carson 2.16.0 → 2.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c0c99d97f1939fc304d067069e80b38319192a67c738ecfb2358d78e22bc5c6
-  data.tar.gz: 2233f42b74551f7cea4445130c4a5acd06f47839bc27288673f9c60792c9659d
+  metadata.gz: beed85a11e303c6c34258e51b20d553ea4becdfcc22c9cc28bb7889621a25eac
+  data.tar.gz: d59f7bb131cc1f15bc90f4c8bebf1d6a58f361bbfeec960827460a6144bab6bc
 SHA512:
-  metadata.gz: c03226c3e685b672675e6aee16e4027d3f4ffb992a9ad6894a971a6c079d0f0f6c749e0806605109a588805788aa73f6e1c23aa0cec5ab448ee7d48f1c5c63c5
-  data.tar.gz: c9587d82f0b6f75fe0146d74da495e229486a49d4fb39fc3b3a6e774391dbb6439f099f2f2474b2cf603a49c9eaf1ffeaaf416f2baf49f0ab303b6fcfd17c930
+  metadata.gz: 9c554db7a64b8d9ef314c3e26a2be21623e37972dd12fb39093d3e9a2ae71f19f53c5e8a313a72b89de6eba8bbb8943fde3b5bbcc8f8123d4d051de839afa315
+  data.tar.gz: 67bd246d6dfcd97efcf521278198fb6040a734115a5f3b5b9b4aef9c72ae4e9598f3e4e9f22470b2846b967d028ee9a1a52e1f4e73835afd2a61530eff375ad3

data/RELEASE.md

@@ -5,6 +5,30 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 2.17.0 — MegaLinter Configuration Template
+
+### What changed
+
+- Added `.mega-linter.yml` as a Carson-managed template, deployed to `.github/.mega-linter.yml` in governed repositories. Previously MegaLinter ran with its own defaults, ignoring project-level configs and producing thousands of false positives.
+- **Project configs first**: `LINTER_RULES_PATH: "."` tells MegaLinter to use project-root config files (`.rubocop.yml`, `.eslintrc`, etc.) instead of built-in defaults. Fixes the RuboCop indentation mismatch.
+- **Vendor exclusions**: `FILTER_REGEX_EXCLUDE` skips `vendor/`, `node_modules/`, `public/packs`, `public/assets`, `tmp/`, `log/`, and `coverage/`.
+- **Noisy linters disabled**: `SPELL_CSPELL` (needs per-project dictionary), `COPYPASTE_JSCPD` (false positives on generated code), `HTML_DJLINT` (designed for Jinja, not ERB).
+- Updated `carson-lint.yml` workflow with `MEGALINTER_CONFIG: .github/.mega-linter.yml` to point MegaLinter at the non-default config location.
+
+### Migration
+
+Run `carson refresh` — the new template is applied automatically and propagated to governed repos.
+
+## 2.16.1 — Template Propagation Cleanup Fix
+
+### What changed
+
+- Template propagation now deletes the local `carson/template-sync` branch after worktree cleanup. Previously, the worktree was removed but the local branch it created was left behind in the governed repository, polluting the user's branch list.
+
+### No migration required
+
+Run `carson refresh` — the fix takes effect immediately. Stale `carson/template-sync` branches in governed repos can be removed with `git branch -D carson/template-sync`.
+
 ## 2.16.0 — Auto-propagate Template Changes
 
 ### What changed

data/VERSION

@@ -1 +1 @@
-2.16.0
+2.17.0

data/lib/carson/config.rb

@@ -48,7 +48,7 @@ module Carson
 					}
 				},
 				"template" => {
-					"managed_files" => [ ".github/carson.md", ".github/copilot-instructions.md", ".github/CLAUDE.md", ".github/AGENTS.md", ".github/pull_request_template.md", ".github/workflows/carson-lint.yml" ],
+					"managed_files" => [ ".github/carson.md", ".github/copilot-instructions.md", ".github/CLAUDE.md", ".github/AGENTS.md", ".github/pull_request_template.md", ".github/workflows/carson-lint.yml", ".github/.mega-linter.yml" ],
 					"superseded_files" => [ ".github/carson-instructions.md" ]
 				},
 				"lint" => {

data/lib/carson/runtime/local.rb

@@ -591,10 +591,11 @@ module Carson
 				pr_url
 			end
 
-			# Removes the worktree regardless of state.
+			# Removes the worktree and the local sync branch it created.
 			def template_propagate_cleanup!( worktree_dir: )
 				git_run( "worktree", "remove", "--force", worktree_dir )
-				puts_verbose "template_propagate: worktree cleaned up"
+				git_run( "branch", "-D", TEMPLATE_SYNC_BRANCH )
+				puts_verbose "template_propagate: worktree and local branch cleaned up"
 			rescue StandardError => e
 				puts_verbose "template_propagate: cleanup warning (#{e.message})"
 			end

data/templates/.github/.mega-linter.yml

@@ -0,0 +1,19 @@
+# Carson-managed MegaLinter configuration.
+# Pushed to governed repositories by `carson template apply`.
+# To override, add entries to a local .mega-linter.yml — MegaLinter merges both.
+
+# Use project-root linter configs (.rubocop.yml, .eslintrc, etc.)
+# instead of MegaLinter's built-in defaults.
+LINTER_RULES_PATH: "."
+
+# Only lint changed files on PRs, not the entire codebase.
+VALIDATE_ALL_CODEBASE: false
+
+# Exclude vendored, generated, and dependency directories.
+FILTER_REGEX_EXCLUDE: "(vendor/|node_modules/|public/packs|public/assets|tmp/|log/|coverage/)"
+
+# Disable linters that are too noisy without per-project configuration.
+DISABLE_LINTERS:
+  - SPELL_CSPELL
+  - COPYPASTE_JSCPD
+  - HTML_DJLINT

data/templates/.github/workflows/carson-lint.yml

@@ -18,5 +18,6 @@ jobs:
           fetch-depth: 0
       - uses: oxsecurity/megalinter@v8
         env:
+          MEGALINTER_CONFIG: .github/.mega-linter.yml
           VALIDATE_ALL_CODEBASE: false
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 2.16.0
+  version: 2.17.0
 platform: ruby
 authors:
 - Hailei Wang
@@ -63,6 +63,7 @@ files:
 - lib/carson/runtime/review/utility.rb
 - lib/carson/runtime/setup.rb
 - lib/carson/version.rb
+- templates/.github/.mega-linter.yml
 - templates/.github/AGENTS.md
 - templates/.github/CLAUDE.md
 - templates/.github/carson.md