code-foundry 1.9.11 → 1.9.13

package/.github/workflows/cloudflare-deploy.yml

@@ -87,15 +87,25 @@ jobs:
         env:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          BUILD_SCRIPT: ${{ inputs.build-script }}
           WRANGLER_VERSION: ${{ inputs.wrangler-version }}
           MODE: ${{ inputs.mode }}
         run: |
           set -euo pipefail
-          npx -y wrangler@"$WRANGLER_VERSION" --version
+          # Bun callers install workspace dependencies with Bun. Keep that
+          # package-manager context for Wrangler's OpenNext auto-delegation;
+          # Wrangler otherwise selects npm/npx and cannot resolve the local
+          # opennextjs-cloudflare binary from a Bun workspace.
+          if [ -n "$BUILD_SCRIPT" ]; then
+            wrangler=(bunx --bun "wrangler@$WRANGLER_VERSION")
+          else
+            wrangler=(npx -y "wrangler@$WRANGLER_VERSION")
+          fi
+          "${wrangler[@]}" --version
           if [ "$MODE" = "production" ]; then
-            npx -y wrangler@"$WRANGLER_VERSION" deploy 2>&1 | tee deploy-output.txt
+            "${wrangler[@]}" deploy 2>&1 | tee deploy-output.txt
           elif [ "$MODE" = "preview" ]; then
-            npx -y wrangler@"$WRANGLER_VERSION" versions upload --message "preview ${GITHUB_SHA::7}" 2>&1 | tee deploy-output.txt
+            "${wrangler[@]}" versions upload --message "preview ${GITHUB_SHA::7}" 2>&1 | tee deploy-output.txt
           else
             echo "Unsupported mode: $MODE (use preview or production)" >&2
             exit 1

package/.github/workflows/validation-no-codeql.yml

@@ -80,7 +80,7 @@ permissions:
 jobs:
   ci:
     name: CI
-    if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'fast' || inputs.mode == 'audit')
+    if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'fast' || inputs.mode == 'audit' || inputs.mode == 'release')
     uses: ./.github/workflows/ci.yml
     with:
       runtime-repository: ${{ inputs.runtime-repository }}
@@ -92,7 +92,7 @@ jobs:
 
   test:
     name: Test
-    if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'fast' || inputs.mode == 'audit')
+    if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'fast' || inputs.mode == 'audit' || inputs.mode == 'release')
     uses: ./.github/workflows/test.yml
     with:
       runtime-repository: ${{ inputs.runtime-repository }}
@@ -106,7 +106,7 @@ jobs:
 
   security:
     name: Security
-    if: vars.CI_BILLING_PAUSED != 'true' && inputs.mode == 'audit'
+    if: vars.CI_BILLING_PAUSED != 'true' && (inputs.mode == 'audit' || inputs.mode == 'release')
     uses: ./.github/workflows/security.yml
     with:
       runtime-repository: ${{ inputs.runtime-repository }}
@@ -115,8 +115,8 @@ jobs:
 
   # Aggregate check: "Validation / Gate" (caller job name + this job name).
   # Always evaluates; only jobs required for the mode must have succeeded.
-  # The release tier runs no suite jobs: its policy (generated release diff
-  # validation) executes as a conditional step below, so no separate
+  # The release tier runs the available CI/test/security suite. Its generated
+  # release diff policy executes as a conditional step below, so no separate
   # release-policy job renders skipped checks on ordinary pull requests.
   gate:
     name: Gate

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.9.13](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.12...v1.9.13) (2026-09-08)
+
+
+### Bug Fixes
+
+* **cloudflare:** preserve Bun package manager for OpenNext deploys ([#529](https://github.com/0xPlayerOne/code-foundry/issues/529)) ([2f1bc00](https://github.com/0xPlayerOne/code-foundry/commit/2f1bc000ea28e207e4f12cc7abb5c330cb8448b9))
+
+## [1.9.12](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.11...v1.9.12) (2026-09-08)
+
+
+### Bug Fixes
+
+* **validation:** run available suites for no-CodeQL releases ([805c470](https://github.com/0xPlayerOne/code-foundry/commit/805c470f188ccfe7410bc9b2f02022d50c68f321))
+
 ## [1.9.11](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.10...v1.9.11) (2026-09-08)
 
 

package/docs/CONFIGURATION.md

@@ -183,4 +183,6 @@ GitHub deployment plus status with the workers.dev URL, and respects
 `CLOUDFLARE_ACCOUNT_ID` secrets in the consumer repository. Bun consumers may
 also pass `build-script`, `install-working-directory`, and `bun-version`; the
 runtime installs the frozen lockfile and builds the Worker before invoking
-Wrangler.
+Wrangler. Bun-backed callers invoke Wrangler through `bunx` so OpenNext's
+production delegation resolves the workspace-local `opennextjs-cloudflare`
+binary; callers without `build-script` retain the npm/npx path.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.9.11",
+  "version": "1.9.13",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {