v11y-check 0.16.0 → 0.17.0

package/.meta/changelog.json

@@ -1,4 +1,33 @@
 [
+  {
+    "version": "0.17.0",
+    "date": "2026-09-15",
+    "sections": [
+      {
+        "title": "🎉 Features",
+        "audience": "all",
+        "items": [
+          {
+            "description": "Fix scaffold error handling and cover every scaffolded workflow (#806)",
+            "body": "- Adds a `create-github-release.yaml matches template` check to release-kit's ReadyUp kit, which warns when `.github/workflows/create-github-release.yaml` differs from the template for the detected repo type and skips in a repo that has not installed that workflow.\n- Stops `v11y init --force` from replacing an existing `.config/v11y-check.config.json` with the defaults, which discarded the repo's thresholds and the allowlist maintained by `v11y sync`.\n\nMigration: To reset `.config/v11y-check.config.json` to its defaults, delete the file and run `v11y init`, because `v11y init --force` now overwrites only `.github/workflows/audit.yaml`.",
+            "migration": "To reset `.config/v11y-check.config.json` to its defaults, delete the file and run `v11y init`, because `v11y init --force` now overwrites only `.github/workflows/audit.yaml`.",
+            "hash": "1e197577c6c60678b5d6522f58b3211f3b10c752"
+          }
+        ]
+      },
+      {
+        "title": "⚙️ Tooling",
+        "audience": "dev",
+        "items": [
+          {
+            "description": "Upgrade eslint-config-typescript to v17 and adopt its ignore lists (#797)",
+            "body": "- Declares `vitest` as `catalog:` in every workspace that imports it, with the pnpm catalog pinning 4.1.11, because v17 no longer exempts `vitest` from `n/no-extraneous-import`.\n- Builds the global ignores in `eslint.config.ts` from the published `commonIgnores` and `toolIgnores`, which also exclude `pnpm-lock.yaml` and each `.readyup/manifest.json`, so the `eslint --fix` in `nmr lint` can no longer rewrite a kit manifest and make the next build's `rdy verify` fail.",
+            "hash": "b201669444763ad5bef85730b114098ef352e09b"
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "0.16.0",
     "date": "2026-09-08",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.35.0";
+export const __readyupVersion = "0.36.0";
 
 
 // .readyup/kits/default.ts
@@ -54,7 +54,7 @@ var default_default = defineRdyKit({
               name: "audit.yaml matches template",
               severity: "warn",
               check: () => fileMatchesHash(".github/workflows/audit.yaml", AUDIT_WORKFLOW_HASH),
-              fix: "Replace .github/workflows/audit.yaml with the current template at williamthorsen/node-monorepo-tools:.github/workflows/audit.yaml"
+              fix: "Run `v11y init --force` to regenerate audit.yaml from the current template"
             }
           ]
         }
@@ -63,7 +63,7 @@ var default_default = defineRdyKit({
   ]
 });
 function getMinVersion() {
-  const picked = { "version": "0.16.0" };
+  const picked = { "version": "0.17.0" };
   if (typeof picked["version"] !== "string") {
     throw new TypeError("v11y-check/package.json: 'version' must be a string");
   }

package/.readyup/manifest.json

@@ -8,12 +8,12 @@
       "esbuildVersion": "0.28.2",
       "inputs": [
         {
-          "hash": "52754bbb",
+          "hash": "5600fe16",
           "kind": "module",
           "path": "kits/default.ts"
         },
         {
-          "hash": "85008b8a",
+          "hash": "7316a587",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -23,10 +23,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.35.0",
+      "readyupVersion": "0.36.0",
       "source": "kits/default.ts",
-      "sourceHash": "52754bbb",
-      "targetHash": "7de75704"
+      "sourceHash": "5600fe16",
+      "targetHash": "37393c2b"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.17.0 — 2026-09-15
+
+### 🎉 Features
+
+- Fix scaffold error handling and cover every scaffolded workflow (#806)
+
+  - Adds a `create-github-release.yaml matches template` check to release-kit's ReadyUp kit, which warns when `.github/workflows/create-github-release.yaml` differs from the template for the detected repo type and skips in a repo that has not installed that workflow.
+  - Stops `v11y init --force` from replacing an existing `.config/v11y-check.config.json` with the defaults, which discarded the repo's thresholds and the allowlist maintained by `v11y sync`.
+
+  Migration: To reset `.config/v11y-check.config.json` to its defaults, delete the file and run `v11y init`, because `v11y init --force` now overwrites only `.github/workflows/audit.yaml`.
+
+### ⚙️ Tooling
+
+- Upgrade eslint-config-typescript to v17 and adopt its ignore lists (#797)
+
+  - Declares `vitest` as `catalog:` in every workspace that imports it, with the pnpm catalog pinning 4.1.11, because v17 no longer exempts `vitest` from `n/no-extraneous-import`.
+  - Builds the global ignores in `eslint.config.ts` from the published `commonIgnores` and `toolIgnores`, which also exclude `pnpm-lock.yaml` and each `.readyup/manifest.json`, so the `eslint --fix` in `nmr lint` can no longer rewrite a kit manifest and make the next build's `rdy verify` fail.
+
 ## 0.16.0 — 2026-09-08
 
