code-foundry 0.39.1 → 0.39.2

package/.github/workflows/release-pr.yml

@@ -66,10 +66,16 @@ jobs:
           # existing-promotion-PR lookup uses authenticated REST (gh api)
           # rather than gh pr list, which issues a GraphQL query that
           # NiftyLeague's long-lived fine-grained token policy rejects. The
-          # REST query keeps the exact base/head/state filter and the per_page=1
-          # cap (existing is 0 or 1) and fails closed on any API error.
-          EXISTING=$(gh api \
-            "repos/${GITHUB_REPOSITORY}/pulls?base=main&head=${PROMOTION_BRANCH}&state=open&per_page=1" \
+          # REST query qualifies head as owner:branch; GitHub otherwise ignores
+          # the incomplete head filter and can count an unrelated open PR. The
+          # exact base/head/state filter and per_page=1 cap keep existing at 0
+          # or 1, and the lookup fails closed on any API error.
+          EXISTING=$(gh api --method GET \
+            "repos/${GITHUB_REPOSITORY}/pulls" \
+            --field base=main \
+            --field head="${GITHUB_REPOSITORY_OWNER}:${PROMOTION_BRANCH}" \
+            --field state=open \
+            --field per_page=1 \
             --jq 'length')
           MAIN_TREE=$(gh api "repos/${GITHUB_REPOSITORY}/commits/main" --jq '.commit.tree.sha')
           STAGING_TREE=$(gh api "repos/${GITHUB_REPOSITORY}/commits/staging" --jq '.commit.tree.sha')
@@ -285,8 +291,12 @@ jobs:
             # the same authenticated REST query as the Check step, always with
             # the short-lived workflow token; gh pr list issues a GraphQL query
             # that NiftyLeague's long-lived fine-grained token policy rejects.
-            EXISTING_NUMBER=$(GH_TOKEN="${{ github.token }}" gh api \
-              "repos/${GITHUB_REPOSITORY}/pulls?base=main&head=${PROMOTION_BRANCH}&state=open&per_page=1" \
+            EXISTING_NUMBER=$(GH_TOKEN="${{ github.token }}" gh api --method GET \
+              "repos/${GITHUB_REPOSITORY}/pulls" \
+              --field base=main \
+              --field head="${GITHUB_REPOSITORY_OWNER}:${PROMOTION_BRANCH}" \
+              --field state=open \
+              --field per_page=1 \
               --jq '.[0].number // empty')
             if [ -z "$EXISTING_NUMBER" ]; then
               echo 'Pull request creation failed and no existing promotion PR was found.' >&2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.39.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.39.1...v0.39.2) (2026-08-29)
+
+
+### Bug Fixes
+
+* **release:** qualify promotion PR head filters ([75a0985](https://github.com/0xPlayerOne/code-foundry/commit/75a09856d764aafc1cd301ae68121e187c43e2d1))
+
 ## [0.39.1](https://github.com/0xPlayerOne/code-foundry/compare/v0.39.0...v0.39.1) (2026-08-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.39.1",
+  "version": "0.39.2",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",