code-foundry 1.0.2 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -25,9 +25,13 @@ outputs:
|
|
|
25
25
|
runs:
|
|
26
26
|
using: composite
|
|
27
27
|
steps:
|
|
28
|
+
# Caches are restored on every event but saved on push only: scheduled
|
|
29
|
+
# and dispatched runs share the default branch with untrusted
|
|
30
|
+
# runtime-ref checkouts, so letting them save would allow cache
|
|
31
|
+
# poisoning. Push events require write access and stay trusted.
|
|
28
32
|
- name: Restore cache
|
|
29
33
|
id: restore
|
|
30
|
-
if: inputs.save != 'true'
|
|
34
|
+
if: inputs.save != 'true' || github.event_name != 'push'
|
|
31
35
|
uses: actions/cache/restore@v5
|
|
32
36
|
with:
|
|
33
37
|
path: ${{ inputs.path }}
|
|
@@ -35,7 +39,7 @@ runs:
|
|
|
35
39
|
restore-keys: ${{ inputs.restore-keys }}
|
|
36
40
|
- name: Restore and save cache
|
|
37
41
|
id: cache
|
|
38
|
-
if: inputs.save == 'true'
|
|
42
|
+
if: inputs.save == 'true' && github.event_name == 'push'
|
|
39
43
|
uses: actions/cache@v5
|
|
40
44
|
with:
|
|
41
45
|
path: ${{ inputs.path }}
|
|
@@ -150,7 +150,7 @@ jobs:
|
|
|
150
150
|
uses: ./.github/actions/setup
|
|
151
151
|
with:
|
|
152
152
|
mise-scope: javascript
|
|
153
|
-
cache-save: ${{ github.event_name
|
|
153
|
+
cache-save: ${{ github.event_name == 'push' }}
|
|
154
154
|
- name: Audit dependencies
|
|
155
155
|
if: steps.applicability.outputs.applicable == 'true'
|
|
156
156
|
run: node $RUNNER_TEMP/code-foundry/src/runtime.mjs security audit javascript
|
|
@@ -213,7 +213,7 @@ jobs:
|
|
|
213
213
|
uses: ./.github/actions/setup
|
|
214
214
|
with:
|
|
215
215
|
mise-scope: rust
|
|
216
|
-
cache-save: ${{ github.event_name
|
|
216
|
+
cache-save: ${{ github.event_name == 'push' }}
|
|
217
217
|
- name: Install cargo-audit
|
|
218
218
|
if: steps.applicability.outputs.applicable == 'true'
|
|
219
219
|
uses: taiki-e/install-action@cb33e69fad06166ca28a42b2575e4dadabf62ee8 # v2
|
|
@@ -279,7 +279,7 @@ jobs:
|
|
|
279
279
|
uses: ./.github/actions/setup
|
|
280
280
|
with:
|
|
281
281
|
mise-scope: python
|
|
282
|
-
cache-save: ${{ github.event_name
|
|
282
|
+
cache-save: ${{ github.event_name == 'push' }}
|
|
283
283
|
- name: Audit dependencies
|
|
284
284
|
run: node $RUNNER_TEMP/code-foundry/src/runtime.mjs security audit python
|
|
285
285
|
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,19 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [1.0.4](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.3...v1.0.4) (2026-09-06)
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
### Bug Fixes
|
|
7
|
+
|
|
8
|
+
* **security:** only save caches on push in security workflow ([fff3e25](https://github.com/0xPlayerOne/code-foundry/commit/fff3e251f13e2f3954a20be8da30d4f274f36eba))
|
|
9
|
+
|
|
10
|
+
## [1.0.3](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.2...v1.0.3) (2026-09-06)
|
|
11
|
+
|
|
12
|
+
|
|
13
|
+
### Bug Fixes
|
|
14
|
+
|
|
15
|
+
* **security:** save caches on push events only ([3180b07](https://github.com/0xPlayerOne/code-foundry/commit/3180b07a669b7caa5728be6a07143d60a0c7f6af))
|
|
16
|
+
|
|
3
17
|
## [1.0.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.1...v1.0.2) (2026-09-05)
|
|
4
18
|
|
|
5
19
|
|
package/package.json
CHANGED