@varlock/bumpy 1.1.0 → 1.2.0

package/README.md

@@ -0,0 +1,256 @@
+<p align="center">
+  <a href="https://bumpy.varlock.dev" target="_blank" rel="noopener noreferrer">
+    <img src="https://raw.githubusercontent.com/dmno-dev/bumpy/refs/heads/main/images/github-readme-banner.png" alt="Bumpy banner">
+  </a>
+</p>
+<br/>
+<p align="center">
+  <a href="https://npmjs.com/package/@varlock/bumpy"><img src="https://img.shields.io/npm/v/@varlock/bumpy.svg" alt="npm package"></a>
+  <a href="https://github.com/dmno-dev/bumpy/blob/main/LICENSE"><img src="https://img.shields.io/npm/l/@varlock/bumpy.svg" alt="license"></a>
+  <a href="https://github.com/dmno-dev/bumpy/actions/workflows/ci.yaml"><img src="https://img.shields.io/github/actions/workflow/status/dmno-dev/bumpy/ci.yaml?style=flat&logo=github&label=CI" alt="build status"></a>
+  <a href="https://chat.dmno.dev"><img src="https://img.shields.io/badge/chat-discord-5865F2?style=flat&logo=discord" alt="discord chat"></a>
+</p>
+<br/>
+
+# @varlock/bumpy 🐸
+
+A modern package versioning and changelog generation tool — built for monorepos (works great in single packages too).
+
+## How It Works
+
+Bumpy uses **bump files** (you may know them as "changesets" if coming from [that tool 🦋](https://github.com/changesets/changesets)) — small markdown files that declare an intent to release packages with a bump level (patch/minor/major), and a description that ends up in changelogs. Developers create these files as part of their PRs, and these files are then used to consolidate changes, generate changelogs, and trigger publishing. Specifically:
+
+- Devs/agents create bump files as part of their PRs (using `bumpy add` or manually)
+- A pre-push git hook can enforce bump files exist for changed packages
+- In CI, a workflow checks PRs for bump files, leaves a comment on the PR detailing changed packages
+- As PRs merge to the base branch, a "release PR" is kept up to date
+  - Shows what packages will be released and their changelogs
+    — Including packages bumped automatically due to dependency relationships
+- When release PR is merged, publishing is triggered
+  - Oending bump files are deleted and packages are published with updated versions and changelogs
+
+All of this is automated via two simple GitHub Actions workflows (see [CI setup](#ci--github-actions) below). You can also run everything locally with `bumpy status`, `bumpy version`, and `bumpy publish`.
+
+### Example bump file
+
+`.bumpy/add-user-language.md`:
+
+```markdown
+---
+'@myorg/core': minor
+'@myorg/utils': patch
+---
+
+Added user language preference to the core config.
+Fixed locale fallback logic in utils.
+```
+
+## Features
+
+- **All package managers** — npm, pnpm, yarn, and bun workspaces
+- **Smart dependency propagation** — configurable rules for how version bumps cascade through your dependency graph (see [version propagation docs](https://github.com/dmno-dev/bumpy/blob/main/docs/version-propagation.md))
+- **Pack-then-publish** — by default, publishes to npm (resolving `workspace:` and `catalog:` protocols, with OIDC/provenance support). Per-package custom publish commands let you target anything — VSCode extensions, Docker images, JSR, private registries, etc.
+- **Flexible package management** — include/exclude any package individually via per-package config, glob patterns, or `privatePackages` setting
+- **Non-interactive CLI** — `bumpy add` works fully non-interactively for CI/CD and AI-assisted development
+- **Aggregated GitHub releases** — optionally create a single consolidated release instead of one per package
+- **Auto-generate from commits** — `bumpy generate` creates bump files from branch commits — works with any commit style, with enhanced detection for conventional commits
+- **Pluggable changelog formatters** — built-in `"default"` and `"github"` formatters, or write your own
+- **Zero runtime dependencies** — dependencies are minimal and bundled at release time
+
+## Getting Started
+
+```bash
+# Install
+bun add -d @varlock/bumpy  # or npm/pnpm/yarn
+
+# Initialize (creates .bumpy/ directory and config, migrates from changesets if applicable)
+bunx bumpy init
+
+# Create a bump file
+bunx bumpy add
+
+# Preview the release plan
+bunx bumpy status
+```
+
+Then set up CI to automate versioning and publishing (see below).
+
+## CI / GitHub Actions
+
+No separate action to rely on — just call `bumpy ci` directly in your workflows. Two commands handle the entire release lifecycle:
+
+- **`bumpy ci check`** — runs on every PR. Computes the release plan from pending bump files and posts/updates a comment on the PR showing what versions would be released. Warns if any changed packages are missing bump files.
+- **`bumpy ci release`** — runs on push to main. If pending bump files exist, it opens (or updates) a "Version Packages" PR that applies all version bumps and changelog updates. If the current push _is_ the Version Packages PR being merged, it publishes the new versions, creates git tags, and creates GitHub releases.
+
+_examples use bun, but works with Node.js_
+
+### PR check workflow
+
+```yaml
+# .github/workflows/bumpy-check.yml
+name: Bumpy Check
+on: pull_request
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v6
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bunx @varlock/bumpy ci check
+        env:
+          GH_TOKEN: ${{ github.token }}
+          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }} # additional PAT (optional)
+```
+
+### Release workflow
+
+```yaml
+# .github/workflows/bumpy-release.yml — trusted publishing (OIDC, no secret needed)
+name: Bumpy Release
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write # required for npm trusted publishing (OIDC)
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v6
+        with:
+          node-version: lts/*
+      - run: bun install
+      - run: bunx @varlock/bumpy ci release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }} # additonal PAT, needed to trigger CI checks on release PR
+```
+
+> **Trusted publishing setup:** Configure each package on [npmjs.com](https://docs.npmjs.com/trusted-publishers/) → Package Settings → Trusted Publishers → GitHub Actions. Specify your org/user, repo, and the workflow filename (`bumpy-release.yml`). No `NPM_TOKEN` secret needed. Requires npm >= 11.5.1 — bumpy will warn if your version is too old.
+
+<details>
+<summary>Alternative: token-based auth (NPM_TOKEN secret)</summary>
+
+```yaml
+# .github/workflows/bumpy-release.yml — token-based auth
+name: Bumpy Release
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bunx @varlock/bumpy ci release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+```
+
+</details>
+
+You can also use `bumpy ci release --auto-publish` to version + publish directly on merge without the intermediate PR.
+
+### Token setup
+
+The default `github.token` works for basic functionality, but GitHub's anti-recursion guard means PRs created by the default token won't trigger other workflows — so your regular CI (tests, linting, etc.) won't run automatically on the Version Packages PR. To fix this, provide a `BUMPY_GH_TOKEN` secret using either a **fine-grained PAT** or a **GitHub App token**. See the [full token setup guide](https://github.com/dmno-dev/bumpy/blob/main/docs/github-actions.md#token-setup) for details.
+
+Run `bumpy ci setup` for interactive guidance, or set it up manually:
+
+1. Create a [fine-grained personal access token](https://github.com/settings/personal-access-tokens) with:
+   - **Repository access:** your repo only
+   - **Permissions:** Contents (read & write), Pull requests (read & write)
+2. Add it as a repository secret named `BUMPY_GH_TOKEN`
+3. Add it to your release workflow:
+   ```yaml
+   - run: bunx @varlock/bumpy ci release
+     env:
+       GH_TOKEN: ${{ github.token }}
+       BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }}
+   ```
+
+### Local versioning and publishing
+
+If you prefer to version and publish locally instead of via CI:
+
+```bash
+bumpy version   # consume bump files, update versions and changelogs
+bumpy publish   # pack and publish, create git tags, push tags, and create GitHub releases
+```
+
+## AI Integration
+
+Bumpy ships with an AI skill that teaches LLMs how to create bump files.
+
+```bash
+bumpy ai setup --target claude    # installs Claude Code plugin
+bumpy ai setup --target opencode  # creates OpenCode command file
+bumpy ai setup --target cursor    # creates Cursor rule file
+bumpy ai setup --target codex     # creates Codex instruction file
+```
+
+The skill teaches the AI to examine git changes, identify affected packages, choose bump levels, and create bump files with `bumpy add`. It also instructs the AI to keep existing bump files up to date as work continues on a branch — updating packages, bump levels, and summaries to reflect the final state of changes.
+
+## Documentation
+
+- [Bump file format](https://github.com/dmno-dev/bumpy/blob/main/docs/bump-files.md) — syntax, bump levels, cascade control
+- [Configuration reference](https://github.com/dmno-dev/bumpy/blob/main/docs/configuration.md) — all `.bumpy/_config.json` and per-package options
+- [CLI reference](https://github.com/dmno-dev/bumpy/blob/main/docs/cli.md) — every command with flags and examples
+- [GitHub Actions setup](https://github.com/dmno-dev/bumpy/blob/main/docs/github-actions.md) — CI workflows, token setup, trusted publishing
+- [Version propagation](https://github.com/dmno-dev/bumpy/blob/main/docs/version-propagation.md) — how dependency bumps cascade through your graph
+
+## Why files instead of conventional commits?
+
+Tools like semantic-release infer version bumps from commit messages (`feat:` → minor, `fix:` → patch). This works for simple projects but breaks down in monorepos — a single PR often touches multiple packages with different bump levels, squash merges lose per-commit metadata, and commit messages are a poor place to write user-facing changelog entries. Bump files are explicit, reviewable in the PR diff, and can describe changes in language meant for consumers rather than developers. If you prefer commit-based workflows, `bumpy generate` can bridge the gap by auto-creating bump files from your branch commits — it works with any commit style, not just conventional commits.
+
+## Why not just use changesets?
+
+Bumpy is built as a successor to [@changesets/changesets](https://github.com/changesets/changesets). Changesets is mature and widely adopted, but has stagnated — hundreds of open issues around core design problems that are unlikely to be fixed without a rewrite. See [differences from changesets](https://github.com/dmno-dev/bumpy/blob/main/docs/differences-from-changesets.md) for a detailed comparison with links to specific issues. The biggest pain points bumpy addresses:
+
+- **Sane dependency propagation** — changesets hardcodes aggressive behavior where a minor bump triggers a major bump on all peer dependents. Bumpy uses a [three-phase algorithm](https://github.com/dmno-dev/bumpy/blob/main/docs/version-propagation.md) with sensible defaults and full configurability.
+- **Workspace protocol resolution** — changesets uses `npm publish` even in pnpm/yarn workspaces, so `workspace:^` and `catalog:` protocols are NOT resolved, resulting in broken published packages.
+- **Custom publish commands** — changesets is hardcoded to `npm publish`. Bumpy supports per-package custom publish for VSCode extensions, Docker images, JSR, etc.
+- **Flexible package management** — changesets treats all private packages the same. Bumpy lets you include/exclude any package individually.
+- **CI without a separate action** — just `bunx @varlock/bumpy ci check` in any workflow, no bot or action to install.
+- **Automatic migration** — `bumpy init` detects `.changeset/`, renames it to `.bumpy/`, migrates config, keeps pending files, and offers to uninstall `@changesets/cli`.
+
+## Development
+
+```bash
+bun install        # install deps
+bun test           # run tests
+bun run build      # build CLI
+bunx bumpy --help  # invoke built cli
+```
+
+## Roadmap
+
+- Prerelease mode (for now, use [pkg.pr.new](https://github.com/stackblitz-labs/pkg.pr.new) for branch preview packages)
+- Standalone binary for use outside of JS projects
+- Better support for versioning non-JS packages and usage without package.json files
+- Plugin system for different publish targets, and support multiple targets per package
+- Tracking workspace-level / non-publishable changes
+- More frogs 🐸
+
+<!-- note this readme is also used for the bumpy package! -->

