@varlock/bumpy 1.2.2 → 1.4.0

package/README.md

@@ -22,13 +22,13 @@ A modern package versioning, release, and changelog generation tool. Built for m
 Bumpy uses **bump files** (you may know them as "changesets" if coming from [that tool 🦋](https://github.com/changesets/changesets)) - small markdown files that declare an intent to release packages with a bump level (patch/minor/major), and a description that ends up in changelogs. Developers create these files as part of their PRs, and these files are then used to consolidate changes, generate changelogs, and trigger publishing. Specifically:
 
 - Devs/agents create bump files as part of their PRs (using `bumpy add` or manually)
-- A pre-push git hook can enforce bump files exist for changed packages
+- A git hook (pre-commit or pre-push) can enforce bump files exist for changed packages
 - In CI, a workflow checks PRs for bump files, leaves a comment on the PR detailing changed packages
 - As PRs merge to the base branch, a "release PR" is kept up to date
   - Shows what packages will be released and their changelogs
     - Including packages bumped automatically due to dependency relationships
 - When release PR is merged, publishing is triggered
-  - Oending bump files are deleted and packages are published with updated versions and changelogs
+  - Pending bump files are deleted and packages are published with updated versions and changelogs
 
 All of this is automated via two simple GitHub Actions workflows (see [CI setup](#ci--github-actions) below). You can also run everything locally with `bumpy status`, `bumpy version`, and `bumpy publish`.
 
@@ -104,7 +104,6 @@ jobs:
       - run: bunx @varlock/bumpy ci check
         env:
           GH_TOKEN: ${{ github.token }}
-          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }} # additional PAT (optional)
 ```
 
 ### Release workflow
@@ -135,7 +134,7 @@ jobs:
       - run: bunx @varlock/bumpy ci release
         env:
           GH_TOKEN: ${{ github.token }}
-          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }} # additonal PAT, needed to trigger CI checks on release PR
+          BUMPY_GH_TOKEN: ${{ secrets.BUMPY_GH_TOKEN }} # PAT so that version PR triggers CI
 ```
 
 > **Trusted publishing setup:** Configure each package on [npmjs.com](https://docs.npmjs.com/trusted-publishers/) → Package Settings → Trusted Publishers → GitHub Actions. Specify your org/user, repo, and the workflow filename (`bumpy-release.yml`). No `NPM_TOKEN` secret needed. Requires npm >= 11.5.1 - bumpy will warn if your version is too old.
@@ -240,7 +239,7 @@ Bumpy is built as a successor to [@changesets/changesets](https://github.com/cha
 
 ```bash
 bun install        # install deps
-bun test           # run tests
+bun run test       # run tests
 bun run build      # build CLI
 bunx bumpy --help  # invoke built cli
 ```

