Merge branch 'v10' into bugfix/10.8.5/malicious-ip-exclusions

Author: Kbayero

.github/dependabot.yml

@@ -22,15 +22,3 @@ updates:
       - "/web-pdf"
     schedule:
       interval: "daily"
-  - package-ecosystem: 'github-actions'
-    directory: '/'
-    schedule:
-      interval: 'daily'
-  - package-ecosystem: pip
-    directory: "/mutate"
-    schedule:
-      interval: daily
-    groups:
-      python-packages:
-        patterns:
-          - "*"

.github/workflows/README.md

@@ -1,33 +1,72 @@
-# New Workflows
-
-### Branches involved
-***main***<br>
-***feature/\*\*/\*\****<br>
-***hotfix/\*\*/\*\****<br>
-
-## Feature:
-__Note__: only one feature per version.
-1.  Create branch from main for the feature.
-2. Every developer related to the feature works on this branch. 
-3. When they finish they push.
-4. This push activates the DEV actions, generates the DEV images, and is automatically deployed to DEV environment.
-5. When everything is tested, PR is made to main.
-6. After this PR is approved, the QA actions are activated, and the QA images are generated.
-7. QA is updated manually to see that everything works well.
-11. If everything works well, merge to main activate RC actions and generate RC images.
-12. After test on RC, create a new release that will activate release actions.
-
-## Hotfix
-1. Create branch from main for the hotfix.
-2. Every developer related to the hotfix works on this branch. 
-3. When they finish, they make a PR to main.
-4. After this PR is merged to main, the rc actions are activated, and the rc images are generated.
-5. RC is updated manually to see that everything works well and we test it in RC.
-6. If everything works well, create a new release that will activate release actions.
-
-
-### Actions
-dev->on push ***feature/\*\*/\*\**** branch<br>
-qa->on pull-request: approved main branch<br>
-rc->on push: main branch<br>
-release-> on release<br>
+# 🛠️ Multi-Environment Workflows – UTMStack
+
+> This repository uses a structured, version-based deployment system (`v10`, `v11`) across multiple environments: `dev`, `qa`, `rc`, and `prod`.  
+> Each environment is triggered automatically based on branch patterns and workflow logic.
+
+![alt text](workflow.png)
+
+## 🌿 Branches Involved
+
+- `v10`, `v11` → Main version branches  
+- `release/v10.x.x`, `release/v11.x.x` → Feature/bugfix integration branches  
+- `hotfix/v10.x.x`, `hotfix/v11.x.x` → For urgent production fixes  
+- `feature/...` → Optional; features are typically integrated into `release/*` branches  
+
+---
+
+## ✨ Feature Flow (per version)
+
+> Best used for planned feature development.
+
+1. Developers work on shared integration branches:  
+   `release/v10.x.x` or `release/v11.x.x`
+
+2. On **push**, the `dev` workflow is triggered and deployed to:  
+   `v10-dev` or `v11-dev`
+
+3. Once stable, a **pull request is opened to `v10` or `v11`**, the `qa` workflow is triggered and deployed to:  
+   `v10-qa` or `v11-qa`
+
+5. After QA validation, the PR is **merged** into the base branch (`v10` or `v11`).
+
+6. This triggers deployment to the **RC environment**:  
+   `v10-rc` or `v11-rc`
+
+7. Once RC validation is complete, a **release tag (`v10.x.x` or `v11.x.x`)** is created to deploy to production.
+
+---
+
+## 🔥 Hotfix Flow (urgent patches)
+
+> Used for emergency fixes in production.
+
+1. Create a branch:  
+   `hotfix/v10.x.x` or `hotfix/v11.x.x` from `v10` or `v11`
+
+2. After development, open a **PR to `v10` or `v11`**
+
+3. On merge, the `rc` workflow is triggered:  
+   `v10-rc` or `v11-rc`
+
+4. If the patch is valid, create a **release tag** to deploy to production.
+
+---
+
+## ⚙️ GitHub Actions Triggers
+
+| Environment | Trigger Condition |
+|-------------|-------------------|
+| `dev`       | Push to `release/v10**` or `release/v11**` |
+| `qa`        | Pull request to `v10` or `v11` from `release/v10**` or `release/v11**`, and approved |
+| `rc`        | Push to `v10` or `v11` from `hotfix/*` or `release/*` |
+| `prod`      | Push of a tag starting with `v10.` or `v11.` |
+
+---
+
+## 🚀 Releasing to Production
+
+A production deployment is triggered only by pushing a version tag:
+
+```bash
+git tag v10.5.0
+git push origin v10.5.0

.github/workflows/build.yml

@@ -1,4 +1,4 @@
-name: Installer Release
+name: Installer Release v10
 
 on:
   release: