From b6258b5a7b3aa13bd208465ac74b7680b8a10f7f Mon Sep 17 00:00:00 2001
From: David Meister <thedavidmeister@gmail.com>
Date: Thu, 21 May 2026 17:39:45 +0000
Subject: [PATCH 1/3] ci: skip foundry.lock + .gitignore from soldeer publishes

Soldeer flags both as sensitive and prompts interactively on push.
CI has no TTY so the prompt fails with not connected and the publish
dies. Neither file is actually sensitive (no secrets) and consumers
have no use for them either, so the simplest fix is to exclude them
from the publish payload via .soldeerignore.
---
 .soldeerignore | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .soldeerignore

diff --git a/.soldeerignore b/.soldeerignore
new file mode 100644
index 0000000..0a66103
--- /dev/null
+++ b/.soldeerignore
@@ -0,0 +1,7 @@
+# Soldeer flags .gitignore and foundry.lock as "sensitive" and prompts
+# for interactive confirmation on push. CI doesn't have a TTY, so the
+# prompt fails with "not connected" and the publish dies. Neither file
+# is actually sensitive (no secrets), but consumers of the package have
+# no use for them either — just skip them.
+.gitignore
+foundry.lock

From fde3b9e2f9f5fcb1842d2a42933fc4782d8bff05 Mon Sep 17 00:00:00 2001
From: David Meister <thedavidmeister@gmail.com>
Date: Thu, 21 May 2026 17:50:13 +0000
Subject: [PATCH 2/3] ci: align .soldeerignore with the rest of the rain.*
 repos
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Matches the canonical pattern shared across rain.deploy, rain.factory,
rain.extrospection etc. — excludes the full set of dev-machinery files
(audit/, cache/, dependencies/, flake.*, slither.config.json, REUSE.toml,
etc.) that consumers of the package have no use for and that soldeer
would otherwise flag as sensitive on push.
---
 .soldeerignore | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/.soldeerignore b/.soldeerignore
index 0a66103..6f582c1 100644
--- a/.soldeerignore
+++ b/.soldeerignore
@@ -1,7 +1,23 @@
-# Soldeer flags .gitignore and foundry.lock as "sensitive" and prompts
-# for interactive confirmation on push. CI doesn't have a TTY, so the
-# prompt fails with "not connected" and the publish dies. Neither file
-# is actually sensitive (no secrets), but consumers of the package have
-# no use for them either — just skip them.
+.DS_Store
+.coderabbitai.yaml
+.gas-snapshot
+.git
+.github
 .gitignore
-foundry.lock
+.gitmodules
+.pre-commit-config.yaml
+.soldeerignore
+.vscode
+CLAUDE.md
+/audit
+/cache
+/dependencies
+/flake.lock
+/flake.nix
+/foundry.lock
+/foundry.toml
+/out
+/remappings.txt
+/slither.config.json
+/soldeer.lock
+/REUSE.toml

From c251c8111e512e54767bf0b62520e70a57bdd08a Mon Sep 17 00:00:00 2001
From: David Meister <thedavidmeister@gmail.com>
Date: Thu, 21 May 2026 18:08:35 +0000
Subject: [PATCH 3/3] ci: cover .soldeerignore in REUSE.toml

reuse lint flagged the new .soldeerignore as missing copyright info. Add
it to the same blanket annotation as the other dev config files.
---
 REUSE.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/REUSE.toml b/REUSE.toml
index 704eb07..9c23e9e 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -17,6 +17,7 @@ path = [
   "foundry.lock",
   "remappings.txt",
   "soldeer.lock",
+  ".soldeerignore",
 ]
 SPDX-FileCopyrightText = "Copyright (c) 2020 thedavidmeister"
 SPDX-License-Identifier = "LicenseRef-DCL-1.0"