From c79867708b1f5d8e626683b4408a243617546e15 Mon Sep 17 00:00:00 2001
From: "gh-worker-campaigns-3e9aa4[bot]"
 <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 16:32:47 +0000
Subject: [PATCH 1/3] ci: update one-pipeline to 1.1.0

---
 .gitlab/one-pipeline.locked.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitlab/one-pipeline.locked.yml b/.gitlab/one-pipeline.locked.yml
index 98fd39f505d..e3ec0428cc7 100644
--- a/.gitlab/one-pipeline.locked.yml
+++ b/.gitlab/one-pipeline.locked.yml
@@ -1,4 +1,4 @@
 # DO NOT EDIT THIS FILE MANUALLY
 # This file is auto-generated by automation.
 include:
-  - remote: https://gitlab-templates.ddbuild.io/libdatadog/include/versions/1.0.0/one-pipeline.yml
+  - remote: https://gitlab-templates.ddbuild.io/libdatadog/include/versions/1.1.0/one-pipeline.yml

From dc75d4d4a63e4f8db74820ff08fb4b2cb0e25fa7 Mon Sep 17 00:00:00 2001
From: Laplie Anderson <randomanderson@users.noreply.github.com>
Date: Mon, 20 Jul 2026 12:53:34 -0400
Subject: [PATCH 2/3] Add new shared-pipeline stages

---
 .gitlab-ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 10b1b340b4f..5dbcbc010b2 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -32,7 +32,9 @@ stages:
   - java-dacapo-parallel
   - java-dacapo-parallel-slo
   - java-post-pr-comment
-  - shared-pipeline
+  - shared-pipeline-build
+  - shared-pipeline-test
+  - shared-pipeline-publish
   - benchmarks
   - tests
   - tests-arm64

From 2316221e180c651978241b98aaa408e9ca92be4d Mon Sep 17 00:00:00 2001
From: Sarah Chen <sarah.chen@datadoghq.com>
Date: Mon, 20 Jul 2026 14:23:41 -0400
Subject: [PATCH 3/3] Separate release artifact publishing to depend on Gitlab
 system test completion

---
 .gitlab-ci.yml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5dbcbc010b2..df44494734c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -34,6 +34,7 @@ stages:
   - java-post-pr-comment
   - shared-pipeline-build
   - shared-pipeline-test
+  - publish-release-artifacts
   - shared-pipeline-publish
   - benchmarks
   - tests
@@ -1289,8 +1290,11 @@ deploy_to_di_backend:manual:
 # If the deploy_to_maven_central job is re-run, re-trigger the deploy_artifacts_to_github job as well so that the artifacts match.
 deploy_to_maven_central:
   extends: .gradle_build
-  stage: publish
-  needs: [ build ]
+  stage: publish-release-artifacts
+  needs:
+    - job: build
+    - job: system_tests
+      optional: true
   variables:
     CACHE_TYPE: "lib"
   rules:
@@ -1342,7 +1346,7 @@ deploy_snapshot_with_ddprof_snapshot:
       - 'workspace/dd-trace-ot/build/libs/*.jar'
 
 deploy_artifacts_to_github:
-  stage: publish
+  stage: publish-release-artifacts
   image: registry.ddbuild.io/images/dd-octo-sts-ci-base:2025.06-1
   tags: [ "arch:amd64" ]
   id_tokens:
@@ -1409,7 +1413,7 @@ override_verify_maven_central:
 # Verify Maven Central deployment is publicly available before publishing OCI images
 verify_maven_central_deployment:
   image: registry.ddbuild.io/images/base/gbi-ubuntu_2204:release
-  stage: publish
+  stage: publish-release-artifacts
   needs: [ deploy_to_maven_central ]
   rules:
     - if: '$POPULATE_CACHE'
@@ -1461,7 +1465,7 @@ verify_maven_central_deployment:
       done
 
 publishing-gate:
-  stage: publish
+  stage: publish-release-artifacts
   needs:
     - job: verify_maven_central_deployment
       optional: true # Required for releases only