[#2703] Turned '.dockerignore', '.gitignore' and '.gitignore.artifact' into deny lists.

.dockerignore

@@ -1,73 +1,57 @@
-# Ignore everything but a whitelist of files.
+# Deny list of paths excluded from the container image build context.
+# Everything not listed here is included into the image.
 #
-# It is very important to only add production assets to the container during
-# the build. Adding anything else, like tests files or packages, has potential
-# security implications.
-
-# Ignore everything.
-*
-
-# Do not ignore web.
-#; @todo: Add support for renamed web.
-!web
-
-# Do not ignore config.
-!config
-
-# Do not ignore recipes.
-!recipes
-
-# But still ignore Drupal directories generated by Composer.
+# Never let VCS internals, secrets, local overrides, database dumps or
+# host-installed dependencies enter the image: they leak data, bloat the
+# context and override the in-image build results.
+
+# VCS, IDE and OS files.
+.git
+.idea
+.vscode
+**/.DS_Store
+
+# Local override files - may contain credentials.
+.env.local
+.ahoy.local.yml
+docker-compose.override.yml
+web/sites/*/settings.local.php
+web/sites/*/services.local.yml
+
+# Local data, logs, caches and temporary artifacts.
+.artifacts
+.data
+.logs
+.phpunit.cache
+.twig-cs-fixer.cache
+
+# Dependencies are installed during the image build.
+vendor
+node_modules
+web/themes/**/node_modules
+
+# Drupal directories generated by Composer during the image build.
 web/core
+web/libraries
 web/modules/contrib
-web/themes/contrib
 web/profiles/contrib
-web/libraries
-!drush
-drush/contrib/
+web/themes/contrib
+drush/Commands/contrib
 
-# Do not ignore other required files.
-!.circleci
-!.docker/config
-!.docker/scripts
-!.env
-!.eslintignore
-!.eslintrc.json
-!.prettierignore
-!.prettierrc.json
-!.sass-lint.yml
-!.stylelintrc.js
-!.twig-cs-fixer.php
-!auth.json
-!behat.yml
-!composer.json
-!composer.lock
-!gherkinlint.json
-!jest.config.js
-!package-lock.json
-!package.json
-!patches
-!patches.lock.json
-!phpcs.xml
-!phpstan.neon
-!phpunit.xml
-!postcss.config.js
-!rector.php
-!scripts
-!tests
-!yarn.lock
+# Content files and test artifacts.
+web/sites/*/files
+web/sites/simpletest
 
-#;< HOSTING_ACQUIA
-!hooks
-#;> HOSTING_ACQUIA
-#;< HOSTING_LAGOON
-!.lagoon.env.*
-#;> HOSTING_LAGOON
+# Theme build assets are compiled during the image build.
+web/themes/**/build
 
 #;< VORTEX_DEV
-# In-tree tooling package; consumer sites get it from packagist.
-!.vortex
+# In-tree test harness; consumer sites get tooling from packagist.
 .vortex/*
 !.vortex/tooling
 .vortex/tooling/tests
+.vortex/tooling/playground
+.vortex/tooling/vendor
+.vortex/tooling/.logs
+.vortex/tooling/.phpunit.cache
 #;> VORTEX_DEV

.gitignore

@@ -1,55 +1,43 @@
 # To ignore OS temporary files use global .gitignore
 # https://help.github.com/articles/ignoring-files/#create-a-global-gitignore
 
-# Ignore Drupal webroot, but preserve custom modules, themes and settings.
-# To add an override file, explicitly un-ignore it below and add to the
-# repository (useful for robots.txt and .htaccess file overrides).
+# Deny list of generated, downloaded and local-only files. Everything not
+# listed here is tracked.
 
 #; To simplify maintenance of Vortex, we support only 'web' document root
 #; defined explicitly here.
-web/*
-!web/sites/
-web/sites/*
-!web/modules/
-web/modules/*
-!web/modules/custom/
-!web/themes/
-web/themes/*
-!web/themes/custom/
-!web/profiles/
-web/profiles/*
-!web/profiles/custom/
-!web/sites/default/
-web/sites/default/*
-!web/sites/default/settings.php
-!web/sites/default/services.yml
-#;< MIGRATION
-!web/sites/default/settings.migration.php
-#;> MIGRATION
-!web/sites/default/example.settings.local.php
-!web/sites/default/example.services.local.yml
-!web/sites/default/default.settings.local.php
-!web/sites/default/default.services.local.yml
-!web/sites/default/includes
-# Preserve default settings files to use them in Functional test.
-!web/sites/default/default.settings.php
-!web/sites/default/default.services.yml
-# Allow Drupal Scaffold files. @see https://github.com/drupal-composer/drupal-scaffold#limitation
-!web/.editorconfig
-!web/.eslintignore
-!web/.gitattributes
-!web/.htaccess
-!web/autoload.php
-!web/index.php
-!web/update.php
+# Drupal directories generated by Composer.
+web/core
+web/libraries
+web/modules/contrib
+web/profiles/contrib
+web/themes/contrib
+drush/Commands/contrib
 
