code-foundry 0.27.12 → 0.27.14

package/.github/workflows/codeql.yml

@@ -111,6 +111,9 @@ jobs:
   analyze-actions:
     name: Analyze (Actions)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.actions_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -162,6 +165,9 @@ jobs:
   analyze-typescript:
     name: Analyze (TypeScript)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.javascript_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -213,6 +219,9 @@ jobs:
   analyze-python:
     name: Analyze (Python)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.python_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -264,6 +273,9 @@ jobs:
   analyze-rust:
     name: Analyze (Rust)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.rust_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:

package/.github/workflows/draft-pr.yml

@@ -29,7 +29,7 @@ jobs:
         id: check-pr
         run: |
           BRANCH="${{ github.ref_name }}"
-          EXISTING=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number,title 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]").length))')
+          EXISTING=$(gh pr list --repo "$GITHUB_REPOSITORY" --limit 1 --base staging --head "$BRANCH" --state open --json number,title 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]").length))')
           echo "existing=$EXISTING" >> "$GITHUB_OUTPUT"
 
       - name: Create
@@ -37,6 +37,7 @@ jobs:
         run: |
           BRANCH="${{ github.ref_name }}"
           gh pr create \
+            --repo "$GITHUB_REPOSITORY" \
             --base staging \
             --head "$BRANCH" \
             --draft \
@@ -51,7 +52,7 @@ jobs:
         if: steps.check-pr.outputs.existing == '0'
         run: |
           BRANCH="${{ github.ref_name }}"
-          PR_NUMBER=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]")[0]?.number || ""))')
+          PR_NUMBER=$(gh pr list --repo "$GITHUB_REPOSITORY" --limit 1 --base staging --head "$BRANCH" --state open --json number 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]")[0]?.number || ""))')
           if [ -n "$PR_NUMBER" ]; then
-            gh pr ready "$PR_NUMBER"
+            gh pr ready "$PR_NUMBER" --repo "$GITHUB_REPOSITORY"
           fi

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.27.14](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.13...v0.27.14) (2026-07-29)
+
+
+### Bug Fixes
+
+* **codeql:** skip unavailable analyzers ([9ddf8e3](https://github.com/0xPlayerOne/code-foundry/commit/9ddf8e30dab4da2ba1f6bb20dd3503e56ab1b880))
+* **draft-pr:** pass repository explicitly ([6fbf289](https://github.com/0xPlayerOne/code-foundry/commit/6fbf289649ce2097e42b156cf2db0c39fb8ceee1))
+* **draft-pr:** use explicit repository for lookups ([e498d6e](https://github.com/0xPlayerOne/code-foundry/commit/e498d6e125099e2437041112e1b3442a7ebea389))
+
+## [0.27.13](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.12...v0.27.13) (2026-07-29)
+
+
+### Bug Fixes
+
+* **sync:** package the gitignore template ([e65c63d](https://github.com/0xPlayerOne/code-foundry/commit/e65c63dcb09a623d5ce0b55f734bbe73719c72f2))
+
 ## [0.27.12](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.11...v0.27.12) (2026-07-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.27.12",
+  "version": "0.27.14",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/commands/sync.mjs

@@ -144,6 +144,10 @@ function shouldInclude(file, languages, features) {
 
 /** @param {string} source @param {string} file */
 function sourcePath(source, file) {
+  if (file === '.gitignore') {
+    const rootTemplate = join(source, file)
+    return existsSync(rootTemplate) ? rootTemplate : join(source, 'src/templates/gitignore')
+  }
   if (file.startsWith('.github/workflows/')) {
     const name = file.slice('.github/workflows/'.length, -4)
     return join(source, '.github/workflows', `${name}_self-ci.yml`)

package/src/runtime.mjs

@@ -276,7 +276,9 @@ function codeql() {
   if (hasLanguage('python')) available.push('python')
   if (hasLanguage('rust')) available.push('rust')
   const changed = capture('git', ['diff', '--name-only', process.env.CODEQL_BASE_SHA || 'HEAD^', process.env.GITHUB_SHA || 'HEAD']).split('\n').filter(Boolean)
-  const languagesJson = available.map((language) => ({ language, name: language === 'javascript-typescript' ? 'TypeScript' : language[0].toUpperCase() + language.slice(1), 'build-mode': 'none', changed: changed.length === 0 || changed.some((file) => fileMatches(language, file)) }))
+  // Upload every configured language on every analysis run so GitHub can
+  // compare pull requests against the base branch's code-scanning config.
+  const languagesJson = available.map((language) => ({ language, name: language === 'javascript-typescript' ? 'TypeScript' : language[0].toUpperCase() + language.slice(1), 'build-mode': 'none', changed: true }))
   writeOutput('languages', languagesJson)
   for (const language of ['actions', 'javascript-typescript', 'python', 'rust']) {
     const entry = languagesJson.find((item) => item.language === language)

package/src/templates/gitignore

@@ -0,0 +1,77 @@
+# Operating system
+.DS_Store
+Thumbs.db
+.Trashes
+
+# Secrets and local environment
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+
+# JavaScript and TypeScript
+node_modules/
+.pnp/
+.pnp.js
+.turbo/
+*.tsbuildinfo
+next-env.d.ts
+
+# Python
+.venv/
+venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Rust
+target/
+
+# Build and test output
+dist/
+build/
+out/
+coverage/
+htmlcov/
+.coverage*
+.next/
+artifacts/
+cache/
+!.github/actions/cache/
+!.github/actions/cache/action.yml
+typechain/
+coverage.json
+tests/.bin/
+**/.app/
+
+# Logs and temporary files
+*.log
+*.tmp
+*.pid
+npm-debug.log*
+yarn-debug.log*
+pnpm-debug.log*
+
+# Editors, agents, and local tools
+.claude/
+.kilo/
+.codex/
+.cursor/
+.windsurf/
+.vscode/
+.idea/
+.zed/
+.fleet/
+.opencode/
+.kluster/
+.direnv/
+.envrc
+.vercel/
+mise.local.toml
+.mise.local.toml
+mise.local.lock
+.mise.local.lock
+*.code-workspace