@sempods/apps 0.7.0-dev → 0.7.0

package/CHANGELOG.md

@@ -52,6 +52,11 @@ configuration choices and the SDK migration.
   first.
 - `check` reports an SDK version outside the range the tooling supports, its
   `peerDependencies`. It no longer checks Markdown links.
+- The starter README no longer calls the starter a preview.
+- The CodeQL workflow runs only in public repositories, where code scanning
+  needs no licence, and has the `actions: read` permission a private
+  repository with a GitHub Code Security licence needs once its condition is
+  removed.
 - `build-site` writes the same layout for every host: `<id>/callback.html`
   and a top-level `404.html`. Netlify serves the callback from it without a
   redirect, so `_redirects`, `configure-site --host` and `site.host` in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sempods/apps",
-  "version": "0.7.0-dev",
+  "version": "0.7.0",
   "description": "Tooling for a sempods apps repository: create, check, update and publish several sempods apps with one shared SDK version.",
   "keywords": [
     "sempods",

package/shared/files/{676e6bf33b44044fb4c62c9fe5441729bd47f2d5077ff904e57a4a1b658859ac → 2818c884d46d97ec14fe4921dbdc147769d29846c08a92b1d3225c5297cfed93}

@@ -10,10 +10,6 @@ version `.node-version` names, pnpm, and a Pod account for trying real saves.
 Your assistant helps with the local setup. A hosting account is needed only to
 publish.
 
-> **Preview.** This starter is new and still changing. Today you can build
-> apps, try them locally against your Pod, update the SDK and the tooling, and
-> publish all apps together on one site.
-
 ## Start with your idea
 
 Open this repository in your coding assistant and paste:

package/shared/files/{ff9f774d9732fdc7d704ef37ddc40ef507a1bab7ee3c1db5b1a6a8f26e6e4b37 → 7a7b7c820db3a2946fd2b3148972ada8073bcc5752f03793ea2069f5b7a3f260}

@@ -11,11 +11,17 @@ permissions:
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
+    # Code scanning in a private repository needs a GitHub Code Security
+    # licence; without one the upload fails, so the job runs only in public
+    # repositories. With a licence, remove this condition.
+    if: ${{ !github.event.repository.private }}
     runs-on: ubuntu-latest
     timeout-minutes: 20
     permissions:
       contents: read
       security-events: write
+      # Private repositories: the analysis reads the workflow run.
+      actions: read
     strategy:
       fail-fast: false
       matrix:

package/shared/files/f9e2544290ee8418484e47194444ee58c2ea675682871ae8a8727d1edb17978e

@@ -0,0 +1,5 @@
+# Repository instructions
+
+Read [AGENTS.md](AGENTS.md). It routes to setup, the app workflow and tooling
+updates. The [app-workflow skill](.claude/skills/app-workflow/SKILL.md) uses
+the same instructions.

package/shared/snapshot.json

@@ -1,6 +1,6 @@
 {
   "format": 1,
-  "revision": "e99375619243c732c84e5bce6c21f4832934857b74359973efd2d1ef551beab5",
+  "revision": "b9a807367932b1331df3f586df6cd8144ca3db006bd58dd4e4b92cc412dd3ccd",
   "files": {
     ".agents/skills/app-workflow/SKILL.md": "0221b70340152ba3cc615342254603b29b89c4d7d944d7b3b3e647873bdcefa0",
     ".agents/skills/update/SKILL.md": "d3ca3a13c6524a2ee9382977ddc0539790813225f366306024a58c957a4716ee",
@@ -9,13 +9,13 @@
     ".github/codeql/codeql-config.yml": "528d7544990228d6d66fa62423775338fe1716326fc68371fb2665aee86e39b0",
     ".github/dependabot.yml": "e13474647ebaf26d042d76f4917203d209a2b14c0d2af8d12139ea328530823e",
     ".github/workflows/check.yml": "8b7567319e18694aeca8722107281a760e3100239c6d0f548acb71e1806fa172",
-    ".github/workflows/codeql.yml": "ff9f774d9732fdc7d704ef37ddc40ef507a1bab7ee3c1db5b1a6a8f26e6e4b37",
+    ".github/workflows/codeql.yml": "7a7b7c820db3a2946fd2b3148972ada8073bcc5752f03793ea2069f5b7a3f260",
     ".gitignore": "c2a4b026a87f6c8e7473e7fc456c6020b63c7e675087f6b58013ed5163c2f6ee",
     ".node-version": "b911698dc3cf3227d34d0ad6727f1c4408791203c9665de99ab959331a1fb07d",
     "AGENTS.md": "393b09ecd18889d9e1fdf2a6df12d1f6c193fc7fcd89ba808ad94df521bad8db",
-    "CLAUDE.md": "f04e547b89bb933c39de2f781978b93ea8b586ac9dee50312612e2f5c40391b1",
+    "CLAUDE.md": "f9e2544290ee8418484e47194444ee58c2ea675682871ae8a8727d1edb17978e",
     "INIT.md": "f2fb601d5ebc4ca72274ac9d3fcf7b7a96e27958bb92cd065a9165b501ee94d7",
-    "README.md": "676e6bf33b44044fb4c62c9fe5441729bd47f2d5077ff904e57a4a1b658859ac",
+    "README.md": "2818c884d46d97ec14fe4921dbdc147769d29846c08a92b1d3225c5297cfed93",
     "apps.json": "9945f9bd573e5af8aad2e65cc8b4284fbb1d7e8b96c4efdd42eeb49132fb4327",
     "apps/.gitkeep": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
     "docs/start.md": "1c29eed0a0297c742ca5814de9081ff8efce3b2da5d9e1bdf90a403873da4aa9",

package/shared/files/f04e547b89bb933c39de2f781978b93ea8b586ac9dee50312612e2f5c40391b1

@@ -1,5 +0,0 @@
-# Repository instructions
-
-Read [AGENTS.md](AGENTS.md). It routes to setup and the app workflow. The
-[app-workflow skill](.claude/skills/app-workflow/SKILL.md) uses the same
-instructions.