package/dist/{add-BmNL5VwL.mjs → add-yP81c9_q.mjs}

@@ -1,9 +1,9 @@
 import { n as log, o as __toESM, r as require_picocolors } from "./logger-C2dEe5Su.mjs";
-import { n as exists, t as ensureDir } from "./fs-DYR2XuFE.mjs";
-import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir, s as matchGlob } from "./config-B-Qg3DZH.mjs";
-import { t as discoverPackages } from "./workspace-DWXlwcH4.mjs";
+import { n as exists, t as ensureDir } from "./fs-DnDogVn-.mjs";
+import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir, s as matchGlob } from "./config-D7Umr-fT.mjs";
+import { t as discoverPackages } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
-import { i as writeBumpFile } from "./bump-file-DVqR3k67.mjs";
+import { i as writeBumpFile } from "./bump-file-Br2bTaWp.mjs";
 import { r as getChangedFiles } from "./git-YDedMddc.mjs";
 import { c as ot, d as yt, i as _t, l as pt, o as gt, r as Ot, s as mt, t as unwrap, u as wt } from "./clack-C6bVkGxf.mjs";
 import { n as slugify, t as randomName } from "./names-C-TuOPbd.mjs";
@@ -186,7 +186,7 @@ async function addCommand(rootDir, opts) {
 	if (opts.empty) {
 		const filename = opts.name ? slugify(opts.name) : randomName();
 		const filePath = resolve(bumpyDir, `${filename}.md`);
-		const { writeText } = await import("./fs-DYR2XuFE.mjs").then((n) => n.r);
+		const { writeText } = await import("./fs-DnDogVn-.mjs").then((n) => n.r);
 		await writeText(filePath, "---\n---\n");
 		log.success(`🐸 Created empty bump file: .bumpy/${filename}.md`);
 		return;

