@williamthorsen/nmr 0.51.0 → 0.53.0

package/.meta/changelog.json

@@ -1,4 +1,101 @@
 [
+  {
+    "version": "0.53.0",
+    "date": "2026-10-27",
+    "sections": [
+      {
+        "title": "🎉 Features",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Adds the time saved to the line that `nmr-compile` prints when it skips an unchanged package, as in `Skipping build, saved ~2.1s.`, when the skipped emit took at least a second. (#1112)",
+            "hash": "ead0549c50d886ef371cb03d979883e027b051c2",
+            "entry": 1
+          },
+          {
+            "description": "Adds `build skipped as unchanged` to the verdict line of a compile that hits the build cache, followed by the saved time when the recorded emit took at least a second, which nmr prints in a quiet run as well. (#1113)",
+            "hash": "02cbf9688061958d23230901120fc374e56ddfe7",
+            "entry": 1
+          },
+          {
+            "description": "Adds a `stated` field to the `--json` record of a passing command that stated its own outcome, such as `{\"kind\":\"build-unchanged\",\"savedMs\":2100}`, which records the saving whatever its size. (#1113)",
+            "hash": "02cbf9688061958d23230901120fc374e56ddfe7",
+            "entry": 2
+          },
+          {
+            "description": "Removes the 7-day `maturityPeriod` from the shared policy that `defineConfig` in `@williamthorsen/nmr/taze` supplies, so that `nmr upgrade` waits for the `minimumReleaseAge` set in `pnpm-workspace.yaml` (or pnpm's default) and no longer withholds releases that pnpm already resolves for other packages. (#1129)",
+            "hash": "e471e998babeb45ef0ca4db64a02fd0fd490702d",
+            "entry": 1
+          }
+        ]
+      },
+      {
+        "title": "🐛 Bug fixes",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Fixes the issue that nmr reported a short or negative duration for a command's run, a delegated run, or a remote lock wait when the system clock was adjusted during that span. (#1112)",
+            "hash": "ead0549c50d886ef371cb03d979883e027b051c2",
+            "entry": 2
+          },
+          {
+            "description": "Fixes the issue that `nmr-fmt` never formatted a file whose name starts with `-` and rejected `--` as an unknown option, by making `nmr-fmt` accept `--` before its pathspecs and pass `--` to Prettier before the file list. (#1130)",
+            "hash": "d7cd93b2309c0668b7bcb82bf52bad5fc0a5b742",
+            "entry": 1
+          }
+        ]
+      },
+      {
+        "title": "♻️ Refactoring",
+        "audience": "dev",
+        "items": [
+          {
+            "description": "Apply the naming conventions to nmr-core's identifiers (#1125)",
+            "body": "Renames the identifiers in nmr-core to follow the naming conventions, including the exported option keys of `updateManagedFile` and `writeFileWithCheck`, which change from `dryRun` and `overwrite` to `isDryRun` and `shouldOverwrite`, and the constant `GIT_OUTPUT_LIMIT`, which becomes `GIT_OUTPUT_LIMIT_BYTES`. Updates the call sites in nmr, release-kit, and v11y-check to the new names.",
+            "hash": "2cb60f628512ed6ec2273a219a7b6c71aa35b1bf"
+          }
+        ]
+      }
+    ]
+  },
+  {
+    "version": "0.52.0",
+    "date": "2026-10-24",
+    "sections": [
+      {
+        "title": "🎉 Features",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Adds a 📡 glyph before the host name in the rich-output `nmr` verdicts that name a host, for a passed, failed, or recalled run, which leaves plain output and verdicts reading `on this tree` unchanged. (#1105)",
+            "hash": "15c0d637325fff429ceae5aa5ec6e0ee19741daa",
+            "entry": 1
+          },
+          {
+            "description": "Adds the root command `lint:workflows` and its `nmr-actionlint` bin, which lint `.github/workflows/` with actionlint 1.7.12, including its shellcheck pass over each `run:` block with shellcheck 0.11.0, using binaries that nmr downloads on first use, checks against pinned SHA-256 checksums, and caches under `node_modules/.cache/nmr-tools/`. (#1107)",
+            "hash": "b4ddac2c4954a882d6be05962f9709e323ac3ece",
+            "entry": 1
+          },
+          {
+            "description": "Adds `lint:workflows` to the root `check`, `check:strict`, and `root:check` composites, which makes those composites and `nmr ci` fail on any actionlint finding in a repo that has workflows, need access to `github.com` on their first run, and fail on any platform other than macOS or Linux on x64 or arm64. (#1107)",
+            "hash": "b4ddac2c4954a882d6be05962f9709e323ac3ece",
+            "entry": 2
+          }
+        ]
+      },
+      {
+        "title": "🐛 Bug fixes",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Fixes the issue that a delegated `nmr` command could not find a bin that the branch added to a workspace package, because the host's `pnpm install --frozen-lockfile` did not link new bins when the lockfile was unchanged. (#1108)",
+            "hash": "5b694689a51679ddfbb04f65a88d0757ca310f3f",
+            "entry": 1
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "0.51.0",
     "date": "2026-10-24",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.43.0";
+export const __readyupVersion = "0.44.0";
 import { createRequire as __rdyCreateRequire } from 'node:module';
 const require = __rdyCreateRequire(import.meta.url);
 
