logseq-matryca-parser 1.2.1__tar.gz → 1.2.2__tar.gz

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.2] - 2026-06-18
+
+### Fixed
+
+- **CodeQL CI conflict** — removed `.github/workflows/codeql.yml`; SAST runs via GitHub **CodeQL default setup** only (advanced workflow + default setup cannot coexist). See [`docs/CODEQL.md`](docs/CODEQL.md).
+
+### Changed
+
+- **README** — CodeQL references updated to default setup; link to `docs/CODEQL.md`.
+- **Documentation** — `docs/CODEQL.md` added; CONTRIBUTING and SECURITY updated for **1.2.2**.
+
 ## [1.2.1] - 2026-06-18
 
 ### Added

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/CONTRIBUTING.md

@@ -15,8 +15,9 @@ User-facing behavior is documented in:
 - [`README.md`](README.md) — overview, quickstart, and feature matrix
 - [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) — LOGOS, SYNAPSE, `LogseqGraph`, agents, and data flow
 - [`docs/logseq_ast_primer.md`](docs/logseq_ast_primer.md) — Logseq Spatial Markdown domain rules
-- [`CHANGELOG.md`](CHANGELOG.md) — shipped releases (current: **1.2.1**) and **Unreleased** changes (Keep a Changelog)
+- [`CHANGELOG.md`](CHANGELOG.md) — shipped releases (current: **1.2.2**) and **Unreleased** changes (Keep a Changelog)
 - [`docs/RELEASE_PROCESS.md`](docs/RELEASE_PROCESS.md) — version bump, tag, and PyPI publish checklist
+- [`docs/CODEQL.md`](docs/CODEQL.md) — CodeQL default setup (no custom `codeql.yml`)
 
 When you add or change observable parser or graph behavior, update the relevant doc sections and add a bullet under **`## [Unreleased]`** in `CHANGELOG.md` (see [`.cursor/rules/05-auto-changelog.mdc`](.cursor/rules/05-auto-changelog.mdc)).
 

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: logseq-matryca-parser
-Version: 1.2.1
+Version: 1.2.2
 Summary: The Logos Protocol: Deterministic Logseq AST parsing for Matryca.ai.
 Project-URL: Homepage, https://github.com/MarcoPorcellato/logseq-matryca-parser
 Project-URL: Repository, https://github.com/MarcoPorcellato/logseq-matryca-parser
@@ -53,7 +53,7 @@ Description-Content-Type: text/markdown
 [![Status: Stable](https://img.shields.io/badge/Status-Stable-22c55e.svg?style=flat-square)](#)
 ![Origin: Matryca.ai](https://img.shields.io/badge/Origin-Matryca.ai-gold?style=for-the-badge)
 
-**v1.2.1** — OSS hardening & Python **3.12 | 3.13** CI matrix (see [CHANGELOG](CHANGELOG.md)) — **234 tests**, 80% coverage gate, CodeQL SAST, `uv`-aligned toolchain, GitHub Community Standards, and PyPI pre-flight quality checks.
+**v1.2.2** — CodeQL CI fix & docs (see [CHANGELOG](CHANGELOG.md)) — **234 tests**, no parser API changes; SAST via GitHub CodeQL **default setup** ([`docs/CODEQL.md`](docs/CODEQL.md)).
 
 > *Turning a forest of local plain-text files into a unified semantic powerhouse.*
 
@@ -63,7 +63,7 @@ Description-Content-Type: text/markdown
 
 [👉 **TRY THE LIVE INTERACTIVE DEMO**](https://MarcoPorcellato.github.io/logseq-matryca-parser/)
 
-[📘 **ARCHITECTURE**](docs/ARCHITECTURE.md) · [AST Primer](docs/logseq_ast_primer.md) · [Changelog](CHANGELOG.md) · [Release process](docs/RELEASE_PROCESS.md)
+[📘 **ARCHITECTURE**](docs/ARCHITECTURE.md) · [AST Primer](docs/logseq_ast_primer.md) · [CodeQL](docs/CODEQL.md) · [Changelog](CHANGELOG.md) · [Release process](docs/RELEASE_PROCESS.md)
 
