chore(config): add devcontainer setup

[etiennej70]

What this PR Provides

• A ready-to-use VS Code development environment (devcontainer) so contributors can start coding without installing Java, Maven, PostgreSQL, or other tools manually
• Automatic startup of the database, the documentation site, and the API when the container opens, with simple commands to check status, view logs, stop, or restart each of them
• Support for Windows, macOS, and Linux, including cloud dev environments
• CI check that verifies the devcontainer still builds and works correctly on every change to it
• Weekly automated dependency updates for the devcontainer tooling itself

Fixes

N/A

Review

The reviewer must double-check these points:

• The reviewer has tested the feature
• The reviewer has reviewed the implementation of the feature
• The documentation has been updated

How to test

Initial state: You have Docker Desktop (Windows/macOS) or Docker Engine (Linux) installed, and VS Code with the "Dev Containers" extension.

Steps:

1. Clone the repository and open the folder in VS Code
2. When prompted, click "Reopen in Container" (or open the Command Palette and run "Dev Containers: Reopen in Container")
3. Wait for the first build to finish (this downloads tools and may take several minutes)
4. Once VS Code is ready, open a browser and go to http://localhost:8084 — you should see the API responding
5. Open http://localhost:8000 — you should see the documentation site
6. In the VS Code terminal, run: bash .devcontainer/scripts/dev-services.sh status all — you should see the app and docs services reported as running
7. Make a small change to a Java file, save it, and confirm the API automatically restarts (check terminal logs)

Expected result: The container opens without errors, the API and docs are reachable at the URLs above, and code changes trigger an automatic reload.

Breaking changes

N/A

[github-code-quality]

Code Coverage Overview

Languages: Java

Java / code-coverage/jacoco

The overall line coverage in commit 89035f8 in the feat/devcontainer branch remains at 91%, unchanged from commit 2038027 in the main branch.

---

_{Updated September 24, 2026 15:22 UTC}

[Copilot]

Copilot review overview

🟡 Changes recommended

Shared Docker state, stale PID ownership, and incomplete CA import can cause corruption, unrelated process termination, or failed proxy connectivity.

Get a fresh assessment by requesting another Copilot review.

Review effort: Balanced
Findings: 2 · 1 · 3

Open (6)

• Use checkout-specific Docker volume names · New
• Validate PID ownership before managing stored process groups · New
• Normalize PEM certificates to CRT before updating trust store · New
• Capitalize the VS Code product name consistently · New
• Remove misleading supervisord troubleshooting guidance · New
• Reference application.yml instead of nonexistent app.yml · New

What changed in this PR

Adds a reproducible VS Code development container with automated services, CI validation, dependency updates, and contributor documentation.

Changes:

• Adds the Java 25 devcontainer and lifecycle scripts.
• Automates PostgreSQL, API, and documentation startup.
• Adds CI verification and weekly dependency updates.

File	Description
.devcontainer/​Dockerfile	Builds the development image and imports certificates.
.devcontainer/​certs/​.gitkeep	Preserves the certificate directory.
.devcontainer/​devcontainer-lock.json	Locks devcontainer features.
.devcontainer/​devcontainer.json	Configures tools, volumes, ports, and lifecycle commands.
.devcontainer/​post-create.sh	Installs dependencies and prepares Maven.
.devcontainer/​post-start.sh	Starts PostgreSQL, docs, and API services.
.devcontainer/​scripts/​dev-services.sh	Manages application and documentation processes.
.devcontainer/​scripts/​export-host-ca-certs.sh	Exports host CA certificates.
.gitattributes	Enforces platform-appropriate line endings.
.github/​dependabot.yml	Adds weekly container dependency updates.
.github/​workflows/​devcontainer.yml	Builds and verifies the devcontainer in CI.
.gitignore	Excludes exported host certificates.
docker-compose.yml	Pins PostgreSQL and adds a health check.
docs/​src/​contributing/​development-setup.md	Documents devcontainer usage and troubleshooting.
src/​main/​resources/​application-local.yml	Disables Spring browser LiveReload locally.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud