Add a release-platform CI component at templates/release-platform/ with
a placeholder manual publish job that runs on tag pipelines after
semantic_release. This is a standalone component (not part of standard
build) intended to be the single entry point for all release platform
CI functionality.

Future features (signing, attestation, SBOM verification) will be added
to this component — existing projects get them automatically on version
bumps without copier template changes.

Ref: delivery#21857

feat: add unified release-platform CI component

See merge request !1301

## [3.8.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-02-26)

### Features

* add unified release-platform CI component ([a7932a4d](a7932a4d))

chore(deps): update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.14

See merge request !1315

The release-platform-publish job had needs: ['semantic_release'], but
semantic_release never runs on tag pipelines (it has a rule that
excludes tags). This caused GitLab to reject tag pipelines with
'semantic_release does not exist in the pipeline'.

Change to needs goreleaser with optional: true, since goreleaser runs
on tag pipelines for Go projects and optional handles non-Go projects.

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.8

See merge request !1317

fix: use optional goreleaser dependency for release-platform-publish

See merge request !1316

## [3.8.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-02-27)

### Fixes

* use optional goreleaser dependency for release-platform-publish ([88fea3a7](88fea3a7))

### Dependencies

* **deps:** update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.14 ([0a88d8e0](0a88d8e0))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.8 ([8af8a765](8af8a765))

chore: add support for personal envrc configuration

See merge request !1318

chore(deps): update dependency bridgecrewio/checkov to v3.2.506

See merge request !1319

chore(deps): update dependency open-policy-agent/opa to v1.14.0

See merge request !1323

chore(deps): update node.js to v24.14.0

See merge request !1325

chore(deps): update dependency jdx/mise to v2026.3.0

See merge request !1320

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.41.1

chore(deps): update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.41.1

See merge request !1322

chore(deps): update dependency renovate to v43.49.0

See merge request !1324

chore(deps): update ghcr.io/containerbase/base docker tag to v14.4.12

See merge request !1321

chore: add ops.gitlab.net to Renovate rules

See merge request !1326

chore: install mise via install-tool in Renovate image

See merge request !1327

chore(ci): set FF_NETWORK_PER_BUILD=true in Docker build jobs to avoid build failures with private runners

chore(ci): set FF_NETWORK_PER_BUILD=true in Docker build jobs to avoid build...

See merge request !1332

chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/autolabels docker tag to v1.6.1

See merge request !1331

chore(deps): update golang-patch to v1.26.1 (patch)

See merge request !1335

chore(deps): update ghcr.io/containerbase/base docker tag to v14.5.2

See merge request !1338

chore(deps): update dependency renovate to v43.59.3

See merge request !1337

chore(deps): update dependency docker/cli to v29.3.0

See merge request !1336

chore(deps): update dependency jdx/mise to v2026.3.4

See merge request !1334

chore(deps): update dependency bridgecrewio/checkov to v3.2.507

See merge request !1333

chore(deps): update dependency jdx/mise to v2026.3.5

See merge request !1339

This is an empty commit to force a semantic-release patch version bump
for the CI fix originally merged in !1332.

fix(ci): set FF_NETWORK_PER_BUILD=true to resolve Docker build failures with private runners

See merge request !1340

## [3.8.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-03-09)

### Fixes

* **ci:** set FF_NETWORK_PER_BUILD=true to resolve Docker build failures with private runners ([2ed368c3](2ed368c3))

### Others

* add ops.gitlab.net to Renovate rules ([54fd2876](54fd2876))
* add support for personal envrc configuration ([beb77af2](beb77af2))
* **ci:** set FF_NETWORK_PER_BUILD=true in Docker build jobs to avoid build failures with private runners ([d5eb9948](d5eb9948))
* install mise via install-tool in Renovate image ([1a395c49](1a395c49))

### Dependencies

* **deps:** update dependency bridgecrewio/checkov to v3.2.506 ([58bee054](58bee054))
* **deps:** update dependency bridgecrewio/checkov to v3.2.507 ([0e838f63](0e838f63))
* **deps:** update dependency docker/cli to v29.3.0 ([3f44a392](3f44a392))
* **deps:** update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.41.1 ([1dc300e6](1dc300e6))
* **deps:** update dependency jdx/mise to v2026.3.0 ([dac85130](dac85130))
* **deps:** update dependency jdx/mise to v2026.3.4 ([3708ee2b](3708ee2b))
* **deps:** update dependency jdx/mise to v2026.3.5 ([6818d1d7](6818d1d7))
* **deps:** update dependency open-policy-agent/opa to v1.14.0 ([84294d8e](84294d8e))
* **deps:** update dependency renovate to v43.49.0 ([34ba6899](34ba6899))
* **deps:** update dependency renovate to v43.59.3 ([939db3be](939db3be))
* **deps:** update ghcr.io/containerbase/base docker tag to v14.4.12 ([e5b64536](e5b64536))
* **deps:** update ghcr.io/containerbase/base docker tag to v14.5.2 ([f0ec46cd](f0ec46cd))
* **deps:** update golang-patch to v1.26.1 ([50ee463d](50ee463d))
* **deps:** update node.js to v24.14.0 ([e689e9b6](e689e9b6))
* **deps:** update registry.gitlab.com/gitlab-com/gl-infra/autolabels docker tag to v1.6.1 ([813cad0e](813cad0e))

Renovate MRs for Go major version package upgrades were broken because they
only updated the go.mod file with the new package version, leaving the old
package path in place. This meant:

1. Import statements throughout the codebase were not updated
2. `go.mod` contained both old and new package paths
3. `golangci-lint` would run `go mod tidy` and find differences
4. CI would fail, making the MR unmergeable without manual intervention

Add `gomodUpdateImportPaths` to the `postUpdateOptions` configuration. This
enables Renovate to use a third-party tool
(`github.com/marwan-at-work/mod/cmd/mod`) to automatically migrate import paths
within application code during major Go package upgrades.

With this change, Renovate will now:

- Update the `go.mod` file with the new package version
- Automatically update all import statements to use the new package path
- Run `go mod tidy` to clean up the module file
- Potentially produce MRs that pass ...

fix(Renovate): enable automatic import path updates for Go major version upgrades

See merge request !1341

## [3.8.3](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-03-10)

### Fixes

* enable automatic import path updates for Go major version upgrades ([251e0fa1](251e0fa1))