@@ -7382,12 +7382,12 @@ import { isRecord, listTrackedFiles } from "readyup/check-utils";
 import { globSync } from "node:fs";
 import { basename, join, sep } from "node:path";
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.8.4/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/isError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.9.0/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/isError.js
 function isError(error) {
   return error instanceof Error || Object.prototype.toString.call(error) === "[object Error]";
 }
 
-// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.8.4/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/describeError.js
+// ../../node_modules/.pnpm/@williamthorsen+toolbelt.errors@0.9.0/node_modules/@williamthorsen/toolbelt.errors/dist/esm/4-release/describeError.js
 function describeError(error) {
   try {
     if (isError(error) && typeof error.message === "string" && error.message !== "") {
@@ -7646,6 +7646,7 @@ var TYPECHECK_STEP = { run: "typecheck", shouldDeclineArguments: true };
 var ROOT_TYPECHECK_STEP = { run: "root:typecheck", shouldDeclineArguments: true };
 var LINT_CHECK_STEP = { run: "lint:check", shouldRunInBackground: true };
 var LINT_STRICT_STEP = { run: "lint:strict", shouldRunInBackground: true };
+var LINT_WORKFLOWS_STEP = { run: "lint:workflows", shouldDeclineArguments: true };
 var workspaceScripts = {
   build: ["compile"],
   check: [LINT_CHECK_STEP, TYPECHECK_STEP, "fmt:check", "test"],
@@ -7678,8 +7679,8 @@ function buildRootScripts(workspaceGlobs) {
     "audit:dev": "pnpm exec v11y --dev",
     "audit:prod": "pnpm exec v11y --prod",
     build: ["-R build"],
-    check: [LINT_CHECK_STEP, TYPECHECK_STEP, "fmt:check", "test"],
-    "check:strict": [LINT_STRICT_STEP, TYPECHECK_STEP, "fmt:check", "test"],
+    check: [LINT_CHECK_STEP, LINT_WORKFLOWS_STEP, TYPECHECK_STEP, "fmt:check", "test"],
+    "check:strict": [LINT_STRICT_STEP, LINT_WORKFLOWS_STEP, TYPECHECK_STEP, "fmt:check", "test"],
     // Excludes the audit, which in CI has a workflow of its own. The narrowed check runs against the build, so
     // the build declines the arguments rather than being narrowed by them.
     ci: [{ run: "build", shouldDeclineArguments: true }, "check:strict"],
@@ -7691,11 +7692,12 @@ function buildRootScripts(workspaceGlobs) {
     lint: "eslint --fix .",
     "lint:check": "eslint .",
     "lint:strict": "strict-lint",
+    "lint:workflows": "nmr-actionlint",
     // The audit takes seconds and `ci` takes minutes, so the cheap gate fails first. The audit reads the
     // dependency tree, and an argument narrowing the code under test does not say anything about that tree.
     prepush: [{ run: "audit", shouldDeclineArguments: true }, "ci"],
     "report-overrides": "nmr-report-overrides",
-    "root:check": [ROOT_TYPECHECK_STEP, "fmt:check", "root:lint:check", "root:test"],
+    "root:check": [ROOT_TYPECHECK_STEP, "fmt:check", "root:lint:check", LINT_WORKFLOWS_STEP, "root:test"],
     "root:lint": `eslint --fix ${ignorePatterns}.`,
     "root:lint:check": `eslint ${ignorePatterns}.`,
     "root:lint:strict": `strict-lint ${ignorePatterns}.`,
@@ -7730,12 +7732,12 @@ var import_yaml = __toESM(require_dist(), 1);
 // ../nmr-core/dist/esm/helpers/workspace-patterns.js
 import { globSync as globSync2 } from "node:fs";
 import path from "node:path";
-var MANIFEST = "package.json";
-var ALWAYS_EXCLUDED = ["**/node_modules/**"];
+var MANIFEST_FILENAME = "package.json";
+var ALWAYS_EXCLUDED_PATTERNS = ["**/node_modules/**"];
 function matchPackageDirs(monorepoRoot, includedPatterns, excludedPatterns) {
   const options = {
     cwd: monorepoRoot,
-    exclude: [...excludedPatterns, ...ALWAYS_EXCLUDED],
+    exclude: [...excludedPatterns, ...ALWAYS_EXCLUDED_PATTERNS],
     followSymlinks: true
   };
   const matches = globSync2([...includedPatterns], options);
@@ -7756,34 +7758,34 @@ function splitWorkspacePatterns(patterns) {
     if (pattern.trim() === "")
       continue;
     const isNegated = pattern.startsWith("!");
-    const target = isNegated ? excludedPatterns : includedPatterns;
-    target.push(buildManifestPattern(isNegated ? pattern.slice(1) : pattern));
+    const targetPatterns = isNegated ? excludedPatterns : includedPatterns;
+    targetPatterns.push(buildManifestPattern(isNegated ? pattern.slice(1) : pattern));
   }
   return { excludedPatterns, includedPatterns };
 }
 function buildManifestPattern(pattern) {
-  return `${pattern.replace(/\/?$/, "")}/${MANIFEST}`;
+  return `${pattern.replace(/\/?$/, "")}/${MANIFEST_FILENAME}`;
 }
 
 // ../nmr-core/dist/esm/workspace.js
-var WORKSPACE_MANIFEST = "pnpm-workspace.yaml";
+var WORKSPACE_MANIFEST_FILENAME = "pnpm-workspace.yaml";
 function isMonorepoRoot(dir) {
-  return existsSync(path2.join(dir, WORKSPACE_MANIFEST));
+  return existsSync(path2.join(dir, WORKSPACE_MANIFEST_FILENAME));
 }
 function resolveWorkspace(monorepoRoot) {
-  const manifestRead = readWorkspaceManifest(monorepoRoot);
-  if (manifestRead.kind === "absent") {
+  const manifestReadResult = readWorkspaceManifest(monorepoRoot);
+  if (manifestReadResult.kind === "absent") {
     return { kind: "not-a-workspace" };
   }
-  if (manifestRead.kind === "unreadable") {
+  if (manifestReadResult.kind === "unreadable") {
     return { cause: "unreadable-manifest", kind: "empty", patterns: [] };
   }
-  const packagesRead = readDeclaredPackages(manifestRead.value);
-  if (packagesRead.kind !== "patterns") {
-    const cause = packagesRead.kind === "absent" ? "no-packages-list" : "unreadable-packages";
+  const packagesReadResult = readDeclaredPackages(manifestReadResult.value);
+  if (packagesReadResult.kind !== "patterns") {
+    const cause = packagesReadResult.kind === "absent" ? "no-packages-list" : "unreadable-packages";
     return { cause, kind: "empty", patterns: [] };
   }
-  const { patterns } = packagesRead;
+  const { patterns } = packagesReadResult;
   const packageDirs = resolvePackageDirs(monorepoRoot, patterns);
   if (packageDirs.length > 0) {
     return { kind: "packages", packageDirs, patterns };
@@ -7816,12 +7818,12 @@ function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readWorkspaceManifest(monorepoRoot) {
-  const workspaceFile = path2.join(monorepoRoot, WORKSPACE_MANIFEST);
-  if (!existsSync(workspaceFile)) {
+  const workspaceManifestPath = path2.join(monorepoRoot, WORKSPACE_MANIFEST_FILENAME);
+  if (!existsSync(workspaceManifestPath)) {
     return { kind: "absent" };
   }
   try {
-    return { kind: "parsed", value: (0, import_yaml.parse)(readFileSync(workspaceFile, "utf8")) };
+    return { kind: "parsed", value: (0, import_yaml.parse)(readFileSync(workspaceManifestPath, "utf8")) };
   } catch {
     return { kind: "unreadable" };
   }
@@ -7836,11 +7838,11 @@ var UserError = class extends Error {
 };
 
 // src/workspace.ts
-var WORKSPACE_MANIFEST2 = "pnpm-workspace.yaml";
+var WORKSPACE_MANIFEST = "pnpm-workspace.yaml";
 function getWorkspacePackageDirs(monorepoRoot) {
   const resolution = resolveWorkspace(monorepoRoot);
   if (resolution.kind === "not-a-workspace") {
-    throw new UserError(`Not a monorepo root: no ${WORKSPACE_MANIFEST2} in ${monorepoRoot}`);
+    throw new UserError(`Not a monorepo root: no ${WORKSPACE_MANIFEST} in ${monorepoRoot}`);
   }
   return resolution.kind === "packages" ? resolution.packageDirs : [];
 }
@@ -9188,7 +9190,7 @@ function hasSupportedStrictLintVersion() {
   });
 }
 function getMinVersion() {
-  const pickedFields = { "version": "0.51.0" };
+  const pickedFields = { "version": "0.53.0" };
   if (typeof pickedFields["version"] !== "string") {
     throw new TypeError("nmr/package.json: 'version' must be a string");
   }

package/.readyup/manifest.json

@@ -3,10 +3,13 @@
   "kits": [
     {
       "bundledDependencies": {
-        "@williamthorsen/toolbelt.errors": "0.8.4",
-        "@williamthorsen/toolbelt.filesystem": "0.9.4",
-        "@williamthorsen/toolbelt.packaging": "0.6.4",
-        "@williamthorsen/toolbelt.terminal": "0.2.1",
+        "@williamthorsen/toolbelt.datetime": "4.1.0",
+        "@williamthorsen/toolbelt.errors": "0.9.0",
+        "@williamthorsen/toolbelt.filesystem": "0.10.0",
+        "@williamthorsen/toolbelt.numbers": "7.3.0",
+        "@williamthorsen/toolbelt.objects": "4.4.0",
+        "@williamthorsen/toolbelt.packaging": "0.7.0",
+        "@williamthorsen/toolbelt.terminal": "0.3.0",
         "ansi-regex": "6.4.0",
         "ansi-styles": "6.2.3",
         "cli-truncate": "6.1.1",
@@ -24,7 +27,7 @@
           "checklist": "nmr",
           "checks": [
             "@williamthorsen/nmr in devDependencies",
-            "@williamthorsen/nmr >= 0.51.0",
+            "@williamthorsen/nmr >= 0.53.0",
             "pnpm-workspace.yaml exists",
             "catalogued dependencies use catalog:",
             "package.json has packageManager field",
@@ -71,22 +74,22 @@
       "esbuildVersion": "0.28.2",
       "inputs": [
         {
-          "hash": "aed52073",
+          "hash": "bf29a9a3",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/cache-store.js"
         },
         {
-          "hash": "81f1406b",
+          "hash": "bc0baa4a",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/collectChangedPaths.js"
         },
         {
-          "hash": "200f69f1",
+          "hash": "70d519e7",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/gitObjects.js"
         },
         {
-          "hash": "54384dca",
+          "hash": "14216f5f",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/gitOutputLimit.js"
         },
@@ -96,47 +99,52 @@
           "path": "../../nmr-core/dist/esm/hasErrnoCode.js"
         },
         {
-          "hash": "1eb2b90c",
+          "hash": "0d7b3f7c",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/hashWorkingTree.js"
         },
         {
-          "hash": "41232d10",
+          "hash": "c1eae24e",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/helpers/workspace-patterns.js"
         },
         {
-          "hash": "191f7c24",
+          "hash": "dcd24627",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/index.js"
         },
         {
-          "hash": "89d3e3b4",
+          "hash": "a2053951",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/parseArgs.js"
         },
         {
-          "hash": "7915ba49",
+          "hash": "9104fb90",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/runGit.js"
         },
         {
-          "hash": "14547f78",
+          "hash": "46b44e18",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/terminal.js"
         },
         {
-          "hash": "3c395f31",
+          "hash": "85afaf3e",
+          "kind": "module",
+          "path": "../../nmr-core/dist/esm/timer.js"
+        },
+        {
+          "hash": "5ae3e980",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/updateManagedFile.js"
         },
         {
-          "hash": "2224ec3a",
+          "hash": "00d00fae",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/workspace.js"
         },
         {
-          "hash": "24bde686",
+          "hash": "d377c37c",
           "kind": "module",
           "path": "../../nmr-core/dist/esm/writeFileWithCheck.js"
         },
@@ -186,7 +194,7 @@
           "path": "lib/setup.ts"
         },
         {
-          "hash": "400757e6",
+          "hash": "64995a53",
           "kind": "module",
           "path": "lib/shared-configs.ts"
         },
@@ -201,7 +209,7 @@
           "path": "lib/workspace-build.ts"
         },
         {
-          "hash": "006bcdd5",
+          "hash": "aa5cf58e",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -224,7 +232,7 @@
           "path": "../src/config.ts"
         },
         {
-          "hash": "72ad1e0e",
+          "hash": "b8e98c81",
           "kind": "module",
           "path": "../src/default-scripts.ts"
         },
@@ -316,10 +324,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.43.0",
+      "readyupVersion": "0.44.0",
       "source": "kits/default.ts",
       "sourceHash": "9fd61bf4",
-      "targetHash": "54da2b6a"
+      "targetHash": "ad118293"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.53.0 — 2026-10-27
+
+### 🎉 Features
+
+- Adds the time saved to the line that `nmr-compile` prints when it skips an unchanged package, as in `Skipping build, saved ~2.1s.`, when the skipped emit took at least a second. (#1112)
+- Adds `build skipped as unchanged` to the verdict line of a compile that hits the build cache, followed by the saved time when the recorded emit took at least a second, which nmr prints in a quiet run as well. (#1113)
+- Adds a `stated` field to the `--json` record of a passing command that stated its own outcome, such as `{"kind":"build-unchanged","savedMs":2100}`, which records the saving whatever its size. (#1113)
+- Removes the 7-day `maturityPeriod` from the shared policy that `defineConfig` in `@williamthorsen/nmr/taze` supplies, so that `nmr upgrade` waits for the `minimumReleaseAge` set in `pnpm-workspace.yaml` (or pnpm's default) and no longer withholds releases that pnpm already resolves for other packages. (#1129)
+
+### 🐛 Bug fixes
+
+- Fixes the issue that nmr reported a short or negative duration for a command's run, a delegated run, or a remote lock wait when the system clock was adjusted during that span. (#1112)
+- Fixes the issue that `nmr-fmt` never formatted a file whose name starts with `-` and rejected `--` as an unknown option, by making `nmr-fmt` accept `--` before its pathspecs and pass `--` to Prettier before the file list. (#1130)
+
+### ♻️ Refactoring
+
+- Apply the naming conventions to nmr-core's identifiers (#1125)
+
+  Renames the identifiers in nmr-core to follow the naming conventions, including the exported option keys of `updateManagedFile` and `writeFileWithCheck`, which change from `dryRun` and `overwrite` to `isDryRun` and `shouldOverwrite`, and the constant `GIT_OUTPUT_LIMIT`, which becomes `GIT_OUTPUT_LIMIT_BYTES`. Updates the call sites in nmr, release-kit, and v11y-check to the new names.
+
+## 0.52.0 — 2026-10-24
+
+### 🎉 Features
+
+- Adds a 📡 glyph before the host name in the rich-output `nmr` verdicts that name a host, for a passed, failed, or recalled run, which leaves plain output and verdicts reading `on this tree` unchanged. (#1105)
+- Adds the root command `lint:workflows` and its `nmr-actionlint` bin, which lint `.github/workflows/` with actionlint 1.7.12, including its shellcheck pass over each `run:` block with shellcheck 0.11.0, using binaries that nmr downloads on first use, checks against pinned SHA-256 checksums, and caches under `node_modules/.cache/nmr-tools/`. (#1107)
+- Adds `lint:workflows` to the root `check`, `check:strict`, and `root:check` composites, which makes those composites and `nmr ci` fail on any actionlint finding in a repo that has workflows, need access to `github.com` on their first run, and fail on any platform other than macOS or Linux on x64 or arm64. (#1107)
+
+### 🐛 Bug fixes
+
+- Fixes the issue that a delegated `nmr` command could not find a bin that the branch added to a workspace package, because the host's `pnpm install --frozen-lockfile` did not link new bins when the lockfile was unchanged. (#1108)
+
 ## 0.51.0 — 2026-10-24
 
