code-foundry 1.28.14 → 1.28.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -195,11 +195,17 @@ jobs:
195
195
  runs-on: ${{ inputs.runner }}
196
196
  timeout-minutes: 30
197
197
  steps:
198
+ # Analyze the pull request head, not the ephemeral merge ref. The
199
+ # codeql-action records commit_oid from `git rev-parse HEAD` on the
200
+ # checkout — the `sha` upload input is only a fallback when git is
201
+ # unavailable — so checking out the head is what actually keeps the
202
+ # recorded commit stable across mergeability evaluations.
198
203
  - name: Checkout
199
204
  if: ${{ matrix.entry.changed == true }}
200
205
  uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
201
206
  with:
202
207
  persist-credentials: false
208
+ ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
203
209
  - name: Runtime
204
210
  if: ${{ matrix.entry.changed == true }}
205
211
  uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
package/CHANGELOG.md CHANGED
@@ -1,5 +1,12 @@
1
1
  # Changelog
2
2
 
3
+ ## [1.28.15](https://github.com/0xPlayerOne/code-foundry/compare/v1.28.14...v1.28.15) (2026-09-17)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * **codeql:** analyze the pull request head commit ([#624](https://github.com/0xPlayerOne/code-foundry/issues/624)) ([ce05d1f](https://github.com/0xPlayerOne/code-foundry/commit/ce05d1f4f6c5df3a2d9134dd4657f478a265cb85))
9
+
3
10
  ## [1.28.14](https://github.com/0xPlayerOne/code-foundry/compare/v1.28.13...v1.28.14) (2026-09-11)
4
11
 
5
12
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "code-foundry",
3
- "version": "1.28.14",
3
+ "version": "1.28.15",
4
4
  "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
5
5
  "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
6
6
  "bugs": {