[jondricek]

Summary

main → next (synchronized)
       next → beta (this PR)
              beta → alpha (wait for this PR to merge, then reassess)

Propagate release-track coverage reports, enrollment-history evidence, optional corporate CA trust during container builds, and supporting OpenAPI/documentation updates. No synchronization-only changes.

Source next: 67352428e617ef90da6d678e3173e90daa5ec013.
Destination beta: 401a3719eed71852a04b7872ede5cb8137fcb506.

Draft — not validated: the full local suite failed; not ready to merge.

Evidence

• Before: beta lacks five source commits by ancestry (four non-merge patches, all unmatched by git cherry).
  After: a clean simulated merge produces tree 7e2ce36383a9ba9f2023b964119ba0278cc8918e, identical to next: 16 files, +1038/-2. No patch-equivalent or squash ambiguity found.

• Validation performed in an isolated temporary worktree with Node 22.23.4; developer checkout untouched. Focused release-track coverage spec: 11 passing. npm ci, lint, lockfile, commitlint, diff whitespace check, and dependency signatures pass (1093 signatures; 144 attestations).

• Full npm test: OpenAPI 2 and config 22 passed; API 1181 passed / 2 failed. Both failures in virtual-snapshot-schedule-validation.spec.js: “accepts and persists the fields defined by each schedule mode” and “replaces schedule mode fields instead of retaining stale selectors”, both read ECONNRESET. The affected file passes isolation: 12 passing. Middleware 29 and scheduler 15 passed separately because the full command short-circuited. These isolation passes do not establish full-suite success. No tests changed or skipped. Required next step: full-suite validation on these current tips before marking ready.

Merge Danger

Door: two-way

Blast Radius: API

Adds a read-only reporting endpoint and changes optional build-time CA handling. Container images were not built during this synchronization run. External Bruno collection was not inspected under the repository-only restriction.

Merge with a merge commit or ancestry-preserving fast-forward; do not squash or rebase. Do not propagate to alpha until this PR actually merges and release tips are fetched again.

Proposed merge message: chore(sync): merge next into beta.

[jondricek]

Validation status: not validated; keep draft. On source 67352428e617ef90da6d678e3173e90daa5ec013 and destination 401a3719eed71852a04b7872ede5cb8137fcb506, the isolated clean merge has tree 7e2ce36383a9ba9f2023b964119ba0278cc8918e.

Full npm test passed OpenAPI (2) and config (22), then API ended with 1181 passing / 2 failing: schedule-mode persistence and schedule-mode field replacement in app/tests/api/release-tracks/virtual-snapshot-schedule-validation.spec.js, both read ECONNRESET. That spec passes in isolation (12). Middleware (29) and scheduler (15) pass separately. Focused new coverage spec (11), lint, lockfile, commitlint and dependency signatures pass. No assertions, timeouts or tests were changed. Isolation suggests intermittent test/runtime interference but does not prove the cause or establish a full-suite pass.

Required next step: obtain passing full-suite evidence on current release tips before marking ready. Both tips were re-fetched immediately before creating this PR and were unchanged. Neither codex nor codex-automation labels is available. No release branches pushed; downstream propagation remains stopped until this PR actually merges with source ancestry preserved.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 96.41026% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.32%. Comparing base (4bfb2d6) to head (6735242).
⚠️ Report is 5 commits behind head on beta.

Files with missing lines	Patch %	Lines
app/controllers/reports-controller.js	76.47%	4 Missing ⚠️
...elease-tracks/release-track-registry.repository.js	75.00%	3 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##             beta     #523      +/-   ##
==========================================
+ Coverage   82.25%   82.32%   +0.06%     
==========================================
  Files         258      258              
  Lines       41833    42028     +195     
  Branches     5608     5624      +16     
==========================================
+ Hits        34410    34599     +189     
- Misses       7316     7322       +6     
  Partials      107      107              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.