package/dist/{add-DEqGa5gI.mjs → add-D1uiW7VA.mjs}

@@ -1,13 +1,13 @@
 import { n as log, o as __toESM, r as require_picocolors } from "./logger-C2dEe5Su.mjs";
 import { n as exists, t as ensureDir } from "./fs-DnDogVn-.mjs";
-import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir, s as matchGlob } from "./config-CJIj8xG3.mjs";
-import { t as discoverPackages } from "./workspace-c9-TqXed.mjs";
+import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir, s as matchGlob } from "./config-D13G4-R8.mjs";
+import { n as discoverWorkspace, t as discoverPackages } from "./workspace-BKOAMeki.mjs";
 import { t as DependencyGraph } from "./dep-graph-E-9-eQ2J.mjs";
-import { i as writeBumpFile } from "./bump-file-BTsntOO-.mjs";
-import { r as getChangedFiles } from "./git-D0__HP86.mjs";
+import { i as writeBumpFile } from "./bump-file-CoaSxqne.mjs";
+import { r as getChangedFiles } from "./git-ukq7VTuZ.mjs";
 import { c as ot, d as yt, i as _t, l as pt, o as gt, r as Ot, s as mt, t as unwrap, u as wt } from "./clack-CJT1JFFa.mjs";
 import { n as slugify, t as randomName } from "./names-CBy7d8K_.mjs";
-import { t as require_picomatch } from "./picomatch-TGJi--_I.mjs";
+import { findChangedPackages, t as require_picomatch } from "./check-CS8WIGZA.mjs";
 import { relative, resolve } from "node:path";
 import * as readline from "node:readline";
 //#region src/prompts/bump-select.ts
@@ -191,6 +191,25 @@ async function addCommand(rootDir, opts) {
 		log.success(`🐸 Created empty bump file: .bumpy/${filename}.md`);
 		return;
 	}
+	if (opts.none) {
+		const { packages } = await discoverWorkspace(rootDir, config);
+		const changedPackages = await findChangedPackages(getChangedFiles(rootDir, config.baseBranch), packages, rootDir, config);
+		if (changedPackages.length === 0) {
+			log.info("No changed packages detected.");
+			return;
+		}
+		const releases = changedPackages.map((name) => ({
+			name,
+			type: "none"
+		}));
+		const summary = opts.message || "";
+		const filename = opts.name ? slugify(opts.name) : randomName();
+		if (await exists(resolve(bumpyDir, `${filename}.md`))) await writeBumpFile(rootDir, `${filename}-${Date.now()}`, releases, summary);
+		else await writeBumpFile(rootDir, filename, releases, summary);
+		log.success(`🐸 Created bump file with ${changedPackages.length} package(s) set to none: .bumpy/${filename}.md`);
+		for (const name of changedPackages) log.dim(`  ${name}: none`);
+		return;
+	}
 	let releases;
 	let summary;
 	let filename;

package/dist/{apply-release-plan-Bi9OSWks.mjs → apply-release-plan-60VfCLF8.mjs}

@@ -1,6 +1,6 @@
 import { a as readJson, c as removeFile, f as writeText, i as listFiles, l as updateJsonFields, n as exists, s as readText, u as updateJsonNestedField } from "./fs-DnDogVn-.mjs";
-import { r as getBumpyDir } from "./config-CJIj8xG3.mjs";
-import { a as prependToChangelog, i as loadFormatter, n as generateChangelogEntry } from "./changelog-xKuL0IKx.mjs";
+import { r as getBumpyDir } from "./config-D13G4-R8.mjs";
+import { a as prependToChangelog, i as loadFormatter, n as generateChangelogEntry } from "./changelog-DP3OrTqQ.mjs";
 import { resolve } from "node:path";
 //#region src/core/apply-release-plan.ts
 /** Apply the release plan: bump versions, update changelogs, delete bump files */

package/dist/{bump-file-BTsntOO-.mjs → bump-file-CoaSxqne.mjs}

@@ -1,5 +1,5 @@
 import { f as writeText, i as listFiles, s as readText } from "./fs-DnDogVn-.mjs";
-import { r as getBumpyDir } from "./config-CJIj8xG3.mjs";
+import { r as getBumpyDir } from "./config-D13G4-R8.mjs";
 import { i as jsYaml } from "./package-manager-CClZtIHP.mjs";
 import { s as tryRunArgs } from "./shell-u3bYGxNy.mjs";
 import { resolve } from "node:path";

package/dist/{changelog-xKuL0IKx.mjs → changelog-DP3OrTqQ.mjs}

@@ -1,12 +1,12 @@
 import { n as log } from "./logger-C2dEe5Su.mjs";
-import { t as BUMP_LEVELS } from "./types-CSM0c2-m.mjs";
+import { t as BUMP_LEVELS } from "./types-BX4pfmKh.mjs";
 import { relative, resolve } from "node:path";
 import { realpathSync } from "node:fs";
 //#region src/core/changelog.ts
 /** Get the bump type a bump file applies to a specific package */
 function getBumpTypeForPackage(bf, packageName) {
 	const rel = bf.releases.find((r) => r.name === packageName);
-	return rel?.type === "none" ? "patch" : rel?.type ?? "patch";
+	return rel?.type === "none" || !rel?.type ? "patch" : rel.type;
 }
 /** Sort bump files by bump type for a specific package (major → minor → patch) */
 function sortBumpFilesByType(bumpFiles, packageName) {
@@ -43,7 +43,7 @@ const defaultFormatter = (ctx) => {
 const BUILTIN_FORMATTERS = {
 	default: defaultFormatter,
 	github: async () => {
-		const { createGithubFormatter } = await import("./changelog-github-CEaDCtTk.mjs");
+		const { createGithubFormatter } = await import("./changelog-github-Da5KekQd.mjs");
 		return createGithubFormatter();
 	}
 };
@@ -54,7 +54,7 @@ const BUILTIN_FORMATTERS = {
 async function loadFormatter(changelog, rootDir) {
 	const [name, options] = Array.isArray(changelog) ? changelog : [changelog, {}];
 	if (name === "github") {
-		const { createGithubFormatter } = await import("./changelog-github-CEaDCtTk.mjs");
+		const { createGithubFormatter } = await import("./changelog-github-Da5KekQd.mjs");
 		return createGithubFormatter(options);
 	}
 	if (typeof name === "string" && BUILTIN_FORMATTERS[name]) {
@@ -88,11 +88,12 @@ async function loadFormatter(changelog, rootDir) {
 	return defaultFormatter;
 }
 /** Generate a changelog entry using the configured formatter */
-async function generateChangelogEntry(release, bumpFiles, formatter = defaultFormatter, date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0]) {
+async function generateChangelogEntry(release, bumpFiles, formatter = defaultFormatter, date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0], target = "changelog") {
 	return formatter({
 		release,
 		bumpFiles,
-		date
+		date,
+		target
 	});
 }
 /** Prepend a new entry to an existing CHANGELOG.md content */

package/dist/{changelog-github-CEaDCtTk.mjs → changelog-github-Da5KekQd.mjs}

@@ -1,5 +1,5 @@
 import { s as tryRunArgs } from "./shell-u3bYGxNy.mjs";
-import { o as sortBumpFilesByType, r as getBumpTypeForPackage } from "./changelog-xKuL0IKx.mjs";
+import { o as sortBumpFilesByType, r as getBumpTypeForPackage } from "./changelog-DP3OrTqQ.mjs";
 //#region src/core/changelog-github.ts
 /** Authors filtered from "Thanks" attribution by default (e.g. bots) */
 /** Authors filtered from "Thanks" attribution by default (e.g. AI/automation bots) */