-# Ignore all recipes by default. Custom recipes should be added explicitly.
+# Drupal scaffold files copied into the webroot during the build. The README
+# files are kept scaffolded because they materialize otherwise-empty extension
+# directories that the Drupal core test bootstrap requires to exist.
+web/modules/README.txt
+web/profiles/README.txt
+web/sites/README.txt
+web/sites/development.services.yml
+web/themes/README.txt
+
+# Local settings overrides.
+web/sites/*/settings.local.php
+web/sites/*/services.local.yml
+
+# Content files and test artifacts.
+web/sites/*/files
+web/sites/simpletest
+
+# Composer installs contrib recipes into 'recipes/', next to custom recipes,
+# so recipes stay an allow list: un-ignore custom recipes explicitly.
 recipes/*
 !recipes/page
 
 #;< AI_CODE_INSTRUCTIONS
 # Ignore all Claude files by default. Custom files should be added explicitly.
-!.claude
 .claude/*
 !.claude/settings.json
 #;> AI_CODE_INSTRUCTIONS
@@ -61,20 +49,22 @@ recipes/*
 !.claude/skills/
 #;> VORTEX_DEV
 
-# Ignore dependencies cache files.
+# Dependencies.
 /vendor
 /node_modules
 web/themes/**/node_modules
 
-# Assets.
+# Theme build assets.
 web/themes/**/build
+
+# Caches, data, logs and temporary artifacts.
 .artifacts
 .data
 .logs
 .phpunit.cache
 .twig-cs-fixer.cache
 
-# Ignore local override files.
+# Local override files.
 /docker-compose.override.yml
 /.env.local
 /.ahoy.local.yml

.vortex/installer/tests/Fixtures/handler_process/_baseline/.dockerignore

@@ -1,57 +1,46 @@
-# Ignore everything but a whitelist of files.
+# Deny list of paths excluded from the container image build context.
+# Everything not listed here is included into the image.
 #
-# It is very important to only add production assets to the container during
-# the build. Adding anything else, like tests files or packages, has potential
-# security implications.
+# Never let VCS internals, secrets, local overrides, database dumps or
+# host-installed dependencies enter the image: they leak data, bloat the
+# context and override the in-image build results.
 
-# Ignore everything.
-*
+# VCS, IDE and OS files.
+.git
+.idea
+.vscode
+**/.DS_Store
 
-# Do not ignore web.
-!web
+# Local override files - may contain credentials.
+.env.local
+.ahoy.local.yml
+docker-compose.override.yml
+web/sites/*/settings.local.php
+web/sites/*/services.local.yml
 
-# Do not ignore config.
-!config
+# Local data, logs, caches and temporary artifacts.
+.artifacts
+.data
+.logs
+.phpunit.cache
+.twig-cs-fixer.cache
 
-# Do not ignore recipes.
-!recipes
+# Dependencies are installed during the image build.
+vendor
+node_modules
+web/themes/**/node_modules
 
-# But still ignore Drupal directories generated by Composer.
+# Drupal directories generated by Composer during the image build.
 web/core
+web/libraries
 web/modules/contrib
-web/themes/contrib
 web/profiles/contrib
-web/libraries
-!drush
-drush/contrib/
+web/themes/contrib
+drush/Commands/contrib
+
+# Content files and test artifacts.
+web/sites/*/files
+web/sites/simpletest
 
-# Do not ignore other required files.
-!.circleci
-!.docker/config
-!.docker/scripts
-!.env
-!.eslintignore
-!.eslintrc.json
-!.prettierignore
-!.prettierrc.json
-!.sass-lint.yml
-!.stylelintrc.js
-!.twig-cs-fixer.php
-!auth.json
-!behat.yml
-!composer.json
-!composer.lock
-!gherkinlint.json
-!jest.config.js
-!package-lock.json
-!package.json
-!patches
-!patches.lock.json
-!phpcs.xml
-!phpstan.neon
-!phpunit.xml
-!postcss.config.js
-!rector.php
-!scripts
-!tests
-!yarn.lock
+# Theme build assets are compiled during the image build.
+web/themes/**/build