 ### 🎉 Features

package/README.md

@@ -5,12 +5,19 @@
 Context-aware script runner for pnpm monorepos. Includes an `nmr` (node-monorepo run) binary that provides centralized, consistent script execution across workspace packages and the monorepo root.
 
 <!-- section:release-notes -->
-## Release notes — v0.51.0 (2026-10-24)
+## Release notes — v0.53.0 (2026-10-27)
 
 ### 🎉 Features
 
-- Widens the optional `vitest` peer range of `@williamthorsen/nmr` from `>=4.0.0 <5` to `>=4.0.0 <6`, adding support for Vitest 5, under which a bare `vitest` started from a package without its own config needs `--config` naming the root's `vitest.config.*`. (#1100)
-- Adds the `nmr-vitest` command and runs every package-scope `test*` script through it; when the package directory does not contain a `vitest.config.*` or `vite.config.*`, `nmr-vitest` passes `--config` naming the `vitest.config.*` at the monorepo root, and otherwise passes its arguments to Vitest unchanged. (#1100)
+- Adds the time saved to the line that `nmr-compile` prints when it skips an unchanged package, as in `Skipping build, saved ~2.1s.`, when the skipped emit took at least a second. (#1112)
+- Adds `build skipped as unchanged` to the verdict line of a compile that hits the build cache, followed by the saved time when the recorded emit took at least a second, which nmr prints in a quiet run as well. (#1113)
+- Adds a `stated` field to the `--json` record of a passing command that stated its own outcome, such as `{"kind":"build-unchanged","savedMs":2100}`, which records the saving whatever its size. (#1113)
+- Removes the 7-day `maturityPeriod` from the shared policy that `defineConfig` in `@williamthorsen/nmr/taze` supplies, so that `nmr upgrade` waits for the `minimumReleaseAge` set in `pnpm-workspace.yaml` (or pnpm's default) and no longer withholds releases that pnpm already resolves for other packages. (#1129)
+
+### 🐛 Bug fixes
+
+- Fixes the issue that nmr reported a short or negative duration for a command's run, a delegated run, or a remote lock wait when the system clock was adjusted during that span. (#1112)
+- Fixes the issue that `nmr-fmt` never formatted a file whose name starts with `-` and rejected `--` as an unknown option, by making `nmr-fmt` accept `--` before its pathspecs and pass `--` to Prettier before the file list. (#1130)
 <!-- /section:release-notes -->
 
 ## Installation
@@ -57,7 +64,7 @@ From the monorepo root:
 ```bash
 nmr test    # Run root tests + recursive workspace tests
 nmr build   # Build all packages
-nmr ci      # Build, then run the strict checks
+nmr ci      # Build, then run the strict checks, workflow lint included
 nmr prepush # Run everything the remote runs, before a push
 ```
 
