code-foundry 0.39.2 → 0.39.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/.github/workflows/opencode-security_self-ci.yml +2 -2
  2. package/CHANGELOG.md +14 -0
  3. package/package.json +1 -1
package/.github/workflows/opencode-security_self-ci.yml CHANGED
@@ -40,11 +40,11 @@ jobs:
40
40
  name: OpenCode Security / Scan
41
41
  needs: detect
42
42
  if: vars.CI_BILLING_PAUSED != 'true' && needs.detect.outputs.enabled == 'true' && needs.detect.outputs.token == 'true'
43
- uses: 0xPlayerOne/opencode-security/.github/workflows/opencode-security.yml@b3dce823322672b285fbe99b870ea984c01826cb # main
43
+ uses: 0xPlayerOne/opencode-security/.github/workflows/opencode-security.yml@137698ef3545204af8fad00fc8bd64d663c8122e # main
44
44
  with:
45
45
  # This is the scanner checkout ref, not the consumer PR ref. The
46
46
  # reusable workflow already checks out the consumer repository.
47
- source_ref: b3dce823322672b285fbe99b870ea984c01826cb
47
+ source_ref: 137698ef3545204af8fad00fc8bd64d663c8122e
48
48
  runner: ubuntu-latest
49
49
  model: opencode-go/muse-spark-1.2-contributor
50
50
  mode: standard
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.39.4](https://github.com/0xPlayerOne/code-foundry/compare/v0.39.3...v0.39.4) (2026-08-29)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * **security:** pin authoritative scan resealing ([6885fea](https://github.com/0xPlayerOne/code-foundry/commit/6885fea2848ec13ae6a8fc6c3f378c7b98a46a9f))
9
+
10
+ ## [0.39.3](https://github.com/0xPlayerOne/code-foundry/compare/v0.39.2...v0.39.3) (2026-08-29)
11
+
12
+
13
+ ### Bug Fixes
14
+
15
+ * **security:** pin scanner target normalization ([f03ddb0](https://github.com/0xPlayerOne/code-foundry/commit/f03ddb07d9bc6c06d9a94962f475ec157e5d194e))
16
+
3
17
  ## [0.39.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.39.1...v0.39.2) (2026-08-29)
4
18
 
5
19
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "0.39.2",
3
+ "version": "0.39.4",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",