 </div>
 
@@ -147,6 +147,17 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 
 ---
 
+## ⚡ Release highlights (v1.2.2)
+
+Patch release — fixes a failing CodeQL GitHub Actions workflow; **no parser or public API changes**.
+
+| Area | Change |
+| :--- | :--- |
+| **CodeQL** | Removed duplicate `.github/workflows/codeql.yml`; scanning continues via GitHub **default setup** (Node 24 runners). |
+| **Docs** | New [`docs/CODEQL.md`](docs/CODEQL.md) explains default vs advanced setup and troubleshooting. |
+
+---
+
 ## ⚡ Release highlights (v1.2.1)
 
 Infrastructure and contributor experience — no parser API breaks.
@@ -155,11 +166,11 @@ Infrastructure and contributor experience — no parser API breaks.
 | :--- | :--- |
 | **Python matrix** | CI and PyPI pre-flight test **3.12** and **3.13**; PyPI classifier for 3.13. |
 | **Quality gates** | `make all` parity in GitHub Actions (`uv sync --all-extras` → lint, mypy, pytest with **≥80%** coverage). |
-| **Security** | CodeQL SAST, `pip-audit` on production deps, expanded `SECURITY.md`, PyPI publish blocked until pre-flight passes. |
+| **Security** | GitHub CodeQL default setup (SAST), `pip-audit` on production deps, expanded `SECURITY.md`, PyPI publish blocked until pre-flight passes. |
 | **Community** | `CODE_OF_CONDUCT.md`, `CODEOWNERS`, issue-template config, CONTRIBUTING with `uv` workflow. |
 | **Docs** | Root `ROADMAP_*.md` consolidated under [`docs/roadmaps/`](docs/roadmaps/). |
 
-Contributor setup: [`CONTRIBUTING.md`](CONTRIBUTING.md) · Security: [`SECURITY.md`](SECURITY.md)
+Contributor setup: [`CONTRIBUTING.md`](CONTRIBUTING.md) · Security: [`SECURITY.md`](SECURITY.md) · CodeQL: [`docs/CODEQL.md`](docs/CODEQL.md)
 
