@williamthorsen/release-kit 15.0.2 → 15.0.3

package/.meta/changelog.json

@@ -1,4 +1,26 @@
 [
+  {
+    "version": "15.0.3",
+    "date": "2026-10-27",
+    "sections": [
+      {
+        "title": "♻️ Refactoring",
+        "audience": "dev",
+        "items": [
+          {
+            "description": "Replaces the `syncLabelsWorkflow` function in `release-kit` with the verbatim file `templates/sync-labels.yaml.template`, which `sync-labels init` and `update-templates` now read from the package root and which the package's `files` list now includes. (#1114)",
+            "hash": "89c775ea0a5d603f33b1edd036055dc0fc7bb109",
+            "entry": 1
+          },
+          {
+            "description": "Apply the naming conventions to nmr-core's identifiers (#1125)",
+            "body": "Renames the identifiers in nmr-core to follow the naming conventions, including the exported option keys of `updateManagedFile` and `writeFileWithCheck`, which change from `dryRun` and `overwrite` to `isDryRun` and `shouldOverwrite`, and the constant `GIT_OUTPUT_LIMIT`, which becomes `GIT_OUTPUT_LIMIT_BYTES`. Updates the call sites in nmr, release-kit, and v11y-check to the new names.",
+            "hash": "2cb60f628512ed6ec2273a219a7b6c71aa35b1bf"
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "15.0.2",
     "date": "2026-10-24",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.43.0";
+export const __readyupVersion = "0.44.0";
 
 
 // .readyup/kits/default.ts
@@ -234,7 +234,7 @@ var CREATE_GITHUB_RELEASE_WORKFLOW_HASH_SINGLE = "d6de961de913c67b08dfa7e07f7349
 
 // .readyup/kits/default.ts
 function getMinVersion() {
-  const picked = { "version": "15.0.2" };
+  const picked = { "version": "15.0.3" };
   if (typeof picked["version"] !== "string") {
     throw new TypeError("release-kit/package.json: 'version' must be a string");
   }

package/.readyup/kits/npm-auto-publish.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.43.0";
+export const __readyupVersion = "0.44.0";
 
 
 // .readyup/kits/npm-auto-publish.ts

package/.readyup/manifest.json

@@ -7,7 +7,7 @@
           "checklist": "release-kit",
           "checks": [
             "@williamthorsen/release-kit in devDependencies",
-            "@williamthorsen/release-kit >= 15.0.2",
+            "@williamthorsen/release-kit >= 15.0.3",
             "release.yaml workflow exists",
             "release.yaml matches template",
             "release.yaml does not reference deprecated tag ref",
@@ -63,7 +63,7 @@
           "path": "lib/workflow-hashes.ts"
         },
         {
-          "hash": "0350d3d3",
+          "hash": "5c98064e",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -98,10 +98,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.43.0",
+      "readyupVersion": "0.44.0",
       "source": "kits/default.ts",
       "sourceHash": "ad3666b8",
-      "targetHash": "fc806b93"
+      "targetHash": "35d9bb56"
     },
     {
       "checklistChecks": [
@@ -157,10 +157,10 @@
       ],
       "name": "npm-auto-publish",
       "path": "kits/npm-auto-publish.js",
-      "readyupVersion": "0.43.0",
+      "readyupVersion": "0.44.0",
       "source": "kits/npm-auto-publish.ts",
       "sourceHash": "682fdd4a",
-      "targetHash": "4aa2a346"
+      "targetHash": "fac6bc8b"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to this project will be documented in this file.
 
+## 15.0.3 — 2026-10-27
+
+### ♻️ Refactoring
+
+- Replaces the `syncLabelsWorkflow` function in `release-kit` with the verbatim file `templates/sync-labels.yaml.template`, which `sync-labels init` and `update-templates` now read from the package root and which the package's `files` list now includes. (#1114)
+- Apply the naming conventions to nmr-core's identifiers (#1125)
+
+  Renames the identifiers in nmr-core to follow the naming conventions, including the exported option keys of `updateManagedFile` and `writeFileWithCheck`, which change from `dryRun` and `overwrite` to `isDryRun` and `shouldOverwrite`, and the constant `GIT_OUTPUT_LIMIT`, which becomes `GIT_OUTPUT_LIMIT_BYTES`. Updates the call sites in nmr, release-kit, and v11y-check to the new names.
+
 ## 15.0.2 — 2026-10-24
 
 ### 🐛 Bug fixes

package/README.md

@@ -6,13 +6,7 @@ Version-bumping and changelog-generation toolkit for release workflows.
 