package/dist/{ai-sMYUf3lP.mjs → ai-STKnq09z.mjs}

@@ -1,5 +1,5 @@
 import { n as log } from "./logger-C2dEe5Su.mjs";
-import { d as writeText, n as exists, t as ensureDir } from "./fs-DYR2XuFE.mjs";
+import { f as writeText, n as exists, t as ensureDir } from "./fs-DnDogVn-.mjs";
 import { dirname, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
 import { execSync } from "node:child_process";

package/dist/{apply-release-plan-0kH62jhu.mjs → apply-release-plan-CPzu6JcF.mjs}

@@ -1,6 +1,6 @@
 import { n as log } from "./logger-C2dEe5Su.mjs";
-import { a as readJson, c as updateJsonFields, d as writeText, i as listFiles, l as updateJsonNestedField, n as exists, o as readText, s as removeFile } from "./fs-DYR2XuFE.mjs";
-import { r as getBumpyDir } from "./config-B-Qg3DZH.mjs";
+import { a as readJson, c as removeFile, f as writeText, i as listFiles, l as updateJsonFields, n as exists, s as readText, u as updateJsonNestedField } from "./fs-DnDogVn-.mjs";
+import { r as getBumpyDir } from "./config-D7Umr-fT.mjs";
 import { relative, resolve } from "node:path";
 import { realpathSync } from "node:fs";
 //#region src/core/changelog.ts

package/dist/{bump-file-DVqR3k67.mjs → bump-file-Br2bTaWp.mjs}

@@ -1,9 +1,10 @@
 import { n as log } from "./logger-C2dEe5Su.mjs";
-import { d as writeText, i as listFiles, o as readText } from "./fs-DYR2XuFE.mjs";
-import { r as getBumpyDir } from "./config-B-Qg3DZH.mjs";
-import { i as jsYaml } from "./package-manager-Clsmr-9r.mjs";
+import { f as writeText, i as listFiles, s as readText } from "./fs-DnDogVn-.mjs";
+import { r as getBumpyDir } from "./config-D7Umr-fT.mjs";
+import { i as jsYaml } from "./package-manager-ByJ0wKYh.mjs";
 import { s as tryRunArgs } from "./shell-CY7OD48z.mjs";
 import { resolve } from "node:path";
+import { existsSync } from "node:fs";
 //#region src/core/bump-file.ts
 const VALID_BUMP_TYPES = new Set([
 	"major",
@@ -143,14 +144,25 @@ function extractBumpFileIdsFromChangedFiles(changedFiles) {
 }
 /**
 * Filter bump files to only those added/modified on the current branch.
-* Returns the filtered bump files and whether any changed bump file was
-* empty (has no releases — signals intentionally no releases needed).
+* Also detects empty bump files (no releases) that still exist on disk,
+* which signal intentionally no releases needed.
 */
-function filterBranchBumpFiles(allBumpFiles, changedFiles) {
+function filterBranchBumpFiles(allBumpFiles, changedFiles, rootDir) {
 	const branchBumpFileIds = extractBumpFileIdsFromChangedFiles(changedFiles);
+	const branchBumpFiles = allBumpFiles.filter((bf) => branchBumpFileIds.has(bf.id));
+	let hasEmptyBumpFile = false;
+	if (rootDir) {
+		const parsedIds = new Set(branchBumpFiles.map((bf) => bf.id));
+		const bumpyDir = getBumpyDir(rootDir);
+		for (const id of branchBumpFileIds) if (!parsedIds.has(id) && existsSync(resolve(bumpyDir, `${id}.md`))) {
+			hasEmptyBumpFile = true;
+			break;
+		}
+	}
 	return {
-		branchBumpFiles: allBumpFiles.filter((bf) => branchBumpFileIds.has(bf.id)),
-		branchBumpFileIds
+		branchBumpFiles,
+		branchBumpFileIds,
+		hasEmptyBumpFile
 	};
 }
 //#endregion

package/dist/{check-BjWF6SJm.mjs → check-D_0exKi6.mjs}

@@ -1,7 +1,7 @@
 import { n as log, o as __toESM, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig, o as loadPackageConfig } from "./config-B-Qg3DZH.mjs";
-import { n as discoverWorkspace } from "./workspace-DWXlwcH4.mjs";
-import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-DVqR3k67.mjs";
+import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir } from "./config-D7Umr-fT.mjs";
+import { n as discoverWorkspace } from "./workspace-BHsAPUmC.mjs";
+import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-Br2bTaWp.mjs";
 import { r as getChangedFiles } from "./git-YDedMddc.mjs";
 import { t as require_picomatch } from "./picomatch-DMmqYjgq.mjs";
 import { relative } from "node:path";
@@ -11,8 +11,12 @@ var import_picomatch = /* @__PURE__ */ __toESM(require_picomatch(), 1);
 * Local check: detect which packages have changed on this branch
 * and verify they have corresponding bump files.
 * Designed for pre-push hooks — no GitHub API needed.
+*
+* Default: at least one bump file must exist, uncovered packages are warned.
+* --strict: every changed package must be covered.
+* --no-fail: warn only, never exit 1.
 */
-async function checkCommand(rootDir) {
+async function checkCommand(rootDir, opts = {}) {
 	const config = await loadConfig(rootDir);
 	const { packages } = await discoverWorkspace(rootDir, config);
 	const baseBranch = config.baseBranch;
@@ -21,8 +25,8 @@ async function checkCommand(rootDir) {
 		log.info("No changed files detected.");
 		return;
 	}
-	const { branchBumpFiles, branchBumpFileIds } = filterBranchBumpFiles(await readBumpFiles(rootDir), changedFiles);
-	if (branchBumpFileIds.size > branchBumpFiles.length) {
+	const { branchBumpFiles, hasEmptyBumpFile } = filterBranchBumpFiles(await readBumpFiles(rootDir), changedFiles, rootDir);
+	if (hasEmptyBumpFile) {
 		log.success("Empty bump file found — no releases needed.");
 		return;
 	}
@@ -33,16 +37,34 @@ async function checkCommand(rootDir) {
 		log.info("No managed packages have changed.");
 		return;
 	}
+	const willFailNoBump = !opts.noFail;
+	if (branchBumpFiles.length === 0) {
+		(willFailNoBump ? log.error : log.warn)(`${changedPackages.length} changed package(s) missing bump files:\n`);
+		for (const name of changedPackages) console.log(`  ${colorize(name, "yellow")}`);
+		console.log();
+		log.dim("Run `bumpy add` to create a bump file, or `bumpy add --empty` if no release is needed.");
+		log.dim("To adjust which files trigger change detection, set `changedFilePatterns` in .bumpy/_config.json.");
+		if (willFailNoBump) process.exit(1);
+		return;
+	}
 	const missing = changedPackages.filter((name) => !coveredPackages.has(name));
 	if (missing.length === 0) {
 		log.success(`🐸 All ${changedPackages.length} changed package(s) have bump files.`);
 		return;
 	}
-	log.warn(`${missing.length} changed package(s) missing bump files:\n`);
+	const willFailUncovered = opts.strict && !opts.noFail;
+	(willFailUncovered ? log.error : log.warn)(`${missing.length} changed package(s) missing bump files:\n`);
 	for (const name of missing) console.log(`  ${colorize(name, "yellow")}`);
+	if (branchBumpFiles.length > 0) {
+		console.log();
+		log.dim(`Existing bump files on this branch:`);
+		for (const bf of branchBumpFiles) log.dim(`  ${getBumpyDir(rootDir)}/${bf.id}.md`);
+	}
 	console.log();
-	log.dim("Run `bumpy add` to create a bump file, or `bumpy add --empty` if no release is needed.");
-	process.exit(1);
+	if (opts.strict) log.dim("Run `bumpy add` to create a bump file. Use bump type `none` for packages that changed but don't need a release.");
+	else log.dim("Run `bumpy add` to create a bump file, or `bumpy add --empty` if no release is needed.");
+	log.dim("To adjust which files trigger change detection, set `changedFilePatterns` in .bumpy/_config.json.");
+	if (willFailUncovered) process.exit(1);
 }
 /** Map changed files to the packages they belong to */
 async function findChangedPackages(changedFiles, packages, rootDir, config) {
@@ -62,4 +84,4 @@ async function findChangedPackages(changedFiles, packages, rootDir, config) {
 	return [...changed];
 }
 //#endregion
-export { checkCommand };
+export { checkCommand, findChangedPackages };

