v3.24.2 split `trigger-publish-pipeline` into `-auto` and `-manual`
jobs gated by `rules: if: $SYNC_TYPE == "..."`. This does not work:
GitLab evaluates `rules:if` at pipeline creation, before
`generate-publish-pipeline` runs. Variables inherited via
`needs:artifacts: true` from a dotenv report are not available at
that point (gitlab-org/gitlab#352326). Both trigger jobs matched no
rule (SYNC_TYPE was empty, upstream `never` rules did not fire on a
valid security-mirror tag pipeline), GitLab excluded both from the
pipeline, and no child sync ran. Verified on canary v1.6.4:

  https://gitlab.com/gitlab-org/security/release-platform-canary/-/pipelines/2502106761

Replace with a single `trigger-publish-pipeline` job that uses
`strategy: depend` so the parent surfaces sync failures. To prevent
the manual case (where the real sync jobs are `when: manual`) from
being marked `skipped` and propagating as a parent failure, the
generated child pipeline includes a `sync-start` no-op auto-job
(`GIT_STRATEGY: none`, single echo) that gives the child at least
one auto-startable job and lifts it out of `skipped`. Validated on
canary v1.6.5:

  https://gitlab.com/gitlab-org/security/release-platform-canary/-/pipelines/2502317110



Manitest assertions:
- testTriggerHasStrategyDepend locks `strategy: depend`.
- testChildHasSyncStartJob locks the `sync-start` job in the child.
- testSyncWhenCaseStatement and testChildYamlTemplatesWhen lock the
  SYNC_TYPE -> SYNC_WHEN mapping and child YAML `when:` templating.

Documentation in release-platform.md updated to describe the new
behaviour and how to navigate to the downstream pipeline.

Breaking change: `trigger-publish-pipeline-auto` and
`trigger-publish-pipeline-manual` (introduced in v3.24.2) are
removed. v3.24.2 was just released and no consumers reference these
names.

Related to delivery#22003

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

fix: replace broken auto/manual trigger split with sync-start + strategy: depend

See merge request !1476

## [4.0.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-05-05)

### ⚠️ BREAKING CHANGES

* `trigger-publish-pipeline-auto` and
`trigger-publish-pipeline-manual` (introduced in v3.24.2) are
removed. v3.24.2 was just released and no consumers reference these
names.

### Fixes

* replace broken auto/manual trigger split with sync-start + strategy: depend ([9097d217](9097d217)), closes [gitlab-org/gitlab#352326](https://gitlab.com/gitlab-org/gitlab/-/issues/) [delivery#22003](https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/)

fix(semantic-release): add canonical_v4_api input to standard template for semantic-release

See merge request !1478

## [4.0.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-05-06)

### Fixes

* **semantic-release:** add canonical_v4_api input to standard template for semantic-release ([3293ca0c](3293ca0c))

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v4

See merge request !1477

Fairway jobs depends on semantic relase and cannot be on the validate
stage.

fix: move fairway jobs to the release stage

See merge request !1481

## [4.0.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-05-07)

### Fixes

* move fairway jobs to the release stage ([afa238a0](afa238a0))

### Others

* bump fairway to v1.15.2 ([b89153f2](b89153f2))

### Dependencies

* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v4 ([df473d52](df473d52))