System libs build

.clang-format

@@ -56,11 +56,11 @@ SpacesInSquareBrackets: false
 SortIncludes: CaseSensitive
 IncludeBlocks: Regroup
 IncludeCategories:
-  - Regex: '^<Q.*>'  # Qt headers
+  - Regex: '^<[a-z].*>'  # System/STL headers
     Priority: 1
-  - Regex: '^<.*>'   # System/STL headers
+  - Regex: '^<Q.*>'      # Qt headers
     Priority: 2
-  - Regex: '.*'      # Project headers
+  - Regex: '.*'           # Project headers
     Priority: 3
 
 # Alignment

.github/CODEOWNERS

@@ -11,5 +11,8 @@
 # *.qml @DonLakeFlyer
 
 # Build system
-# CMakeLists.txt @HTRamsey
-# /cmake/ @HTRamsey
+CMakeLists.txt @HTRamsey
+/cmake/ @HTRamsey
+
+# CI/CD
+/.github/ @HTRamsey

.github/CONTRIBUTING.md

@@ -89,7 +89,7 @@ QGroundControl uses [Crowdin](https://crowdin.com/project/qgroundcontrol) for co
 
    ```bash
    git add .
-   git commit -m "Add feature: brief description"
+   git commit -m "feat: brief description"
    ```
 
 6. **Push to your fork**
@@ -104,62 +104,7 @@ QGroundControl uses [Crowdin](https://crowdin.com/project/qgroundcontrol) for co
 
 ## Coding Standards
 
-For the complete coding style guide with examples, see [CODING_STYLE.md](../CODING_STYLE.md).
-
-### C++ Guidelines
-
-- **Standard**: C++20
-- **Framework**: Qt 6 guidelines
-- **Naming Conventions**:
-  - Classes: `PascalCase`
-  - Methods/functions: `camelCase`
-  - Private members: `_leadingUnderscore`
-  - Constants: `ALL_CAPS` or `kPascalCase`
-
-- **Always use braces** for if/else/for/while statements
-
-  ```cpp
-  // Good
-  if (condition) {
-      doSomething();
-  }
-
-  // Bad
-  if (condition) doSomething();
-  ```
-
-- **Defensive coding**:
-  - Always null-check pointers before use
-  - Validate all inputs
-  - Use Q_ASSERT for debug-build development checks only (compiled out in release builds)
-  - Always use defensive error handling in production code paths (never rely on Q_ASSERT)
-  - Handle errors gracefully in production code
-
-- **Code formatting**:
-  - Run `clang-format` before committing
-  - Follow `.clang-format`, `.clang-tidy`, `.editorconfig` in repo root
-  - See `CodingStyle.h`, `CodingStyle.cc`, `CodingStyle.qml` for examples
-  - 4 spaces for indentation (no tabs)
-
-### QML Guidelines
-
-- Follow Qt QML coding conventions
-- Use type annotations
-- Prefer declarative over imperative code
-- See `src/QmlControls/QGCButton.qml` for examples
-
-### Logging
-
-Use Qt logging categories:
-
-```cpp
-Q_DECLARE_LOGGING_CATEGORY(MyComponentLog)
-QGC_LOGGING_CATEGORY(MyComponentLog, "qgc.component.name")
-
-qCDebug(MyComponentLog) << "Debug message:" << value;
-qCWarning(MyComponentLog) << "Warning message";
-qCCritical(MyComponentLog) << "Critical error";
-```
+Follow [CODING_STYLE.md](../CODING_STYLE.md) for naming, formatting, C++20 features, QML style, and logging conventions. Run `clang-format` and `pre-commit run` before committing.
 
 ### Architecture Patterns
 

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -79,7 +79,7 @@ body:
       label: System Information
       description: |
         Please include the following information:
-        - QGC Version: [e.g. 4.4.0]
+        - QGC Version: [e.g. 5.0.0]
         - QGC build: [e.g. daily, stable, self-built from source, etc...]
         - Operating System: [e.g. Windows 11, Ubuntu 22.04, macOS 15, iOS 17 ]
         - Flight Controller: [e.g. CubePilot Cube Orange, Pixhawk 6X, etc.]

