-07T09:19:36Z

Release v1.8.0 — promotes staging to main for the production release. Squash-merged to keep main history linear.

Ships (since v1.7.2):

✨ Pipeline view: always-visible Build/Tests/Quality nodes mapped to CI jobs (feat(pipeline): canonical Build/Tests/Quality nodes mapped to CI jobs #1187), five clear states + fail-fast + merge-readiness badge (feat(pipeline): distinct node states, fail-fast, and a merge-readiness gate #1191), scoped to configured repos with a workflow-group fallback for others (fix(pipeline): scope canonical nodes to configured repos, group fallback for others #1189)
🛠️ Per-project data isolation via explicit per-query filtering (refactor: explicit per-repository query filtering + @Transactional cleanup (Option B) #1182), Keycloak session-lifespan fix that stops frequent re-login (fix(keycloak): stop frequent re-login by enforcing realm session lifespans #1188), long workflow names kept inside the pipeline card (fix(client): keep long workflow names inside the pipeline card #1181)

See the v1.8.0 release notes for the full, human-readable highlights and the complete changelog (v1.7.2...v1.8.0).

@transactional

…eanup (Option B) (#1182) Replace the implicit Hibernate gitRepositoryFilter tenant magic with explicit per-query repository filtering, and remove unnecessary @transactional. Closes latent cross-repository read/write leaks (findById/PK loads were never covered by the filter) and the write-on-GET on settings, converts the accidental Issue.body @lob (PostgreSQL Large Object) to a plain text column (V57), and scopes the workflow-label / deployment-workflow-attach / workflow-group-membership write paths to the current repository. Verified: full server test suite green (470 tests), all CI checks green, staging-deployed and smoke-tested.

…#1187) Persist workflow_job events (WorkflowJob + V58) and render a fixed, config-driven set of canonical pipeline nodes (helios.pipeline) mapped to Artemis CI job names. New /api/pipeline/{branch,pr}; client renders every node always (pending until a job appears). Full server suite + client spec green; config documented in docs/admin/pipeline_configuration.rst.

…7d/30d) (#1188) Stops the ~8h forced re-login: the running helios realm capped sessions at 28800s and --import-realm is a no-op on an existing realm. Adds an isolated, non-blocking one-shot keycloak-config service (prod + dev) that idempotently applies 7d idle / 30d max via kcadm on every deploy. Verified on staging (28800 -> 604800/2592000). Docs: docs/admin/keycloak_sessions.rst.

…ack for others (#1189) The canonical Build/Tests/Quality catalog is Artemis-shaped and global, so other repos (e.g. ls1intum/Helios) showed an all-pending skeleton and lost their group view. Gate the catalog to helios.pipeline.repositories (default ls1intum/Artemis); every other repo falls back to its WorkflowGroup-based pipeline. Guarded by PipelineIT.

…s gate (#1191)

codacy-production · 2026-07-07T09:19:57Z

Not up to standards ⛔

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

github-actions · 2026-07-07T09:20:04Z

+ * another repository into their group. Membership workflows must belong to the path repository: a
+ * foreign workflow id is rejected (400) and no membership is created for it.
+ */
+class WorkflowGroupScopingIT extends HeliosIntegrationTest {


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'WorkflowGroupScopingIT' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:04Z

+  }
+
+  @Test
+  void addingAWorkflowFromAnotherRepositoryToAGroupIsRejectedAndCreatesNoMembership()


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'addingAWorkflowFromAnotherRepositoryToAGroupIsRejectedAndCreatesNoMembership' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:04Z

+  }
+
+  @Test
+  void addingAWorkflowFromTheSameRepositoryToAGroupSucceeds() throws Exception {


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'addingAWorkflowFromTheSameRepositoryToAGroupSucceeds' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:04Z

+ * repository with no settings row it returns transient defaults and persists nothing. Previously a
+ * GET INSERTed a row as a side effect, and a plain GET must never write.
+ */
+class GitRepoSettingsIT extends HeliosIntegrationTest {


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'GitRepoSettingsIT' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:04Z

+  }
+
+  @Test
+  void getSettingsReturnsDefaultsAndDoesNotPersistARow() throws Exception {


