feat: clearer process and rule editors

.github/workflows/ci-devsecops.yml

@@ -12,7 +12,8 @@ permissions:
 
 jobs:
   build-test-scan:
-    runs-on: windows-2022
+    # Native EcoQoS read-back needs the Windows 11-era kernel (build 22000+).
+    runs-on: windows-2025
 
     steps:
       - name: Checkout

.github/workflows/release.yml

@@ -16,10 +16,12 @@ permissions:
 
 jobs:
   build:
-    runs-on: windows-2022
+    # Match the Windows 11-era APIs exercised by the native integration tests.
+    runs-on: windows-2025
     outputs:
       version: ${{ steps.version.outputs.version }}
       tag: ${{ steps.version.outputs.tag }}
+      prerelease: ${{ steps.version.outputs.prerelease }}
 
     steps:
       - name: Checkout
@@ -37,7 +39,7 @@ jobs:
         shell: pwsh
         run: |
           $refName = "${{ github.ref_name }}"
-          if ($refName -match '^v\d+\.\d+\.\d+$') {
+          if ($refName -match '^v\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$') {
             $version = $refName.TrimStart('v')
             $tag = $refName
           }
@@ -51,6 +53,8 @@ jobs:
             $tag = "v$version"
           }
 
+          $prerelease = $version.Contains('-').ToString().ToLowerInvariant()
+          "prerelease=$prerelease" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
           "version=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
           "tag=$tag" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
 
@@ -204,6 +208,7 @@ jobs:
           }
 
       - name: Generate winget manifests
+        if: steps.version.outputs.prerelease != 'true'
         shell: pwsh
         run: |
           $ErrorActionPreference = "Stop"
@@ -272,6 +277,7 @@ jobs:
           path: artifacts/release/SHA256SUMS.txt
 
       - name: Upload winget manifests
+        if: steps.version.outputs.prerelease != 'true'
         uses: actions/upload-artifact@v4
         with:
           name: winget-manifests
@@ -285,7 +291,7 @@ jobs:
           if-no-files-found: error
 
   smoke-test:
-    runs-on: windows-2022
+    runs-on: windows-2025
     needs: build
 
     steps:
@@ -341,6 +347,7 @@ jobs:
           path: release-assets
 
       - name: Download winget manifests
+        if: needs.build.outputs.prerelease != 'true'
         uses: actions/download-artifact@v4
         with:
           name: winget-manifests
@@ -360,7 +367,9 @@ jobs:
           compgen -G "release-assets/installer/*.exe" > /dev/null || { echo "Missing installer executable in release-assets/installer"; exit 1; }
           compgen -G "release-assets/packages/*.zip" > /dev/null || { echo "Missing release package zip in release-assets/packages"; exit 1; }
           test -f "release-assets/SHA256SUMS.txt" || { echo "Missing release checksums file"; exit 1; }
-          find "winget-manifests" -type f -name "*.yaml" | grep -q . || { echo "Missing winget manifest yaml files"; exit 1; }
+          if [ "${{ needs.build.outputs.prerelease }}" != "true" ]; then
+            find "winget-manifests" -type f -name "*.yaml" | grep -q . || { echo "Missing winget manifest yaml files"; exit 1; }
+          fi
           test -f "sbom/manifest.spdx.json" || { echo "Missing SBOM manifest"; exit 1; }
 
       - name: Stage public GitHub release assets
@@ -393,7 +402,11 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          git-cliff --config cliff.toml --latest > release-notes.md
+          if [ "${{ needs.build.outputs.prerelease }}" = "true" ]; then
+            cp "docs/releases/${{ needs.build.outputs.tag }}.md" release-notes.md
+          else
+            git-cliff --config cliff.toml --latest > release-notes.md
+          fi
 
           {
             echo "content<<EOF"
@@ -420,14 +433,16 @@ jobs:
             public-release-assets/ThreadPilot_${{ needs.build.outputs.tag }}_Setup.exe
             public-release-assets/ThreadPilot_${{ needs.build.outputs.tag }}_Portable.zip
             public-release-assets/SHA256SUMS.txt
+          prerelease: ${{ needs.build.outputs.prerelease == 'true' }}
+          make_latest: ${{ needs.build.outputs.prerelease == 'true' && 'false' || 'true' }}
           generate_release_notes: true
 
   publish-winget:
     runs-on: windows-2022
     needs:
       - build
       - release
-    if: needs.release.result == 'success'
+    if: needs.release.result == 'success' && needs.build.outputs.prerelease != 'true'
 
     steps:
       - name: Resolve winget publish policy

Installer/Installer.iss

@@ -5,7 +5,7 @@
 #define MyAppPublisher "ThreadPilot"
 #define MyAppURL "https://github.com/"
 #define MyAppExeName "ThreadPilot.exe"
-#define MyAppVersion "1.7.6"
+#define MyAppVersion "1.7.7-beta.2"
 
 #ifndef MyWizardStyle
   #define MyWizardStyle "modern dynamic windows11"

Installer/ThreadPilot.wxs

@@ -7,7 +7,7 @@
   <Package
       Name="ThreadPilot"
       Manufacturer="Prime Build"
-      Version="1.7.6.0"
+      Version="1.7.7.0"
       UpgradeCode="PUT-GENERATED-UPGRADE-CODE-HERE"
       Language="1033">
     <SummaryInformation Description="ThreadPilot MSI template" />

Installer/setup.iss

@@ -11,7 +11,7 @@
 #endif
 
 #ifndef MyAppVersion
-	#define MyAppVersion "1.7.6"
+	#define MyAppVersion "1.7.7-beta.2"
 #endif
 
 #ifndef MyAppSourceDir