code-foundry 0.38.2 → 0.39.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/.github/code-foundry.yml +1 -1
  2. package/.github/workflows/draft-pr_self-ci.yml +1 -1
  3. package/.github/workflows/opencode-security_self-ci.yml +1 -0
  4. package/CHANGELOG.md +12 -0
  5. package/package.json +1 -1
  6. package/src/commands/sync.mjs +5 -1
package/.github/code-foundry.yml CHANGED
@@ -15,7 +15,7 @@ runtime_ref: v0.34.4
15
15
  release_type: node
16
16
  npm_publish: true
17
17
  license: agpl-3.0-or-later
18
- git_workflow: staging-release
18
+ git_workflow: direct
19
19
  merge_strategy: rebase
20
20
  release_merge_strategy: rebase
21
21
  runner: ubuntu-latest
package/.github/workflows/draft-pr_self-ci.yml CHANGED
@@ -22,7 +22,7 @@ jobs:
22
22
  uses: ./.github/workflows/draft-pr.yml
23
23
  with:
24
24
  runner: ubuntu-slim
25
- base: staging
25
+ base: main
26
26
  secrets:
27
27
  CODE_FOUNDRY_TOKEN: ${{ secrets.CODE_FOUNDRY_TOKEN }}
28
28
  RELEASE_PLEASE_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN }}
package/.github/workflows/opencode-security_self-ci.yml CHANGED
@@ -46,6 +46,7 @@ jobs:
46
46
  # reusable workflow already checks out the consumer repository.
47
47
  source_ref: b3dce823322672b285fbe99b870ea984c01826cb
48
48
  runner: ubuntu-latest
49
+ model: opencode-go/muse-spark-1.2-contributor
49
50
  mode: standard
50
51
  fail_on_severity: high
51
52
  max_cost_usd: 1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.39.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.38.2...v0.39.0) (2026-08-29)
4
+
5
+
6
+ ### Features
7
+
8
+ * code-foundry 0.38.3 — direct workflow default, muse spark model, opencode_security_model override ([436da59](https://github.com/0xPlayerOne/code-foundry/commit/436da5947098039642cb961987e962cd88960db8))
9
+
10
+
11
+ ### Bug Fixes
12
+
13
+ * draft-pr base main for direct workflow (staging deleted) ([b1c063f](https://github.com/0xPlayerOne/code-foundry/commit/b1c063fa8e967800b85ffb9ae42df5d62e9a4e1e))
14
+
3
15
  ## [0.38.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.38.1...v0.38.2) (2026-08-29)
4
16
 
5
17
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.38.2",
3
+ "version": "0.39.0",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",
package/src/commands/sync.mjs CHANGED
@@ -388,6 +388,10 @@ function renderWorkflow(content, config, repository, ref, rustCodeql) {
388
388
  rendered = rendered.replace(/^(\s+rust-threads:)\s+.*$/m, `$1 '${rustCodeql.threads}'`)
389
389
  rendered = rendered.replace(/^(\s+rust-max-parallel:)\s+.*$/m, `$1 ${rustCodeql.maxParallel}`)
390
390
  }
391
+ if (workflow === 'opencode-security') {
392
+ const model = configured(config.opencode_security_model, '').trim()
393
+ if (model) rendered = rendered.replace(/^(\s+model:)\s+.*$/m, `$1 ${model}`)
394
+ }
391
395
  return rendered
392
396
  }
393
397
 
@@ -645,7 +649,7 @@ function createDefaultConfig(root, source) {
645
649
  prune_standard: 'false', cache_packages: 'auto', cache_build: 'auto', coverage_minimum: '80', turbo_remote: 'auto',
646
650
  release_type: detectPackageManager(root) === 'none' ? 'auto' : 'node', npm_publish: 'false',
647
651
  post_release: 'false', post_release_workflow: '', post_release_mode: 'auto',
648
- opencode_security: 'false',
652
+ opencode_security: 'false', opencode_security_model: '',
649
653
  sync_mode: 'overlay', custom_workflows: 'preserve',
650
654
  license: existsSync(join(root, 'LICENSE')) ? 'preserve' : 'gpl-3.0-or-later', git_workflow: 'direct', merge_strategy: 'rebase', release_merge_strategy: 'rebase',
651
655
  }