 Provides a self-contained CLI that auto-discovers workspaces from `pnpm-workspace.yaml`, parses conventional commits, determines version bumps, updates `package.json` files, and generates changelogs from the same commit history that decides each bump (with optional [editorial overrides](docs/editorial-overrides.md)).
 
-<!-- section:release-notes -->
-## Release notes — v15.0.2 (2026-10-24)
-
-### 🐛 Bug fixes
-
-- Fixes the issue that the `create-github-release.yaml` template written by `release-kit init` and `release-kit update-templates` named the workflow `Create GitHub Release` in title case, which made the default readyup kit's template check warn on a consumer workflow renamed to `Create GitHub release`. (#1102)
-<!-- /section:release-notes -->
+<!-- section:release-notes --><!-- /section:release-notes -->
 
 ## Installation
 

package/dist/esm/assertCleanWorkingTree.js

@@ -1,9 +1,9 @@
 import { execFileSync } from 'node:child_process';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 export function assertCleanWorkingTree() {
     const status = execFileSync('git', ['status', '--porcelain'], {
         encoding: 'utf8',
-        maxBuffer: GIT_OUTPUT_LIMIT,
+        maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
         stdio: ['pipe', 'pipe', 'pipe'],
     }).trim();
     if (status.length > 0) {

package/dist/esm/commitCommand.js

@@ -1,6 +1,6 @@
 import { execFileSync } from 'node:child_process';
 import { readFileSync } from 'node:fs';
-import { GIT_OUTPUT_LIMIT, hasErrnoCode, parseArgsOrExit } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES, hasErrnoCode, parseArgsOrExit } from '@williamthorsen/nmr-core';
 import { readReleaseTags, RELEASE_SUMMARY_FILE, resolveReleaseTagsPath } from "./releaseFiles.js";
 const commitFlagSchema = {
     dryRun: { long: '--dry-run', type: 'boolean' },
@@ -30,7 +30,7 @@ export function commitCommand(argv) {
         try {
             const status = execFileSync('git', ['status', '--porcelain'], {
                 encoding: 'utf8',
-                maxBuffer: GIT_OUTPUT_LIMIT,
+                maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
             });
             if (status.trim().length > 0) {
                 console.info('\nUncommitted changes:');
@@ -42,7 +42,7 @@ export function commitCommand(argv) {
         }
         return;
     }
-    execFileSync('git', ['add', '-A'], { maxBuffer: GIT_OUTPUT_LIMIT });
-    execFileSync('git', ['commit', '-m', message], { maxBuffer: GIT_OUTPUT_LIMIT });
+    execFileSync('git', ['add', '-A'], { maxBuffer: GIT_OUTPUT_LIMIT_BYTES });
+    execFileSync('git', ['commit', '-m', message], { maxBuffer: GIT_OUTPUT_LIMIT_BYTES });
     console.info(`Created release commit: ${title}`);
 }

package/dist/esm/createTags.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { formatGlyphLine, GIT_OUTPUT_LIMIT, hasErrnoCode } from '@williamthorsen/nmr-core';
+import { formatGlyphLine, GIT_OUTPUT_LIMIT_BYTES, hasErrnoCode } from '@williamthorsen/nmr-core';
 import { deleteFileIfExists } from "./deleteFileIfExists.js";
 import { RELEASE_GLYPHS } from "./glyphs.js";
 import { readReleaseTags, RELEASE_SUMMARY_FILE, RELEASE_TAGS_FILE } from "./releaseFiles.js";
@@ -22,7 +22,7 @@ export function createTags(options) {
     const created = [];
     for (const tag of tags) {
         try {
-            execFileSync('git', ['tag', '-a', tag, '-m', tag], { maxBuffer: GIT_OUTPUT_LIMIT });
+            execFileSync('git', ['tag', '-a', tag, '-m', tag], { maxBuffer: GIT_OUTPUT_LIMIT_BYTES });
             created.push(tag);
         }
         catch (error) {
@@ -45,8 +45,8 @@ export function createTags(options) {
 }
 function assertCleanWorkingTree() {
     try {
-        execFileSync('git', ['diff', '--quiet'], { maxBuffer: GIT_OUTPUT_LIMIT });
-        execFileSync('git', ['diff', '--quiet', '--cached'], { maxBuffer: GIT_OUTPUT_LIMIT });
+        execFileSync('git', ['diff', '--quiet'], { maxBuffer: GIT_OUTPUT_LIMIT_BYTES });
+        execFileSync('git', ['diff', '--quiet', '--cached'], { maxBuffer: GIT_OUTPUT_LIMIT_BYTES });
     }
     catch (error) {
         if (hasErrnoCode(error, 'ENOENT')) {