@@ -206,7 +213,7 @@ export default {
 
 ```console
 $ nmr --delegate-to imac2 ci
-✅ my-repo: ci: passed on imac2 in 1m 48s
+✅ my-repo: ci: passed on 📡 imac2 in 1m 48s
 ```
 
 A delegation consults the [check-result cache](#check-result-cache) first, so a tree that already passed is not sent to the host; a pass that a host earned does not satisfy a run here. A repo whose checks must run on the machine that has the tree declares `delegate: false` in its config. [Delegating to another machine](docs/delegate.md) covers the user config, `--delegate`, `NMR_DELEGATE`, the rules that decide where a command runs, which commands can be delegated, how nmr chooses among several hosts, how the cache is consulted, what the host runs, how failures are reported, and setting up the host.
@@ -317,7 +324,7 @@ rdy list --from npm:@williamthorsen/nmr  # what nmr publishes
 - [Machine lock](docs/machine-lock.md): Which commands wait for one another, where the lock lives, and bypassing it
 - [Delegating to another machine](docs/delegate.md): The user config, `--delegate`, `--delegate-to`, `NMR_DELEGATE`, where a command runs, choosing among several hosts, what the host runs, and setting it up
 - [Dependency upgrades](docs/upgrades.md): `nmr upgrade`, the upgrade policy, `report-catalog`, `report-overrides`, and `nmr-taze`
-- [Standalone utilities](docs/utilities.md): `nmr-clean`, `nmr-compile`, `nmr-fmt`, `nmr-vitest`, and `ensure-prepublish-hooks`
+- [Standalone utilities](docs/utilities.md): `nmr-actionlint`, `nmr-clean`, `nmr-compile`, `nmr-fmt`, `nmr-vitest`, and `ensure-prepublish-hooks`
 - [Shared Vitest config](docs/vitest.md): Test tiers, test selections, the conventions check, and customization
 - [Shared Prettier config](docs/prettier.md): What it formats and how to customize it
 - [Workspace introspection](docs/workspace.md): The two workspace lookups

package/bin/nmr-actionlint.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+try {
+  await import('../dist/esm/cli-actionlint.js');
+} catch (error) {
+  if (error.code === 'ERR_MODULE_NOT_FOUND') {
+    process.stderr.write('nmr-actionlint: build output not found; run `pnpm run bootstrap` first\n');
+  } else {
+    process.stderr.write(`nmr-actionlint: failed to load: ${error.message}\n`);
+  }
+  process.exit(1);
+}

package/dist/esm/check-cache-gate.d.ts

@@ -1,5 +1,5 @@
 import type { Writable } from 'node:stream';
-import type { OutputStyle } from '@williamthorsen/nmr-core';
+import { type OutputStyle } from '@williamthorsen/nmr-core';
 import { type TreeSnapshot } from './check-cache.js';
 import { type RunPlan } from './invocation.js';
 import type { NmrConfig } from './types.js';

