@catladder/pipeline 3.25.0 → 3.26.0

package/examples/__snapshots__/cloud-run-with-sql.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-api 🛡 audit:
+'api 🛡 audit | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -120,9 +120,6 @@ api 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a1
     max: 2
@@ -131,7 +128,7 @@ api 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-api 👮 lint:
+'api 👮 lint | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -168,13 +165,10 @@ api 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
-api 🧪 test:
+'api 🧪 test | dev ':
   stage: test
   image: path/to/docker/jobs-testing-chrome:the-version
   variables:
@@ -211,9 +205,6 @@ api 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
@@ -579,17 +570,17 @@ api 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: api 👮 lint
+    - job: 'api 👮 lint | dev '
       artifacts: false
     - job: 'api 🔨 app | dev '
       artifacts: false
     - job: 'api 🔨 docker | dev '
       artifacts: false
-    - job: api 🧪 test
+    - job: 'api 🧪 test | dev '
       artifacts: false
     - job: 'api 🧾 sbom | dev '
       artifacts: true
-    - job: api 🛡 audit
+    - job: 'api 🛡 audit | dev '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -637,6 +628,115 @@ api 🧪 test:
   retry: *a1
   interruptible: true
   allow_failure: true
+'api 🛡 audit | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - cd api
+    - yarn npm audit --environment production
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+  allow_failure: true
+'api 👮 lint | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd api
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn lint
+  cache:
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/.yarn
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/node_modules
+      fallback_keys:
+        - api-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+'api 🧪 test | review ':
+  stage: test
+  image: path/to/docker/jobs-testing-chrome:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd api
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn test
+  cache:
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/.yarn
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/node_modules
+      fallback_keys:
+        - api-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
 'api 🔨 app | review ':
   stage: build
   image: path/to/docker/jobs-default:the-version
@@ -712,14 +812,18 @@ api 🧪 test:
     - collapseable_section_end "yarninstall"
     - yarn build
   cache:
-    - key: api-yarn
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - api/.yarn
-    - key: api-node-modules
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - api/node_modules
+      fallback_keys:
+        - api-node-modules
   artifacts:
     paths:
       - api/__build_info.json
@@ -786,10 +890,12 @@ api 🧪 test:
     - docker push $DOCKER_CACHE_IMAGE
     - collapseable_section_end "docker-push"
   cache:
-    - key: api-yarn
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull
       paths:
         - api/.yarn
+      fallback_keys:
+        - api-yarn
   rules:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
@@ -995,17 +1101,17 @@ api 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: api 👮 lint
+    - job: 'api 👮 lint | review '
       artifacts: false
     - job: 'api 🔨 app | review '
       artifacts: false
     - job: 'api 🔨 docker | review '
       artifacts: false
-    - job: api 🧪 test
+    - job: 'api 🧪 test | review '
       artifacts: false
     - job: 'api 🧾 sbom | review '
       artifacts: true
-    - job: api 🛡 audit
+    - job: 'api 🛡 audit | review '
       artifacts: false
   retry: *a1
   interruptible: true

package/examples/__snapshots__/cloud-run-with-worker.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-api 🛡 audit:
+'api 🛡 audit | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -120,9 +120,6 @@ api 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a1
     max: 2
@@ -131,7 +128,7 @@ api 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-api 👮 lint:
+'api 👮 lint | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -168,13 +165,10 @@ api 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
-api 🧪 test:
+'api 🧪 test | dev ':
   stage: test
   image: path/to/docker/jobs-testing-chrome:the-version
   variables:
@@ -211,9 +205,6 @@ api 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
@@ -479,17 +470,17 @@ api 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: api 👮 lint
+    - job: 'api 👮 lint | dev '
       artifacts: false
     - job: 'api 🔨 app | dev '
       artifacts: false
     - job: 'api 🔨 docker | dev '
       artifacts: false
-    - job: api 🧪 test
+    - job: 'api 🧪 test | dev '
       artifacts: false
     - job: 'api 🧾 sbom | dev '
       artifacts: true
-    - job: api 🛡 audit
+    - job: 'api 🛡 audit | dev '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -529,6 +520,115 @@ api 🧪 test:
   retry: *a1
   interruptible: true
   allow_failure: true
+'api 🛡 audit | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - cd api
+    - yarn npm audit --environment production
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+  allow_failure: true
+'api 👮 lint | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd api
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn lint
+  cache:
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/.yarn
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/node_modules
+      fallback_keys:
+        - api-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+'api 🧪 test | review ':
+  stage: test
+  image: path/to/docker/jobs-testing-chrome:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="api"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd api
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn test
+  cache:
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/.yarn
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - api/node_modules
+      fallback_keys:
+        - api-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
 'api 🔨 app | review ':
   stage: build
   image: path/to/docker/jobs-default:the-version
@@ -586,14 +686,18 @@ api 🧪 test:
     - collapseable_section_end "yarninstall"
     - yarn build
   cache:
-    - key: api-yarn
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - api/.yarn
-    - key: api-node-modules
+      fallback_keys:
+        - api-yarn
+    - key: api-node-modules-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - api/node_modules
+      fallback_keys:
+        - api-node-modules
   artifacts:
     paths:
       - api/__build_info.json
@@ -660,10 +764,12 @@ api 🧪 test:
     - docker push $DOCKER_CACHE_IMAGE
     - collapseable_section_end "docker-push"
   cache:
-    - key: api-yarn
+    - key: api-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull
       paths:
         - api/.yarn
+      fallback_keys:
+        - api-yarn
   rules:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
@@ -793,17 +899,17 @@ api 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: api 👮 lint
+    - job: 'api 👮 lint | review '
       artifacts: false
     - job: 'api 🔨 app | review '
       artifacts: false
     - job: 'api 🔨 docker | review '
       artifacts: false
-    - job: api 🧪 test
+    - job: 'api 🧪 test | review '
       artifacts: false
     - job: 'api 🧾 sbom | review '
       artifacts: true
-    - job: api 🛡 audit
+    - job: 'api 🛡 audit | review '
       artifacts: false
   retry: *a1
   interruptible: true

