code-foundry 0.27.1 → 0.27.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,12 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.27.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.1...v0.27.2) (2026-07-28)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * **runtime:** harden dependency setup and audits ([f3c4f85](https://github.com/0xPlayerOne/code-foundry/commit/f3c4f85263232e5023e7e6b3ae50ad2c27f3a47a))
9
+
3
10
  ## [0.27.1](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.0...v0.27.1) (2026-07-28)
4
11
 
5
12
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.27.1",
3
+ "version": "0.27.2",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",
@@ -118,6 +118,13 @@ export function syncRepository(options) {
118
118
  else rmSync(join(target, file), { force: true })
119
119
  }
120
120
  }
121
+ if (includesValue(languages, 'typescript') && existsSync(join(target, '.prettierignore'))) {
122
+ const prettierIgnore = readFileSync(join(target, '.prettierignore'), 'utf8')
123
+ if (!prettierIgnore.split(/\r?\n/).includes('.code-foundry')) {
124
+ writeOrReport(join(target, '.prettierignore'), `${prettierIgnore.trimEnd()}\n.code-foundry\n`, dryRun)
125
+ changed.push('.prettierignore')
126
+ }
127
+ }
121
128
  if (!dryRun && existsSync(join(target, '.githooks/pre-commit'))) {
122
129
  chmodSync(join(target, '.githooks/pre-commit'), 0o755)
123
130
  git(target, ['config', 'core.hooksPath', '.githooks'])
package/src/runtime.mjs CHANGED
@@ -110,6 +110,9 @@ function install() {
110
110
  else {
111
111
  if (!existsSync(resolve(root, '.venv'))) run('python', ['-m', 'venv', '.venv'])
112
112
  const python = resolve(root, '.venv/bin/python')
113
+ if (spawnSync(python, ['-m', 'pip', '--version'], { stdio: 'ignore' }).status !== 0) {
114
+ run(python, ['-m', 'ensurepip', '--upgrade'])
115
+ }
113
116
  if (existsSync(resolve(root, 'requirements.txt'))) run(python, ['-m', 'pip', 'install', '--disable-pip-version-check', '-r', 'requirements.txt'])
114
117
  if (existsSync(resolve(root, 'requirements-dev.txt'))) run(python, ['-m', 'pip', 'install', '--disable-pip-version-check', '-r', 'requirements-dev.txt'])
115
118
  }
@@ -212,7 +215,7 @@ function security(task, ecosystem) {
212
215
  : []
213
216
  /** @type {Record<string, [string, string[]]>} */
214
217
  const commands = {
215
- bun: ['bun', ['audit', ...ignores.flatMap((advisory) => ['--ignore', advisory])]],
218
+ bun: ['bun', ['audit', '--audit-level=high', ...ignores.flatMap((advisory) => ['--ignore', advisory])]],
216
219
  pnpm: ['pnpm', ['audit', '--audit-level', 'high']],
217
220
  yarn: ['yarn', ['npm', 'audit', '--all', '--recursive']],
218
221
  npm: ['npm', ['audit', '--audit-level=high']],