 ---
 
@@ -304,7 +315,7 @@ Marker syntax (`[#A]`, `SCHEDULED: <...>`, `DEADLINE: <...>`) is stripped from `
 ## 🛠️ Quickstart
 
 ```bash
-# Install from PyPI (latest: v1.2.1)
+# Install from PyPI (latest: v1.2.2)
 pip install logseq-matryca-parser
 
 # Optional: filesystem watcher for live incremental graph updates

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/README.md

@@ -12,7 +12,7 @@
 [![Status: Stable](https://img.shields.io/badge/Status-Stable-22c55e.svg?style=flat-square)](#)
 ![Origin: Matryca.ai](https://img.shields.io/badge/Origin-Matryca.ai-gold?style=for-the-badge)
 
-**v1.2.1** — OSS hardening & Python **3.12 | 3.13** CI matrix (see [CHANGELOG](CHANGELOG.md)) — **234 tests**, 80% coverage gate, CodeQL SAST, `uv`-aligned toolchain, GitHub Community Standards, and PyPI pre-flight quality checks.
+**v1.2.2** — CodeQL CI fix & docs (see [CHANGELOG](CHANGELOG.md)) — **234 tests**, no parser API changes; SAST via GitHub CodeQL **default setup** ([`docs/CODEQL.md`](docs/CODEQL.md)).
 
 > *Turning a forest of local plain-text files into a unified semantic powerhouse.*
 
@@ -22,7 +22,7 @@
 
 [👉 **TRY THE LIVE INTERACTIVE DEMO**](https://MarcoPorcellato.github.io/logseq-matryca-parser/)
 
-[📘 **ARCHITECTURE**](docs/ARCHITECTURE.md) · [AST Primer](docs/logseq_ast_primer.md) · [Changelog](CHANGELOG.md) · [Release process](docs/RELEASE_PROCESS.md)
+[📘 **ARCHITECTURE**](docs/ARCHITECTURE.md) · [AST Primer](docs/logseq_ast_primer.md) · [CodeQL](docs/CODEQL.md) · [Changelog](CHANGELOG.md) · [Release process](docs/RELEASE_PROCESS.md)
 
 </div>
 
@@ -106,6 +106,17 @@ Logseq Matryca Parser is a deterministic **Stack-Machine engine** that acts as t
 
 ---
 
+## ⚡ Release highlights (v1.2.2)
+
+Patch release — fixes a failing CodeQL GitHub Actions workflow; **no parser or public API changes**.
+
+| Area | Change |
+| :--- | :--- |
+| **CodeQL** | Removed duplicate `.github/workflows/codeql.yml`; scanning continues via GitHub **default setup** (Node 24 runners). |
+| **Docs** | New [`docs/CODEQL.md`](docs/CODEQL.md) explains default vs advanced setup and troubleshooting. |
+
+---
+
 ## ⚡ Release highlights (v1.2.1)
 
 Infrastructure and contributor experience — no parser API breaks.
@@ -114,11 +125,11 @@ Infrastructure and contributor experience — no parser API breaks.
 | :--- | :--- |
 | **Python matrix** | CI and PyPI pre-flight test **3.12** and **3.13**; PyPI classifier for 3.13. |
 | **Quality gates** | `make all` parity in GitHub Actions (`uv sync --all-extras` → lint, mypy, pytest with **≥80%** coverage). |
-| **Security** | CodeQL SAST, `pip-audit` on production deps, expanded `SECURITY.md`, PyPI publish blocked until pre-flight passes. |
+| **Security** | GitHub CodeQL default setup (SAST), `pip-audit` on production deps, expanded `SECURITY.md`, PyPI publish blocked until pre-flight passes. |
 | **Community** | `CODE_OF_CONDUCT.md`, `CODEOWNERS`, issue-template config, CONTRIBUTING with `uv` workflow. |
 | **Docs** | Root `ROADMAP_*.md` consolidated under [`docs/roadmaps/`](docs/roadmaps/). |
 
-Contributor setup: [`CONTRIBUTING.md`](CONTRIBUTING.md) · Security: [`SECURITY.md`](SECURITY.md)
+Contributor setup: [`CONTRIBUTING.md`](CONTRIBUTING.md) · Security: [`SECURITY.md`](SECURITY.md) · CodeQL: [`docs/CODEQL.md`](docs/CODEQL.md)
 
 ---
 
@@ -263,7 +274,7 @@ Marker syntax (`[#A]`, `SCHEDULED: <...>`, `DEADLINE: <...>`) is stripped from `
 ## 🛠️ Quickstart
 
 ```bash
-# Install from PyPI (latest: v1.2.1)
+# Install from PyPI (latest: v1.2.2)
 pip install logseq-matryca-parser
 
 # Optional: filesystem watcher for live incremental graph updates

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/SECURITY.md

@@ -6,7 +6,7 @@ Security fixes are provided **only for the latest released version** on [PyPI](h
 
 | Version | Supported |
 | ------- | --------- |
-| **1.2.1** (latest) | Yes |
+| **1.2.2** (latest) | Yes |
 | Older releases | No |
 
 We recommend always running the current release and upgrading promptly when a security advisory is published.

