code-foundry 0.27.13 → 0.27.15

package/.github/workflows/codeql.yml

@@ -111,6 +111,9 @@ jobs:
   analyze-actions:
     name: Analyze (Actions)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.actions_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -162,6 +165,9 @@ jobs:
   analyze-typescript:
     name: Analyze (TypeScript)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.javascript_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -213,6 +219,9 @@ jobs:
   analyze-python:
     name: Analyze (Python)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.python_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:
@@ -264,6 +273,9 @@ jobs:
   analyze-rust:
     name: Analyze (Rust)
     needs: detect
+    if: >-
+      needs.detect.outputs.enabled == 'true' &&
+      needs.detect.outputs.rust_available == 'true'
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps:

package/.github/workflows/draft-pr.yml

@@ -29,7 +29,7 @@ jobs:
         id: check-pr
         run: |
           BRANCH="${{ github.ref_name }}"
-          EXISTING=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number,title 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]").length))')
+          EXISTING=$(gh pr list --repo "$GITHUB_REPOSITORY" --limit 1 --base staging --head "$BRANCH" --state open --json number,title 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]").length))')
           echo "existing=$EXISTING" >> "$GITHUB_OUTPUT"
 
       - name: Create
@@ -37,6 +37,7 @@ jobs:
         run: |
           BRANCH="${{ github.ref_name }}"
           gh pr create \
+            --repo "$GITHUB_REPOSITORY" \
             --base staging \
             --head "$BRANCH" \
             --draft \
@@ -51,7 +52,7 @@ jobs:
         if: steps.check-pr.outputs.existing == '0'
         run: |
           BRANCH="${{ github.ref_name }}"
-          PR_NUMBER=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]")[0]?.number || ""))')
+          PR_NUMBER=$(gh pr list --repo "$GITHUB_REPOSITORY" --limit 1 --base staging --head "$BRANCH" --state open --json number 2>/dev/null | node -e 'let d=""; process.stdin.on("data", c => d += c).on("end", () => console.log(JSON.parse(d || "[]")[0]?.number || ""))')
           if [ -n "$PR_NUMBER" ]; then
-            gh pr ready "$PR_NUMBER"
+            gh pr ready "$PR_NUMBER" --repo "$GITHUB_REPOSITORY"
           fi

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.27.15](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.14...v0.27.15) (2026-07-29)
+
+
+### Bug Fixes
+
+* **ci:** remove stale CodeQL change detection ([897d749](https://github.com/0xPlayerOne/code-foundry/commit/897d749d296c02751fda764b9fa069e32208182b))
+
+## [0.27.14](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.13...v0.27.14) (2026-07-29)
+
+
+### Bug Fixes
+
+* **codeql:** skip unavailable analyzers ([9ddf8e3](https://github.com/0xPlayerOne/code-foundry/commit/9ddf8e30dab4da2ba1f6bb20dd3503e56ab1b880))
+* **draft-pr:** pass repository explicitly ([6fbf289](https://github.com/0xPlayerOne/code-foundry/commit/6fbf289649ce2097e42b156cf2db0c39fb8ceee1))
+* **draft-pr:** use explicit repository for lookups ([e498d6e](https://github.com/0xPlayerOne/code-foundry/commit/e498d6e125099e2437041112e1b3442a7ebea389))
+
 ## [0.27.13](https://github.com/0xPlayerOne/code-foundry/compare/v0.27.12...v0.27.13) (2026-07-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.27.13",
+  "version": "0.27.15",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/runtime.mjs

@@ -275,8 +275,9 @@ function codeql() {
   if (hasLanguage('typescript') || hasLanguage('javascript')) available.push('javascript-typescript')
   if (hasLanguage('python')) available.push('python')
   if (hasLanguage('rust')) available.push('rust')
-  const changed = capture('git', ['diff', '--name-only', process.env.CODEQL_BASE_SHA || 'HEAD^', process.env.GITHUB_SHA || 'HEAD']).split('\n').filter(Boolean)
-  const languagesJson = available.map((language) => ({ language, name: language === 'javascript-typescript' ? 'TypeScript' : language[0].toUpperCase() + language.slice(1), 'build-mode': 'none', changed: changed.length === 0 || changed.some((file) => fileMatches(language, file)) }))
+  // Upload every configured language on every analysis run so GitHub can
+  // compare pull requests against the base branch's code-scanning config.
+  const languagesJson = available.map((language) => ({ language, name: language === 'javascript-typescript' ? 'TypeScript' : language[0].toUpperCase() + language.slice(1), 'build-mode': 'none', changed: true }))
   writeOutput('languages', languagesJson)
   for (const language of ['actions', 'javascript-typescript', 'python', 'rust']) {
     const entry = languagesJson.find((item) => item.language === language)
@@ -287,14 +288,6 @@ function codeql() {
   }
 }
 
-/** @param {string} language @param {string} file */
-function fileMatches(language, file) {
-  if (language === 'actions') return file.startsWith('.github/workflows/') || file.endsWith('action.yml')
-  if (language === 'javascript-typescript') return /\.(js|jsx|mjs|cjs|ts|tsx|mts|cts)$/.test(file) || /(^|\/)(package\.json|tsconfig[^/]*\.json|(?:bun|pnpm|yarn|package-lock)\.lock)$/.test(file)
-  if (language === 'python') return /\.py$|(^|\/)(pyproject\.toml|requirements[^/]*\.txt|setup\.py|Pipfile\.lock|poetry\.lock)$/.test(file)
-  return /\.rs$|(^|\/)Cargo\.(toml|lock)$/.test(file)
-}
-
 /** @param {string} command */
 function printProfile(command) {
   if (command === 'get') {