AI-assisted: OpenCode (Claude Opus 4.6)

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.16

See merge request !1408

Add mirror-aware release platform rules for goreleaser and semantic-release

See merge request !1398

## [3.17.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-04-13)

### Features

* add mirror-aware release platform rules for goreleaser and semantic-release ([113bb6d0](113bb6d0))

### Dependencies

* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.16 ([cbc4f0ef](cbc4f0ef))

chore(deps): update dependency gitlab-com/gl-infra/platform/runway/runwayctl to v4.24.0

See merge request !1410

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.17

See merge request !1412

chore(deps): update dependency mvdan/sh to v3.13.1

See merge request !1418

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.45.0

chore(deps): update dependency bridgecrewio/checkov to v3.2.517

See merge request !1416

chore(deps): update dependency mikefarah/yq to v4.52.5

See merge request !1417

chore(deps): update ghcr.io/containerbase/base docker tag to v14.6.20

See merge request !1419

chore(deps): update node.js to v24.14.1

See merge request !1421

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.45.0

See merge request !1423

chore(deps): update dependency open-policy-agent/conftest to v0.68.0

See merge request !1425

chore(deps): update dependency jdx/mise to v2026.4.5

See merge request !1424

The regex /\/security\// in the release_platform_enabled guard rules
required a trailing slash after 'security', which fails for projects that
are direct children of the gitlab-org/security group where
$CI_PROJECT_NAMESPACE is 'gitlab-org/security' (no trailing slash).

Change the regex to /\/security(\\/|$)/ which matches either a trailing
slash (for sub-groups) or end-of-string (for direct children).

[delay release]

AI-assisted: OpenCode (Claude Opus 4.6)

chore(deps): update golang-patch to v1.26.2 (patch)

See merge request !1420

chore(deps): update dependency open-policy-agent/opa to v1.15.1

See merge request !1426

chore(deps): update dependency renovate to v43.106.0

See merge request !1427

Correct security namespace regex to match direct children of /security/ group

See merge request !1414

## [3.17.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-04-14)

### Fixes

* correct security namespace regex to match direct children of /security/ group ([4008a807](4008a807))

### Dependencies

* **deps:** update dependency bridgecrewio/checkov to v3.2.517 ([51fb16e3](51fb16e3))
* **deps:** update dependency gitlab-com/gl-infra/platform/runway/runwayctl to v4.24.0 ([411b505e](411b505e))
* **deps:** update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.45.0 ([9af6e243](9af6e243))
* **deps:** update dependency jdx/mise to v2026.4.5 ([39406187](39406187))
* **deps:** update dependency mikefarah/yq to v4.52.5 ([16e3c383](16e3c383))
* **deps:** update dependency mvdan/sh to v3.13.1 ([3aea5809](3aea5809))
* **deps:** update dependency open-policy-agent/conftest to v0.68.0 ([fa7c5134](fa7c5134))
* **deps:** update dependency open-policy-agent/opa to v1.15.1 ([d7d5bae0](d7d5bae0))
* **deps:** update dependency renovate to v43.106.0 ([2ae233c5](2ae233c5))
* **deps:** update ghcr.io/containerbase/base docker tag to v14.6.20 ([ad5b92de](ad5b92de))
* **deps:** update golang-patch to v1.26.2 ([0d8650de](0d8650de))
* **deps:** update node.js to v24.14.1 ([a13fd3d9](a13fd3d9))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.17 ([fb74bbed](fb74bbed))