package/dist/{picomatch-TGJi--_I.mjs → check-CS8WIGZA.mjs}

@@ -1,4 +1,9 @@
-import { i as __commonJSMin } from "./logger-C2dEe5Su.mjs";
+import { i as __commonJSMin, n as log, o as __toESM, t as colorize } from "./logger-C2dEe5Su.mjs";
+import { a as loadConfig, o as loadPackageConfig, r as getBumpyDir } from "./config-D13G4-R8.mjs";
+import { n as discoverWorkspace } from "./workspace-BKOAMeki.mjs";
+import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-CoaSxqne.mjs";
+import { a as getFileStatuses, r as getChangedFiles } from "./git-ukq7VTuZ.mjs";
+import { relative } from "node:path";
 //#region ../../node_modules/.bun/picomatch@4.0.4/node_modules/picomatch/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const WIN_SLASH = "\\\\/";
@@ -1867,4 +1872,128 @@ var require_picomatch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = picomatch;
 }));
 //#endregion
-export { require_picomatch as t };
+//#region src/commands/check.ts
+var import_picomatch = /* @__PURE__ */ __toESM(require_picomatch(), 1);
+/**
+* Local check: detect which packages have changed on this branch
+* and verify they have corresponding bump files.
+* Designed for pre-push hooks — no GitHub API needed.
+*
+* Default: at least one bump file must exist, uncovered packages are warned.
+* --strict: every changed package must be covered.
+* --no-fail: warn only, never exit 1.
+* --hook pre-commit: only staged + committed bump files count.
+* --hook pre-push: only committed bump files count.
+*/
+async function checkCommand(rootDir, opts = {}) {
+	const config = await loadConfig(rootDir);
+	const { packages } = await discoverWorkspace(rootDir, config);
+	const baseBranch = config.baseBranch;
+	const changedFiles = getChangedFiles(rootDir, baseBranch);
+	if (changedFiles.length === 0) {
+		log.info("No changed files detected.");
+		return;
+	}
+	const { bumpFiles: allBumpFiles, errors: parseErrors } = await readBumpFiles(rootDir);
+	if (parseErrors.length > 0) {
+		for (const err of parseErrors) log.error(err);
+		process.exit(1);
+	}
+	const bumpyRelDir = relative(rootDir, getBumpyDir(rootDir));
+	const fileStatuses = getFileStatuses(bumpyRelDir, { cwd: rootDir });
+	const augmentedChangedFiles = [...changedFiles];
+	for (const [file] of fileStatuses) if (file.endsWith(".md") && !file.endsWith("README.md") && !augmentedChangedFiles.includes(file)) augmentedChangedFiles.push(file);
+	const { branchBumpFiles, emptyBumpFileIds } = filterBranchBumpFiles(allBumpFiles, augmentedChangedFiles, rootDir);
+	const bumpFileStatuses = /* @__PURE__ */ new Map();
+	for (const bf of branchBumpFiles) {
+		const filePath = `${bumpyRelDir}/${bf.id}.md`;
+		const status = fileStatuses.get(filePath);
+		bumpFileStatuses.set(bf.id, status ?? "committed");
+	}
+	for (const id of emptyBumpFileIds) {
+		const filePath = `${bumpyRelDir}/${id}.md`;
+		const status = fileStatuses.get(filePath);
+		bumpFileStatuses.set(id, status ?? "committed");
+	}
+	const effectiveBumpFiles = opts.hook ? branchBumpFiles.filter((bf) => {
+		const status = bumpFileStatuses.get(bf.id);
+		if (opts.hook === "pre-push") return status === "committed";
+		if (opts.hook === "pre-commit") return status !== "untracked";
+		return true;
+	}) : branchBumpFiles;
+	const effectiveEmptyIds = opts.hook ? emptyBumpFileIds.filter((id) => {
+		const status = bumpFileStatuses.get(id);
+		if (opts.hook === "pre-push") return status === "committed";
+		if (opts.hook === "pre-commit") return status !== "untracked";
+		return true;
+	}) : emptyBumpFileIds;
+	if (opts.hook) {
+		const excludedBumpFiles = branchBumpFiles.filter((bf) => !effectiveBumpFiles.includes(bf));
+		const excludedEmptyIds = emptyBumpFileIds.filter((id) => !effectiveEmptyIds.includes(id));