package/dist/esm/detectUndeclaredTagPrefixes.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 const EXAMPLE_TAG_LIMIT = 3;
 const CANDIDATE_TAG_PATTERN = /^(?<prefix>[a-z][a-z0-9-]*-v)\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/;
 export function detectUndeclaredTagPrefixes(knownPrefixes) {
@@ -8,7 +8,7 @@ export function detectUndeclaredTagPrefixes(knownPrefixes) {
     try {
         rawOutput = execFileSync('git', ['tag', '--list'], {
             encoding: 'utf8',
-            maxBuffer: GIT_OUTPUT_LIMIT,
+            maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
             stdio: ['pipe', 'pipe', 'pipe'],
         });
     }

package/dist/esm/enumerateReleaseWindows.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 import { chainError } from '@williamthorsen/toolbelt.errors/candidate';
 import { matchesTagPrefix } from "./matchesTagPrefix.js";
 const FIELD_SEPARATOR = '\u{1F}';
@@ -112,7 +112,7 @@ function runGit(args, description) {
     try {
         return execFileSync('git', args, {
             encoding: 'utf8',
-            maxBuffer: GIT_OUTPUT_LIMIT,
+            maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
             stdio: ['pipe', 'pipe', 'pipe'],
         }).trim();
     }

package/dist/esm/init/checks.js

@@ -1,10 +1,10 @@
 import { execSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 import { parseJsonRecord } from "./parseJsonRecord.js";
 export function isGitRepo() {
     try {
-        execSync('git rev-parse --is-inside-work-tree', { maxBuffer: GIT_OUTPUT_LIMIT, stdio: 'pipe' });
+        execSync('git rev-parse --is-inside-work-tree', { maxBuffer: GIT_OUTPUT_LIMIT_BYTES, stdio: 'pipe' });
         return { ok: true };
     }
     catch {

package/dist/esm/init/scaffold.js

@@ -7,13 +7,22 @@ export function scaffoldFiles({ repoType, dryRun, overwrite, publishable, withCo
     const results = [];
     if (publishable) {
         results.push(writeFileWithCheck(CREATE_GITHUB_RELEASE_WORKFLOW_PATH, createGithubReleaseWorkflow(repoType), {
-            dryRun,
-            overwrite,
-        }), writeFileWithCheck(PUBLISH_WORKFLOW_PATH, publishWorkflow(repoType), { dryRun, overwrite }));
+            isDryRun: dryRun,
+            shouldOverwrite: overwrite,
+        }), writeFileWithCheck(PUBLISH_WORKFLOW_PATH, publishWorkflow(repoType), {
+            isDryRun: dryRun,
+            shouldOverwrite: overwrite,
+        }));
     }
-    results.push(writeFileWithCheck('.github/workflows/release.yaml', releaseWorkflow(repoType), { dryRun, overwrite }));
+    results.push(writeFileWithCheck('.github/workflows/release.yaml', releaseWorkflow(repoType), {
+        isDryRun: dryRun,
+        shouldOverwrite: overwrite,
+    }));
     if (withConfig) {
-        results.push(writeFileWithCheck('.config/release-kit.config.ts', releaseConfigScript(repoType), { dryRun, overwrite }));
+        results.push(writeFileWithCheck('.config/release-kit.config.ts', releaseConfigScript(repoType), {
+            isDryRun: dryRun,
+            shouldOverwrite: overwrite,
+        }));
     }
     return results;
 }

package/dist/esm/init/updateTemplatesCommand.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { printError, printSkip, printStep, printSuccess, reportTemplateUpdate, updateManagedFile, } from '@williamthorsen/nmr-core';
 import { describeError } from '@williamthorsen/toolbelt.errors';
-import { syncLabelsWorkflow } from "../sync-labels/templates.js";
+import { readSyncLabelsWorkflowTemplate } from "../sync-labels/templates.js";
 import { detectRepoType } from "./detectRepoType.js";
 import { hasProvenance } from "./hasProvenance.js";
 import { formatPrivateWorkflowSkip, hasPublishablePackage } from "./hasPublishablePackage.js";
@@ -40,7 +40,7 @@ export function updateTemplatesCommand({ dryRun, styles }) {
         for (const filePath of skipped) {
             printSkip(formatPrivateWorkflowSkip(filePath), styles.stdout);
         }
-        results = files.map(([filePath, content]) => updateManagedFile(filePath, content, { dryRun }));
+        results = files.map(([filePath, content]) => updateManagedFile(filePath, content, { isDryRun: dryRun }));
     }
     catch (error) {
         printError(`Failed to render workflows: ${describeError(error)}`, styles.stderr);
@@ -59,7 +59,7 @@ function buildManagedFiles(repoType, publishable) {
         ['.github/workflows/release.yaml', releaseWorkflow(repoType)],
     ];
     if (existsSync(SYNC_LABELS_WORKFLOW_PATH)) {
-        files.push([SYNC_LABELS_WORKFLOW_PATH, syncLabelsWorkflow()]);
+        files.push([SYNC_LABELS_WORKFLOW_PATH, readSyncLabelsWorkflowTemplate()]);
     }
     return { files: files.filter(([filePath]) => !skipped.includes(filePath)), skipped };
 }

package/dist/esm/previewTagPrefixes.js

@@ -1,6 +1,6 @@
 import { execFileSync } from 'node:child_process';
 import { basename } from 'node:path';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 import { describeError } from '@williamthorsen/toolbelt.errors';
 import { DEFAULT_PROJECT_TAG_PREFIX } from "./defaults.js";
 import { deriveDirectoryConfig } from "./deriveDirectoryConfig.js";
@@ -91,7 +91,7 @@ function countTagsMatching(prefix) {
     try {
         const output = execFileSync('git', ['tag', '--list', `${prefix}*`], {
             encoding: 'utf8',
-            maxBuffer: GIT_OUTPUT_LIMIT,
+            maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
             stdio: ['pipe', 'pipe', 'pipe'],
         });
         return output.split('\n').filter((line) => matchesTagPrefix(line.trim(), [prefix])).length;

package/dist/esm/pushRelease.js

@@ -1,12 +1,12 @@
 import { execFileSync } from 'node:child_process';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 export function pushRelease(resolvedTags, options = {}) {
     const { dryRun = false, tagsOnly = false } = options;
     const steps = [];
     if (!tagsOnly) {
         const branch = execFileSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], {
             encoding: 'utf8',
-            maxBuffer: GIT_OUTPUT_LIMIT,
+            maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
             stdio: ['pipe', 'pipe', 'pipe'],
         }).trim();
         const command = ['git', 'push', 'origin', branch];

package/dist/esm/releasePlan.js

@@ -26,7 +26,7 @@ function applyStep(step) {
             return { outcome: 'failed', error: describeError(error) };
         }
     }
-    const result = writeFileWithCheck(step.path, step.content, { dryRun: false, overwrite: true });
+    const result = writeFileWithCheck(step.path, step.content, { isDryRun: false, shouldOverwrite: true });
     if (result.outcome === 'failed') {
         return { outcome: 'failed', ...(result.error !== undefined && { error: result.error }) };
     }

package/dist/esm/resolveReleaseTags.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { GIT_OUTPUT_LIMIT } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES } from '@williamthorsen/nmr-core';
 import { getTargetName } from "./resolveReleaseDeclaration.js";
 import { PROJECT_TARGET_ID } from "./resolveReleaseTargets.js";
 const VERSION_PATTERN = /^v\d+\.\d+\.\d+/;
@@ -7,7 +7,7 @@ const SEMVER_SUFFIX_PATTERN = /^\d+\.\d+\.\d+/;
 export function resolveReleaseTags(args) {
     const output = execFileSync('git', ['tag', '--points-at', 'HEAD'], {
         encoding: 'utf8',
-        maxBuffer: GIT_OUTPUT_LIMIT,
+        maxBuffer: GIT_OUTPUT_LIMIT_BYTES,
     });
     const tags = output
         .split('\n')

package/dist/esm/sync-labels/initCommand.js

@@ -6,7 +6,7 @@ import { CONFIG_FILE_PATH } from "../loadConfig.js";
 import { loadValidatedConfig, reportConfigProblem } from "../loadValidatedConfig.js";
 import { generateCommand, LABELS_OUTPUT_PATH } from "./generateCommand.js";
 import { checkRetiredSyncLabelsConfig } from "./retiredConfig.js";
-import { buildScopeLabels, renderRepoLabelsBlock, repoLabelsConfigScript, syncLabelsWorkflow } from "./templates.js";
+import { buildScopeLabels, readSyncLabelsWorkflowTemplate, renderRepoLabelsBlock, repoLabelsConfigScript, } from "./templates.js";
 const WORKFLOW_PATH = '.github/workflows/sync-labels.yaml';
 export async function syncLabelsInitCommand({ configPath, dryRun, force, styles }) {
     const configFilePath = configPath ?? CONFIG_FILE_PATH;
@@ -43,7 +43,15 @@ export async function syncLabelsInitCommand({ configPath, dryRun, force, styles
     }
     const scopeLabels = workspace.kind === 'single-package' ? [] : buildScopeLabels(workspace.packageDirs, retiredNames);
     console.info('\n> Scaffolding files');
-    const workflowResult = writeFileWithCheck(WORKFLOW_PATH, syncLabelsWorkflow(), { dryRun, overwrite: force });
+    let workflow;
+    try {
+        workflow = readSyncLabelsWorkflowTemplate();
+    }
+    catch (error) {
+        process.stderr.write(`  ${describeError(error)}\n`);
+        return 1;
+    }
+    const workflowResult = writeFileWithCheck(WORKFLOW_PATH, workflow, { isDryRun: dryRun, shouldOverwrite: force });
     reportWriteResult(workflowResult, dryRun, styles);
     if (configExists) {
         console.info(`\n> ${configFilePath} already exists; add this block to the object passed to defineConfig:\n`);
@@ -62,8 +70,8 @@ export async function syncLabelsInitCommand({ configPath, dryRun, force, styles
         return 0;
     }
     const configResult = writeFileWithCheck(CONFIG_FILE_PATH, repoLabelsConfigScript(scopeLabels), {
-        dryRun,
-        overwrite: force,
+        isDryRun: dryRun,
+        shouldOverwrite: force,
     });
     reportWriteResult(configResult, dryRun, styles);
     if (workflowResult.outcome === 'failed' || configResult.outcome === 'failed') {

package/dist/esm/sync-labels/syncCommand.js

@@ -1,12 +1,12 @@
 import { execSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
-import { GIT_OUTPUT_LIMIT, reportError } from '@williamthorsen/nmr-core';
+import { GIT_OUTPUT_LIMIT_BYTES, reportError } from '@williamthorsen/nmr-core';
 import { describeError } from '@williamthorsen/toolbelt.errors';
 import { checkRetiredSyncLabelsConfig } from "./retiredConfig.js";
 const WORKFLOW_FILE = '.github/workflows/sync-labels.yaml';
 function checkGhAvailable() {
     try {
-        execSync('gh --version', { maxBuffer: GIT_OUTPUT_LIMIT, stdio: 'pipe' });
+        execSync('gh --version', { maxBuffer: GIT_OUTPUT_LIMIT_BYTES, stdio: 'pipe' });
         return true;
     }
     catch {

package/dist/esm/sync-labels/templates.d.ts

@@ -1,6 +1,6 @@
 import type { LabelDefinition } from './types.js';
-/** Generates the caller workflow YAML for `sync-labels`. */
-export declare function syncLabelsWorkflow(): string;
+/** Reads the bundled caller workflow for `sync-labels`. Throws if the template cannot be read. */
+export declare function readSyncLabelsWorkflowTemplate(): string;
 /**
  * Generates scope labels from workspace paths and retired-package names.
  *

