code-foundry 1.0.3 → 1.0.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/.github/code-foundry.yml +3 -1
  2. package/.github/workflows/ci.yml +1 -1
  3. package/.github/workflows/codeql.yml +1 -1
  4. package/.github/workflows/opencode-security_self-ci.yml +1 -1
  5. package/.github/workflows/release.yml +1 -1
  6. package/.github/workflows/security.yml +4 -4
  7. package/.github/workflows/test.yml +1 -1
  8. package/.github/workflows/validation.yml +1 -1
  9. package/CHANGELOG.md +14 -0
  10. package/package.json +1 -1
package/.github/code-foundry.yml CHANGED
@@ -11,7 +11,7 @@ dependency_review: auto
11
11
  package_manager: bun
12
12
  toolchain: auto
13
13
  runtime_repository: 0xPlayerOne/code-foundry
14
- runtime_ref: v1.0.0
14
+ runtime_ref: v1.0.4
15
15
  release_type: node
16
16
  npm_publish: true
17
17
  license: agpl-3.0-or-later
@@ -37,3 +37,5 @@ post_release_mode: auto
37
37
  opencode_security: false
38
38
  sync_mode: overlay
39
39
  custom_workflows: preserve
40
+ staging_validation_mode: fast
41
+ opencode_security_model:
package/.github/workflows/ci.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.31.12
15
+ default: v1.0.5
16
16
  runner:
17
17
  description: Runner used by CI jobs.
18
18
  required: false
package/.github/workflows/codeql.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.31.12
15
+ default: v1.0.5
16
16
  runner:
17
17
  description: Runner used by CodeQL jobs.
18
18
  required: false
package/.github/workflows/opencode-security_self-ci.yml CHANGED
@@ -46,7 +46,7 @@ jobs:
46
46
  # reusable workflow already checks out the consumer repository.
47
47
  source_ref: 137698ef3545204af8fad00fc8bd64d663c8122e
48
48
  runner: ubuntu-latest
49
- model: opencode-go/muse-spark-1.2-contributor
49
+ model: opencode-go/muse-spark-1.3-contributor
50
50
  mode: standard
51
51
  fail_on_severity: high
52
52
  max_cost_usd: 1
package/.github/workflows/release.yml CHANGED
@@ -17,7 +17,7 @@ on:
17
17
  description: Code Foundry runtime tag or ref.
18
18
  required: false
19
19
  type: string
20
- default: v0.31.12
20
+ default: v1.0.5
21
21
  billing-pause-bypass:
22
22
  description: Allow this explicitly dispatched release to run while other CI remains paused.
23
23
  required: false
package/.github/workflows/security.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.31.12
15
+ default: v1.0.5
16
16
  runner:
17
17
  description: Runner used by Security jobs.
18
18
  required: false
@@ -150,7 +150,7 @@ jobs:
150
150
  uses: ./.github/actions/setup
151
151
  with:
152
152
  mise-scope: javascript
153
- cache-save: ${{ github.event_name != 'pull_request' }}
153
+ cache-save: ${{ github.event_name == 'push' }}
154
154
  - name: Audit dependencies
155
155
  if: steps.applicability.outputs.applicable == 'true'
156
156
  run: node $RUNNER_TEMP/code-foundry/src/runtime.mjs security audit javascript
@@ -213,7 +213,7 @@ jobs:
213
213
  uses: ./.github/actions/setup
214
214
  with:
215
215
  mise-scope: rust
216
- cache-save: ${{ github.event_name != 'pull_request' }}
216
+ cache-save: ${{ github.event_name == 'push' }}
217
217
  - name: Install cargo-audit
218
218
  if: steps.applicability.outputs.applicable == 'true'
219
219
  uses: taiki-e/install-action@cb33e69fad06166ca28a42b2575e4dadabf62ee8 # v2
@@ -279,7 +279,7 @@ jobs:
279
279
  uses: ./.github/actions/setup
280
280
  with:
281
281
  mise-scope: python
282
- cache-save: ${{ github.event_name != 'pull_request' }}
282
+ cache-save: ${{ github.event_name == 'push' }}
283
283
  - name: Audit dependencies
284
284
  run: node $RUNNER_TEMP/code-foundry/src/runtime.mjs security audit python
285
285
 
package/.github/workflows/test.yml CHANGED
@@ -12,7 +12,7 @@ on:
12
12
  description: Code Foundry runtime tag or ref.
13
13
  required: false
14
14
  type: string
15
- default: v0.31.12
15
+ default: v1.0.5
16
16
  runner:
17
17
  description: Runner used by non-unit test jobs.
18
18
  required: false
package/.github/workflows/validation.yml CHANGED
@@ -16,7 +16,7 @@ on:
16
16
  description: Code Foundry runtime tag or ref.
17
17
  required: false
18
18
  type: string
19
- default: v0.32.4
19
+ default: v1.0.5
20
20
  ci-runner:
21
21
  description: Runner used by CI jobs.
22
22
  required: false
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [1.0.5](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.4...v1.0.5) (2026-09-06)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * default runtime-ref inputs to the current runtime release ([#454](https://github.com/0xPlayerOne/code-foundry/issues/454)) ([6d77025](https://github.com/0xPlayerOne/code-foundry/commit/6d77025511ca641e98a17c4eed63a24285a48169))
9
+
10
+ ## [1.0.4](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.3...v1.0.4) (2026-09-06)
11
+
12
+
13
+ ### Bug Fixes
14
+
15
+ * **security:** only save caches on push in security workflow ([fff3e25](https://github.com/0xPlayerOne/code-foundry/commit/fff3e251f13e2f3954a20be8da30d4f274f36eba))
16
+
3
17
  ## [1.0.3](https://github.com/0xPlayerOne/code-foundry/compare/v1.0.2...v1.0.3) (2026-09-06)
4
18
 
5
19
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "1.0.3",
3
+ "version": "1.0.5",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "type": "module",
6
6
  "license": "AGPL-3.0-or-later",