+		for (const bf of excludedBumpFiles) {
+			const status = bumpFileStatuses.get(bf.id);
+			if (opts.hook === "pre-push" && status === "staged") log.warn(`${bumpyRelDir}/${bf.id}.md is staged but not committed — it won't be included in the push`);
+			else if (status === "untracked") log.warn(`${bumpyRelDir}/${bf.id}.md is untracked — run \`git add\` to include it`);
+		}
+		for (const id of excludedEmptyIds) {
+			const status = bumpFileStatuses.get(id);
+			if (opts.hook === "pre-push" && status === "staged") log.warn(`${bumpyRelDir}/${id}.md is staged but not committed — it won't be included in the push`);
+			else if (status === "untracked") log.warn(`${bumpyRelDir}/${id}.md is untracked — run \`git add\` to include it`);
+		}
+	}
+	const hasEmptyBumpFile = effectiveEmptyIds.length > 0;
+	const coveredPackages = /* @__PURE__ */ new Set();
+	for (const bf of effectiveBumpFiles) for (const release of bf.releases) coveredPackages.add(release.name);
+	const changedPackages = await findChangedPackages(changedFiles, packages, rootDir, config);
+	if (changedPackages.length === 0) {
+		log.info("No managed packages have changed.");
+		return;
+	}
+	const missing = changedPackages.filter((name) => !coveredPackages.has(name));
+	const hasAnyCoverage = effectiveBumpFiles.length > 0 || hasEmptyBumpFile;
+	if (missing.length === 0 || hasEmptyBumpFile && !opts.strict) {
+		if (hasEmptyBumpFile && missing.length > 0) log.success("Empty bump file found — uncovered packages acknowledged.");
+		else log.success(`🐸 All ${changedPackages.length} changed package(s) have bump files.`);
+		if (effectiveBumpFiles.length > 0) printBumpFileList(effectiveBumpFiles.map((bf) => bf.id), bumpyRelDir, bumpFileStatuses);
+		return;
+	}
+	const willFail = !opts.noFail && (opts.strict || !hasAnyCoverage);
+	(willFail ? log.error : log.warn)(`${missing.length} changed package(s) missing bump files:\n`);
+	for (const name of missing) console.log(`  ${colorize(name, "yellow")}`);
+	if (effectiveBumpFiles.length > 0) {
+		console.log();
+		printBumpFileList(effectiveBumpFiles.map((bf) => bf.id), bumpyRelDir, bumpFileStatuses);
+	}
+	console.log();
+	if (opts.strict) log.dim("Run `bumpy add` to create a bump file. Use bump type `none` for packages that changed but don't need a bump.");
+	else log.dim("Run `bumpy add` to create a bump file, or `bumpy add --empty` if no release is needed.");
+	log.dim("To adjust which files trigger change detection, set `changedFilePatterns` in .bumpy/_config.json.");
+	if (willFail) process.exit(1);
+}
+function printBumpFileList(ids, bumpyRelDir, statuses) {
+	log.dim("Bump files on this branch:");
+	for (const id of ids) {
+		const status = statuses.get(id);
+		const statusLabel = status === "staged" ? colorize(" (staged)", "yellow") : status === "untracked" ? colorize(" (untracked)", "yellow") : "";
+		log.dim(`  ${bumpyRelDir}/${id}.md${statusLabel}`);
+	}
+}
+/** Map changed files to the packages they belong to */
+async function findChangedPackages(changedFiles, packages, rootDir, config) {
+	const changed = /* @__PURE__ */ new Set();
+	const matchers = /* @__PURE__ */ new Map();
+	for (const [name, pkg] of packages) {
+		const patterns = (await loadPackageConfig(pkg.dir, config, name)).changedFilePatterns ?? config.changedFilePatterns;
+		matchers.set(name, (0, import_picomatch.default)(patterns));
+	}
+	for (const file of changedFiles) for (const [name, pkg] of packages) {
+		const pkgRelDir = relative(rootDir, pkg.dir);
+		if (file.startsWith(pkgRelDir + "/")) {
+			const relToPackage = file.slice(pkgRelDir.length + 1);
+			if (matchers.get(name)(relToPackage)) changed.add(name);
+		}
+	}
+	return [...changed];
+}
+//#endregion
+export { checkCommand, findChangedPackages, require_picomatch as t };