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'getSettingsReturnsDefaultsAndDoesNotPersistARow' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:05Z

+ * request or workflow-run id; a foreign id must not surface another repository's test results. The
+ * entry lookups are scoped, so cross-repo and no-header (unauthenticated) requests must 404.
+ */
+class TestResultScopingIT extends HeliosIntegrationTest {


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.naming.AbbreviationAsWordInNameCheck> _{reported by reviewdog 🐶}
Abbreviation in name 'TestResultScopingIT' must contain no more than '1' consecutive capital letters.

github-actions · 2026-07-07T09:20:05Z

+import org.springframework.test.web.servlet.MockMvc;
+
+/**
+ * Base class for full-context integration tests. Boots the whole application against a real embedded


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.sizes.LineLengthCheck> _{reported by reviewdog 🐶}
Line is longer than 100 characters (found 101).

github-actions · 2026-07-07T09:20:05Z

+ * PostgreSQL (zonky, via Docker) with the real Flyway schema, and exposes {@link MockMvc} so tests
+ * drive the actual servlet stack — interceptors, Open-Session-In-View, and the repository layer.
+ *
+ * <p>This is the harness for the tenant-isolation guard tests: it exercises the same request path that


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.sizes.LineLengthCheck> _{reported by reviewdog 🐶}
Line is longer than 100 characters (found 103).

github-actions · 2026-07-07T09:20:05Z

+ * production uses, so a scoping test written here passes both with the legacy Hibernate
+ * {@code gitRepositoryFilter} and with explicit per-query filtering after the migration.
+ *
+ * <p>External integrations that would otherwise reach out on startup are neutralised: NATS is disabled


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.sizes.LineLengthCheck> _{reported by reviewdog 🐶}
Line is longer than 100 characters (found 103).

github-actions · 2026-07-07T09:20:05Z

+ * {@code gitRepositoryFilter} and with explicit per-query filtering after the migration.
+ *
+ * <p>External integrations that would otherwise reach out on startup are neutralised: NATS is disabled
+ * ({@code nats.enabled=false}), the schedulers/reconciliation/notifications/AI are turned off, and the


🚫 [checkstyle] <com.puppycrawl.tools.checkstyle.checks.sizes.LineLengthCheck> _{reported by reviewdog 🐶}
Line is longer than 100 characters (found 103).

FelixTJDietrich · 2026-07-07T10:01:57Z

Closing in favour of the repo's direct promotion: staging is fast-forwarded onto main (all commits preserved, identical history — no squash, no merge commit), and the release is cut from that commit. Tracking via the v1.8.0 release.

krusche and others added 5 commits July 6, 2026 12:04

feat(pipeline): distinct node states, fail-fast, and a merge-readines…

7d408d4

…s gate (#1191)

FelixTJDietrich requested a review from a team as a code owner July 7, 2026 09:19

github-actions Bot assigned FelixTJDietrich Jul 7, 2026

github-actions Bot added documentation Improvements or additions to documentation client application-server migration-script size:XXL labels Jul 7, 2026

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

FelixTJDietrich closed this Jul 7, 2026

FelixTJDietrich temporarily deployed to production July 7, 2026 10:08 — with GitHub Actions Inactive

FelixTJDietrich temporarily deployed to staging July 7, 2026 14:57 — with GitHub Actions Inactive

FelixTJDietrich temporarily deployed to staging July 7, 2026 15:11 — with GitHub Actions Inactive

FelixTJDietrich temporarily deployed to staging July 7, 2026 15:33 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(release): Helios v1.8.0#1192

chore(release): Helios v1.8.0#1192
FelixTJDietrich wants to merge 5 commits into
mainfrom
staging

FelixTJDietrich commented Jul 7, 2026

Uh oh!

codacy-production Bot commented Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

github-actions Bot Jul 7, 2026

Uh oh!

FelixTJDietrich commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

FelixTJDietrich commented Jul 7, 2026

Uh oh!

codacy-production Bot commented Jul 7, 2026

Not up to standards ⛔

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

FelixTJDietrich commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants