@williamthorsen/release-kit 10.2.2 → 10.3.0

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat — @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.23.0";
+export const __readyupVersion = "0.24.0";
 
 
 // .readyup/kits/default.ts
@@ -43,7 +43,7 @@ function detectRepoType() {
   if (existsSync("package.json")) {
     const raw = readFileSync("package.json", "utf8");
     const pkg = parseJsonRecord(raw);
-    if (pkg !== void 0 && Array.isArray(pkg.workspaces)) {
+    if (pkg !== void 0 && Array.isArray(pkg["workspaces"])) {
       return "monorepo";
     }
   }
@@ -52,15 +52,21 @@ function detectRepoType() {
 
 // .readyup/kits/default.ts
 function getMinVersion() {
-  const picked = { "version": "10.2.2" };
-  if (typeof picked.version !== "string") {
+  const picked = { "version": "10.3.0" };
+  if (typeof picked["version"] !== "string") {
     throw new TypeError("release-kit/package.json: 'version' must be a string");
   }
-  return picked.version;
+  return picked["version"];
 }
 function hasPublishablePackages() {
   return discoverWorkspaces({ filter: (w) => w.isPackage }).length > 0;
 }
+var CONFIG_EXPORT_PATTERNS = [
+  /export\s+default\b/,
+  /export\s+(?:const|let|var)\s+config\b/,
+  /export\s*\{[^}]*\b(?:config|default)\b[^}]*\}/,
+  /export\s*\*/
+];
 var CLIFF_TEMPLATE_HASH = "93b72e0b1393cd6b1fe8e2a0e303cd326fd323435951b0493396b305af32d2ec";
 var COMMON_PRESET_HASH = "86f9e1db9000793a91168e8c6b5695311a422ee208121324549c068fe67fa184";
 var SYNC_LABELS_WORKFLOW_HASH = "d6e2403fb551d2d415f679125989c92760444eec887644565b2e05c9bf8f4c1e";
@@ -111,6 +117,7 @@ var default_default = defineRdyKit({
             {
               name: "release.yaml does not reference deprecated tag ref",
               severity: "error",
+              quiet: true,
               check: () => fileDoesNotContain(".github/workflows/release.yaml", /@(release|publish)-workflow-v[0-9]/),
               fix: "Update release.yaml to use @workflow/release-v1 (run `release-kit init --force` to regenerate, or replace the ref manually)"
             }
@@ -135,50 +142,79 @@ var default_default = defineRdyKit({
             {
               name: "publish.yaml does not reference deprecated tag ref",
               severity: "error",
+              quiet: true,
               check: () => fileDoesNotContain(".github/workflows/publish.yaml", /@(release|publish)-workflow-v[0-9]/),
               fix: "Update publish.yaml to use @workflow/publish-v1 (run `release-kit init --force` to regenerate, or replace the ref manually)"
             }
           ]
         },
         {
-          name: "releaseNotes config is consistent with changelogJson",
-          severity: "warn",
-          skip: () => !fileExists(".config/release-kit.config.ts") ? "no release-kit config file" : false,
-          check: () => releaseNotesConfigIsConsistent(),
-          fix: "Either enable changelogJson.enabled or disable releaseNotes.shouldInjectIntoReadme"
-        },
-        {
-          name: "config does not use removed releaseNotes.shouldCreateGithubRelease",
+          name: ".config/release-kit.config.ts exports a config",
           severity: "error",
           skip: () => !fileExists(".config/release-kit.config.ts") ? "no release-kit config file" : false,
-          check: () => fileDoesNotContain(".config/release-kit.config.ts", /shouldCreateGithubRelease/),
-          fix: "Remove 'shouldCreateGithubRelease' from .config/release-kit.config.ts. Adoption of GitHub Releases is now signaled by installing the create-github-release workflow (see release-kit README for setup)."
-        },
-        {
-          name: ".config/release-kit.config.ts uses defineConfig",
-          severity: "recommend",
-          skip: () => !fileExists(".config/release-kit.config.ts") ? "no release-kit config file" : false,
-          check: () => fileContains(".config/release-kit.config.ts", /defineConfig/),
-          fix: "Wrap your config export with defineConfig() from @williamthorsen/release-kit/config for type safety"
-        },
-        {
-          name: "releaseNotes.shouldInjectIntoReadme is true",
-          severity: "warn",
-          skip: () => !fileExists(".config/release-kit.config.ts") ? "no release-kit config file" : false,
-          check: () => releaseNotesInjectsIntoReadme(),
-          fix: "Set releaseNotes.shouldInjectIntoReadme to true in .config/release-kit.config.ts",
+          check: () => configFileExportsConfig(),
+          fix: "Export the config from .config/release-kit.config.ts as a default export or as a named `config` export; release-kit resolves no other export",
           checks: [
             {
-              name: "README contains release-notes section markers",
+              name: "releaseNotes config is consistent with changelogJson",
+              severity: "warn",
+              check: () => releaseNotesConfigIsConsistent(),
+              fix: "Either enable changelogJson.enabled or disable releaseNotes.shouldInjectIntoReadme"
+            },
+            {
+              name: ".config/release-kit.config.ts uses defineConfig",
+              severity: "recommend",
+              check: () => fileContains(".config/release-kit.config.ts", /defineConfig/),
+              fix: "Wrap your config export with defineConfig() from @williamthorsen/release-kit/config for type safety"
+            },
+            {
+              name: "releaseNotes.shouldInjectIntoReadme is true",
+              severity: "warn",
+              check: () => releaseNotesInjectsIntoReadme(),
+              fix: "Set releaseNotes.shouldInjectIntoReadme to true in .config/release-kit.config.ts",
+              checks: [
+                {
+                  name: "README contains release-notes section markers",
+                  severity: "warn",
+                  check: readmesHaveReleaseNotesMarkers,
+                  fix: "Add `<!-- section:release-notes -->` and `<!-- /section:release-notes -->` markers to each affected README"
+                }
+              ]
+            },
+            {
+              name: "repoLabels block declared in .config/release-kit.config.ts",
+              severity: "recommend",
+              check: () => fileContains(".config/release-kit.config.ts", /repoLabels/),
+              fix: "Run `release-kit sync-labels init` to seed a repoLabels block, then customize labels"
+            },
+            {
+              name: ".github/labels.yaml exists",
               severity: "warn",
-              check: readmesHaveReleaseNotesMarkers,
-              fix: "Add `<!-- section:release-notes -->` and `<!-- /section:release-notes -->` markers to each affected README"
+              skip: () => !fileContains(".config/release-kit.config.ts", /repoLabels/) ? "no repoLabels config" : false,
+              check: () => fileExists(".github/labels.yaml"),
+              fix: "Run `release-kit sync-labels generate` to produce the labels file",
+              checks: [
+                {
+                  name: "labels.yaml has current common preset",
+                  severity: "warn",
+                  check: () => labelsHaveCurrentPresetHash("common", COMMON_PRESET_HASH),
+                  fix: "Run `release-kit sync-labels generate` to incorporate updated common labels"
+                }
+              ]
             }
           ]
         },
+        {
+          name: "config does not use removed releaseNotes.shouldCreateGithubRelease",
+          severity: "error",
+          quiet: true,
+          check: () => fileDoesNotContain(".config/release-kit.config.ts", /shouldCreateGithubRelease/),
+          fix: "Remove 'shouldCreateGithubRelease' from .config/release-kit.config.ts. Adoption of GitHub Releases is now signaled by installing the create-github-release workflow (see release-kit README for setup)."
+        },
         {
           name: "git-cliff not in devDependencies",
           severity: "recommend",
+          quiet: true,
           check: () => !hasDevDependency("git-cliff"),
           fix: "pnpm remove git-cliff \u2014 release-kit handles changelog generation directly"
         },
@@ -206,41 +242,26 @@ var default_default = defineRdyKit({
         {
           name: "sync-labels.yaml does not reference deprecated tag ref",
           severity: "error",
+          quiet: true,
           check: () => fileDoesNotContain(".github/workflows/sync-labels.yaml", /@sync-labels-workflow-v[0-9]/),
           fix: "Update sync-labels.yaml to use @workflow/sync-labels-v1 (run `release-kit sync-labels init --force` to regenerate, or replace the ref manually)"
         },
         {
           name: "retired .config/sync-labels.config.ts is absent",
           severity: "error",
+          quiet: true,
           check: () => !fileExists(".config/sync-labels.config.ts"),
           fix: "Move the labels into the repoLabels block of .config/release-kit.config.ts, then delete .config/sync-labels.config.ts"
-        },
-        {
-          name: "repoLabels block declared in .config/release-kit.config.ts",
-          severity: "recommend",
-          skip: () => !fileExists(".config/release-kit.config.ts") ? "no release-kit config file" : false,
-          check: () => fileContains(".config/release-kit.config.ts", /repoLabels/),
-          fix: "Run `release-kit sync-labels init` to seed a repoLabels block, then customize labels"
-        },
-        {
-          name: ".github/labels.yaml exists",
-          severity: "warn",
-          skip: () => !fileContains(".config/release-kit.config.ts", /repoLabels/) ? "no repoLabels config" : false,
-          check: () => fileExists(".github/labels.yaml"),
-          fix: "Run `release-kit sync-labels generate` to produce the labels file",
-          checks: [
-            {
-              name: "labels.yaml has current common preset",
-              severity: "warn",
-              check: () => labelsHaveCurrentPresetHash("common", COMMON_PRESET_HASH),
-              fix: "Run `release-kit sync-labels generate` to incorporate updated common labels"
-            }
-          ]
         }
       ]
     }
   ]
 });
+function configFileExportsConfig() {
+  const content = readFile(".config/release-kit.config.ts");
+  if (content === void 0) return false;
+  return CONFIG_EXPORT_PATTERNS.some((pattern) => pattern.test(content));
+}
 function labelsHaveCurrentPresetHash(presetName, expectedHash) {
   const content = readFile(".github/labels.yaml");
   if (content === void 0) return false;
@@ -253,7 +274,8 @@ function readmeHasReleaseNotesMarkers(content) {
 }
 function readmesHaveReleaseNotesMarkers() {
   const failing = [];
-  for (const { dir } of discoverWorkspaces({ filter: (w) => w.isPackage })) {
+  const packageWorkspaces = discoverWorkspaces({ filter: (w) => w.isPackage });
+  for (const { dir } of packageWorkspaces) {
     const readmePath = dir === "." ? "README.md" : `${dir}/README.md`;
     const content = readFile(readmePath);
     if (content === void 0 || !readmeHasReleaseNotesMarkers(content)) {
@@ -287,6 +309,7 @@ export {
   RELEASE_WORKFLOW_HASH_MONOREPO,
   RELEASE_WORKFLOW_HASH_SINGLE,
   SYNC_LABELS_WORKFLOW_HASH,
+  configFileExportsConfig,
   default_default as default,
   readmeHasReleaseNotesMarkers,
   readmesHaveReleaseNotesMarkers

package/.readyup/kits/npm-auto-publish.js

@@ -1,17 +1,13 @@
 /** @noformat — @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.23.0";
+export const __readyupVersion = "0.24.0";
 
 
 // .readyup/kits/npm-auto-publish.ts
 import { execSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import path from "node:path";
-import {
-  defineRdyChecklist,
-  defineRdyKit,
-  defineRdyStagedChecklist
-} from "readyup";
+import { defineRdyChecklist, defineRdyKit } from "readyup";
 import {
   discoverWorkspaces,
   fileContains,
@@ -32,32 +28,32 @@ var UNREACHABLE_ERROR_CODES = /* @__PURE__ */ new Set([
   "ERR_SOCKET_TIMEOUT",
   "ETIMEDOUT"
 ]);
-var repoChecklist = defineRdyStagedChecklist({
+var repoChecklist = defineRdyChecklist({
   name: "repo",
-  preconditions: [
+  checks: [
     {
       name: "publish.yaml exists",
+      skip: () => skipIfNothingPublishable(),
       check: () => fileExists(".github/workflows/publish.yaml"),
-      fix: 'Run "release-kit init" to scaffold the publish workflow, or create .github/workflows/publish.yaml manually'
+      fix: 'Run "release-kit init" to scaffold the publish workflow, or create .github/workflows/publish.yaml manually',
+      checks: [
+        {
+          name: "id-token: write permission declared",
+          check: () => fileContains(".github/workflows/publish.yaml", /id-token:\s*write/),
+          fix: 'Add "permissions: { id-token: write, contents: read }" to .github/workflows/publish.yaml \u2014 required for OIDC-based npm authentication'
+        },
+        {
+          name: "No legacy token references in workflow files",
+          quiet: true,
+          check: () => !hasTokenReferences(),
+          fix: "Remove NPM_TOKEN/NODE_AUTH_TOKEN references from workflow files; OIDC auth replaces token-based auth"
+        },
+        {
+          name: "Provenance setting matches repo visibility",
+          check: checkProvenanceMatchesVisibility
+        }
+      ]
     }
-  ],
-  groups: [
-    [
-      {
-        name: "id-token: write permission declared",
-        check: () => fileContains(".github/workflows/publish.yaml", /id-token:\s*write/),
-        fix: 'Add "permissions: { id-token: write, contents: read }" to .github/workflows/publish.yaml \u2014 required for OIDC-based npm authentication'
-      },
-      {
-        name: "No legacy token references in workflow files",
-        check: () => !hasTokenReferences(),
-        fix: "Remove NPM_TOKEN/NODE_AUTH_TOKEN references from workflow files; OIDC auth replaces token-based auth"
-      },
-      {
-        name: "Provenance setting matches repo visibility",
-        check: checkProvenanceMatchesVisibility
-      }
-    ]
   ]
 });
 var packagesChecklist = defineRdyChecklist({
@@ -67,7 +63,7 @@ var packagesChecklist = defineRdyChecklist({
       name: 'packageManager field starts with "pnpm"',
       check: () => {
         const rootPkg = readJsonFile("package.json");
-        const pm = typeof rootPkg?.packageManager === "string" ? rootPkg.packageManager : "";
+        const pm = typeof rootPkg?.["packageManager"] === "string" ? rootPkg["packageManager"] : "";
         return pm.startsWith("pnpm");
       },
       fix: 'Set "packageManager": "pnpm@..." in root package.json'
@@ -76,21 +72,24 @@ var packagesChecklist = defineRdyChecklist({
       name: "At least one workspace discovered",
       check: () => discoverWorkspaces().length > 0,
       fix: "Ensure pnpm-workspace.yaml lists package globs, or that a root package.json exists"
-    },
+    }
+  ],
+  checks: [
     {
       name: "npm session is usable",
+      skip: () => skipIfNothingPublishable(),
       check: () => {
         const auth = getCachedNpmAuthStatus();
         return auth.status === "authenticated" ? { ok: true } : { ok: false, detail: auth.detail };
       },
-      get fix() {
-        return getCachedNpmAuthStatus().status === "unreachable" ? "Restore access to the npm registry, then re-run; the trusted-publisher check queries it directly" : "Log in to npm: npm login";
+      // readyup reads `fix` before it consults `skip`, and again when it validates the kit, so a getter here would
+      // reach the registry on every run regardless of the skip. Per-outcome wording goes in the check's detail.
+      fix: 'Restore a usable npm session: log in with "npm login", or restore access to the registry, which the trusted-publisher check queries directly',
+      get checks() {
+        return discoverWorkspaces().map((workspace) => buildWorkspaceCheck(workspace));
       }
     }
-  ],
-  get checks() {
-    return discoverWorkspaces().map((workspace) => buildWorkspaceCheck(workspace));
-  }
+  ]
 });
 var npm_auto_publish_default = defineRdyKit({
   fixLocation: "inline",
@@ -102,7 +101,7 @@ function buildWorkspaceCheck(workspace) {
   const children = [
     {
       name: "repository field exists",
-      check: () => workspace.packageJson.repository !== void 0 && workspace.packageJson.repository !== null,
+      check: () => workspace.packageJson["repository"] !== void 0 && workspace.packageJson["repository"] !== null,
       fix: `Add a "repository" field to ${pkgJsonPath} pointing to the GitHub repo`
     }
   ];
@@ -134,7 +133,7 @@ function buildWorkspaceCheck(workspace) {
     {
       name: "files field exists",
       severity: "warn",
-      check: () => workspace.packageJson.files !== void 0,
+      check: () => workspace.packageJson["files"] !== void 0,
       fix: `Add a "files" field to ${pkgJsonPath} to control which files are included in the published tarball`
     }
   );
@@ -237,18 +236,14 @@ function describeTrustRelationships(relationships) {
     return `${type} ${repository} (${file})`;
   }).join(", ");
 }
-var cachedNpmAuthStatus;
-function getCachedNpmAuthStatus() {
-  cachedNpmAuthStatus ??= classifyNpmAuth(runNpmJson("npm whoami --json"));
-  return cachedNpmAuthStatus;
-}
-var cachedOwnerRepo;
-function getCachedOwnerRepo() {
-  if (cachedOwnerRepo === void 0) {
-    cachedOwnerRepo = getOwnerRepo();
-  }
-  return cachedOwnerRepo;
-}
+var getCachedNpmAuthStatus = /* @__PURE__ */ (() => {
+  let cached;
+  return () => cached ??= classifyNpmAuth(runNpmJson("npm whoami --json"));
+})();
+var getCachedOwnerRepo = /* @__PURE__ */ (() => {
+  let cached;
+  return () => cached ??= getOwnerRepo();
+})();
 function getOwnerRepo() {
   const url = execSync("git remote get-url origin", {
     encoding: "utf8"
@@ -305,10 +300,10 @@ function readNpmError(stdout) {
   } catch {
     return void 0;
   }
-  if (!isRecord(parsed) || !isRecord(parsed.error) || typeof parsed.error.code !== "string") {
+  if (!isRecord(parsed) || !isRecord(parsed["error"]) || typeof parsed["error"]["code"] !== "string") {
     return void 0;
   }
-  const { code, summary } = parsed.error;
+  const { code, summary } = parsed["error"];
   return { code, summary: typeof summary === "string" ? summary : "" };
 }
 function readTrustRelationships(stdout) {
@@ -330,10 +325,14 @@ function runNpmJson(command) {
   try {
     return { exitOk: true, stdout: execSync(command, { encoding: "utf8", stdio: "pipe" }) };
   } catch (error) {
-    const stdout = isRecord(error) && typeof error.stdout === "string" ? error.stdout : "";
+    const stdout = isRecord(error) && typeof error["stdout"] === "string" ? error["stdout"] : "";
     return { exitOk: false, stdout };
   }
 }
+function skipIfNothingPublishable() {
+  const publishable = discoverWorkspaces({ filter: (workspace) => workspace.isPackage });
+  return publishable.length > 0 ? false : "no publishable packages";
+}
 function skipIfNotPublishable(workspace) {
   return workspace.isPackage ? false : "package.json#private is true";
 }
@@ -343,5 +342,6 @@ export {
   classifyTrustQuery,
   npm_auto_publish_default as default,
   packagesChecklist,
-  skipIfNotPublishable
+  skipIfNotPublishable,
+  skipIfNothingPublishable
 };

package/.readyup/manifest.json

@@ -7,10 +7,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.23.0",
+      "readyupVersion": "0.24.0",
       "source": "kits/default.ts",
-      "sourceHash": "afe26920",
-      "targetHash": "fecaa9b1"
+      "sourceHash": "fe239d01",
+      "targetHash": "9bd8fb5d"
     },
     {
       "checklists": [
@@ -19,10 +19,10 @@
       ],
       "name": "npm-auto-publish",
       "path": "kits/npm-auto-publish.js",
-      "readyupVersion": "0.23.0",
+      "readyupVersion": "0.24.0",
       "source": "kits/npm-auto-publish.ts",
-      "sourceHash": "5b58afac",
-      "targetHash": "610ed8a7"
+      "sourceHash": "ac484613",
+      "targetHash": "f790e7d5"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to this project will be documented in this file.
 
+## 10.3.0 — 2026-08-08
+
+### 🎉 Features
+
+- Stop reporting absence checks that pass (#610)
+
+  A ReadyUp check that checks for a problem (such as an unwanted file or a stale config reference) now stays silent unless it finds one. The `nmr`, `release-kit`, and `v11y-check` ReadyUp kits previously printed a line for every such check on every run.
+
+- Stop reporting non-issues in the readyup kits (#613)
+
+  Modifies the `release-kit` and `nmr` ReadyUp kits to avoid verbose reporting when an initial check determines that further checks aren't applicable. In particular, a repo with no `release-kit` config file gets a single line in the `release-kit` report, and a repo that publishes nothing now bypasses the `npm-auto-publish` kit instead of failing it.
+
+### 🐛 Bug fixes
+
+- Publish build output atomically so a failed build cannot destroy it (#631)
+
+  Fixes an issue where a failed or still-running `nmr build` could leave a package with no build output at all, breaking the tooling that a subsequent build depends on. Separately, the error reported when a package's build output is missing now names the correct recovery command.
+
+### ♻️ Refactoring
+
+- Retire the deferred-lint-rule list and enforce its rules (#628)
+
+  Errors that `release-kit` rethrows now carry the original error as their cause, previously available only as message text. Help text and documentation for `--with-release-notes` now use the same placeholder notation for its output paths.
+
+  All violations of lint rules in the `release-kit` project are now cleared, and the list of deferred lint rules is retired, restoring associated rules to a max severity of "error" during strict linting.
+
+### ⚙️ Tooling
+
+- Migrate to the shared tsconfig baseline (#626)
+
+  Adopts `@williamthorsen/tsconfig` as the standard TypeScript configuration for this repo, replacing the previous hand-maintained copy. Reading a property through an index signature now requires bracket notation or a type that declares the property. The `nmr` build now fails on a base TypeScript config it cannot resolve, rather than building without it, and it now resolves a base config named by package name alone.
+
 ## 10.2.2 — 2026-08-05
 
 ### 🐛 Bug fixes

package/README.md

@@ -5,21 +5,23 @@ Version-bumping and changelog-generation toolkit for release workflows.
 Provides a self-contained CLI that auto-discovers workspaces from `pnpm-workspace.yaml`, parses conventional commits, determines version bumps, updates `package.json` files, and generates changelogs from `git-cliff --context` output rendered in-process (with optional [editorial overrides](#editorial-overrides)).
 
 <!-- section:release-notes -->
-## Release notes — v10.2.2 (2026-08-05)
+## Release notes — v10.3.0 (2026-08-08)
 
-### 🐛 Bug fixes
+### 🎉 Features
+
+- Stop reporting absence checks that pass (#610)
+
+  A ReadyUp check that checks for a problem (such as an unwanted file or a stale config reference) now stays silent unless it finds one. The `nmr`, `release-kit`, and `v11y-check` ReadyUp kits previously printed a line for every such check on every run.
 
-- Report the missing npm login once, not per package (#598)
+- Stop reporting non-issues in the readyup kits (#613)
 
-  Fixes an issue where running release-kit's publish-readiness checks without an npm login reported a trusted-publisher failure for every published package. The missing login is now reported once, with `npm login` as the fix. An unreachable registry now has its own check. The trusted publisher check produces more informative failure messages.
+  Modifies the `release-kit` and `nmr` ReadyUp kits to avoid verbose reporting when an initial check determines that further checks aren't applicable. In particular, a repo with no `release-kit` config file gets a single line in the `release-kit` report, and a repo that publishes nothing now bypasses the `npm-auto-publish` kit instead of failing it.
+
+### 🐛 Bug fixes
 
-- Make prepare all-or-nothing and report the tags file by path (#601)
+- Publish build output atomically so a failed build cannot destroy it (#631)
 
-  Fixes an issue where a failed `prepare` could leave the release flow in a broken intermediate state. A release now lands completely or not at all, and a formatting failure no longer discards one that already landed. When a write fails partway, the error names every file that reached disk, every file that did not, and the commands that undo them.
-  
-  `commit` and `tag` now report the full path of the tags file they looked for, and distinguish a missing file from one that could not be read, so that running from the wrong directory or worktree is no longer reported as a release that never happened.
-  
-  Runs with `--with-release-notes` now list the preview files they write, and `--dry-run` names the ones a real run would write.
+  Fixes an issue where a failed or still-running `nmr build` could leave a package with no build output at all, breaking the tooling that a subsequent build depends on. Separately, the error reported when a package's build output is missing now names the correct recovery command.
 <!-- /section:release-notes -->
 
 ## Installation
@@ -573,7 +575,7 @@ Run release preparation with automatic workspace discovery.
 | `--set-version=X.Y.Z`        | Set an explicit canonical semver version; bypasses commit-derived bumps. Requires `--only` in monorepo mode (rejected when a `project` block is configured).                                                                                                            |
 | `--force`                    | Release even when no commits or no bump-worthy commits exist since the last tag. In monorepo/project mode, defaults to patch (combine with `--bump=X` for a different level); in single-package mode, a bare `--force` is rejected — pass `--bump=major\|minor\|patch`. |
 | `--only=name1,name2`         | Only process the named workspaces (monorepo only; rejected when a `project` block is configured)                                                                                                                                                                        |
-| `--with-release-notes`       | Write per-workspace release-notes previews under `{workspacePath}/docs/`                                                                                                                                                                                                |
+| `--with-release-notes`       | Write per-workspace release-notes previews under `<workspacePath>/docs/`                                                                                                                                                                                                |
 | `--help`, `-h`               | Show help                                                                                                                                                                                                                                                               |
 
 Workspace names for `--only` match the package directory name (e.g., `arrays`, `release-kit`).
@@ -582,8 +584,8 @@ Workspace names for `--only` match the package directory name (e.g., `arrays`, `
 
 `--with-release-notes` writes two versioned files per workspace after each workspace's `changelog.json` is produced:
 
-- `{workspacePath}/docs/README.v{version}.md` — the workspace `README.md` with release notes injected at the `<!-- section:release-notes -->` marker.
-- `{workspacePath}/docs/RELEASE_NOTES.v{version}.md` — the standalone release notes for this version.
+- `<workspacePath>/docs/README.v<version>.md` — the workspace `README.md` with release notes injected at the `<!-- section:release-notes -->` marker.
+- `<workspacePath>/docs/RELEASE_NOTES.v<version>.md` — the standalone release notes for this version.
 
 The publish-time inject-and-revert lifecycle is unchanged; previews are additive, deterministic, and safe to regenerate. When `changelogJson.enabled` is `false`, the flag logs a warning and skips preview generation. In dry-run mode, planned writes are logged and no files are created.
 

package/bin/release-kit.js

@@ -3,7 +3,7 @@ try {
   await import('../dist/esm/bin/release-kit.js');
 } catch (error) {
   if (error.code === 'ERR_MODULE_NOT_FOUND') {
-    process.stderr.write('release-kit: build output not found — run `pnpm run build` first\n');
+    process.stderr.write('release-kit: build output not found — run `nmr build` first\n');
   } else {
     process.stderr.write(`release-kit: failed to load: ${error.message}\n`);
   }

package/dist/esm/bin/release-kit.js

@@ -263,7 +263,7 @@ if (command === '--version' || command === '-V') {
     console.info(VERSION);
     process.exit(0);
 }
-if (command === '--help' || command === '-h' || command === undefined) {
+if (command === undefined || ['--help', '-h'].includes(command)) {
     showUsage();
     process.exit(0);
 }
@@ -350,7 +350,7 @@ if (command === 'init') {
 if (command === 'sync-labels') {
     const subcommand = flags[0];
     const subflags = flags.slice(1);
-    if (subcommand === '--help' || subcommand === '-h' || subcommand === undefined) {
+    if (subcommand === undefined || ['--help', '-h'].includes(subcommand)) {
         showSyncLabelsHelp();
         process.exit(0);
     }
@@ -398,7 +398,7 @@ if (command === 'sync-labels') {
 if (command === 'overrides') {
     const subcommand = flags[0];
     const subflags = flags.slice(1);
-    if (subcommand === '--help' || subcommand === '-h' || subcommand === undefined) {
+    if (subcommand === undefined || ['--help', '-h'].includes(subcommand)) {
         showOverridesHelp();
         process.exit(0);
     }
@@ -427,7 +427,7 @@ if (command === 'overrides') {
 if (command === 'work-types') {
     const subcommand = flags[0];
     const subflags = flags.slice(1);
-    if (subcommand === '--help' || subcommand === '-h' || subcommand === undefined) {
+    if (subcommand === undefined || ['--help', '-h'].includes(subcommand)) {
         showWorkTypesHelp();
         process.exit(0);
     }

package/dist/esm/buildChangelogEntries.js

@@ -20,7 +20,8 @@ export function buildChangelogEntries(config, tag, options) {
     if (options?.tagPattern !== undefined) {
         cliffArgs.push('--tag-pattern', options.tagPattern);
     }
-    for (const includePath of options?.includePaths ?? []) {
+    const includePaths = options?.includePaths ?? [];
+    for (const includePath of includePaths) {
         cliffArgs.push('--include-path', includePath);
     }
     try {
@@ -30,7 +31,7 @@ export function buildChangelogEntries(config, tag, options) {
         return transformReleases(releases, devOnlySections);
     }
     catch (error) {
-        throw new Error(`Failed to build changelog entries for tag ${tag}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to build changelog entries for tag ${tag}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
 }
 function parseCliffContext(json) {
@@ -45,14 +46,14 @@ function toCliffContextRelease(value) {
         return {};
     }
     const release = {};
-    if (typeof value.version === 'string') {
-        release.version = value.version;
+    if (typeof value['version'] === 'string') {
+        release.version = value['version'];
     }
-    if (typeof value.timestamp === 'number') {
-        release.timestamp = value.timestamp;
+    if (typeof value['timestamp'] === 'number') {
+        release.timestamp = value['timestamp'];
     }
-    if (isUnknownArray(value.commits)) {
-        release.commits = value.commits.map(toCliffContextCommit);
+    if (isUnknownArray(value['commits'])) {
+        release.commits = value['commits'].map(toCliffContextCommit);
     }
     return release;
 }
@@ -61,13 +62,13 @@ function toCliffContextCommit(value) {
         return { message: '' };
     }
     const commit = {
-        message: typeof value.message === 'string' ? value.message : '',
+        message: typeof value['message'] === 'string' ? value['message'] : '',
     };
-    if (typeof value.group === 'string') {
-        commit.group = value.group;
+    if (typeof value['group'] === 'string') {
+        commit.group = value['group'];
     }
-    if (typeof value.id === 'string') {
-        commit.id = value.id;
+    if (typeof value['id'] === 'string') {
+        commit.id = value['id'];
     }
     return commit;
 }
@@ -81,7 +82,8 @@ function transformReleases(releases, devOnlySections) {
         const version = extractVersion(release.version);
         const date = release.timestamp !== undefined ? new Date(release.timestamp * 1_000).toISOString().slice(0, 10) : 'unreleased';
         const sectionMap = new Map();
-        for (const commit of release.commits ?? []) {
+        const commits = release.commits ?? [];
+        for (const commit of commits) {
             const group = stripCommentPrefix(commit.group ?? 'Other');
             const description = extractDescription(commit.message);
             const body = extractBody(commit.message);

package/dist/esm/buildDependencyGraph.js

@@ -51,14 +51,18 @@ function readPackageJsonSubset(filePath) {
         content = readFileSync(filePath, 'utf8');
     }
     catch (error) {
-        throw new Error(`Failed to read ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to read ${filePath}: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
     }
     let parsed;
     try {
         parsed = JSON.parse(content);
     }
     catch (error) {
-        throw new Error(`Failed to parse JSON in ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to parse JSON in ${filePath}: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
     }
     if (!isPackageJsonSubset(parsed)) {
         throw new Error(`Invalid package.json at ${filePath}`);

package/dist/esm/changelogJsonUtils.js

@@ -3,21 +3,21 @@ import { isRecord, isUnknownArray } from "./typeGuards.js";
 export function isChangelogItem(value) {
     if (!isRecord(value))
         return false;
-    if (typeof value.description !== 'string')
+    if (typeof value['description'] !== 'string')
         return false;
-    if (value.body !== undefined && typeof value.body !== 'string')
+    if (value['body'] !== undefined && typeof value['body'] !== 'string')
         return false;
-    if (value.breaking !== undefined && typeof value.breaking !== 'boolean')
+    if (value['breaking'] !== undefined && typeof value['breaking'] !== 'boolean')
         return false;
-    if (value.hash !== undefined && typeof value.hash !== 'string')
+    if (value['hash'] !== undefined && typeof value['hash'] !== 'string')
         return false;
     return true;
 }
 export function isChangelogEntry(value) {
     return (isRecord(value) &&
-        typeof value.version === 'string' &&
-        typeof value.date === 'string' &&
-        isUnknownArray(value.sections));
+        typeof value['version'] === 'string' &&
+        typeof value['date'] === 'string' &&
+        isUnknownArray(value['sections']));
 }
 export function extractVersion(tag) {
     const match = /(\d+\.\d+\.\d+.*)$/.exec(tag);

package/dist/esm/changelogOverrides.js

@@ -66,8 +66,8 @@ function validateSingleOverride(key, rawEntry, errors) {
         entryValid = false;
     }
     const result = {};
-    if (rawEntry.audience !== undefined) {
-        const audienceResult = validateAudience(key, rawEntry.audience, errors);
+    if (rawEntry['audience'] !== undefined) {
+        const audienceResult = validateAudience(key, rawEntry['audience'], errors);
         if (audienceResult === undefined) {
             entryValid = false;
         }
@@ -75,31 +75,31 @@ function validateSingleOverride(key, rawEntry, errors) {
             result.audience = audienceResult;
         }
     }
-    if (rawEntry.description !== undefined) {
-        if (typeof rawEntry.description !== 'string') {
+    if (rawEntry['description'] !== undefined) {
+        if (typeof rawEntry['description'] !== 'string') {
             errors.push(`overrides['${key}']: 'description' must be a string`);
             entryValid = false;
         }
         else {
-            result.description = rawEntry.description;
+            result.description = rawEntry['description'];
         }
     }
-    if (rawEntry.body !== undefined) {
-        if (typeof rawEntry.body !== 'string') {
+    if (rawEntry['body'] !== undefined) {
+        if (typeof rawEntry['body'] !== 'string') {
             errors.push(`overrides['${key}']: 'body' must be a string`);
             entryValid = false;
         }
         else {
-            result.body = rawEntry.body;
+            result.body = rawEntry['body'];
         }
     }
-    if (rawEntry.breaking !== undefined) {
-        if (typeof rawEntry.breaking !== 'boolean') {
+    if (rawEntry['breaking'] !== undefined) {
+        if (typeof rawEntry['breaking'] !== 'boolean') {
             errors.push(`overrides['${key}']: 'breaking' must be a boolean`);
             entryValid = false;
         }
         else {
-            result.breaking = rawEntry.breaking;
+            result.breaking = rawEntry['breaking'];
         }
     }
     if (Object.keys(result).length === 0 && entryValid) {
@@ -236,7 +236,8 @@ export function loadOverridesForScopes(scopes) {
             project = result.overrides;
         }
     }
-    for (const workspacePath of scopes.workspaces ?? []) {
+    const workspacePaths = scopes.workspaces ?? [];
+    for (const workspacePath of workspacePaths) {
         const result = loadChangelogOverrides(resolveOverridePath(workspacePath));
         if ('errors' in result) {
             errors.push(...result.errors);

package/dist/esm/checkWorkTypesDrift.js

@@ -80,7 +80,7 @@ function stripLocalOnlyFields(value) {
         return value;
     }
     const record = { ...value };
-    delete record.$schema;
+    delete record['$schema'];
     return record;
 }
 function deepEqual(a, b) {

package/dist/esm/createTags.js

@@ -51,6 +51,6 @@ function assertCleanWorkingTree() {
         if (error instanceof Error && 'code' in error && error.code === 'ENOENT') {
             throw error;
         }
-        throw new Error('Working tree is dirty. Commit or stash changes before tagging, or use `--no-git-checks` to skip this check.');
+        throw new Error('Working tree is dirty. Commit or stash changes before tagging, or use `--no-git-checks` to skip this check.', { cause: error });
     }
 }

package/dist/esm/deriveWorkspaceConfig.js

@@ -10,14 +10,14 @@ export function deriveWorkspaceConfig(workspacePath) {
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        throw new Error(`Failed to read ${packageJsonPath}: ${message}`);
+        throw new Error(`Failed to read ${packageJsonPath}: ${message}`, { cause: error });
     }
-    const name = isRecord(parsed) ? parsed.name : undefined;
+    const name = isRecord(parsed) ? parsed['name'] : undefined;
     if (typeof name !== 'string' || name.length === 0) {
         throw new Error(`${packageJsonPath} is missing a 'name' field (required for tag derivation).`);
     }
     const unscopedName = stripNpmScope(name);
-    const privateField = isRecord(parsed) ? parsed.private : undefined;
+    const privateField = isRecord(parsed) ? parsed['private'] : undefined;
     const isPublishable = privateField === undefined || privateField === false;
     return {
         dir,

package/dist/esm/detectPackageManager.js

@@ -6,8 +6,8 @@ export function detectPackageManager() {
     try {
         const content = readFileSync(packageJsonPath, 'utf8');
         const parsed = JSON.parse(content);
-        if (isRecord(parsed) && typeof parsed.packageManager === 'string') {
-            const [name, version] = parsed.packageManager.split('@', 2);
+        if (isRecord(parsed) && typeof parsed['packageManager'] === 'string') {
+            const [name, version] = parsed['packageManager'].split('@', 2);
             if (name === 'pnpm' || name === 'npm') {
                 return name;
             }

package/dist/esm/detectUndeclaredTagPrefixes.js

@@ -23,7 +23,7 @@ export function detectUndeclaredTagPrefixes(knownPrefixes) {
         const match = CANDIDATE_TAG_PATTERN.exec(tag);
         if (match === null)
             continue;
-        const prefix = match.groups?.prefix ?? '';
+        const prefix = match.groups?.['prefix'] ?? '';
         if (prefix === '' || known.has(prefix))
             continue;
         let tags = grouped.get(prefix);

package/dist/esm/discoverWorkspaces.js

@@ -20,7 +20,7 @@ export async function discoverWorkspaces() {
     if (!isRecord(parsed)) {
         return undefined;
     }
-    const packagesField = parsed.packages;
+    const packagesField = parsed['packages'];
     if (!Array.isArray(packagesField)) {
         return undefined;
     }

package/dist/esm/getCommitsSinceTarget.js

@@ -24,7 +24,7 @@ function findLatestTag(tagPrefixes) {
         if (isNoTagError(error)) {
             return undefined;
         }
-        throw new Error(`Failed to run 'git describe': ${errorMessage(error)}`);
+        throw new Error(`Failed to run 'git describe': ${errorMessage(error)}`, { cause: error });
     }
 }
 const RELEASE_COMMIT_PREFIX = 'release:';
@@ -59,7 +59,7 @@ export function getCommitsSinceTarget(tagPrefixes, paths) {
         }).trim();
     }
     catch (error) {
-        throw new Error(`Failed to run 'git log' for range '${range}': ${errorMessage(error)}`);
+        throw new Error(`Failed to run 'git log' for range '${range}': ${errorMessage(error)}`, { cause: error });
     }
     if (logOutput === '') {
         return { tag, commits: [] };

package/dist/esm/help/prepareHelp.d.ts

@@ -1,2 +1,2 @@
-export declare const prepareHelpText = "\nUsage: release-kit prepare [options]\n\nRun release preparation with automatic workspace discovery.\n\nOptions:\n  --dry-run             Run without modifying any files\n  --bump=major|minor|patch  Override the bump type for all workspaces\n  --set-version=X.Y.Z   Set an explicit version; bypasses commit-derived bumps.\n                         Requires --only in monorepo mode (rejected when a 'project' block is configured).\n  --force               Release even when no commits or no bump-worthy commits exist\n                         since the last tag. In monorepo and project mode, defaults to\n                         patch when --bump is not given; use --bump=X for a different\n                         level. In single-package mode, a bare --force is rejected \u2014\n                         pass --bump=major|minor|patch.\n  --no-git-checks, -n   Skip the clean-working-tree check\n  --only=name1,name2    Only process the named workspaces (comma-separated, monorepo only;\n                         rejected when a 'project' block is configured)\n  --with-release-notes  Also write per-workspace release-notes previews under {workspacePath}/docs/\n                         (docs/README.v{version}.md and docs/RELEASE_NOTES.v{version}.md).\n                         Recommended .gitignore entry: packages/*/docs/*.v*.md (or docs/*.v*.md).\n  --help, -h            Show this help message\n";
+export declare const prepareHelpText = "\nUsage: release-kit prepare [options]\n\nRun release preparation with automatic workspace discovery.\n\nOptions:\n  --dry-run             Run without modifying any files\n  --bump=major|minor|patch  Override the bump type for all workspaces\n  --set-version=X.Y.Z   Set an explicit version; bypasses commit-derived bumps.\n                         Requires --only in monorepo mode (rejected when a 'project' block is configured).\n  --force               Release even when no commits or no bump-worthy commits exist\n                         since the last tag. In monorepo and project mode, defaults to\n                         patch when --bump is not given; use --bump=X for a different\n                         level. In single-package mode, a bare --force is rejected \u2014\n                         pass --bump=major|minor|patch.\n  --no-git-checks, -n   Skip the clean-working-tree check\n  --only=name1,name2    Only process the named workspaces (comma-separated, monorepo only;\n                         rejected when a 'project' block is configured)\n  --with-release-notes  Also write per-workspace release-notes previews under <workspacePath>/docs/\n                         (docs/README.v<version>.md and docs/RELEASE_NOTES.v<version>.md).\n                         Recommended .gitignore entry: packages/*/docs/*.v*.md (or docs/*.v*.md).\n  --help, -h            Show this help message\n";
 export declare function showPrepareHelp(): void;

package/dist/esm/help/prepareHelp.js

@@ -16,8 +16,8 @@ Options:
   --no-git-checks, -n   Skip the clean-working-tree check
   --only=name1,name2    Only process the named workspaces (comma-separated, monorepo only;
                          rejected when a 'project' block is configured)
-  --with-release-notes  Also write per-workspace release-notes previews under {workspacePath}/docs/
-                         (docs/README.v{version}.md and docs/RELEASE_NOTES.v{version}.md).
+  --with-release-notes  Also write per-workspace release-notes previews under <workspacePath>/docs/
+                         (docs/README.v<version>.md and docs/RELEASE_NOTES.v<version>.md).
                          Recommended .gitignore entry: packages/*/docs/*.v*.md (or docs/*.v*.md).
   --help, -h            Show this help message
 `;

package/dist/esm/init/checks.js

@@ -23,7 +23,7 @@ export function usesPnpm() {
     }
     const raw = readFileSync('package.json', 'utf8');
     const pkg = parseJsonRecord(raw);
-    if (pkg !== undefined && typeof pkg.packageManager === 'string' && pkg.packageManager.startsWith('pnpm')) {
+    if (pkg !== undefined && typeof pkg['packageManager'] === 'string' && pkg['packageManager'].startsWith('pnpm')) {
         return { ok: true };
     }
     return {

package/dist/esm/init/detectRepoType.js

@@ -7,7 +7,7 @@ export function detectRepoType() {
     if (existsSync('package.json')) {
         const raw = readFileSync('package.json', 'utf8');
         const pkg = parseJsonRecord(raw);
-        if (pkg !== undefined && Array.isArray(pkg.workspaces)) {
+        if (pkg !== undefined && Array.isArray(pkg['workspaces'])) {
             return 'monorepo';
         }
     }

package/dist/esm/loadConfig.js

@@ -23,19 +23,19 @@ export function readRootPackageVersion() {
         contents = readFileSync(absolutePath, 'utf8');
     }
     catch (error) {
-        throw new Error(`Failed to read root ${ROOT_PACKAGE_JSON_PATH}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to read root ${ROOT_PACKAGE_JSON_PATH}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
     let parsed;
     try {
         parsed = JSON.parse(contents);
     }
     catch (error) {
-        throw new Error(`Failed to parse root ${ROOT_PACKAGE_JSON_PATH}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to parse root ${ROOT_PACKAGE_JSON_PATH}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
     if (!isRecord(parsed)) {
         return { exists: true, version: undefined };
     }
-    return { exists: true, version: typeof parsed.version === 'string' ? parsed.version : undefined };
+    return { exists: true, version: typeof parsed['version'] === 'string' ? parsed['version'] : undefined };
 }
 export const CONFIG_FILE_PATH = '.config/release-kit.config.ts';
 export async function loadConfig() {
@@ -44,7 +44,7 @@ export async function loadConfig() {
         return undefined;
     }
     const imported = await import(__rewriteRelativeImportExtension(pathToFileURL(absoluteConfigPath).href));
-    const resolved = isRecord(imported) ? (imported.default ?? imported.config) : undefined;
+    const resolved = isRecord(imported) ? (imported['default'] ?? imported['config']) : undefined;
     if (resolved === undefined) {
         throw new Error('Config file must have a default export or a named `config` export (e.g., `export default { ... }` or `export const config = { ... }`)');
     }
@@ -177,7 +177,8 @@ function assertNoTagPrefixCollisions(workspaces, retiredPackages, project) {
     for (const workspace of workspaces) {
         const owner = `ws:${workspace.dir}`;
         sources.push({ prefix: workspace.tagPrefix, label: `workspace '${workspace.dir}'`, owner });
-        for (const identity of workspace.legacyIdentities ?? []) {
+        const legacyIdentities = workspace.legacyIdentities ?? [];
+        for (const identity of legacyIdentities) {
             sources.push({
                 prefix: identity.tagPrefix,
                 label: `workspace '${workspace.dir}' legacyIdentities entry (name='${identity.name}')`,
@@ -185,7 +186,8 @@ function assertNoTagPrefixCollisions(workspaces, retiredPackages, project) {
             });
         }
     }
-    for (const [index, retired] of (retiredPackages ?? []).entries()) {
+    const retiredEntries = (retiredPackages ?? []).entries();
+    for (const [index, retired] of retiredEntries) {
         sources.push({
             prefix: retired.tagPrefix,
             label: `retiredPackages entry (name='${retired.name}')`,

package/dist/esm/planVersionBump.js

@@ -34,14 +34,18 @@ function readPackageJson(filePath) {
         content = readFileSync(filePath, 'utf8');
     }
     catch (error) {
-        throw new Error(`Failed to read ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to read ${filePath}: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
     }
     let parsed;
     try {
         parsed = JSON.parse(content);
     }
     catch (error) {
-        throw new Error(`Failed to parse JSON in ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to parse JSON in ${filePath}: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
     }
     if (!isPackageJson(parsed)) {
         throw new Error(`No valid 'version' field found in ${filePath}`);

package/dist/esm/propagateBumps.js

@@ -4,7 +4,7 @@ export function propagateBumps(directBumps, graph, currentVersions) {
     for (const [dir, entry] of directBumps) {
         result.set(dir, { ...entry });
     }
-    const queue = [...directBumps.keys()];
+    const queue = directBumps.keys().toArray();
     const visited = new Set();
     while (queue.length > 0) {
         const dir = queue.shift();

package/dist/esm/releasePrepareMono.js

@@ -472,7 +472,8 @@ function topologicalSort(releaseSet, graph) {
             break;
         }
         sorted.push(dir);
-        for (const dependent of forwardEdges.get(dir) ?? []) {
+        const dependents = forwardEdges.get(dir) ?? [];
+        for (const dependent of dependents) {
             const newDegree = (inDegree.get(dependent) ?? 1) - 1;
             inDegree.set(dependent, newDegree);
             if (newDegree === 0) {

package/dist/esm/reportPrepare.js

@@ -202,7 +202,8 @@ function formatChangelogFiles(lines, workspace, dryRun, indent = '') {
     }
 }
 function formatPreviewFiles(lines, release, dryRun, indent = '') {
-    for (const file of release.previewFiles ?? []) {
+    const previewFiles = release.previewFiles ?? [];
+    for (const file of previewFiles) {
         if (dryRun) {
             lines.push(dim(`${indent}  [dry-run] Would write ${file}`));
         }

package/dist/esm/sync-labels/generateCommand.js

@@ -10,7 +10,8 @@ import { checkRetiredSyncLabelsConfig } from "./retiredConfig.js";
 export const LABELS_OUTPUT_PATH = '.github/labels.yaml';
 export function formatLabelsYaml(labels, presetHashes) {
     const headerLines = ['# Generated by release-kit sync-labels — do not edit.', `# Source: ${CONFIG_FILE_PATH}`];
-    for (const [name, hash] of [...presetHashes].sort(([a], [b]) => a.localeCompare(b))) {
+    const sortedPresetHashes = [...presetHashes].sort(([a], [b]) => a.localeCompare(b));
+    for (const [name, hash] of sortedPresetHashes) {
         headerLines.push(`# ${name} preset hash: ${hash}`);
     }
     const declared = labels.map((label) => ({ ...label, description: label.description ?? '' }));
@@ -50,7 +51,8 @@ export async function generateCommand({ check = false } = {}) {
         return 1;
     }
     const presetHashes = new Map();
-    for (const presetName of repoLabels.extends ?? []) {
+    const presetNames = repoLabels.extends ?? [];
+    for (const presetName of presetNames) {
         presetHashes.set(presetName, hashPresetFile(presetName));
     }
     const content = formatLabelsYaml(labels, presetHashes);

package/dist/esm/sync-labels/presets.js

@@ -23,7 +23,7 @@ export function loadPreset(presetName) {
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        throw new Error(`Failed to read preset "${presetName}": ${message}`);
+        throw new Error(`Failed to read preset "${presetName}": ${message}`, { cause: error });
     }
     const parsed = parse(content);
     if (!Array.isArray(parsed)) {
@@ -34,13 +34,13 @@ export function loadPreset(presetName) {
         if (!isRecord(entry)) {
             throw new Error(`Preset "${presetName}" contains an invalid label entry: ${JSON.stringify(entry)}`);
         }
-        const { description } = entry;
-        if (typeof entry.name !== 'string' ||
-            typeof entry.color !== 'string' ||
+        const { color, description, name } = entry;
+        if (typeof name !== 'string' ||
+            typeof color !== 'string' ||
             (description !== undefined && typeof description !== 'string')) {
             throw new TypeError(`Preset "${presetName}" contains a label with invalid fields: ${JSON.stringify(entry)}`);
         }
-        labels.push({ name: entry.name, color: entry.color, ...(description !== undefined && { description }) });
+        labels.push({ name, color, ...(description !== undefined && { description }) });
     }
     return labels;
 }

package/dist/esm/sync-labels/resolveLabels.js

@@ -1,12 +1,14 @@
 import { loadPreset } from "./presets.js";
 export function resolveLabels(config) {
     const resolved = new Map();
-    for (const presetName of config.extends ?? []) {
+    const presetNames = config.extends ?? [];
+    for (const presetName of presetNames) {
         for (const label of loadPreset(presetName)) {
             resolved.set(label.name, label);
         }
     }
-    for (const [name, spec] of Object.entries(config.labels ?? {})) {
+    const labelEntries = Object.entries(config.labels ?? {});
+    for (const [name, spec] of labelEntries) {
         if (spec === null) {
             if (!resolved.has(name)) {
                 throw new Error(`Label '${name}' is set to null (remove), but no preset in 'extends' defines it. Fix the name or delete the entry.`);
@@ -21,7 +23,7 @@ export function resolveLabels(config) {
             });
         }
     }
-    return sortLabels([...resolved.values()]);
+    return sortLabels(resolved.values().toArray());
 }
 function sortLabels(labels) {
     return [...labels].sort((a, b) => a.name.localeCompare(b.name));

package/dist/esm/syncWorkTypes.js

@@ -20,7 +20,7 @@ function extractLocalSchemaUrl(content) {
     if (!isRecord(parsed)) {
         return undefined;
     }
-    const schema = parsed.$schema;
+    const schema = parsed['$schema'];
     return typeof schema === 'string' ? schema : undefined;
 }
 export async function syncWorkTypes(dependencies = {}) {

package/dist/esm/validateConfig.js

@@ -30,25 +30,25 @@ function preprocessDeprecatedKeys(raw) {
         return { cleaned: raw, deprecationErrors: [] };
     const errors = [];
     const cleaned = { ...raw };
-    if (isRecord(cleaned.releaseNotes) && 'shouldCreateGithubRelease' in cleaned.releaseNotes) {
+    if (isRecord(cleaned['releaseNotes']) && Object.hasOwn(cleaned['releaseNotes'], 'shouldCreateGithubRelease')) {
         errors.push('releaseNotes.shouldCreateGithubRelease is no longer supported. Adoption is now signaled by installing the create-github-release workflow. Remove this field from your config; see README for the updated workflow.');
-        const releaseNotesCopy = { ...cleaned.releaseNotes };
-        delete releaseNotesCopy.shouldCreateGithubRelease;
-        cleaned.releaseNotes = releaseNotesCopy;
+        const releaseNotesCopy = { ...cleaned['releaseNotes'] };
+        delete releaseNotesCopy['shouldCreateGithubRelease'];
+        cleaned['releaseNotes'] = releaseNotesCopy;
     }
-    if (Array.isArray(cleaned.workspaces)) {
-        cleaned.workspaces = cleaned.workspaces.map((ws, i) => {
+    if (Array.isArray(cleaned['workspaces'])) {
+        cleaned['workspaces'] = cleaned['workspaces'].map((ws, i) => {
             if (!isRecord(ws))
                 return ws;
             const wsCopy = { ...ws };
-            if ('tagPrefix' in wsCopy) {
-                const dir = typeof wsCopy.dir === 'string' && wsCopy.dir !== '' ? wsCopy.dir : '<dir>';
+            if (Object.hasOwn(wsCopy, 'tagPrefix')) {
+                const dir = typeof wsCopy['dir'] === 'string' && wsCopy['dir'] !== '' ? wsCopy['dir'] : '<dir>';
                 errors.push(`workspaces[${i}]: 'tagPrefix' is no longer supported; remove it to use the default '${dir}-v'`);
-                delete wsCopy.tagPrefix;
+                delete wsCopy['tagPrefix'];
             }
-            if ('legacyTagPrefixes' in wsCopy) {
+            if (Object.hasOwn(wsCopy, 'legacyTagPrefixes')) {
                 errors.push(`workspaces[${i}]: 'legacyTagPrefixes' is no longer supported; use 'legacyIdentities: [{ name, tagPrefix }, ...]' instead`);
-                delete wsCopy.legacyTagPrefixes;
+                delete wsCopy['legacyTagPrefixes'];
             }
             return wsCopy;
         });

package/dist/esm/workTypesUtils.js

@@ -11,7 +11,7 @@ export function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
 export function buildFetchInit() {
-    const token = process.env.GITHUB_TOKEN;
+    const token = process.env['GITHUB_TOKEN'];
     if (token === undefined || token === '') {
         return undefined;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/release-kit",
-  "version": "10.2.2",
+  "version": "10.3.0",
   "description": "Version-bumping and changelog-generation toolkit for release workflows",
   "keywords": [],
   "homepage": "https://github.com/williamthorsen/node-monorepo-tools/tree/main/packages/release-kit#readme",
@@ -44,11 +44,11 @@
     "semver": "7.8.5",
     "yaml": "2.9.0",
     "zod": "4.4.3",
-    "@williamthorsen/nmr-core": "0.9.2"
+    "@williamthorsen/nmr-core": "0.9.3"
   },
   "devDependencies": {
     "@types/semver": "7.7.1",
-    "readyup": "0.23.0",
+    "readyup": "0.24.0",
     "smol-toml": "1.7.1"
   },
   "engines": {