package/dist/{ci-BVTwTUUK.mjs → ci-CnIkaf7Q.mjs}

@@ -1,34 +1,28 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { a as loadConfig } from "./config-CJIj8xG3.mjs";
+import { a as loadConfig } from "./config-D13G4-R8.mjs";
 import { t as detectPackageManager } from "./package-manager-CClZtIHP.mjs";
-import { n as discoverWorkspace } from "./workspace-c9-TqXed.mjs";
+import { n as discoverWorkspace } from "./workspace-BKOAMeki.mjs";
 import { t as DependencyGraph } from "./dep-graph-E-9-eQ2J.mjs";
 import { n as runArgs, r as runArgsAsync, s as tryRunArgs } from "./shell-u3bYGxNy.mjs";
-import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-BTsntOO-.mjs";
-import { t as assembleReleasePlan } from "./release-plan-21H89Cx1.mjs";
-import { r as getChangedFiles } from "./git-D0__HP86.mjs";
+import { r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-CoaSxqne.mjs";
+import { t as assembleReleasePlan } from "./release-plan-pyxf71dx.mjs";
+import { r as getChangedFiles } from "./git-ukq7VTuZ.mjs";
 import { t as randomName } from "./names-CBy7d8K_.mjs";
-import { findChangedPackages } from "./check-D3eXRyKJ.mjs";
-import { t as resolveCommitMessage } from "./commit-message-DOIfDxfj.mjs";
+import { findChangedPackages } from "./check-CS8WIGZA.mjs";
+import { t as resolveCommitMessage } from "./commit-message-3e4KhzFV.mjs";
 import { createHash } from "node:crypto";
 //#region src/commands/ci.ts
 /**
 * Temporarily override GH_TOKEN with BUMPY_GH_TOKEN for a gh CLI call.
 *
-* Use `--pat-pr` / `--pat-comments` flags to opt in. This is useful when
-* BUMPY_GH_TOKEN belongs to a dedicated automation/bot account. If you're
-* using a developer's personal PAT, it's better to leave these flags off so
-* that PRs and comments appear from github-actions[bot] — allowing the
-* developer to still review and approve the PR.
+* When BUMPY_GH_TOKEN is set (e.g. a dedicated bot PAT or GitHub App token),
+* it is used so that PRs created by bumpy can trigger CI workflows (the
+* default GITHUB_TOKEN cannot do this). If BUMPY_GH_TOKEN is not available
+* (e.g. fork PRs where secrets are hidden), falls back to the default token.
 */
-function requirePatToken() {
+async function withPatToken(fn) {
 	const token = process.env.BUMPY_GH_TOKEN;
-	if (!token) throw new Error("BUMPY_GH_TOKEN must be set when using --pat-pr or --pat-comments");
-	return token;
-}
-async function withPatToken(usePat, fn) {
-	if (!usePat) return fn();
-	const token = requirePatToken();
+	if (!token) return fn();
 	const originalGhToken = process.env.GH_TOKEN;
 	process.env.GH_TOKEN = token;
 	try {
@@ -94,7 +88,7 @@ async function ciCheckCommand(rootDir, opts) {
 	if (prBumpFiles.length === 0) {
 		if (emptyBumpFileIds.length > 0 && parseErrors.length === 0) {
 			log.success("Empty bump file found — no releases needed.");
-			if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatEmptyBumpFileComment(emptyBumpFileIds, prNumber, detectPrBranch(rootDir)), rootDir, opts.patComments);
+			if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatEmptyBumpFileComment(emptyBumpFileIds, prNumber, detectPrBranch(rootDir)), rootDir);
 			return;
 		}
 		const willFail = !opts.noFail || parseErrors.length > 0;
@@ -103,7 +97,7 @@ async function ciCheckCommand(rootDir, opts) {
 		else log.warn(msg);
 		if (shouldComment && prNumber) {
 			const prBranch = detectPrBranch(rootDir);
-			await postOrUpdatePrComment(prNumber, parseErrors.length > 0 ? formatBumpFileErrorsComment(parseErrors, prBranch, pm) : formatNoBumpFilesComment(prBranch, pm), rootDir, opts.patComments);
+			await postOrUpdatePrComment(prNumber, parseErrors.length > 0 ? formatBumpFileErrorsComment(parseErrors, prBranch, pm) : formatNoBumpFilesComment(prBranch, pm), rootDir);