package/dist/{ci-DY58ugIi.mjs → ci-CvaikKX1.mjs}

@@ -1,13 +1,14 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig } from "./config-B-Qg3DZH.mjs";
-import { t as detectPackageManager } from "./package-manager-Clsmr-9r.mjs";
-import { n as discoverWorkspace } from "./workspace-DWXlwcH4.mjs";
+import { a as loadConfig } from "./config-D7Umr-fT.mjs";
+import { t as detectPackageManager } from "./package-manager-ByJ0wKYh.mjs";
+import { n as discoverWorkspace } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
 import { n as runArgs, r as runArgsAsync, s as tryRunArgs } from "./shell-CY7OD48z.mjs";
-import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-DVqR3k67.mjs";
-import { t as assembleReleasePlan } from "./release-plan-JNir7bSM.mjs";
+import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-Br2bTaWp.mjs";
+import { t as assembleReleasePlan } from "./release-plan-CNOuSI-d.mjs";
 import { r as getChangedFiles } from "./git-YDedMddc.mjs";
 import { t as randomName } from "./names-C-TuOPbd.mjs";
+import { findChangedPackages } from "./check-D_0exKi6.mjs";
 import { t as resolveCommitMessage } from "./commit-message-BwsowSds.mjs";
 import { createHash } from "node:crypto";
 //#region src/commands/ci.ts
@@ -87,16 +88,20 @@ async function ciCheckCommand(rootDir, opts) {
 	const shouldComment = opts.comment ?? inCI;
 	const prNumber = detectPrNumber();
 	const pm = await detectPackageManager(rootDir);
-	const { branchBumpFiles: prBumpFiles, branchBumpFileIds: prBumpFileIds } = filterBranchBumpFiles(allBumpFiles, getChangedFiles(rootDir, config.baseBranch));
-	if (prBumpFileIds.size > prBumpFiles.length) {
+	const changedFiles = getChangedFiles(rootDir, config.baseBranch);
+	const { branchBumpFiles: prBumpFiles, hasEmptyBumpFile } = filterBranchBumpFiles(allBumpFiles, changedFiles, rootDir);
+	if (hasEmptyBumpFile) {
 		log.success("Empty bump file found — no releases needed.");
 		if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatNoBumpFilesComment(detectPrBranch(rootDir), pm), rootDir, opts.patComments);
 		return;
 	}
 	if (prBumpFiles.length === 0) {
-		log.info("No bump files found in this PR.");
+		const willFail = !opts.noFail;
+		const msg = "No bump files found in this PR.";
+		if (willFail) log.error(msg);
+		else log.warn(msg);
 		if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatNoBumpFilesComment(detectPrBranch(rootDir), pm), rootDir, opts.patComments);
-		if (opts.failOnMissing) process.exit(1);
+		if (willFail) process.exit(1);
 		return;
 	}
 	const plan = assembleReleasePlan(prBumpFiles, packages, depGraph, config);
@@ -107,6 +112,13 @@ async function ciCheckCommand(rootDir, opts) {
 	}
 	if (plan.warnings.length > 0) for (const w of plan.warnings) log.warn(w);
 	if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatReleasePlanComment(plan, prBumpFiles, prNumber, detectPrBranch(rootDir), pm, plan.warnings), rootDir, opts.patComments);
+	const coveredPackages = new Set(plan.releases.map((r) => r.name));
+	const missing = (await findChangedPackages(changedFiles, packages, rootDir, config)).filter((name) => !coveredPackages.has(name));
+	if (missing.length > 0) {
+		const willFail = opts.strict && !opts.noFail;
+		(willFail ? log.error : log.warn)(`${missing.length} changed package(s) not covered by bump files: ${missing.join(", ")}`);
+		if (willFail) process.exit(1);
+	}
 }
 /**
 * CI release: either auto-publish or create a version PR.
@@ -120,7 +132,7 @@ async function ciReleaseCommand(rootDir, opts) {
 	const bumpFiles = await readBumpFiles(rootDir);
 	if (bumpFiles.length === 0) {
 		log.info("No pending bump files — checking for unpublished packages...");
-		const { publishCommand } = await import("./publish-CGB4TIKD.mjs");
+		const { publishCommand } = await import("./publish-CPZwqyWh.mjs");
 		await publishCommand(rootDir, { tag: opts.tag });
 		return;
 	}
@@ -134,7 +146,7 @@ async function ciReleaseCommand(rootDir, opts) {
 }
 async function autoPublish(rootDir, config, plan, tag) {
 	log.step("Running bumpy version...");
-	const { versionCommand } = await import("./version-BcfidiVX.mjs");
+	const { versionCommand } = await import("./version-CnXcbqi1.mjs");
 	await versionCommand(rootDir);
 	log.step("Committing version changes...");
 	runArgs([
@@ -163,7 +175,7 @@ async function autoPublish(rootDir, config, plan, tag) {
 		], { cwd: rootDir });
 	}
 	log.step("Running bumpy publish...");
-	const { publishCommand } = await import("./publish-CGB4TIKD.mjs");
+	const { publishCommand } = await import("./publish-CPZwqyWh.mjs");
 	await publishCommand(rootDir, { tag });
 }
 /**
@@ -329,7 +341,7 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 		branch
 	], { cwd: rootDir });
 	log.step("Running bumpy version...");
-	const { versionCommand } = await import("./version-BcfidiVX.mjs");
+	const { versionCommand } = await import("./version-CnXcbqi1.mjs");
 	await versionCommand(rootDir);
 	runArgs([
 		"git",

package/dist/{ci-setup-BQwktQEe.mjs → ci-setup-CARJFhcE.mjs}

@@ -1,5 +1,5 @@
 import { n as log, o as __toESM, r as require_picocolors } from "./logger-C2dEe5Su.mjs";
-import { t as detectPackageManager } from "./package-manager-Clsmr-9r.mjs";
+import { t as detectPackageManager } from "./package-manager-ByJ0wKYh.mjs";
 import { s as tryRunArgs } from "./shell-CY7OD48z.mjs";
 import { a as fe, c as ot, i as _t, n as O, o as gt, r as Ot, s as mt, t as unwrap, u as wt } from "./clack-C6bVkGxf.mjs";
 //#region src/commands/ci-setup.ts

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { n as findRoot } from "./config-B-Qg3DZH.mjs";
+import { n as findRoot } from "./config-D7Umr-fT.mjs";
 //#region src/cli.ts
 const args = process.argv.slice(2);
 const command = args[0];
@@ -25,13 +25,13 @@ async function main() {
 		switch (command) {
 			case "init": {
 				const rootDir = await findRoot();
-				const { initCommand } = await import("./init-DkTPs_WQ.mjs");
+				const { initCommand } = await import("./init-DJhMaceS.mjs");
 				await initCommand(rootDir, { force: flags.force === true });
 				break;
 			}
 			case "add": {
 				const rootDir = await findRoot();
-				const { addCommand } = await import("./add-BmNL5VwL.mjs");
+				const { addCommand } = await import("./add-yP81c9_q.mjs");
 				await addCommand(rootDir, {
 					packages: flags.packages,
 					message: flags.message,
@@ -42,7 +42,7 @@ async function main() {
 			}
 			case "status": {
 				const rootDir = await findRoot();
-				const { statusCommand } = await import("./status-EGYqULJg.mjs");
+				const { statusCommand } = await import("./status-skGX8uU7.mjs");
 				await statusCommand(rootDir, {
 					json: flags.json === true,
 					packagesOnly: flags.packages === true,
@@ -54,13 +54,13 @@ async function main() {
 			}
 			case "version": {
 				const rootDir = await findRoot();
-				const { versionCommand } = await import("./version-BcfidiVX.mjs");
+				const { versionCommand } = await import("./version-CnXcbqi1.mjs");
 				await versionCommand(rootDir, { commit: flags.commit === true });
 				break;
 			}
 			case "generate": {
 				const rootDir = await findRoot();
-				const { generateCommand } = await import("./generate-DX46X-rW.mjs");
+				const { generateCommand } = await import("./generate-BOLrTYWR.mjs");
 				await generateCommand(rootDir, {
 					from: flags.from,
 					dryRun: flags["dry-run"] === true,
@@ -70,8 +70,11 @@ async function main() {
 			}
 			case "check": {
 				const rootDir = await findRoot();
-				const { checkCommand } = await import("./check-BjWF6SJm.mjs");
-				await checkCommand(rootDir);
+				const { checkCommand } = await import("./check-D_0exKi6.mjs");
+				await checkCommand(rootDir, {
+					strict: flags.strict === true,
+					noFail: flags["no-fail"] === true
+				});
 				break;
 			}
 			case "ci": {
@@ -79,14 +82,15 @@ async function main() {
 				const subcommand = args[1];
 				const ciFlags = parseFlags(args.slice(2));
 				if (subcommand === "check") {
-					const { ciCheckCommand } = await import("./ci-DY58ugIi.mjs");
+					const { ciCheckCommand } = await import("./ci-CvaikKX1.mjs");
 					await ciCheckCommand(rootDir, {
 						comment: ciFlags.comment !== void 0 ? ciFlags.comment === true : void 0,
-						failOnMissing: ciFlags["fail-on-missing"] === true,
+						strict: ciFlags.strict === true,
+						noFail: ciFlags["no-fail"] === true,
 						patComments: ciFlags["pat-comments"] === true
 					});
 				} else if (subcommand === "release") {
-					const { ciReleaseCommand } = await import("./ci-DY58ugIi.mjs");
+					const { ciReleaseCommand } = await import("./ci-CvaikKX1.mjs");
 					await ciReleaseCommand(rootDir, {
 						mode: ciFlags["auto-publish"] === true ? "auto-publish" : "version-pr",
 						tag: ciFlags.tag,
@@ -94,7 +98,7 @@ async function main() {
 						patPr: ciFlags["pat-pr"] === true
 					});
 				} else if (subcommand === "setup") {
-					const { ciSetupCommand } = await import("./ci-setup-BQwktQEe.mjs");
+					const { ciSetupCommand } = await import("./ci-setup-CARJFhcE.mjs");
 					await ciSetupCommand(rootDir);
 				} else {
 					log.error(`Unknown ci subcommand: ${subcommand}. Use "ci check", "ci release", or "ci setup".`);
@@ -104,7 +108,7 @@ async function main() {
 			}
 			case "publish": {
 				const rootDir = await findRoot();
-				const { publishCommand } = await import("./publish-CGB4TIKD.mjs");
+				const { publishCommand } = await import("./publish-CPZwqyWh.mjs");
 				await publishCommand(rootDir, {
 					dryRun: flags["dry-run"] === true,
 					tag: flags.tag,
@@ -118,7 +122,7 @@ async function main() {
 				const subcommand = args[1];
 				const aiFlags = parseFlags(args.slice(2));
 				if (subcommand === "setup") {
-					const { aiSetupCommand } = await import("./ai-sMYUf3lP.mjs");
+					const { aiSetupCommand } = await import("./ai-STKnq09z.mjs");
 					await aiSetupCommand(rootDir, { target: aiFlags.target });
 				} else {
 					log.error(`Unknown ai subcommand: ${subcommand}. Use "ai setup".`);
@@ -128,7 +132,7 @@ async function main() {
 			}
 			case "--version":
 			case "-v":
-				console.log(`bumpy 1.1.0`);
+				console.log(`bumpy 1.2.0`);
 				break;
 			case "help":
 			case "--help":
@@ -148,7 +152,7 @@ async function main() {
 }
 function printHelp() {
 	console.log(`
-  ${colorize(`🐸 bumpy v1.1.0`, "bold")} - Modern monorepo versioning
+  ${colorize(`🐸 bumpy v1.2.0`, "bold")} - Modern monorepo versioning
 
   Usage: bumpy <command> [options]
 
@@ -158,6 +162,8 @@ function printHelp() {
     generate                Generate bump file from branch commits
     status                  Show pending releases
     check                   Verify changed packages have bump files (for pre-push hooks)
+      --strict                Fail if any changed package is uncovered (default: only fail if no bump files at all)
+      --no-fail               Warn only, never exit 1
     version [--commit]      Apply bump files and bump versions
     publish                 Publish versioned packages
     ci check                PR check — report pending releases, comment on PR
@@ -191,7 +197,8 @@ function printHelp() {
 