logseq_matryca_parser-1.2.2/docs/CODEQL.md

@@ -0,0 +1,31 @@
+# CodeQL code scanning
+
+**Logseq Matryca Parser** (v1.2.2+) uses **GitHub CodeQL default setup** for static analysis (SAST) on Python.
+
+## Why there is no `codeql.yml` workflow
+
+GitHub does not allow **default setup** and a custom **advanced** CodeQL workflow at the same time. Uploading SARIF from `.github/workflows/codeql.yml` fails with:
+
+> CodeQL analyses from advanced configurations cannot be processed when the default setup is enabled
+
+Default setup is the recommended path for this repository: GitHub maintains the analysis configuration, runs on current runner images (Node 24+), and scans Python without duplicating CI.
+
+## Where to see results
+
+- **Security → Code scanning** on the repository
+- [CodeQL status page](https://github.com/MarcoPorcellato/logseq-matryca-parser/security/code-scanning/tools/CodeQL/status/) for coverage and run history
+
+## Switching to an advanced workflow (optional)
+
+Only if you need a custom `codeql.yml` (extra queries, manual build steps, etc.):
+
+1. **Settings → Advanced Security → Code scanning**
+2. Next to **CodeQL analysis**, open the menu and choose **Disable CodeQL** (disables default setup)
+3. Add or restore `.github/workflows/codeql.yml` using [github/codeql-action](https://github.com/github/codeql-action) **v4** or newer
+
+Do not re-enable default setup while an advanced workflow is active.
+
+## Related
+
+- [`SECURITY.md`](../SECURITY.md) — vulnerability reporting
+- [Troubleshooting: default setup enabled](https://docs.github.com/en/code-security/reference/code-scanning/sarif-files/troubleshoot-sarif-uploads/default-setup-enabled)

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/docs/logseq_ast_primer.md

@@ -214,4 +214,4 @@ If you feed Logseq Markdown into `RecursiveCharacterTextSplitter` (LangChain) or
 
 The **Logos Protocol** solves this by walking the AST deterministically, isolating properties, shielding dead-zone literals, and using the `SYNAPSE` adapter to export native LangChain `Document` or LlamaIndex `TextNode` objects. Every generated object retains its exact hierarchical lineage in the metadata, feeding your local LLM perfectly structured data.
 
-For vault-wide navigation (aliases, backlinks, namespace shadowing, assets), load the graph with **`LogseqGraph`** — see the [README](../README.md) and [CHANGELOG](../CHANGELOG.md) (graph parity from **v1.2.0**; latest **v1.2.1** adds CI/OSS hardening and Python 3.13 support).
+For vault-wide navigation (aliases, backlinks, namespace shadowing, assets), load the graph with **`LogseqGraph`** — see the [README](../README.md) and [CHANGELOG](../CHANGELOG.md) (graph parity from **v1.2.0**; **v1.2.1** adds CI/OSS hardening; **v1.2.2** fixes CodeQL CI and documents default setup).

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "logseq-matryca-parser"
-version = "1.2.1"
+version = "1.2.2"
 description = "The Logos Protocol: Deterministic Logseq AST parsing for Matryca.ai."
 readme = "README.md"
 requires-python = ">=3.12"

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/src/logseq_matryca_parser/__init__.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import sys
 
-__version__ = "1.2.1"
+__version__ = "1.2.2"
 
 from .agent_writer import LogseqConfigReader, logseq_agent_write
 from .exceptions import BlockReferenceError, LogseqIndentationError, LogseqParserError

{logseq_matryca_parser-1.2.1 → logseq_matryca_parser-1.2.2}/uv.lock

@@ -1048,7 +1048,7 @@ wheels = [
 
 [[package]]
 name = "logseq-matryca-parser"
-version = "1.2.1"
+version = "1.2.2"
 source = { editable = "." }
 dependencies = [
     { name = "pydantic" },

logseq_matryca_parser-1.2.1/.github/workflows/codeql.yml

@@ -1,37 +0,0 @@
-name: CodeQL
-
-on:
-  push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      security-events: write
-      packages: read
-      actions: read
-      contents: read
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ "python" ]
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v6
-
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3