.github/actions/attest-and-upload/action.yml

@@ -0,0 +1,59 @@
+name: Attest and Upload
+description: Generate SBOM attestation and upload build artifact
+
+inputs:
+  artifact-name:
+    description: 'Artifact filename (e.g. QGroundControl.AppImage)'
+    required: true
+  package-name:
+    description: 'Package name for GitHub artifact'
+    required: true
+  scan-path:
+    description: 'Path to scan for SBOM (defaults to build dir)'
+    required: false
+    default: ''
+  subject-name:
+    description: 'SBOM subject name (defaults to package-name)'
+    required: false
+    default: ''
+  aws-role-arn:
+    description: 'AWS IAM role ARN for OIDC authentication'
+    required: false
+    default: ''
+  aws-key-id:
+    description: 'AWS access key ID'
+    required: false
+    default: ''
+  aws-secret-access-key:
+    description: 'AWS secret access key'
+    required: false
+    default: ''
+  aws-distribution-id:
+    description: 'AWS CloudFront distribution ID'
+    required: false
+    default: ''
+  upload-aws:
+    description: 'Upload artifact to AWS'
+    required: false
+    default: 'true'
+
+runs:
+  using: composite
+  steps:
+    - name: Attest Build with SBOM
+      uses: ./.github/actions/attest-sbom
+      with:
+        subject-path: ${{ runner.temp }}/build/${{ inputs.artifact-name }}
+        subject-name: ${{ inputs.subject-name || inputs.package-name }}
+        scan-path: ${{ inputs.scan-path || format('{0}/build', runner.temp) }}
+
+    - name: Upload Build File
+      uses: ./.github/actions/upload
+      with:
+        artifact-name: ${{ inputs.artifact-name }}
+        package-name: ${{ inputs.package-name }}
+        aws-role-arn: ${{ inputs.aws-role-arn }}
+        aws-key-id: ${{ inputs.aws-key-id }}
+        aws-secret-access-key: ${{ inputs.aws-secret-access-key }}
+        aws-distribution-id: ${{ inputs.aws-distribution-id }}
+        upload-aws: ${{ inputs.upload-aws }}

.github/actions/attest-sbom/action.yml

@@ -25,52 +25,29 @@ outputs:
 runs:
   using: composite
   steps:
-    - name: Check attestation conditions
+    - name: Check attestation conditions and resolve paths
       id: check
-      uses: ./.github/actions/attest-condition
-      with:
-        subject-path: ${{ inputs.subject-path }}
-
-    - name: Determine scan path
-      id: paths
-      if: steps.check.outputs.skip != 'true'
       shell: bash
       env:
-        SUBJECT_PATH: ${{ inputs.subject-path }}
-        SCAN_PATH: ${{ inputs.scan-path }}
-        SBOM_FORMAT: ${{ inputs.sbom-format }}
-        RUNNER_TEMP_DIR: ${{ runner.temp }}
-        SUBJECT_NAME: ${{ inputs.subject-name }}
+        EVENT_NAME: ${{ github.event_name }}
+        PR_REPO: ${{ github.event.pull_request.head.repo.full_name }}
+        THIS_REPO: ${{ github.repository }}
       run: |
-        set -euo pipefail
-
-        subject_path="${SUBJECT_PATH}"
-        scan_path="${SCAN_PATH}"
-
-        if [[ -z "${scan_path}" ]]; then
-          scan_path="$(dirname "${subject_path}")"
-        fi
-
-        if [[ "${SBOM_FORMAT}" == "cyclonedx-json" ]]; then
-          suffix="cdx.json"
-        else
-          suffix="spdx.json"
-        fi
-        sbom_path="${RUNNER_TEMP_DIR}/${SUBJECT_NAME}.sbom.${suffix}"
-
-        echo "scan-path=${scan_path}" >> "${GITHUB_OUTPUT}"
-        echo "sbom-path=${sbom_path}" >> "${GITHUB_OUTPUT}"
-        echo "Scan path: ${scan_path}"
-        echo "SBOM path: ${sbom_path}"
+        python3 "${GITHUB_WORKSPACE}/.github/scripts/attest_helper.py" \
+          --subject-path "${{ inputs.subject-path }}" \
+          --subject-name "${{ inputs.subject-name }}" \
+          --scan-path "${{ inputs.scan-path }}" \
+          --sbom-format "${{ inputs.sbom-format }}" \
+          --runner-temp "${{ runner.temp }}"
 
     - name: Generate SBOM
       id: sbom
       if: steps.check.outputs.skip != 'true'
       uses: anchore/sbom-action@v0
       with:
-        path: ${{ steps.paths.outputs.scan-path }}
+        path: ${{ steps.check.outputs.scan-path }}
         format: ${{ inputs.sbom-format }}
-        output-file: ${{ steps.paths.outputs.sbom-path }}
+        output-file: ${{ steps.check.outputs.sbom-path }}
         upload-artifact: true
         upload-artifact-retention: 30
         artifact-name: sbom-${{ inputs.subject-name }}
@@ -86,4 +63,4 @@ runs:
       uses: actions/attest-sbom@v3
       with:
         subject-path: ${{ inputs.subject-path }}
-        sbom-path: ${{ steps.paths.outputs.sbom-path }}
+        sbom-path: ${{ steps.check.outputs.sbom-path }}