docs(claude): add enterprise release version bump checklist

CLAUDE.md

@@ -298,6 +298,27 @@ All directories support editorial review via `/editorial-review` command:
 | `wave_docs/` | Wave docs | ~43 files |
 | `changelog/` | Release notes | ~232 files |
 
+## Enterprise release version bumps
+
+When cutting an enterprise point release (e.g., `25.3.4` → `25.3.5`), the following files under `platform-enterprise_versioned_docs/version-25.3/` need manual version bumps:
+
+- `enterprise/_templates/docker/docker-compose.yml`
+- `enterprise/_templates/k8s/tower-cron.yml`
+- `enterprise/_templates/k8s/tower-svc.yml`
+- `enterprise/configuration/mirroring.md`
+- `enterprise/platform-kubernetes.md`
+- `functionality_matrix/overview.md`
+
+The equivalent files under `platform-enterprise_docs/` do **not** need bumping here — they always point at the next upcoming enterprise version and are updated through the normal doc workflow.
+
+Use the following to surface anything that drifted before editing:
+
+```bash
+grep -rl "{old-version}" platform-enterprise_versioned_docs/version-25.3/
+```
+
+> **Note:** When the minor version rolls (e.g., a 25.4 release), the target directory changes to `platform-enterprise_versioned_docs/version-25.4/`. Verify the correct versioned directory before applying changes.
+
 ## Troubleshooting
 
 **Q: Too many suggestions?**

platform-enterprise_versioned_docs/version-25.3/enterprise/_templates/docker/docker-compose.yml

@@ -40,7 +40,7 @@ services:
       - $HOME/.tower/db/redis:/data
 
   migrate:
-    image: cr.seqera.io/private/nf-tower-enterprise/migrate-db:v25.3.4
+    image: cr.seqera.io/private/nf-tower-enterprise/migrate-db:v25.3.6
     platform: linux/amd64
     command: -c "/migrate-db.sh"
     networks:
@@ -57,7 +57,7 @@ services:
         condition: service_healthy
 
   cron:
-    image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.4
+    image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.6
     platform: linux/amd64
     command: -c '/tower.sh'
     networks:
@@ -78,7 +78,7 @@ services:
 
 
   backend:
-    image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.4
+    image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.6
     platform: linux/amd64
     command: -c '/wait-for-it.sh db:3306 -t 60; /tower.sh'
     networks:
@@ -103,7 +103,7 @@ services:
       - cron
 
   frontend:
-    image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.4
+    image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.6
     platform: linux/amd64
     networks:
       - frontend

platform-enterprise_versioned_docs/version-25.3/enterprise/_templates/k8s/tower-cron.yml

@@ -21,7 +21,7 @@ spec:
             name: tower-yml
       initContainers:
         - name: migrate-db
-          image: cr.seqera.io/private/nf-tower-enterprise/migrate-db:v25.3.4
+          image: cr.seqera.io/private/nf-tower-enterprise/migrate-db:v25.3.6
           command: ["sh", "-c", "/migrate-db.sh"]
           envFrom:
             - configMapRef:
@@ -32,7 +32,7 @@ spec:
               subPath: tower.yml
       containers:
         - name: backend
-          image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.4
+          image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.5
           envFrom:
             - configMapRef:
                 name: tower-backend-cfg

platform-enterprise_versioned_docs/version-25.3/enterprise/_templates/k8s/tower-svc.yml

@@ -29,7 +29,7 @@ spec:
         #    secretName: platform-oidc-certs
       containers:
         - name: backend
-          image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.4
+          image: cr.seqera.io/private/nf-tower-enterprise/backend:v25.3.6
           envFrom:
             - configMapRef:
                 name: tower-backend-cfg
@@ -91,7 +91,7 @@ spec:
         - name: "cr.seqera.io"
       containers:
         - name: frontend
-          image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.4
+          image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.6
           ports:
             - containerPort: 80
       restartPolicy: Always

platform-enterprise_versioned_docs/version-25.3/enterprise/configuration/mirroring.md

@@ -30,9 +30,9 @@ Create a YAML file (`seqera-images.yaml`) to specify which images to sync:
 ```yaml
 cr.seqera.io:
     images-by-semver:
-        private/nf-tower-enterprise/backend: ">= v25.3.4"
-        private/nf-tower-enterprise/frontend: ">= v25.3.4"
-        private/nf-tower-enterprise/migrate-db: ">= v25.3.4"
+        private/nf-tower-enterprise/backend: ">= v25.3.6"
+        private/nf-tower-enterprise/frontend: ">= v25.3.6"
+        private/nf-tower-enterprise/migrate-db: ">= v25.3.6"
 ```
 
 Run the sync:

platform-enterprise_versioned_docs/version-25.3/enterprise/platform-kubernetes.md

@@ -119,7 +119,7 @@ spec:
   ...
       containers:
         - name: frontend
-          image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.4-unprivileged
+          image: cr.seqera.io/private/nf-tower-enterprise/frontend:v25.3.6-unprivileged
           env:
             - name: NGINX_LISTEN_PORT  # If not defined, defaults to 8000.
               value: 8000

platform-enterprise_versioned_docs/version-25.3/functionality_matrix/overview.md

@@ -14,6 +14,7 @@ If no Nextflow version is specified in your configuration, Seqera defaults to th
 
 | Platform version | nf-launcher version | Nextflow version | Fusion version | Connect client version|
 | ---------------- | ------------------- | ---------------- | -------------- |-------------- |
+| 25.3.6           | j21-25.10.2         | 25.10.2          | 2.4            | 0.9.0         |
 | 25.3.4           | j21-25.10.2         | 25.10.2          | 2.4            | 0.9.0         |
 | 25.3.1           | j21-25.10.2         | 25.10.2          | 2.4            | 0.9.0         |
 | 25.3.0           | j21-25.04.8         | 25.04.8          | 2.4            |               |