code-foundry 1.4.0 → 1.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -109,7 +109,9 @@ jobs:
|
|
|
109
109
|
|
|
110
110
|
codeql:
|
|
111
111
|
name: CodeQL
|
|
112
|
-
|
|
112
|
+
# Release-please pull requests also analyze with CodeQL so repository
|
|
113
|
+
# rulesets requiring code scanning results never deadlock the release.
|
|
114
|
+
if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'audit' || inputs.mode == 'release')
|
|
113
115
|
uses: ./.github/workflows/codeql.yml
|
|
114
116
|
with:
|
|
115
117
|
runtime-repository: ${{ inputs.runtime-repository }}
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,12 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [1.4.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.4.0...v1.4.1) (2026-09-07)
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
### Bug Fixes
|
|
7
|
+
|
|
8
|
+
* **validation:** run CodeQL on the release tier ([e93c36c](https://github.com/0xPlayerOne/code-foundry/commit/e93c36c4be11611117a13aa88212f16b6129f464))
|
|
9
|
+
|
|
3
10
|
## [1.4.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.3.2...v1.4.0) (2026-09-07)
|
|
4
11
|
|
|
5
12
|
|
package/docs/WORKFLOWS.md
CHANGED
|
@@ -16,7 +16,9 @@ workflow_dispatch:
|
|
|
16
16
|
|
|
17
17
|
In the `staging-release` topology, pull requests into `staging` run the fast
|
|
18
18
|
tier, ordinary pull requests into `main` run the full audit tier, and exact
|
|
19
|
-
Release Please pull requests into `main` run only release policy
|
|
19
|
+
Release Please pull requests into `main` run only release policy plus CodeQL
|
|
20
|
+
(the CodeQL analysis keeps repository rulesets that require code scanning
|
|
21
|
+
results satisfiable for the release commit). In the
|
|
20
22
|
`direct` topology (the default) every pull request targets `main` and runs the
|
|
21
23
|
full audit tier, because there is no integration branch for a fast pass.
|
|
22
24
|
Scheduled and manual runs select the audit tier in both topologies. Draft PR
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "code-foundry",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.1",
|
|
4
4
|
"description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
|
|
5
5
|
"homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
|
|
6
6
|
"bugs": {
|
|
@@ -82,10 +82,12 @@ export function classifyValidationMode(input) {
|
|
|
82
82
|
const REQUIRED_JOBS_BY_MODE = {
|
|
83
83
|
fast: ['ci', 'test'],
|
|
84
84
|
audit: ['ci', 'test', 'security', 'codeql'],
|
|
85
|
-
// The release tier
|
|
86
|
-
// check runs as a conditional step inside the gate itself
|
|
87
|
-
//
|
|
88
|
-
release
|
|
85
|
+
// The release tier skips the CI/test/security suites (the generated release
|
|
86
|
+
// diff check runs as a conditional step inside the gate itself) but still
|
|
87
|
+
// runs CodeQL: repository rulesets that require code scanning results need
|
|
88
|
+
// a CodeQL analysis of the release pull request's commit, and Release
|
|
89
|
+
// Please pull requests must not deadlock against that requirement.
|
|
90
|
+
release: ['codeql'],
|
|
89
91
|
}
|
|
90
92
|
|
|
91
93
|
/**
|