package/dist/esm/check-cache-gate.js

@@ -1,3 +1,4 @@
+import { startTimer } from '@williamthorsen/nmr-core';
 import { formatMisplacedNoCacheWarning, isCacheableCommand, resolveTreeSnapshot, writeDebugNote, } from "./check-cache.js";
 import { findStaleBuildOutput, readBuildOutputState } from "./check-cache-build-output.js";
 import { recordDelegatedPass } from "./check-cache-delegation.js";
@@ -10,6 +11,7 @@ import { VERSION } from "./invocation.js";
 import { resolveChannel } from "./output-channel.js";
 import { writePassManifestEntry } from "./pass-manifest.js";
 import { runSteps } from "./runner.js";
+import { splitSegments } from "./shell-syntax.js";
 export function openGate(options) {
     const { command, config, env, monorepoRoot, passthrough, stderr, style } = options;
     if (!isCacheableCommand(config.checkCache, command)) {
@@ -83,9 +85,9 @@ export async function runGated(plan) {
             stdout.write(plan.overrideNotice);
         }
         const runOptions = { ...plan.runOptions, env: addLockEnv(plan.runOptions.env ?? env, lock) };
-        const startedAtMs = Date.now();
-        const { exitCode, retainedOutput } = await runSteps(plan.steps, anchorDir, runOptions);
-        const durationMs = Date.now() - startedAtMs;
+        const readElapsedMs = startTimer();
+        const { exitCode, retainedOutput, statedOutcomes } = await runSteps(plan.steps, anchorDir, runOptions);
+        const durationMs = readElapsedMs();
         if (exitCode === 0 && gate !== undefined) {
             await recordPass({
                 anchorDir,
@@ -105,9 +107,12 @@ export async function runGated(plan) {
                 stderr,
             });
         }
+        const stated = readOwnStatement(plan.ownSteps, statedOutcomes);
         return {
             exitCode,
-            outcome: exitCode === 0 ? { outcome: 'passed', durationMs } : { outcome: 'failed', durationMs, exitCode },
+            outcome: exitCode === 0
+                ? { outcome: 'passed', durationMs, ...(stated !== undefined && { stated }) }
+                : { outcome: 'failed', durationMs, exitCode },
         };
     }
     finally {
@@ -168,6 +173,13 @@ async function readGate(plan) {
         snapshot,
     };
 }
+function readOwnStatement(ownSteps, statedOutcomes) {
+    const [ownStep] = ownSteps;
+    if (ownSteps.length !== 1 || ownStep?.kind !== 'opaque' || splitSegments(ownStep.command).length !== 1) {
+        return undefined;
+    }
+    return statedOutcomes?.get(ownStep);
+}
 async function recallPass(plan, gate) {
     const { anchorDir, command, context, env, stderr } = plan.invocation;
     const { monorepoRoot } = context;

package/dist/esm/check-cache.js

@@ -11,6 +11,7 @@ export const DEFAULT_CACHEABLE_COMMANDS = [
     'fmt:check',
     'lint:check',
     'lint:strict',
+    'lint:workflows',
     'root:check',
     'root:lint:check',
     'root:lint:strict',

package/dist/esm/cli-actionlint.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/cli-actionlint.js

@@ -0,0 +1,12 @@
+import process from 'node:process';
+import { reportError } from '@williamthorsen/nmr-core';
+import { describeError } from '@williamthorsen/toolbelt.errors';
+import { runActionlint } from "./commands/actionlint.js";
+import { findMonorepoRoot } from "./workspace.js";
+try {
+    process.exitCode = await runActionlint(findMonorepoRoot(), process.argv.slice(2));
+}
+catch (error) {
+    reportError(describeError(error));
+    process.exitCode = 1;
+}

package/dist/esm/commands/actionlint.d.ts

@@ -0,0 +1,23 @@
+import { type WorkflowTool } from './workflow-tools.js';
+/** How a spawned actionlint ended. */
+export interface ActionlintOutcome {
+    error?: Error | undefined;
+    signal: NodeJS.Signals | null;
+    status: number | null;
+}
+export interface RunActionlintOptions {
+    /** Directory under which the pinned tools are cached; defaults to `node_modules/.cache/nmr-tools` at the root. */
+    cacheRoot?: string;
+    ensure?: (tool: WorkflowTool, cacheRoot: string) => Promise<string>;
+    spawn?: (file: string, args: string[], cwd: string) => ActionlintOutcome;
+}
+/**
+ * Lints the monorepo's GitHub Actions workflows with the pinned actionlint, running its shellcheck pass with the
+ * pinned shellcheck, and returns actionlint's exit status. A repo without a workflows directory passes.
+ */
+export declare function runActionlint(monorepoRoot: string, args: readonly string[], options?: RunActionlintOptions): Promise<number>;
+/**
+ * Builds actionlint's arguments. The pyflakes integration is disabled so that the result does not depend on whether
+ * the machine happens to have pyflakes on `PATH`.
+ */
+export declare function buildActionlintArgs(shellcheckPath: string, args: readonly string[]): string[];