code-foundry 0.37.4 → 0.37.5

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.37.5](https://github.com/0xPlayerOne/code-foundry/compare/v0.37.4...v0.37.5) (2026-08-23)
+
+
+### Bug Fixes
+
+* **sync:** omit Cargo Dependabot outside Rust repos ([#398](https://github.com/0xPlayerOne/code-foundry/issues/398)) ([395c4f3](https://github.com/0xPlayerOne/code-foundry/commit/395c4f34887bbb3e9f67378325b70c21d467adf0))
+
 ## [0.37.4](https://github.com/0xPlayerOne/code-foundry/compare/v0.37.3...v0.37.4) (2026-08-23)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.37.4",
+  "version": "0.37.5",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/commands/sync.mjs

@@ -146,7 +146,7 @@ export function syncRepository(options) {
       content = Buffer.from(renderWorkflow(content.toString('utf8'), config, runtimeRepository, runtimeRef, rustCodeql))
     }
     if (file === '.github/dependabot.yml') {
-      content = Buffer.from(renderDependabot(content.toString('utf8'), config))
+      content = Buffer.from(renderDependabot(content.toString('utf8'), config, languages))
     }
     if (['AGENTS.md', '.github/CONTRIBUTING.md', '.github/SECURITY.md'].includes(file)) {
       content = Buffer.from(renderContributionDocs(content.toString('utf8'), file, config))
@@ -393,14 +393,23 @@ function renderWorkflow(content, config, repository, ref, rustCodeql) {
 
 /**
  * Dependabot updates land on the repository's integration branch. Direct
- * repositories have no staging branch, so every update targets main.
+ * repositories have no staging branch, so every update targets main. Cargo
+ * updates are emitted only when Rust is part of the configured language set.
  * @param {string} content
  * @param {Record<string,string>} config
+ * @param {string} languages
  * @returns {string}
  */
-function renderDependabot(content, config) {
-  if (isStagingRelease(config.git_workflow)) return content
-  return content.replaceAll('target-branch: staging', 'target-branch: main')
+function renderDependabot(content, config, languages) {
+  let rendered = content
+  if (!includesValue(languages, 'rust')) {
+    rendered = rendered
+      .split(/(?=^  - package-ecosystem: )/m)
+      .filter((block) => !block.startsWith('  - package-ecosystem: cargo\n'))
+      .join('')
+  }
+  if (isStagingRelease(config.git_workflow)) return rendered
+  return rendered.replaceAll('target-branch: staging', 'target-branch: main')
 }
 
 /**