code-foundry 0.13.0 → 0.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/.github/scripts/doctor.sh +3 -1
  2. package/.github/scripts/sync-template.sh +1 -7
  3. package/.github/workflows/ci.yml +4 -1
  4. package/.github/workflows/codeql.yml +4 -1
  5. package/.github/workflows/reusable-ci.yml +1 -1
  6. package/.github/workflows/reusable-codeql.yml +1 -1
  7. package/.github/workflows/reusable-security.yml +1 -1
  8. package/.github/workflows/reusable-test.yml +1 -1
  9. package/.github/workflows/security.yml +4 -1
  10. package/.github/workflows/test.yml +4 -1
  11. package/CHANGELOG.md +14 -0
  12. package/README.md +5 -0
  13. package/package.json +1 -1
package/.github/scripts/doctor.sh CHANGED
@@ -91,10 +91,12 @@ for workflow in ci codeql security test draft-pr release-pr release; do
91
91
  fi
92
92
  done
93
93
 
94
- for script in ci.sh codeql-languages.sh profile.sh security.sh doctor.sh bootstrap.sh sync-template.sh init-repo.sh sync-protection.sh sync-codeowners.sh; do
94
+ for script in ci.sh profile.sh doctor.sh bootstrap.sh sync-template.sh init-repo.sh sync-protection.sh sync-codeowners.sh; do
95
95
  [ -x ".github/scripts/$script" ] || error "missing executable script: .github/scripts/$script"
96
96
  done
97
97
 
98
+ printf '%s\n' 'Remote CI, Test, Security, and CodeQL runtimes are loaded by reusable workflow wrappers.'
99
+
98
100
  if [ "$errors" -gt 0 ]; then
99
101
  printf '%s\n' "Repository doctor found $errors error(s)." >&2
100
102
  exit 1
package/.github/scripts/sync-template.sh CHANGED
@@ -243,17 +243,11 @@ files=(
243
243
  .github/ISSUE_TEMPLATE/bug_report.yml
244
244
  .github/ISSUE_TEMPLATE/config.yml
245
245
  .github/ISSUE_TEMPLATE/feature_request.yml
246
- .github/actions/setup/action.yml
247
- .github/actions/cache/action.yml
248
- .github/actions/codeql/action.yml
249
246
  .github/scripts/profile.sh
250
247
  .github/scripts/bootstrap.sh
251
248
  .github/scripts/changed-files.sh
252
249
  .github/scripts/ci.sh
253
- .github/scripts/codeql-languages.sh
254
250
  .github/scripts/doctor.sh
255
- .github/scripts/security.sh
256
- .github/scripts/sitecustomize.py
257
251
  .github/scripts/pre-commit.sh
258
252
  .github/scripts/sync-template.sh
259
253
  .github/scripts/init-repo.sh
@@ -377,7 +371,7 @@ done
377
371
 
378
372
  # Reusable workflow callers must use a literal repository/ref. Render the
379
373
  # selected runtime repository while leaving custom workflows untouched.
380
- for file in .github/workflows/ci.yml .github/workflows/test.yml; do
374
+ for file in .github/workflows/ci.yml .github/workflows/test.yml .github/workflows/security.yml .github/workflows/codeql.yml; do
381
375
  [ -f "$file" ] || continue
382
376
  if grep -q '0xPlayerOne/code-foundry' "$file"; then
383
377
  changed=$((changed + 1))
package/.github/workflows/ci.yml CHANGED
@@ -13,5 +13,8 @@ permissions:
13
13
  jobs:
14
14
  ci:
15
15
  name: CI
16
- uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-ci.yml@v0.7.0
16
+ uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-ci.yml@v0.14.0
17
+ with:
18
+ runtime-repository: 0xPlayerOne/code-foundry
19
+ runtime-ref: v0.14.0
17
20
  secrets: inherit
package/.github/workflows/codeql.yml CHANGED
@@ -18,5 +18,8 @@ permissions:
18
18
  jobs:
19
19
  codeql:
20
20
  name: CodeQL
21
- uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-codeql.yml@v0.12.0
21
+ uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-codeql.yml@v0.14.0
22
+ with:
23
+ runtime-repository: 0xPlayerOne/code-foundry
24
+ runtime-ref: v0.14.0
22
25
  secrets: inherit
package/.github/workflows/reusable-ci.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.7.0
15
+ default: v0.14.0
16
16
 
17
17
  permissions:
18
18
  contents: read
package/.github/workflows/reusable-codeql.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.11.0
15
+ default: v0.14.0
16
16
 
17
17
  permissions:
18
18
  actions: read
package/.github/workflows/reusable-security.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.9.0
15
+ default: v0.14.0
16
16
 
17
17
  permissions:
18
18
  contents: read
package/.github/workflows/reusable-test.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.7.0
15
+ default: v0.14.0
16
16
 
17
17
  permissions:
18
18
  contents: read
package/.github/workflows/security.yml CHANGED
@@ -13,5 +13,8 @@ permissions:
13
13
  jobs:
14
14
  security:
15
15
  name: Security
16
- uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-security.yml@v0.10.0
16
+ uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-security.yml@v0.14.0
17
+ with:
18
+ runtime-repository: 0xPlayerOne/code-foundry
19
+ runtime-ref: v0.14.0
17
20
  secrets: inherit
package/.github/workflows/test.yml CHANGED
@@ -13,5 +13,8 @@ permissions:
13
13
  jobs:
14
14
  test:
15
15
  name: Test
16
- uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-test.yml@v0.8.0
16
+ uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-test.yml@v0.14.0
17
+ with:
18
+ runtime-repository: 0xPlayerOne/code-foundry
19
+ runtime-ref: v0.14.0
17
20
  secrets: inherit
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.15.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.14.0...v0.15.0) (2026-07-28)
4
+
5
+
6
+ ### Features
7
+
8
+ * **runtime:** unify reusable workflow pins ([bd7aece](https://github.com/0xPlayerOne/code-foundry/commit/bd7aecefac9d02be698907cba686c536c6c242d6))
9
+
10
+ ## [0.14.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.13.0...v0.14.0) (2026-07-28)
11
+
12
+
13
+ ### Features
14
+
15
+ * **init:** minimize consumer workflow footprint ([4427c1f](https://github.com/0xPlayerOne/code-foundry/commit/4427c1f964c3a0dc6ffe080ea3779ad2b8a1d170))
16
+
3
17
  ## [0.13.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.12.0...v0.13.0) (2026-07-28)
4
18
 
5
19
 
package/README.md CHANGED
@@ -42,6 +42,11 @@ the selected repository is saved in `.github/template.yml` and rendered into
42
42
  the small `ci.yml` and `test.yml` wrappers automatically. The equivalent
43
43
  environment variable is `REPO_FOUNDRY_RUNTIME_REPOSITORY`.
44
44
 
45
+ Normal synchronization imports only the local hook, agent-facing command,
46
+ profile/release, initializer, doctor, ownership, and protection entrypoints.
47
+ Workflow-only actions and Security/CodeQL analyzers stay in the versioned
48
+ runtime package and are not duplicated in consumer repositories.
49
+
45
50
  The standard Security wrapper uses the same runtime contract, so dependency
46
51
  audits and the public-only Dependency Review policy can be upgraded centrally
47
52
  without copying security scripts into every consumer repository.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.13.0",
3
+ "version": "0.15.0",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",