package/dist/esm/sync-labels/templates.js

@@ -1,42 +1,15 @@
-import { basename } from 'node:path';
-export function syncLabelsWorkflow() {
-    return `# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: Sync labels
-
-on:
-  workflow_dispatch:
-
-  # Apply on merge, so that the repository's labels match each merged version of the labels file.
-  push:
-    paths:
-      - .github/labels.yaml
-
-  # Preview on review: The check's log has the computed diff, and the check warns about each label not declared by the file.
-  pull_request:
-    paths:
-      - .github/labels.yaml
-
-# Permissions are fixed when a run is created and cannot vary by trigger within a job,
-# so applying and previewing are separate jobs.
-jobs:
-  # The push arm applies on the default branch alone. The job's \`if:\` names that branch through the event payload,
-  # which keeps this file identical across repos; a \`branches:\` filter would have to name it literally.
-  sync:
-    if: github.event_name != 'pull_request' && (github.event_name != 'push' || github.ref_name == github.event.repository.default_branch)
-    permissions:
-      contents: read
-      issues: write
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@workflow/sync-labels-v1
-
-  check:
-    if: github.event_name == 'pull_request'
-    permissions:
-      contents: read
-      issues: read
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@workflow/sync-labels-v1
-    with:
-      dry-run: true
-`;
+import { readFileSync } from 'node:fs';
+import { basename, resolve } from 'node:path';
+import { findPackageRoot } from '@williamthorsen/nmr-core';
+import { describeError } from '@williamthorsen/toolbelt.errors';
+export function readSyncLabelsWorkflowTemplate() {
+    const templatePath = resolve(findPackageRoot(import.meta.url), 'templates', 'sync-labels.yaml.template');
+    try {
+        return readFileSync(templatePath, 'utf8');
+    }
+    catch (error) {
+        throw new Error(`Failed to read bundled template at ${templatePath}: ${describeError(error)}`, { cause: error });
+    }
 }
 export function buildScopeLabels(workspacePaths, retiredNames = []) {
     const scopes = ['root', ...workspacePaths.map((workspacePath) => basename(workspacePath)), ...retiredNames];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/release-kit",
-  "version": "15.0.2",
+  "version": "15.0.3",
   "description": "Version-bumping and changelog-generation toolkit for release workflows",
   "keywords": [
     "changelog",
@@ -47,12 +47,13 @@
     "docs",
     "!docs/*.v*.md",
     "presets/**",
-    "schemas/**"
+    "schemas/**",
+    "templates"
   ],
   "dependencies": {
     "@williamthorsen/change-grammar": "0.3.0",
-    "@williamthorsen/nmr-core": "0.13.6",
-    "@williamthorsen/toolbelt.errors": "0.8.4",
+    "@williamthorsen/nmr-core": "0.14.0",
+    "@williamthorsen/toolbelt.errors": "0.9.0",
     "json-stringify-pretty-compact": "4.0.0",
     "semver": "7.8.5",
     "yaml": "2.9.1",
@@ -60,12 +61,12 @@
   },
   "devDependencies": {
     "@types/semver": "7.8.0",
-    "@williamthorsen/toolbelt.filesystem": "0.9.4",
-    "@williamthorsen/toolbelt.testing": "0.7.0",
-    "@williamthorsen/toolbelt.vitest": "0.12.0",
+    "@williamthorsen/toolbelt.filesystem": "0.10.0",
+    "@williamthorsen/toolbelt.testing": "0.8.0",
+    "@williamthorsen/toolbelt.vitest": "0.13.0",
     "actionlint": "2.0.6",
     "esbuild": "0.28.2",
-    "readyup": "0.43.0",
+    "readyup": "0.44.0",
     "smol-toml": "1.9.1",
     "vitest": "5.0.5"
   },

package/templates/sync-labels.yaml.template

@@ -0,0 +1,36 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Sync labels
+
+on:
+  workflow_dispatch:
+
+  # Apply on merge, so that the repository's labels match each merged version of the labels file.
+  push:
+    paths:
+      - .github/labels.yaml
+
+  # Preview on review: The check's log has the computed diff, and the check warns about each label not declared by the file.
+  pull_request:
+    paths:
+      - .github/labels.yaml
+
+# Permissions are fixed when a run is created and cannot vary by trigger within a job,
+# so applying and previewing are separate jobs.
+jobs:
+  # The push arm applies on the default branch alone. The job's `if:` names that branch through the event payload,
+  # which keeps this file identical across repos; a `branches:` filter would have to name it literally.
+  sync:
+    if: github.event_name != 'pull_request' && (github.event_name != 'push' || github.ref_name == github.event.repository.default_branch)
+    permissions:
+      contents: read
+      issues: write
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@workflow/sync-labels-v1
+
+  check:
+    if: github.event_name == 'pull_request'
+    permissions:
+      contents: read
+      issues: read
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@workflow/sync-labels-v1
+    with:
+      dry-run: true