   CI check options:
     --comment               Force PR comment on/off (auto-detected in CI)
-    --fail-on-missing       Exit 1 if no bump files found
+    --strict                Fail if any changed package is uncovered (default: only fail if no bump files at all)
+    --no-fail               Warn only, never exit 1
 
   CI release options:
     --auto-publish          Version + publish directly (default: create version PR)

package/dist/{config-B-Qg3DZH.mjs → config-D7Umr-fT.mjs}

@@ -1,5 +1,5 @@
 import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
-import { a as readJson, n as exists } from "./fs-DYR2XuFE.mjs";
+import { a as readJson, n as exists, o as readJsonc } from "./fs-DnDogVn-.mjs";
 import { resolve } from "node:path";
 //#region src/types.ts
 const BUMP_LEVELS = {
@@ -71,7 +71,7 @@ const DEFAULT_CONFIG = {
 		preamble: [
 			`<a href="https://bumpy.varlock.dev"><img src="https://raw.githubusercontent.com/dmno-dev/bumpy/main/images/frog-talking.png" alt="bumpy-frog" width="60" align="left" style="image-rendering: pixelated;" title="Hi! I'm bumpy!" /></a>`,
 			"",
-			`This PR was created and will be kept in sync by [bumpy](https://bumpy.varlock.dev) based on your .bumpy bump files. Merge it when you are ready to release the packages listed below:`,
+			`This PR was created and will be kept in sync by [bumpy](https://bumpy.varlock.dev) based on your bump files (in \`.bumpy/\`). Merge it when you are ready to release the packages listed below:`,
 			"<br clear=\"left\" />"
 		].join("\n")
 	}
@@ -109,7 +109,7 @@ async function findRoot(startDir = process.cwd()) {
 async function loadConfig(rootDir) {
 	const configPath = resolve(rootDir, BUMPY_DIR, CONFIG_FILE);
 	let userConfig = {};
-	if (await exists(configPath)) userConfig = await readJson(configPath);
+	if (await exists(configPath)) userConfig = await readJsonc(configPath);
 	return mergeConfig(DEFAULT_CONFIG, userConfig);
 }
 /** Load per-package bumpy config from package.json["bumpy"] or .bumpy.config.json */

package/dist/{fs-DYR2XuFE.mjs → fs-DnDogVn-.mjs}

@@ -1,11 +1,23 @@
 import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
 import { access, mkdir, readFile, readdir, unlink, writeFile } from "node:fs/promises";
+//#region src/utils/jsonc.ts
+const stringOrCommentRe = /("(?:\\?[^])*?")|(\/\/.*)|(\/\*[^]*?\*\/)/g;
+const stringOrTrailingCommaRe = /("(?:\\?[^])*?")|(,\s*)(?=]|})/g;
+function parseJsonc(text) {
+	try {
+		return JSON.parse(text);
+	} catch {
+		return JSON.parse(text.replace(stringOrCommentRe, "$1").replace(stringOrTrailingCommaRe, "$1"));
+	}
+}
+//#endregion
 //#region src/utils/fs.ts
 var fs_exports = /* @__PURE__ */ __exportAll({
 	ensureDir: () => ensureDir,
 	exists: () => exists,
 	listFiles: () => listFiles,
 	readJson: () => readJson,
+	readJsonc: () => readJsonc,
 	readText: () => readText,
 	removeFile: () => removeFile,
 	updateJsonFields: () => updateJsonFields,
@@ -17,6 +29,9 @@ async function readJson(filePath) {
 	const content = await readFile(filePath, "utf-8");
 	return JSON.parse(content);
 }
+async function readJsonc(filePath) {
+	return parseJsonc(await readFile(filePath, "utf-8"));
+}
 async function writeJson(filePath, data, indent = 2) {
 	await writeFile(filePath, JSON.stringify(data, null, indent) + "\n", "utf-8");
 }
@@ -78,4 +93,4 @@ async function ensureDir(dir) {
 	await mkdir(dir, { recursive: true });
 }
 //#endregion
-export { readJson as a, updateJsonFields as c, writeText as d, listFiles as i, updateJsonNestedField as l, exists as n, readText as o, fs_exports as r, removeFile as s, ensureDir as t, writeJson as u };
+export { readJson as a, removeFile as c, writeJson as d, writeText as f, listFiles as i, updateJsonFields as l, exists as n, readJsonc as o, fs_exports as r, readText as s, ensureDir as t, updateJsonNestedField as u };

package/dist/{generate-DX46X-rW.mjs → generate-BOLrTYWR.mjs}

@@ -1,9 +1,9 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { t as ensureDir } from "./fs-DYR2XuFE.mjs";
-import { a as loadConfig, r as getBumpyDir } from "./config-B-Qg3DZH.mjs";
-import { t as discoverPackages } from "./workspace-DWXlwcH4.mjs";
+import { t as ensureDir } from "./fs-DnDogVn-.mjs";
+import { a as loadConfig, r as getBumpyDir } from "./config-D7Umr-fT.mjs";
+import { t as discoverPackages } from "./workspace-BHsAPUmC.mjs";
 import { s as tryRunArgs } from "./shell-CY7OD48z.mjs";
-import { i as writeBumpFile } from "./bump-file-DVqR3k67.mjs";
+import { i as writeBumpFile } from "./bump-file-Br2bTaWp.mjs";
 import { i as getFilesChangedInCommit, n as getBranchCommits } from "./git-YDedMddc.mjs";
 import { n as slugify, t as randomName } from "./names-C-TuOPbd.mjs";
 import { relative } from "node:path";

package/dist/index.mjs

@@ -1,9 +1,9 @@
-import { a as loadConfig, c as BUMP_LEVELS, d as DEFAULT_PUBLISH_CONFIG, f as DEP_TYPES, h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, n as findRoot, p as bumpLevel, r as getBumpyDir, s as matchGlob, u as DEFAULT_CONFIG } from "./config-B-Qg3DZH.mjs";
-import { t as discoverPackages } from "./workspace-DWXlwcH4.mjs";
+import { a as loadConfig, c as BUMP_LEVELS, d as DEFAULT_PUBLISH_CONFIG, f as DEP_TYPES, h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, n as findRoot, p as bumpLevel, r as getBumpyDir, s as matchGlob, u as DEFAULT_CONFIG } from "./config-D7Umr-fT.mjs";
+import { t as discoverPackages } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
-import { i as writeBumpFile, n as parseBumpFile, r as readBumpFiles } from "./bump-file-DVqR3k67.mjs";
+import { i as writeBumpFile, n as parseBumpFile, r as readBumpFiles } from "./bump-file-Br2bTaWp.mjs";
 import { n as satisfies, r as stripProtocol, t as bumpVersion } from "./semver-BJzWIuRz.mjs";
-import { t as assembleReleasePlan } from "./release-plan-JNir7bSM.mjs";
-import { a as prependToChangelog, i as loadFormatter, n as defaultFormatter, r as generateChangelogEntry, t as applyReleasePlan } from "./apply-release-plan-0kH62jhu.mjs";
-import { t as publishPackages } from "./publish-pipeline-CXuqce1N.mjs";
+import { t as assembleReleasePlan } from "./release-plan-CNOuSI-d.mjs";
+import { a as prependToChangelog, i as loadFormatter, n as defaultFormatter, r as generateChangelogEntry, t as applyReleasePlan } from "./apply-release-plan-CPzu6JcF.mjs";
+import { t as publishPackages } from "./publish-pipeline-BFt96o_h.mjs";
 export { BUMP_LEVELS, DEFAULT_BUMP_RULES, DEFAULT_CONFIG, DEFAULT_PUBLISH_CONFIG, DEP_TYPES, DependencyGraph, applyReleasePlan, assembleReleasePlan, bumpLevel, bumpVersion, defaultFormatter, discoverPackages, findRoot, generateChangelogEntry, getBumpyDir, hasCascade, loadConfig, loadFormatter, matchGlob, maxBump, parseBumpFile, prependToChangelog, publishPackages, readBumpFiles, satisfies, stripProtocol, writeBumpFile };

