Release: merge development into beta

.github/sig-floor.json

@@ -0,0 +1,28 @@
+{
+ "about": "SIG 4-star checks this app meets and must keep meeting (gate 123, sig-floor). Generated by check_sig_floor.py write; raised by the workflow, never lowered by hand.",
+ "schema": 1,
+ "profile": "four-star",
+ "tools": {
+  "lizard": "1.24.3"
+ },
+ "measured_at": "dd80cc1c259151f94ad7fcc2abe0b9d617237aff",
+ "checks": [
+  "javascript duplication",
+  "javascript unit_complexity >25",
+  "javascript unit_interfacing >2",
+  "javascript unit_interfacing >4",
+  "javascript unit_interfacing >6",
+  "php module_coupling >10",
+  "php unit_interfacing >4",
+  "php unit_interfacing >6",
+  "vue unit_complexity >10",
+  "vue unit_complexity >25",
+  "vue unit_complexity >5",
+  "vue unit_interfacing >2",
+  "vue unit_interfacing >4",
+  "vue unit_interfacing >6",
+  "vue unit_size >15",
+  "vue unit_size >30",
+  "vue unit_size >60"
+ ]
+}

.github/workflows/code-quality.yml

@@ -265,6 +265,11 @@ jobs:
       # here — the job reported `skipped`, which the Quality Report renders
       # identically to a pass.
       enable-hydra-gates: true
+      # Gate 122 (SIG unit ratchet) blocks: a unit this change adds or makes
+      # worse must stay at NLOC 60, McCabe 10 and at most 4 parameters, and a
+      # new duplicated fragment of 6+ lines fails. Units the change does not
+      # touch, or touches without making worse, are inherited and do not count.
+      hydra-gates-sig-blocking: true
       # No `hydra-gates-ref` here on purpose. The shared workflow defaults it
       # to @main, and this workflow is itself consumed at @main, so the two
       # sides move together and a gate fix reaches this repo without a commit

CHANGELOG.md

@@ -8,7 +8,7 @@
   and a contact person for its owner; a repeat import matches on APPID, so it
   updates instead of duplicating. See `docs/features/cmdb-import.md`.
 - CMDB import: on an OpenRegister with the migration-pack editor
-  (openregister#4602), the import runs the mapping packs kept in
+  (OpenRegister 2.1.41 or later), the import runs the mapping packs kept in
   OpenRegister's migration pack store, where an administrator edits them.
   The `SeedCmdbImportPacks` repair step stores them on install and upgrade;
   a pack nobody edited follows newer releases, an edited one is kept.

appinfo/info.xml

@@ -50,7 +50,7 @@ Vrij en open source onder de EUPL-licentie.
 
 **Ondersteuning:** Voor ondersteuning, neem contact op via support@conduction.nl. Voor een Service Level Agreement (SLA), neem contact op via sales@conduction.nl.
     ]]></description>
-    <version>0.2.6-unstable.20261012120000</version>
+    <version>0.2.7-unstable.20261020120000</version>
     <licence>EUPL-1.2</licence>
     <author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
     <namespace>Stackiq</namespace>
@@ -344,6 +344,14 @@ Vrij en open source onder de EUPL-licentie.
 		     shared `contractNumber`: a wrong cross-app link is worse than an
 		     empty one. -->
 		<command>OCA\Stackiq\Command\ReferencesAuditCommand</command>
+		<!-- Link an organisatie to an existing OpenRegister organisation. The
+		     organisation sync leaves an organisatie unlinked when another
+		     organisation already has its name; only an administrator links them. -->
+		<command>OCA\Stackiq\Command\OrganisationLinkCommand</command>
+		<!-- Back-fill the GEMMA standard links an import before the link fix
+		     saved without. Writes only link properties that differ; a second run
+		     writes nothing. dry-run reports without writing. -->
+		<command>OCA\Stackiq\Command\GemmaStandardLinksCommand</command>
 	</commands>
 
 	<settings>

appinfo/routes.php

@@ -318,6 +318,10 @@
         // Portfolio rationalization report (TIME quadrants + EOL + cloud + cost), JSON or CSV (?format=csv).
         // @spec openspec/changes/portfolio-rationalization-time/specs/portfolio-rationalization-time/spec.md#requirement-portfolio-rationalization-report-aggregates-per-organisation
         ['name' => 'portfolioReport#index', 'url' => '/api/portfolio-report', 'verb' => 'GET'],
+        // @spec openspec/changes/landscape-completeness-score/specs/catalogue-data-quality/spec.md#requirement-req-cdq-003-a-data-quality-page-shows-how-complete-and-current-an-organisation-s-register-is
+        ['name' => 'dataQualityReport#index', 'url' => '/api/data-quality', 'verb' => 'GET'],
+        // @spec openspec/changes/architecture-reference-component-coverage/specs/reference-component-coverage/spec.md#requirement-req-rcc-001-stackiq-shall-give-each-reference-component-a-coverage-state-for-one-organisation
+        ['name' => 'referenceComponentCoverage#index', 'url' => '/api/reference-component-coverage', 'verb' => 'GET'],
 
         // SPA catch-all — serves the Vue app for any frontend route (history mode routing)
         // `postfix` keeps this SPA catch-all from colliding with the bare-root