code-foundry 1.44.9 → 1.44.11

package/.github/workflows/release.yml

@@ -202,11 +202,15 @@ jobs:
           write_ok=false
           if [ "$HAS_AUTOMATION_TOKEN" = true ] && gh api "repos/${GITHUB_REPOSITORY}" --jq '.full_name' >/dev/null 2>&1; then
             probe_ref="refs/tags/token-write-probe-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
-            if gh api -X POST "repos/${GITHUB_REPOSITORY}/git/refs" \
-                -f "ref=$probe_ref" -f "sha=${GITHUB_SHA}" >/dev/null 2>&1; then
-              gh api -X DELETE "repos/${GITHUB_REPOSITORY}/git/refs/tags/token-write-probe-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >/dev/null 2>&1 || true
-              write_ok=true
-            fi
+            for wait in 0 10 30; do
+              sleep "$wait"
+              if gh api -X POST "repos/${GITHUB_REPOSITORY}/git/refs" \
+                  -f "ref=$probe_ref" -f "sha=${GITHUB_SHA}" >/dev/null 2>&1; then
+                gh api -X DELETE "repos/${GITHUB_REPOSITORY}/git/refs/tags/token-write-probe-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >/dev/null 2>&1 || true
+                write_ok=true
+                break
+              fi
+            done
           fi
           if [ "$write_ok" = true ]; then
             echo "auto_merge=true" >> "$GITHUB_OUTPUT"
@@ -262,8 +266,28 @@ jobs:
           const { execFileSync } = require('node:child_process');
           const fs = require('node:fs');
 
-          const gh = (args) =>
-            execFileSync('gh', args, { encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 });
+          const sleep = (seconds) =>
+            execFileSync('sleep', [String(seconds)]);
+          // Writes intermittently hit GitHub's secondary rate limiting from
+          // busy automation accounts (403 with the generic not-accessible
+          // message); back off and retry before giving up.
+          const gh = (args) => {
+            for (const wait of [0, 10, 30]) {
+              try {
+                if (wait) sleep(wait);
+                return execFileSync('gh', args, {
+                  encoding: 'utf8',
+                  maxBuffer: 32 * 1024 * 1024,
+                });
+              } catch (error) {
+                const status = error.status;
+                const retriable = status === null || status === 403 || status === 429 || status >= 500;
+                if (!retriable || wait === 30) throw error;
+                console.log(`gh call failed (status ${status ?? 'unknown'}); retrying in ${wait === 0 ? 10 : 30}s`);
+              }
+            }
+            throw new Error('unreachable');
+          };
 
           const repo = process.env.REPOSITORY;
           const config = JSON.parse(fs.readFileSync(process.env.CONFIG_FILE, 'utf8'));
@@ -308,13 +332,20 @@ jobs:
             if (releasesForCheck.some((release) => release.tag_name === tag)) {
               console.log(`${tag}: release object already exists`);
             } else {
-              // No release object for this tag: create it.
-              try {
-                if (!tags.includes(tag)) {
+              // No release object for this tag: create it. The tag may also
+              // already exist from a partial earlier attempt; the release
+              // creation adopts an existing tag, so ref-creation errors are
+              // not fatal.
+              if (!tags.includes(tag)) {
+                try {
                   gh(['api', `repos/${repo}/git/refs`, '-X', 'POST',
                     '-f', `ref=refs/tags/${tag}`, '-f', `sha=${pull.merge_commit_sha}`]);
                   console.log(`${tag}: tag created at ${pull.merge_commit_sha.slice(0, 10)}`);
+                } catch (error) {
+                  console.log(`${tag}: tag ref creation skipped: ${String(error.message).slice(0, 120)}`);
                 }
+              }
+              try {
                 const body = JSON.stringify({
                   tag_name: tag,
                   name: tag,
@@ -326,7 +357,7 @@ jobs:
                 console.log(`${tag}: release object created`);
               } catch (error) {
                 failures += 1;
-                console.log(`${tag}: creation failed: ${error.message}`);
+                console.log(`${tag}: release creation failed: ${String(error.message).slice(0, 160)}`);
                 continue;
               }
             }

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.44.11](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.10...v1.44.11) (2026-10-06)
+
+
+### Bug Fixes
+
+* **release:** retry the token probe and REST fallback writes with backoff ([#729](https://github.com/0xPlayerOne/code-foundry/issues/729)) ([ad28e18](https://github.com/0xPlayerOne/code-foundry/commit/ad28e18326f0ee8c25950fb649eb81cdb3dc0a1a))
+
+## [1.44.10](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.9...v1.44.10) (2026-10-06)
+
+
+### Bug Fixes
+
+* **release:** treat ref-creation errors in the REST fallback as non-fatal ([#727](https://github.com/0xPlayerOne/code-foundry/issues/727)) ([75ea614](https://github.com/0xPlayerOne/code-foundry/commit/75ea61465e7c4cacd39e3aa8c52df93c2ea9bf03))
+
 ## [1.44.9](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.8...v1.44.9) (2026-10-06)
 
 
@@ -131,28 +145,9 @@
 
 * **hooks:** delegate the generated pre-commit hook to the runtime ([#684](https://github.com/0xPlayerOne/code-foundry/issues/684)) ([5d9a571](https://github.com/0xPlayerOne/code-foundry/commit/5d9a5714aeff0d48397e3be51b22e08395bfb5ce))
 
-## [1.39.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.39.0...v1.39.1) (2026-10-01)
-
-
-### Bug Fixes
-
-* report inactive main rulesets in github doctor ([#682](https://github.com/0xPlayerOne/code-foundry/issues/682)) ([695a0b4](https://github.com/0xPlayerOne/code-foundry/commit/695a0b437910aa8e664a481c1648dbadcc1a2de8))
-
-## [1.39.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.38.1...v1.39.0) (2026-10-01)
-
-
-### Features
-
-* **ci:** surface ungated scheduled workflows in the billing pause controls ([#681](https://github.com/0xPlayerOne/code-foundry/issues/681)) ([ef48f9a](https://github.com/0xPlayerOne/code-foundry/commit/ef48f9a25aa0b22f82b0ed8a512bc1a65d08d8e9))
-
-
-### Maintenance
-
-* register the adea-ai ui and themes consumers in the fleet manifest ([#680](https://github.com/0xPlayerOne/code-foundry/issues/680)) ([f50e6c6](https://github.com/0xPlayerOne/code-foundry/commit/f50e6c6a4ef4b7f0396cdce21f53070fec818c50))
-
 <!-- code-foundry: packaged changelog -->
 
 ---
 
-This packaged changelog lists the 20 most recent releases; 229 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 231 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.44.9",
+  "version": "1.44.11",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {