code-foundry 0.27.10 → 0.27.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/.github/workflows/ci.yml +1 -1
  2. package/.github/workflows/ci_self-ci.yml +1 -1
  3. package/.github/workflows/codeql.yml +1 -1
  4. package/.github/workflows/codeql_self-ci.yml +1 -1
  5. package/.github/workflows/draft-pr.yml +1 -1
  6. package/.github/workflows/draft-pr_self-ci.yml +1 -1
  7. package/.github/workflows/release-pr.yml +1 -1
  8. package/.github/workflows/release-pr_self-ci.yml +1 -1
  9. package/.github/workflows/release.yml +1 -1
  10. package/.github/workflows/release_self-ci.yml +1 -1
  11. package/.github/workflows/security.yml +10 -2
  12. package/.github/workflows/security_self-ci.yml +1 -1
  13. package/.github/workflows/test.yml +1 -1
  14. package/.github/workflows/test_self-ci.yml +1 -1
  15. package/CHANGELOG.md +15 -0
  16. package/package.json +1 -1
  17. package/src/commands/sync.mjs +1 -0
package/.github/workflows/ci.yml CHANGED
@@ -35,7 +35,7 @@ env:
35
35
  REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
36
36
 
37
37
  concurrency:
38
- group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
38
+ group: ${{ github.workflow_ref }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
39
39
  cancel-in-progress: true
40
40
 
41
41
  jobs:
package/.github/workflows/ci_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: CI
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/codeql.yml CHANGED
@@ -32,7 +32,7 @@ env:
32
32
  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
33
33
 
34
34
  concurrency:
35
- group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
35
+ group: ${{ github.workflow_ref }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
36
36
  cancel-in-progress: true
37
37
 
38
38
  jobs:
package/.github/workflows/codeql_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: CodeQL
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/draft-pr.yml CHANGED
@@ -22,7 +22,7 @@ jobs:
22
22
  runs-on: ${{ inputs.runner }}
23
23
  timeout-minutes: 10
24
24
  concurrency:
25
- group: ${{ github.workflow }}-${{ github.ref }}
25
+ group: ${{ github.workflow_ref }}-${{ github.ref }}
26
26
  cancel-in-progress: true
27
27
  steps:
28
28
  - name: Check
package/.github/workflows/draft-pr_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: Draft PR
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/release-pr.yml CHANGED
@@ -22,7 +22,7 @@ jobs:
22
22
  runs-on: ${{ inputs.runner }}
23
23
  timeout-minutes: 10
24
24
  concurrency:
25
- group: ${{ github.workflow }}-${{ github.ref }}
25
+ group: ${{ github.workflow_ref }}-${{ github.ref }}
26
26
  cancel-in-progress: true
27
27
  steps:
28
28
  - name: Check
package/.github/workflows/release-pr_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: Release PR
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/release.yml CHANGED
@@ -28,7 +28,7 @@ jobs:
28
28
  runs-on: ${{ inputs.runner }}
29
29
  timeout-minutes: 20
30
30
  concurrency:
31
- group: ${{ github.workflow }}-${{ github.ref }}
31
+ group: ${{ github.workflow_ref }}-${{ github.ref }}
32
32
  cancel-in-progress: false
33
33
  outputs:
34
34
  release_created: ${{ steps.release.outputs.release_created || 'false' }}
package/.github/workflows/release_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: Release
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/security.yml CHANGED
@@ -31,7 +31,7 @@ env:
31
31
  REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
32
32
 
33
33
  concurrency:
34
- group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
34
+ group: ${{ github.workflow_ref }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
35
35
  cancel-in-progress: true
36
36
 
37
37
  jobs:
@@ -99,6 +99,8 @@ jobs:
99
99
 
100
100
  dependency-audit-javascript:
101
101
  name: Dependency Audit (JavaScript)
102
+ needs: profile
103
+ if: ${{ needs.profile.result == 'success' && needs.profile.outputs.javascript == 'true' }}
102
104
  runs-on: ${{ inputs.runner }}
103
105
  timeout-minutes: 20
104
106
  steps:
@@ -149,6 +151,8 @@ jobs:
149
151
 
150
152
  dependency-audit-rust:
151
153
  name: Dependency Audit (Rust)
154
+ needs: profile
155
+ if: ${{ needs.profile.result == 'success' && needs.profile.outputs.rust == 'true' }}
152
156
  runs-on: ${{ inputs.runner }}
153
157
  timeout-minutes: 20
154
158
  steps:
@@ -269,7 +273,11 @@ jobs:
269
273
  dependency-audit-python-gate:
270
274
  name: Dependency Audit (Python)
271
275
  needs: [profile, dependency-audit-python]
272
- if: always()
276
+ if: >-
277
+ ${{ always() &&
278
+ needs.profile.result == 'success' &&
279
+ needs.profile.outputs.python == 'true' &&
280
+ needs.profile.outputs.python_requirements != '["none"]' }}
273
281
  runs-on: ${{ inputs.runner }}
274
282
  timeout-minutes: 5
275
283
  steps:
package/.github/workflows/security_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: Security
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/.github/workflows/test.yml CHANGED
@@ -40,7 +40,7 @@ env:
40
40
  REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
41
41
 
42
42
  concurrency:
43
- group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
43
+ group: ${{ github.workflow_ref }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
44
44
  cancel-in-progress: true
45
45
 
46
46
  jobs:
package/.github/workflows/test_self-ci.yml CHANGED
@@ -1,4 +1,4 @@
1
- name: Test
1
+ name: Code Foundry
2
2
 
3
3
  on:
4
4
  push:
package/CHANGELOG.md CHANGED
@@ -1,5 +1,20 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.27.12](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.11...v0.27.12) (2026-07-29)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * **security:** skip irrelevant dependency audits ([cc206d4](https://github.com/0xPlayerOne/code-foundry/commit/cc206d4dea5311684b79ef3a04669aa7ce74421a))
9
+
10
+ ## [0.27.11](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.10...v0.27.11) (2026-07-29)
11
+
12
+
13
+ ### Bug Fixes
14
+
15
+ * **ci:** isolate reusable workflow concurrency ([ddfc3a6](https://github.com/0xPlayerOne/code-foundry/commit/ddfc3a6b8860629a12494ffd8ef273dfb2c354b4))
16
+ * **workflows:** clarify Code Foundry job hierarchy ([124327e](https://github.com/0xPlayerOne/code-foundry/commit/124327ec3f8f5907eca478580a62b7485e0cfd98))
17
+
3
18
  ## [0.27.10](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.9...v0.27.10) (2026-07-28)
4
19
 
5
20
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.27.10",
3
+ "version": "0.27.12",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",
package/src/commands/sync.mjs CHANGED
@@ -157,6 +157,7 @@ function renderWorkflow(content, config, repository, ref) {
157
157
  const remotePrefix = `uses: ${repository}/.github/workflows/`
158
158
  let rendered = content.replaceAll(localPrefix, remotePrefix)
159
159
  rendered = rendered.replace(new RegExp(`${escapeRegExp(remotePrefix)}([^\\s@]+)`, 'g'), `$&@${ref}`)
160
+ rendered = rendered.replace(/^(\s+runtime-ref:)\s+.*$/m, `$1 ${ref}`)
160
161
  /** @type {Record<string, string|undefined>} */
161
162
  const runners = {
162
163
  ci: config.ci_runner ?? config.runner,