@norskvideo/ctl-dev-kit 0.2.80 → 0.2.81

package/conventions/bump.sdk-app.yml

@@ -20,6 +20,12 @@ name: bump
 on:
   schedule:
     - cron: "17 4 * * *"
+  # Sent, through ci-workflows' fan-out, when something this repo pins is
+  # published (the norsk nightly, Studio's manifest pair, norsk-ctl latest), so
+  # the pins move the same day rather than at the next 04:17. client_payload
+  # may name components; it defaults to the pins.
+  repository_dispatch:
+    types: [upstream-published]
   workflow_dispatch:
     inputs:
       components:
@@ -117,7 +123,7 @@ jobs:
       - name: Choose the components to move
         id: select
         env:
-          COMPONENTS: ${{ inputs.components }}
+          COMPONENTS: ${{ inputs.components || github.event.client_payload.components || (github.event_name == 'repository_dispatch' && 'pins' || 'all') }}
         run: |
           set -euo pipefail
           devkit=0; ctl=0; pins=0
@@ -478,17 +484,20 @@ jobs:
         run: |
           nix develop .#build --command bash -c '
             set -euo pipefail
+            # --ignore-scripts: a repo whose own prepare (relay: tsc) fails on
+            # main would kill the bump that fixes it (2026-10-14). The gate
+            # below installs for real, so a tree that does not build drafts.
             # Per INSTALL ROOT, not per repo: the rewrites walk every tracked
             # package.json, and a manifest outside the root workspace list (funke
             # proxy/ui) owns a lockfile a root-only install never regenerates.
             for lock in $(git ls-files "*bun.lock"); do
-              (cd "$(dirname "$lock")" && bun install)
+              (cd "$(dirname "$lock")" && bun install --ignore-scripts)
               # bun install keeps a locked version its range still admits, so a
               # nested workspace could stay on an old dev-kit under a new pin.
               # Only where the lockfile already holds it: bun update ADDS a
               # package it does not find, and put the dev-kit into funke proxy/ui.
               if [ "$DEVKIT_CHANGED" = 1 ] && grep -q "\"@norskvideo/ctl-dev-kit@" "$lock"; then
-                (cd "$(dirname "$lock")" && bun update @norskvideo/ctl-dev-kit)
+                (cd "$(dirname "$lock")" && bun update --ignore-scripts @norskvideo/ctl-dev-kit)
               fi
             done
             # A ctl-* package also arrives TRANSITIVELY, and those never move on
@@ -500,7 +509,7 @@ jobs:
             if [ "$CTL_CHANGED" = 1 ]; then
               for pkg in ctl-test-harness ctl-sdk ctl-foundation ctl-product-template-schema moq-signals moq-flate moq-pattern moq-net moq-json moq-loc moq-msf moq-hang moq-watch; do
                 for lock in $(git ls-files "*bun.lock"); do
-                  (cd "$(dirname "$lock")" && bun update "@norskvideo/$pkg") || true
+                  (cd "$(dirname "$lock")" && bun update --ignore-scripts "@norskvideo/$pkg") || true
                 done
               done
             fi

package/conventions/bump.yml

@@ -44,6 +44,12 @@ name: bump
 on:
   schedule:
     - cron: "17 4 * * *"
+  # Sent, through ci-workflows' fan-out, when something this repo pins is
+  # published (the norsk nightly, Studio's manifest pair, norsk-ctl latest), so
+  # the pins move the same day rather than at the next 04:17. client_payload
+  # may name components; it defaults to the pins.
+  repository_dispatch:
+    types: [upstream-published]
   workflow_dispatch:
     inputs:
       components:
@@ -141,7 +147,7 @@ jobs:
       - name: Choose the components to move
         id: select
         env:
-          COMPONENTS: ${{ inputs.components }}
+          COMPONENTS: ${{ inputs.components || github.event.client_payload.components || (github.event_name == 'repository_dispatch' && 'pins' || 'all') }}
         run: |
           set -euo pipefail
           devkit=0; ctl=0; pins=0
@@ -588,17 +594,20 @@ jobs:
         run: |
           nix develop .#build --command bash -c '
             set -euo pipefail
+            # --ignore-scripts: a repo whose own prepare (relay: tsc) fails on
+            # main would kill the bump that fixes it (2026-10-14). The gate
+            # below installs for real, so a tree that does not build drafts.
             # Per INSTALL ROOT, not per repo: the rewrites walk every tracked
             # package.json, and a manifest outside the root workspace list (funke
             # proxy/ui) owns a lockfile a root-only install never regenerates.
             for lock in $(git ls-files "*bun.lock"); do
-              (cd "$(dirname "$lock")" && bun install)
+              (cd "$(dirname "$lock")" && bun install --ignore-scripts)
               # bun install keeps a locked version its range still admits, so a
               # nested workspace could stay on an old dev-kit under a new pin.
               # Only where the lockfile already holds it: bun update ADDS a
               # package it does not find, and put the dev-kit into funke proxy/ui.
               if [ "$DEVKIT_CHANGED" = 1 ] && grep -q "\"@norskvideo/ctl-dev-kit@" "$lock"; then
-                (cd "$(dirname "$lock")" && bun update @norskvideo/ctl-dev-kit)
+                (cd "$(dirname "$lock")" && bun update --ignore-scripts @norskvideo/ctl-dev-kit)
               fi
             done
             # A ctl-* package also arrives TRANSITIVELY, and those never move on
@@ -610,7 +619,7 @@ jobs:
             if [ "$CTL_CHANGED" = 1 ]; then
               for pkg in ctl-test-harness ctl-sdk ctl-foundation ctl-product-template-schema moq-signals moq-flate moq-pattern moq-net moq-json moq-loc moq-msf moq-hang moq-watch; do
                 for lock in $(git ls-files "*bun.lock"); do
-                  (cd "$(dirname "$lock")" && bun update "@norskvideo/$pkg") || true
+                  (cd "$(dirname "$lock")" && bun update --ignore-scripts "@norskvideo/$pkg") || true
                 done
               done
             fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-dev-kit",
-  "version": "0.2.80",
+  "version": "0.2.81",
   "type": "module",
   "exports": {
     "./create-product": "./create-product/create-product.ts",