package/dist/{init-DkTPs_WQ.mjs → init-DJhMaceS.mjs}

@@ -1,13 +1,13 @@
 import { n as log, o as __toESM, r as require_picocolors } from "./logger-C2dEe5Su.mjs";
-import { a as readJson, d as writeText, i as listFiles, n as exists, o as readText, t as ensureDir, u as writeJson } from "./fs-DYR2XuFE.mjs";
-import { t as detectPackageManager } from "./package-manager-Clsmr-9r.mjs";
+import { a as readJson, d as writeJson, f as writeText, i as listFiles, n as exists, s as readText, t as ensureDir } from "./fs-DnDogVn-.mjs";
+import { t as detectPackageManager } from "./package-manager-ByJ0wKYh.mjs";
 import { t as run } from "./shell-CY7OD48z.mjs";
 import { c as ot, o as gt, s as mt, t as unwrap } from "./clack-C6bVkGxf.mjs";
 import { resolve } from "node:path";
 import { readdir, rename, rm } from "node:fs/promises";
 //#region ../../.bumpy/README.md
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
-var README_default = "# 🐸 Bumpy\n\nThis directory is used by [bumpy](https://bumpy.varlock.dev) to manage versioning and changelogs.\n\nBumpy is a modern versioning tool for JavaScript/TypeScript projects (monorepos and single packages). It uses **bump files** — small markdown files in this directory — to declare pending version changes. These files are consumed during the release process to compute version bumps, update changelogs, and publish packages.\n\n## How it works\n\n1. When you make a change that should trigger a release, create a bump file (typically one per PR)\n2. Bump files accumulate on your main branch until you're ready to release\n3. At release time, bumpy merges all pending bumps into a release plan, updates versions and changelogs, and publishes packages\n\n## Creating bump files\n\n### Interactive\n\n```bash\nbunx bumpy add\n```\n\n### Non-interactive (useful for AI-assisted development)\n\n```bash\nbunx bumpy add --packages \"package-name:minor,other-package:patch\" --message \"Description of changes\" --name \"my-change\"\n```\n\n### By hand\n\nCreate a `.md` file in this directory with YAML frontmatter mapping package names to bump levels (`major`, `minor`, or `patch`), and a markdown body for the changelog entry:\n\n```markdown\n---\n'package-name': minor\n---\n\nAdded a new feature.\n```\n\n### From conventional commits\n\n```bash\nbunx bumpy generate\n```\n\n### Empty bump files\n\nFor PRs that intentionally don't need a release (docs, CI, etc.):\n\n```bash\nbunx bumpy add --empty --name \"docs-update\"\n```\n\n## Keeping bump files up to date\n\nAs a PR evolves, make sure its bump file stays in sync. If the scope of changes grows (e.g., a patch becomes a new feature), update the bump level and description to match. Reviewers and AI assistants should treat the bump file as part of the PR — just like tests and docs.\n\n## Files in this directory\n\n- `_config.json` — bumpy configuration\n- `README.md` — this file\n- `*.md` (other than README.md) — pending bump files\n\n📖 Full documentation: https://bumpy.varlock.dev\n";
+var README_default = "# 🐸 Bumpy\n\nThis directory is used by [bumpy](https://bumpy.varlock.dev) to manage versioning and changelogs.\n\nBumpy is a modern versioning tool for JavaScript/TypeScript projects (monorepos and single packages). It uses **bump files** — small markdown files in this directory — to declare pending version changes. These files are consumed during the release process to compute version bumps, update changelogs, and publish packages.\n\n## How it works\n\n1. When you make a change that should trigger a release, create a bump file (typically one per PR)\n2. Bump files accumulate on your main branch until you're ready to release\n3. At release time, bumpy merges all pending bumps into a release plan, updates versions and changelogs, and publishes packages\n\n## Creating bump files\n\n### Interactive\n\n```bash\nbunx bumpy add\n```\n\n### Non-interactive (useful for AI-assisted development)\n\n```bash\nbunx bumpy add --packages \"package-name:minor,other-package:patch\" --message \"Description of changes\" --name \"my-change\"\n```\n\n### By hand\n\nCreate a `.md` file in this directory with YAML frontmatter mapping package names to bump levels (`major`, `minor`, `patch`, or `none`), and a markdown body for the changelog entry:\n\n```markdown\n---\n'package-name': minor\n---\n\nAdded a new feature.\n```\n\n### From conventional commits\n\n```bash\nbunx bumpy generate\n```\n\n### Empty bump files\n\nFor PRs that intentionally don't need a release (docs, CI, etc.):\n\n```bash\nbunx bumpy add --empty --name \"docs-update\"\n```\n\n## Keeping bump files up to date\n\nAs a PR evolves, make sure its bump file stays in sync. If the scope of changes grows (e.g., a patch becomes a new feature), update the bump level and description to match. Reviewers and AI assistants should treat the bump file as part of the PR — just like tests and docs.\n\n## Files in this directory\n\n- `_config.json` — bumpy configuration\n- `README.md` — this file\n- `*.md` (other than README.md) — pending bump files\n\n📖 Full documentation: https://bumpy.varlock.dev\n";
 //#endregion
 //#region src/commands/init.ts
 const PM_RUNNER = {

package/dist/{package-manager-Clsmr-9r.mjs → package-manager-ByJ0wKYh.mjs}

@@ -1,4 +1,4 @@
-import { a as readJson, n as exists, o as readText } from "./fs-DYR2XuFE.mjs";
+import { a as readJson, n as exists, s as readText } from "./fs-DnDogVn-.mjs";
 import { resolve } from "node:path";
 //#region ../../node_modules/.bun/js-yaml@4.1.1/node_modules/js-yaml/dist/js-yaml.mjs
 /*! js-yaml 4.1.1 https://github.com/nodeca/js-yaml @license MIT */

