Git工作流重构记：分支策略与CI/CD集成调优全程

# 在用户根目录的 ~/.gitconfig 中添加别名
[alias]
    feature = "!f() { git checkout -b feature/$(date +%Y%m%d)-$1; }; f"
    hotfix = "!f() { git checkout -b hotfix/$(date +%Y%m%d)-$1; }; f"
    publish = "!f() { git push -u origin HEAD; }; f"

# 保护 main 分支的规则
Branch name pattern: main
Require pull request reviews before merging: 2（至少2人批准）
Dismiss stale pull request approvals when new commits are pushed: true
Require status checks to pass before merging: true
  - continuous-integration/jenkins/pr-head
  - WIP (work-in-progress) 检查
Require branches to be up to date before merging: true
Include administrators: false（管理员也需要过PR）

## 变更描述


## 测试计划
- [ ] 单元测试（JUnit 5.9.2）通过
- [ ] 集成测试（Testcontainers 1.19.3）通过
- [ ] 本地手动验证步骤：...

## 影响范围
- 影响的模块：user-service, api-gateway
- 需要同步更新的配置：application.yml（新增redis.timeout=5000）
- 依赖变更：升级Spring Boot 3.2.2 → 3.2.3

## 部署说明
- 是否需要数据库迁移：是（新增user_profile表）
- 是否向后兼容：是

pipeline {
    agent { label 'linux-build' }
    environment {
        DOCKER_REGISTRY = 'registry.example.com'
        APP_NAME = 'user-service'
        VERSION = "${env.BUILD_NUMBER}-${env.GIT_COMMIT.take(7)}"
    }
    stages {
        stage('Checkout') {
            steps {
                checkout scm
            }
        }
        stage('Unit Test') {
            steps {
                sh 'mvn -B -DskipITs -Dtest=*Test test'
            }
            post {
                success { junit 'target/surefire-reports/*.xml' }
            }
        }
        stage('Integration Test') {
            when { branch 'main' }  // 只在main分支跑完整集成测试
            steps {
                sh 'mvn -B verify -DskipITs=false -Dit.test=*IT'
            }
        }
        stage('Static Analysis') {
            steps {
                sh 'mvn -B sonar:sonar -Dsonar.qualitygate.wait=true'
            }
        }
        stage('Build Image') {
            steps {
                sh "docker build -t ${DOCKER_REGISTRY}/${APP_NAME}:${VERSION} ."
                sh "docker push ${DOCKER_REGISTRY}/${APP_NAME}:${VERSION}"
            }
        }
        stage('Deploy to Dev') {
            when { branch 'main' }
            steps {
                sh "kubectl set image deployment/${APP_NAME} ${APP_NAME}=${DOCKER_REGISTRY}/${APP_NAME}:${VERSION} -n dev"
            }
        }
    }
    post {
        failure {
            // 钉钉机器人通知（使用Webhook v2.0）
            sh "curl -X POST 'https://oapi.dingtalk.com/robot/send?access_token=XXX' -H 'Content-Type: application/json' -d '{\"msgtype\":\"text\",\"text\":{\"content\":\"构建失败: ${APP_NAME} #${BUILD_NUMBER}\"}}'"
        }
    }
}