 		}
 		if (willFail) process.exit(1);
 		return;
@@ -115,7 +109,7 @@ async function ciCheckCommand(rootDir, opts) {
 		console.log(`  ${r.name}: ${r.oldVersion} → ${colorize(r.newVersion, "cyan")}${tag}`);
 	}
 	if (plan.warnings.length > 0) for (const w of plan.warnings) log.warn(w);
-	if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatReleasePlanComment(plan, prBumpFiles, prNumber, detectPrBranch(rootDir), pm, plan.warnings, parseErrors, emptyBumpFileIds), rootDir, opts.patComments);
+	if (shouldComment && prNumber) await postOrUpdatePrComment(prNumber, formatReleasePlanComment(plan, prBumpFiles, prNumber, detectPrBranch(rootDir), pm, plan.warnings, parseErrors, emptyBumpFileIds), rootDir);
 	if (parseErrors.length > 0 && !opts.noFail) process.exit(1);
 	const coveredPackages = new Set(plan.releases.map((r) => r.name));
 	const missing = (await findChangedPackages(changedFiles, packages, rootDir, config)).filter((name) => !coveredPackages.has(name));
@@ -141,7 +135,7 @@ async function ciReleaseCommand(rootDir, opts) {
 	}
 	if (bumpFiles.length === 0) {
 		log.info("No pending bump files — checking for unpublished packages...");
-		const { publishCommand } = await import("./publish-BwidFqbo.mjs");
+		const { publishCommand } = await import("./publish-DWdN3o9u.mjs");
 		await publishCommand(rootDir, { tag: opts.tag });
 		return;
 	}
@@ -151,11 +145,11 @@ async function ciReleaseCommand(rootDir, opts) {
 		return;
 	}
 	if (opts.mode === "auto-publish") await autoPublish(rootDir, config, plan, opts.tag);
-	else await createVersionPr(rootDir, plan, config, new Map([...packages.values()].map((p) => [p.name, p.relativeDir])), opts.branch, opts.patPr);
+	else await createVersionPr(rootDir, plan, config, new Map([...packages.values()].map((p) => [p.name, p.relativeDir])), opts.branch);
 }
 async function autoPublish(rootDir, config, plan, tag) {
 	log.step("Running bumpy version...");
-	const { versionCommand } = await import("./version-ClkaCNTE.mjs");
+	const { versionCommand } = await import("./version-BxDhayli.mjs");
 	await versionCommand(rootDir);
 	log.step("Committing version changes...");
 	runArgs([
@@ -184,7 +178,7 @@ async function autoPublish(rootDir, config, plan, tag) {
 		], { cwd: rootDir });
 	}
 	log.step("Running bumpy publish...");
-	const { publishCommand } = await import("./publish-BwidFqbo.mjs");
+	const { publishCommand } = await import("./publish-DWdN3o9u.mjs");
 	await publishCommand(rootDir, { tag });
 }
 /**
@@ -306,7 +300,7 @@ function pushWithToken(rootDir, branch, config) {
 		if (!token && repo) log.warn("BUMPY_GH_TOKEN is not set — PR checks will not trigger automatically.\n  Run `bumpy ci setup` for help.");
 	}
 }
-async function createVersionPr(rootDir, plan, config, packageDirs, branchName, patPr) {
+async function createVersionPr(rootDir, plan, config, packageDirs, branchName) {
 	const branch = validateBranchName(branchName || config.versionPr.branch);
 	const baseBranch = validateBranchName(tryRunArgs([
 		"git",
@@ -350,7 +344,7 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 		branch
 	], { cwd: rootDir });
 	log.step("Running bumpy version...");
-	const { versionCommand } = await import("./version-ClkaCNTE.mjs");
+	const { versionCommand } = await import("./version-BxDhayli.mjs");
 	await versionCommand(rootDir);
 	runArgs([
 		"git",
@@ -381,11 +375,12 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 	});
 	pushWithToken(rootDir, branch, config);
 	const repo = process.env.GITHUB_REPOSITORY;
+	const noPatWarning = !process.env.BUMPY_GH_TOKEN && !!repo;
 	if (existingPr) {
 		const validPr = validatePrNumber(existingPr);
-		const prBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, validPr);
