code-foundry 0.36.0 → 0.36.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/.github/dependabot.yml +6 -0
  2. package/CHANGELOG.md +14 -0
  3. package/package.json +1 -1
  4. package/src/commands/sync.mjs +6 -26
package/.github/dependabot.yml CHANGED
@@ -7,6 +7,12 @@ updates:
7
7
  interval: weekly
8
8
  day: sunday
9
9
  open-pull-requests-limit: 99
10
+ ignore:
11
+ # Code Foundry runtime pins are sync-managed (runtime_ref in
12
+ # code-foundry.yml). Dependabot must never bump them; a stale
13
+ # github-actions group PR branched before a sync can resurrect
14
+ # legacy caller files when merged.
15
+ - dependency-name: '0xPlayerOne/code-foundry*'
10
16
  groups:
11
17
  github-actions:
12
18
  applies-to: version-updates
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.36.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.36.1...v0.36.2) (2026-08-07)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * **sync:** prettier-canonical dependabot ignore quotes ([491e06a](https://github.com/0xPlayerOne/code-foundry/commit/491e06ade14531eb02f1d7aa729cee3b1acdf78b))
9
+
10
+ ## [0.36.1](https://github.com/0xPlayerOne/code-foundry/compare/v0.36.0...v0.36.1) (2026-08-07)
11
+
12
+
13
+ ### Bug Fixes
14
+
15
+ * **sync:** prettier-canonical direct doc tables + dependabot ignore for runtime pins ([f4286b6](https://github.com/0xPlayerOne/code-foundry/commit/f4286b62ac06145b250d02ede9421f36df72a344))
16
+
3
17
  ## [0.36.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.35.0...v0.36.0) (2026-08-07)
4
18
 
5
19
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.36.0",
3
+ "version": "0.36.2",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",
package/src/commands/sync.mjs CHANGED
@@ -445,16 +445,8 @@ const DIRECT_DOC_REPLACEMENTS = {
445
445
  '```text\n release PR\n ┌──────────────┐\n │ ▼\nfeat/* fix/* chore/* ──PR──▶ main\ndocs/* test/* refactor/* │\n └── protected release branch\n```',
446
446
  ],
447
447
  [
448
- '| `main` | Protected release branch | Merge through the `staging` → `main` release PR. No direct pushes. |',
449
- '| `main` | Protected release branch | Merge through pull requests only. No direct pushes. |',
450
- ],
451
- [
452
- '| `staging` | Integration branch | Target normal pull requests here. Required checks must pass before merge. |\n',
453
- '',
454
- ],
455
- [
456
- '| `feat/*`, `fix/*`, `chore/*`, `refactor/*`, `docs/*`, `test/*` | Focused work | Branch from `staging`; keep changes small and reviewable. |',
457
- '| `feat/*`, `fix/*`, `chore/*`, `refactor/*`, `docs/*`, `test/*` | Focused work | Branch from `main`; keep changes small and reviewable. |',
448
+ '| Branch | Purpose | Contribution rule |\n| -------------------------------------------------------------- | ------------------------ | ------------------------------------------------------------------------- |\n| `main` | Protected release branch | Merge through the `staging` → `main` release PR. No direct pushes. |\n| `staging` | Integration branch | Target normal pull requests here. Required checks must pass before merge. |\n| `feat/*`, `fix/*`, `chore/*`, `refactor/*`, `docs/*`, `test/*` | Focused work | Branch from `staging`; keep changes small and reviewable. |\n',
449
+ '| Branch | Purpose | Contribution rule |\n| -------------------------------------------------------------- | ------------------------ | ------------------------------------------------------ |\n| `main` | Protected release branch | Merge through pull requests only. No direct pushes. |\n| `feat/*`, `fix/*`, `chore/*`, `refactor/*`, `docs/*`, `test/*` | Focused work | Branch from `main`; keep changes small and reviewable. |\n',
458
450
  ],
459
451
  [
460
452
  'The Git workflow is `staging-release`: topic branches **squash** into `staging`, a promotion PR **rebases** validated changes into `main` (`merge_strategy: rebase`), and the Release Please version PR **rebases** into `main` (`release_merge_strategy: rebase`). Release automation never defaults to a merge method and never merges with `--admin`; `code-foundry doctor` and `code-foundry sync` fail closed on any other merge strategy. Re-align `staging` with `main` after a release when needed.',
@@ -485,24 +477,12 @@ const DIRECT_DOC_REPLACEMENTS = {
485
477
  '7. Push to the fork and open a pull request targeting `main`.',
486
478
  ],
487
479
  [
488
- '| Pull request targeting `staging` | Fast validation: CI plus unit tests, ending in `Validation / Gate` |\n',
489
- '',
490
- ],
491
- [
492
- '| Ordinary pull request targeting `main` | Audit validation: CI, full tests, Security, and CodeQL, ending in `Validation / Gate` |',
493
- '| Pull request targeting `main` | Audit validation: CI, full tests, Security, and CodeQL, ending in `Validation / Gate` |',
494
- ],
495
- [
496
- '| Push to `staging` | Promotion PR workflow; canonical validation waits for the PR event |\n',
497
- '',
480
+ '| Event | Expected automation |\n| --- | --- |\n| Pull request targeting `staging` | Fast validation: CI plus unit tests, ending in `Validation / Gate` |\n| Ordinary pull request targeting `main` | Audit validation: CI, full tests, Security, and CodeQL, ending in `Validation / Gate` |\n| Exact Release Please pull request targeting `main` | Release-policy validation only, ending in `Validation / Gate` |\n| Scheduled or manual validation | Full audit tier |\n| Push to a working branch | Draft PR workflow |\n| Push to `staging` | Promotion PR workflow; canonical validation waits for the PR event |\n| Push to `main` | Release workflow; canonical validation already ran on the merged PR |\n',
481
+ '| Event | Expected automation |\n| -------------------------------------------------- | ------------------------------------------------------------------------------------- |\n| Pull request targeting `main` | Audit validation: CI, full tests, Security, and CodeQL, ending in `Validation / Gate` |\n| Exact Release Please pull request targeting `main` | Release-policy validation only, ending in `Validation / Gate` |\n| Scheduled or manual validation | Full audit tier |\n| Push to a working branch | Draft PR workflow |\n| Push to `main` | Release workflow; canonical validation already ran on the merged PR |\n',
498
482
  ],
499
483
  [
500
- '| Working branch | `staging` | Squash | All applicable required checks pass |',
501
- '| Working branch | `main` | Squash | All applicable required checks pass |',
502
- ],
503
- [
504
- '| `staging` → `main` promotion | `main` | Rebase (`merge_strategy`) | Current staging checks, release review, and rollout notes |\n',
505
- '',
484
+ '| Change | Target | Merge method | Merge gate |\n| ----------------- | --------- | ------------------------------------------------------- | --------------------------------------------------------- |\n| Working branch | `staging` | Squash | All applicable required checks pass |\n| `staging` → `main` promotion | `main` | Rebase (`merge_strategy`) | Current staging checks, release review, and rollout notes |\n| Release Please version PR | `main` | Rebase (`release_merge_strategy`, fails closed) | Validation gate and release policy pass |\n',
485
+ '| Change | Target | Merge method | Merge gate |\n| ------------------------- | ------ | ----------------------------------------------- | --------------------------------------- |\n| Working branch | `main` | Squash | All applicable required checks pass |\n| Release Please version PR | `main` | Rebase (`release_merge_strategy`, fails closed) | Validation gate and release policy pass |\n',
506
486
  ],
507
487
  [
508
488
  '1. Create a focused branch from `staging`.',