package/dist/{publish-CGB4TIKD.mjs → publish-CPZwqyWh.mjs}

@@ -1,11 +1,11 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig } from "./config-B-Qg3DZH.mjs";
-import { n as detectWorkspaces } from "./package-manager-Clsmr-9r.mjs";
-import { n as discoverWorkspace } from "./workspace-DWXlwcH4.mjs";
+import { a as loadConfig } from "./config-D7Umr-fT.mjs";
+import { n as detectWorkspaces } from "./package-manager-ByJ0wKYh.mjs";
+import { n as discoverWorkspace } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
 import { r as runArgsAsync, s as tryRunArgs } from "./shell-CY7OD48z.mjs";
 import { a as hasUncommittedChanges, o as listTags, s as pushWithTags } from "./git-YDedMddc.mjs";
-import { t as publishPackages } from "./publish-pipeline-CXuqce1N.mjs";
+import { t as publishPackages } from "./publish-pipeline-BFt96o_h.mjs";
 //#region src/core/github-release.ts
 /** Get the current HEAD commit SHA */
 function getHeadSha(rootDir) {
@@ -148,7 +148,7 @@ async function publishCommand(rootDir, opts) {
 	}
 	let toPublish = await findUnpublishedPackages(packages, config);
 	if (opts.filter) {
-		const { matchGlob } = await import("./config-B-Qg3DZH.mjs").then((n) => n.t);
+		const { matchGlob } = await import("./config-D7Umr-fT.mjs").then((n) => n.t);
 		const patterns = opts.filter.split(",").map((p) => p.trim());
 		toPublish = toPublish.filter((r) => patterns.some((p) => matchGlob(r.name, p)));
 	}

package/dist/{publish-pipeline-CXuqce1N.mjs → publish-pipeline-BFt96o_h.mjs}

@@ -1,6 +1,6 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as readJson, l as updateJsonNestedField } from "./fs-DYR2XuFE.mjs";
-import { r as resolveCatalogDep } from "./package-manager-Clsmr-9r.mjs";
+import { a as readJson, u as updateJsonNestedField } from "./fs-DnDogVn-.mjs";
+import { r as resolveCatalogDep } from "./package-manager-ByJ0wKYh.mjs";
 import { i as runAsync, o as sq, r as runArgsAsync, s as tryRunArgs } from "./shell-CY7OD48z.mjs";
 import { r as stripProtocol } from "./semver-BJzWIuRz.mjs";
 import { c as tagExists, t as createTag } from "./git-YDedMddc.mjs";

package/dist/{release-plan-JNir7bSM.mjs → release-plan-CNOuSI-d.mjs}

@@ -1,4 +1,4 @@
-import { h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, p as bumpLevel, s as matchGlob } from "./config-B-Qg3DZH.mjs";
+import { h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, p as bumpLevel, s as matchGlob } from "./config-D7Umr-fT.mjs";
 import { n as satisfies, t as bumpVersion } from "./semver-BJzWIuRz.mjs";
 //#region src/core/release-plan.ts
 /**

package/dist/{status-EGYqULJg.mjs → status-skGX8uU7.mjs}

@@ -1,9 +1,9 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig } from "./config-B-Qg3DZH.mjs";
-import { t as discoverPackages } from "./workspace-DWXlwcH4.mjs";
+import { a as loadConfig } from "./config-D7Umr-fT.mjs";
+import { t as discoverPackages } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
-import { r as readBumpFiles } from "./bump-file-DVqR3k67.mjs";
-import { t as assembleReleasePlan } from "./release-plan-JNir7bSM.mjs";
+import { r as readBumpFiles } from "./bump-file-Br2bTaWp.mjs";
+import { t as assembleReleasePlan } from "./release-plan-CNOuSI-d.mjs";
 //#region src/commands/status.ts
 async function statusCommand(rootDir, opts) {
 	const config = await loadConfig(rootDir);
@@ -26,7 +26,7 @@ async function statusCommand(rootDir, opts) {
 		releases = releases.filter((r) => types.includes(r.type));
 	}
 	if (opts.filter) {
-		const { matchGlob } = await import("./config-B-Qg3DZH.mjs").then((n) => n.t);
+		const { matchGlob } = await import("./config-D7Umr-fT.mjs").then((n) => n.t);
 		const patterns = opts.filter.split(",").map((p) => p.trim());
 		releases = releases.filter((r) => patterns.some((p) => matchGlob(r.name, p)));
 	}

package/dist/{version-BcfidiVX.mjs → version-CnXcbqi1.mjs}

@@ -1,12 +1,12 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig } from "./config-B-Qg3DZH.mjs";
-import { n as detectWorkspaces } from "./package-manager-Clsmr-9r.mjs";
-import { t as discoverPackages } from "./workspace-DWXlwcH4.mjs";
+import { a as loadConfig } from "./config-D7Umr-fT.mjs";
+import { n as detectWorkspaces } from "./package-manager-ByJ0wKYh.mjs";
+import { t as discoverPackages } from "./workspace-BHsAPUmC.mjs";
 import { t as DependencyGraph } from "./dep-graph-DiLeAhl9.mjs";
 import { n as runArgs, s as tryRunArgs } from "./shell-CY7OD48z.mjs";
-import { r as readBumpFiles } from "./bump-file-DVqR3k67.mjs";
-import { t as assembleReleasePlan } from "./release-plan-JNir7bSM.mjs";
-import { t as applyReleasePlan } from "./apply-release-plan-0kH62jhu.mjs";
+import { r as readBumpFiles } from "./bump-file-Br2bTaWp.mjs";
+import { t as assembleReleasePlan } from "./release-plan-CNOuSI-d.mjs";
+import { t as applyReleasePlan } from "./apply-release-plan-CPzu6JcF.mjs";
 import { t as resolveCommitMessage } from "./commit-message-BwsowSds.mjs";
 //#region src/commands/version.ts
 async function versionCommand(rootDir, opts = {}) {

package/dist/{workspace-DWXlwcH4.mjs → workspace-BHsAPUmC.mjs}

@@ -1,6 +1,6 @@
-import { a as readJson, n as exists } from "./fs-DYR2XuFE.mjs";
-import { i as isPackageManaged, o as loadPackageConfig } from "./config-B-Qg3DZH.mjs";
-import { n as detectWorkspaces } from "./package-manager-Clsmr-9r.mjs";
+import { a as readJson, n as exists } from "./fs-DnDogVn-.mjs";
+import { i as isPackageManaged, o as loadPackageConfig } from "./config-D7Umr-fT.mjs";
+import { n as detectWorkspaces } from "./package-manager-ByJ0wKYh.mjs";
 import { relative, resolve } from "node:path";
 import { readdir, stat } from "node:fs/promises";
 //#region src/core/workspace.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varlock/bumpy",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Modern monorepo versioning and changelog tool",
   "keywords": [
     "bump",
@@ -37,6 +37,7 @@
   },
   "scripts": {
     "build": "tsdown",
+    "prepack": "cp ../../README.md .",
     "check": "bun run tsc --noEmit",
     "test": "bun test"
   },