package/examples/__snapshots__/custom-build-job-with-tests.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-www 🛡 audit:
+'www 🛡 audit | dev ':
   stage: test
   image: audit-image
   services: &a1
@@ -128,9 +128,6 @@ www 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a2
     max: 2
@@ -139,7 +136,7 @@ www 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-www 👮 lint:
+'www 👮 lint | dev ':
   stage: test
   image: lint-image
   services: *a1
@@ -161,13 +158,10 @@ www 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a2
   interruptible: true
-www 🧪 test:
+'www 🧪 test | dev ':
   stage: test
   image: test-image
   services: *a1
@@ -190,9 +184,6 @@ www 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a2
   interruptible: true
@@ -428,17 +419,17 @@ www 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: www 👮 lint
+    - job: 'www 👮 lint | dev '
       artifacts: false
     - job: 'www 🔨 app | dev '
       artifacts: false
     - job: 'www 🔨 docker | dev '
       artifacts: false
-    - job: www 🧪 test
+    - job: 'www 🧪 test | dev '
       artifacts: false
     - job: 'www 🧾 sbom | dev '
       artifacts: true
-    - job: www 🛡 audit
+    - job: 'www 🛡 audit | dev '
       artifacts: false
   retry: *a2
   interruptible: true
@@ -477,6 +468,86 @@ www 🧪 test:
   retry: *a2
   interruptible: true
   allow_failure: true
+'www 🛡 audit | review ':
+  stage: test
+  image: audit-image
+  services: &a3
+    - name: job-service-1
+      command:
+        - --some-command=some-value
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="www"
+    - collapseable_section_end "injectvars"
+    - audit
+  artifacts:
+    paths: []
+    reports:
+      junit:
+        - www/dist/audit.xml
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a2
+  interruptible: true
+  allow_failure: true
+'www 👮 lint | review ':
+  stage: test
+  image: lint-image
+  services: *a3
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="www"
+    - collapseable_section_end "injectvars"
+    - lint
+  artifacts:
+    paths: []
+    reports:
+      junit:
+        - www/dist/lint.xml
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a2
+  interruptible: true
+'www 🧪 test | review ':
+  stage: test
+  image: test-image
+  services: *a3
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="www"
+    - collapseable_section_end "injectvars"
+    - test
+  artifacts:
+    paths: []
+    reports:
+      junit:
+        - www/dist/TEST-*.xml
+        - www/dist/junit-*.xml
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a2
+  interruptible: true
 'www 🔨 app | review ':
   stage: build
   image: foo
@@ -712,17 +783,17 @@ www 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: www 👮 lint
+    - job: 'www 👮 lint | review '
       artifacts: false
     - job: 'www 🔨 app | review '
       artifacts: false
     - job: 'www 🔨 docker | review '
       artifacts: false
-    - job: www 🧪 test
+    - job: 'www 🧪 test | review '
       artifacts: false
     - job: 'www 🧾 sbom | review '
       artifacts: true
-    - job: www 🛡 audit
+    - job: 'www 🛡 audit | review '
       artifacts: false
   retry: *a2
   interruptible: true
@@ -1319,13 +1390,13 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - &a3
+    - &a4
       if: $CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/
       when: never
-    - &a4
+    - &a5
       if: $CI_PIPELINE_SOURCE  == "trigger"
       when: never
-    - &a5
+    - &a6
       if: $CI_PIPELINE_SOURCE  == "schedule"
       when: never
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
@@ -1339,9 +1410,9 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - *a3
     - *a4
     - *a5
+    - *a6
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
       when: manual
     - if: $CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/