code-foundry 1.9.8 → 1.9.10

package/.github/workflows/opencode-security_self-ci.yml

@@ -13,10 +13,7 @@ permissions:
 jobs:
   detect:
     name: OpenCode Security / Detect
-    if: >-
-      vars.CI_BILLING_PAUSED != 'true' &&
-      (github.event_name == 'workflow_dispatch' ||
-      startsWith(github.event.pull_request.head.ref, 'release-please--branches--main'))
+    if: vars.CI_BILLING_PAUSED != 'true'
     runs-on: ubuntu-slim
     outputs:
       enabled: ${{ steps.detect.outputs.enabled }}
@@ -44,9 +41,9 @@ jobs:
           echo "token=$token" >> "$GITHUB_OUTPUT"
 
   # Reusable workflows can only be called from a job level, so the scan is
-  # its own job gated on the detect outputs. The scan itself still runs only
-  # for generated release pull requests (or manual dispatch) with the
-  # scanner configured and keyed.
+  # its own job gated on the detect outputs. The scanner runs for any ready
+  # pull request (or manual dispatch) when the repository variable opts in
+  # and the API key is configured.
   scan:
     name: OpenCode Security / Scan
     needs: detect

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.9.10](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.9...v1.9.10) (2026-09-08)
+
+
+### Bug Fixes
+
+* **ci:** keep OpenCode detection visible ([#523](https://github.com/0xPlayerOne/code-foundry/issues/523)) ([5499db8](https://github.com/0xPlayerOne/code-foundry/commit/5499db818f0b06e98f07173893104c655b2b63c1))
+
+## [1.9.9](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.8...v1.9.9) (2026-09-08)
+
+
+### Bug Fixes
+
+* **sync:** standardize existing release PR titles ([#521](https://github.com/0xPlayerOne/code-foundry/issues/521)) ([76b1c94](https://github.com/0xPlayerOne/code-foundry/commit/76b1c94ee2ddde2a438bbb0cd11515eacbcbdb8d))
+
 ## [1.9.8](https://github.com/0xPlayerOne/code-foundry/compare/v1.9.7...v1.9.8) (2026-09-08)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.9.8",
+  "version": "1.9.10",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/commands/sync.mjs

@@ -427,8 +427,12 @@ const RELEASE_BASELINE_KEYS = [
   'bump-minor-pre-major',
   'changelog-sections',
   'include-component-in-tag',
+  'pull-request-title-pattern',
+  'group-pull-request-title-pattern',
 ]
 
+const RELEASE_ENFORCED_KEYS = ['pull-request-title-pattern', 'group-pull-request-title-pattern']
+
 /** @param {string} target @param {string} sourceFile @returns {Record<string, any>} */
 function mergeReleaseConfig(target, sourceFile) {
   /** @type {Record<string, any>} */
@@ -450,7 +454,11 @@ function mergeReleaseConfig(target, sourceFile) {
       existing = baseline
     }
   }
-  return buildReleaseConfig(target, { ...safeBaseline, ...existing })
+  const merged = { ...safeBaseline, ...existing }
+  for (const key of RELEASE_ENFORCED_KEYS) {
+    if (key in baseline) merged[key] = baseline[key]
+  }
+  return buildReleaseConfig(target, merged)
 }
 
 /** @param {string} target @param {string} sourceFile @returns {string} */