@starci/hfs 4.7.12 → 4.7.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/CHANGELOG.md +5 -0
  2. package/package.json +1 -1
  3. package/release/gate.mjs +388 -378
  4. package/release/lint-report.mjs +52 -0
  5. package/runtime/knowledge/hfs/canon-pins.yaml +4 -4
  6. package/runtime/knowledge/hfs/ci-standard.yaml +1 -1
  7. package/runtime/scripts/hfs/architecture/canon-clones.mjs +1 -1
  8. package/runtime/scripts/hfs/architecture/i18n-keys.mjs +6 -4
  9. package/runtime/scripts/hfs/architecture/transport-owner.mjs +1 -1
  10. package/runtime/scripts/hfs/ci-declaration.mjs +5 -2
  11. package/runtime/scripts/hfs/db-baseline-verb.mjs +5 -2
  12. package/runtime/scripts/hfs/doc-commands.mjs +2 -1
  13. package/runtime/scripts/hfs/rule-catalog.mjs +5 -2
  14. package/runtime/scripts/hfs/rules/coverage-below.mjs +5 -3
  15. package/runtime/scripts/hfs/rules/database-access.mjs +1 -1
  16. package/runtime/scripts/hfs/rules/database-migrations.mjs +13 -3
  17. package/runtime/scripts/hfs/rules/database-plpgsql.mjs +1 -1
  18. package/runtime/scripts/hfs/rules/database-queues.mjs +2 -2
  19. package/runtime/scripts/hfs/rules/deploy-scan.mjs +50 -6
  20. package/runtime/scripts/hfs/rules/deploy-workflow.mjs +11 -1
  21. package/runtime/scripts/hfs/rules/doc-fresh.mjs +18 -3
  22. package/runtime/scripts/hfs/rules/docker-health.mjs +4 -1
  23. package/runtime/scripts/hfs/rules/env-parity.mjs +8 -7
  24. package/runtime/scripts/hfs/rules/env-value-shape.mjs +2 -4
  25. package/runtime/scripts/hfs/rules/fe-build-args.mjs +1 -1
  26. package/runtime/scripts/hfs/rules/release-provenance.mjs +8 -5
  27. package/runtime/scripts/hfs/rules/script-hygiene.mjs +23 -7
  28. package/runtime/scripts/hfs/rules/stack-tooling.mjs +5 -2
  29. package/runtime/scripts/hfs/rules/stacks-swarm.mjs +5 -5
  30. package/runtime/scripts/hfs/rules/supply-chain.mjs +3 -3
  31. package/runtime/scripts/hfs/rules/unused-symbol-properties.mjs +1 -1
  32. package/runtime/scripts/hfs/rules/unused-symbol.mjs +8 -4
  33. package/runtime/scripts/hfs/sealed-members.mjs +1 -1
  34. package/runtime/scripts/hfs/secret-bootstrap-crypto.mjs +1 -1
  35. package/runtime/scripts/hfs/secret-files.mjs +1 -1
  36. package/runtime/scripts/hfs/secret-sops.mjs +1 -1
  37. package/runtime/scripts/hfs/stack-deploy-config.mjs +5 -2
  38. package/runtime/scripts/lib/env.mjs +2 -1
  39. package/runtime/scripts/lib/path-key.mjs +1 -1
  40. package/runtime/scripts/lib/roots.mjs +3 -3
  41. package/runtime/scripts/lib/secret-patterns.mjs +1 -1
  42. package/runtime/scripts/lib/swarm-stack.mjs +4 -2
  43. package/sync/ci-commands.mjs +275 -275
  44. package/templates/app/ci-workflows-lite/github/workflows/ci.yml +2 -0
package/CHANGELOG.md CHANGED
@@ -1,5 +1,10 @@
1
1
  # Changelog
2
2
 
3
+ ## 4.7.13 - 2026-10-20
4
+ - Fixed: the lite CI template sets NODE_OPTIONS on the database migration check step; ci-standard heap.steps lists `npm run db:lint`.
5
+ - Fixed: bundled runtime source clears the SonarCloud code smells of alpha.23 (regex complexity, concise classes, string prefix and suffix checks, block braces, optional chaining, export-from, default parameters, synchronous awaits, dead stores) without behavior change; canon pins follow the matching package cohort.
6
+ - Fixed: `starci app release gate --sonar` produces `reports/lint.sonar.json` before the scanner (per-side `starci app lint --sonar` runs merged like the managed CI), so the scanner no longer fails on the missing external issues report; a failing lint fails the sonar row.
7
+
3
8
  ## 4.7.12 - 2026-10-19
4
9
  - Fixed: bundled source analysis uses explicit nullable contracts, unary callback arguments and grouped regular-expression alternatives while preserving refusal paths; canon pins follow the matching package cohort.
5
10
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@starci/hfs",
3
- "version": "4.7.12",
3
+ "version": "4.7.13",
4
4
  "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
5
5
  "type": "module",
6
6
  "license": "MIT",