sync(ci): update tooling versions and artifact retention (#279)

Author: mrz1836

.dockerignore

@@ -67,7 +67,6 @@ tmp
 .golangci.yml
 .goreleaser.yml
 .vscode
-docs
 LICENSE
 README.md
 codecov.yml

.github/env/10-coverage.env

@@ -32,7 +32,7 @@ GO_COVERAGE_PROVIDER=internal
 CODECOV_TOKEN_REQUIRED=false
 
 # Go Coverage Tool Version
-GO_COVERAGE_VERSION=v1.3.5
+GO_COVERAGE_VERSION=v1.3.6
 GO_COVERAGE_USE_LOCAL=false
 
 # ================================================================================================

.github/env/10-mage-x.env

@@ -36,7 +36,7 @@
 # ================================================================================================
 
 # MAGE-X version
-MAGE_X_VERSION=v1.20.4
+MAGE_X_VERSION=v1.20.6
 
 # For mage-x development, set to 'true' to use local version instead of downloading from releases
 MAGE_X_USE_LOCAL=false
@@ -61,7 +61,7 @@ MAGE_X_FORMAT_EXCLUDE_PATHS=vendor,node_modules,.git,.idea
 
 MAGE_X_GITLEAKS_VERSION=8.30.0
 MAGE_X_GOFUMPT_VERSION=v0.9.2
-MAGE_X_GOLANGCI_LINT_VERSION=v2.9.0
+MAGE_X_GOLANGCI_LINT_VERSION=v2.10.1
 MAGE_X_GORELEASER_VERSION=v2.13.3
 MAGE_X_GOVULNCHECK_VERSION=v1.1.4
 MAGE_X_GO_SECONDARY_VERSION=1.24.x

.github/env/10-pre-commit.env

@@ -52,7 +52,7 @@ GO_PRE_COMMIT_ALL_FILES=true
 # 🛠️ TOOL VERSIONS
 # ================================================================================================
 
-GO_PRE_COMMIT_GOLANGCI_LINT_VERSION=v2.9.0
+GO_PRE_COMMIT_GOLANGCI_LINT_VERSION=v2.10.1
 GO_PRE_COMMIT_FUMPT_VERSION=v0.9.2
 GO_PRE_COMMIT_GOIMPORTS_VERSION=latest
 GO_PRE_COMMIT_GITLEAKS_VERSION=v8.30.0

.github/workflows/fortress-coverage.yml

@@ -2382,7 +2382,7 @@ jobs:
         with:
           name: coverage-stats-internal
           path: coverage-stats-internal-*.json
-          retention-days: 1
+          retention-days: 7
 
       # --------------------------------------------------------------------
       # Upload coverage history for future runs (WORKING SYSTEM - PRESERVED)

.github/workflows/fortress-test-fuzz.yml

@@ -257,5 +257,5 @@ jobs:
           path: |
             .mage-x/ci-results-fuzz.jsonl
             fuzz-output.log
-          retention-days: 1
+          retention-days: 7
           if-no-files-found: ignore

.github/workflows/fortress-test-matrix.yml

@@ -407,7 +407,7 @@ jobs:
           path: |
             .mage-x/ci-results.jsonl
             test-output.log
-          retention-days: 1
+          retention-days: 7
           if-no-files-found: ignore
 
       # --------------------------------------------------------------------
@@ -446,4 +446,4 @@ jobs:
         with:
           name: coverage-data
           path: coverage.txt
-          retention-days: 1
+          retention-days: 7

.github/workflows/fortress-test-validation.yml

@@ -416,5 +416,5 @@ jobs:
         with:
           name: validation-summary
           path: ci-results/
-          retention-days: 1
+          retention-days: 7
           if-no-files-found: ignore

.github/workflows/pull-request-management-fork.yml

@@ -3,7 +3,7 @@
 #
 #  Purpose: Automate labeling, assignment, and welcoming of pull requests for forked PRs.
 #
-#  Configuration: All settings are loaded from .env.base and .env.custom files for
+#  Configuration: All settings are loaded from modular .github/env/*.env files for
 #  centralized management across all workflows.
 #
 #  Triggers: Pull request events (opened, reopened, ready for review, closed, synchronize)
@@ -108,7 +108,7 @@ concurrency:
 # --------------------------------------------------------------------
 # Environment Variables
 # --------------------------------------------------------------------
-# Note: Configuration variables are loaded from .env.base and .env.custom files
+# Note: Configuration variables are loaded from modular .github/env/*.env files
 
 jobs:
   # ------------------------------------------------------------
@@ -117,6 +117,8 @@ jobs:
   load-env:
     name: 🌍 Load Environment (Base Repo)
     runs-on: ubuntu-latest
+    # Only run for fork PRs - same-repo PRs are handled by pull-request-management.yml
+    if: ${{ github.event.pull_request.head.repo && github.event.pull_request.head.repo.full_name != github.repository }}
     # No write perms here
     permissions:
       contents: read
@@ -175,6 +177,8 @@ jobs:
   detect-fork:
     name: 🔍 Detect Fork PR
     runs-on: ubuntu-latest
+    # Only run for fork PRs - same-repo PRs are handled by pull-request-management.yml
+    if: ${{ github.event.pull_request.head.repo && github.event.pull_request.head.repo.full_name != github.repository }}
     permissions:
       contents: read
     outputs:
@@ -476,7 +480,8 @@ jobs:
   summary:
     name: 📊 Summary
     runs-on: ubuntu-latest
-    if: always()
+    # Only run for fork PRs, but always show summary regardless of job status
+    if: always() && github.event.pull_request.head.repo && github.event.pull_request.head.repo.full_name != github.repository
     needs: [load-env, detect-fork, handle-fork, clean-cache]
     steps:
       - name: 📄 Write summary