+		const prBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, validPr, noPatWarning);
 		log.step(`Updating existing PR #${validPr}...`);
-		await withPatToken(!!patPr, () => runArgsAsync([
+		await withPatToken(() => runArgsAsync([
 			"gh",
 			"pr",
 			"edit",
@@ -402,8 +397,8 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 	} else {
 		log.step("Creating version PR...");
 		const prTitle = config.versionPr.title;
-		const prBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, null);
-		const result = await withPatToken(!!patPr, () => runArgsAsync([
+		const prBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, null, noPatWarning);
+		const result = await withPatToken(() => runArgsAsync([
 			"gh",
 			"pr",
 			"create",
@@ -423,8 +418,8 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 		if (repo) {
 			const newPrNumber = result?.match(/\/pull\/(\d+)/)?.[1];
 			if (newPrNumber) {
-				const updatedBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, newPrNumber);
-				await withPatToken(!!patPr, () => runArgsAsync([
+				const updatedBody = formatVersionPrBody(plan, config.versionPr.preamble, packageDirs, repo, newPrNumber, noPatWarning);
+				await withPatToken(() => runArgsAsync([
 					"gh",
 					"pr",
 					"edit",
@@ -437,7 +432,7 @@ async function createVersionPr(rootDir, plan, config, packageDirs, branchName, p
 				}));
 			}
 		}
-		if (!patPr) pushWithToken(rootDir, branch, config);
+		if (!process.env.BUMPY_GH_TOKEN) pushWithToken(rootDir, branch, config);
 	}
 	runArgs([
 		"git",
@@ -619,7 +614,7 @@ function buildDiffLinks(pkgDir, changesBaseUrl) {
 function sha256Hex(input) {
 	return createHash("sha256").update(input).digest("hex");
 }
-function formatVersionPrBody(plan, preamble, packageDirs, repo, prNumber) {
+function formatVersionPrBody(plan, preamble, packageDirs, repo, prNumber, showNoPatWarning = false) {
 	const changesBaseUrl = repo && prNumber ? `https://github.com/${repo}/pull/${prNumber}/changes` : null;
 	const lines = [];
 	lines.push(preamble);
@@ -658,10 +653,14 @@ function formatVersionPrBody(plan, preamble, packageDirs, repo, prNumber) {
 			lines.push("");
 		}
 	}
+	if (showNoPatWarning) {
+		lines.push("> ⚠️ `BUMPY_GH_TOKEN` is not set — CI checks will not run automatically on this PR. Run `bumpy ci setup` for help.");
+		lines.push("");
+	}
 	return lines.join("\n");
 }
 const COMMENT_MARKER = "<!-- bumpy-release-plan -->";
-async function postOrUpdatePrComment(prNumber, body, rootDir, usePat = false) {
+async function postOrUpdatePrComment(prNumber, body, rootDir) {
 	const validPr = validatePrNumber(prNumber);
 	const markedBody = `${COMMENT_MARKER}\n${body}`;
 	try {
@@ -676,7 +675,7 @@ async function postOrUpdatePrComment(prNumber, body, rootDir, usePat = false) {
 			`.comments[] | select(.body | startswith("${COMMENT_MARKER}")) | .url | capture("issuecomment-(?<id>[0-9]+)$") | .id`
 		], { cwd: rootDir })?.split("\n")[0]?.trim();
 		if (commentId) {
-			await withPatToken(usePat, () => runArgsAsync([
+			await runArgsAsync([
 				"gh",
 				"api",
 				`repos/{owner}/{repo}/issues/comments/${commentId}`,
@@ -687,10 +686,10 @@ async function postOrUpdatePrComment(prNumber, body, rootDir, usePat = false) {
 			], {
 				cwd: rootDir,
 				input: markedBody
-			}));
+			});
 			log.dim("  Updated PR comment");
 		} else {
-			await withPatToken(usePat, () => runArgsAsync([
+			await runArgsAsync([
 				"gh",
 				"pr",
 				"comment",
@@ -700,7 +699,7 @@ async function postOrUpdatePrComment(prNumber, body, rootDir, usePat = false) {
 			], {
 				cwd: rootDir,
 				input: markedBody
-			}));
+			});
 			log.dim("  Posted PR comment");
 		}
 	} catch (err) {