 ### 🎉 Features

package/README.md

@@ -3,13 +3,16 @@
 Wraps [audit-ci](https://github.com/IBM/audit-ci) with a richer config model, typed JSON source of truth, and a sync workflow that automates allowlist management.
 
 <!-- section:release-notes -->
-## Release notes — v0.16.0 (2026-09-08)
+## Release notes — v0.17.0 (2026-09-15)
 
 ### 🎉 Features
 
-- Report a package whose tarball would omit its changelog (#768)
+- Fix scaffold error handling and cover every scaffolded workflow (#806)
 
-  Adds ReadyUp checks to verify that every published package bundles its changelog files: the human-readable `CHANGELOG.md` and the machine-readable `changelog.json`.
+  - Adds a `create-github-release.yaml matches template` check to release-kit's ReadyUp kit, which warns when `.github/workflows/create-github-release.yaml` differs from the template for the detected repo type and skips in a repo that has not installed that workflow.
+  - Stops `v11y init --force` from replacing an existing `.config/v11y-check.config.json` with the defaults, which discarded the repo's thresholds and the allowlist maintained by `v11y sync`.
+
+  Migration: To reset `.config/v11y-check.config.json` to its defaults, delete the file and run `v11y init`, because `v11y init --force` now overwrites only `.github/workflows/audit.yaml`.
 <!-- /section:release-notes -->
 
 ## Installation
@@ -101,7 +104,7 @@ Other options:
 
 ```
   --dry-run, -n   Preview changes without writing files
-  --force, -f     Overwrite existing files
+  --force, -f     Overwrite an existing workflow (an existing config is never overwritten)
 ```
 
 ### JSON output shape
@@ -173,5 +176,5 @@ To migrate an existing config:
 
 1. Remove the `outDir` field.
 2. Replace severity booleans with `severityThreshold` in each scope.
-3. Optionally add a `$schema` field (run `v11y init --force` to regenerate, or add it manually).
+3. Optionally add a `$schema` field set to `https://github.com/williamthorsen/node-monorepo-tools/raw/v11y-check-v<version>/packages/v11y-check/schemas/config.json`, with `<version>` replaced by the installed v11y-check version.
 4. Delete any generated `audit-ci.*.json` files that were in your config directory.

package/dist/esm/bin/route.js

@@ -36,7 +36,7 @@ Scaffold a starter config file and GitHub Actions workflow.
 
 Options:
   --dry-run, -n   Preview changes without writing files
-  --force, -f     Overwrite existing files
+  --force, -f     Overwrite an existing workflow (an existing config is never overwritten)
   --help, -h      Show this help message
 `);
 }

package/dist/esm/cli.js

@@ -157,7 +157,7 @@ export async function syncCommand(options) {
     }
     const { configSource } = loaded;
     if (configSource === 'defaults') {
-        const { configResult } = scaffoldConfig({ dryRun: false, force: false });
+        const { configResult } = scaffoldConfig({ dryRun: false });
         if (configResult.outcome === 'failed') {
             reportError('Failed to create config file');
             return 1;

package/dist/esm/init/scaffold.d.ts

@@ -7,12 +7,15 @@ interface ScaffoldResult {
     configResult: WriteResult;
 }
 /**
- * Scaffold the v11y-check config file with sensible defaults.
+ * Scaffold the v11y-check config file with sensible defaults, never overwriting an existing one, whose allowlist
+ * `v11y sync` maintains.
  *
  * Returns `{ configResult }` to preserve the signature consumed by `syncCommand`, which predates
  * the workflow scaffolding and treats the config result as a named field.
  */
-export declare function scaffoldConfig({ dryRun, force }: ScaffoldOptions): ScaffoldResult;
+export declare function scaffoldConfig({ dryRun }: {
+    dryRun: boolean;
+}): ScaffoldResult;
 /** Copy the bundled audit.yaml.template to `.github/workflows/audit.yaml` in the target repo. */
 export declare function copyWorkflowTemplate(dryRun: boolean, overwrite: boolean): WriteResult;
 /**
@@ -27,7 +30,7 @@ export declare function scaffoldWorkflow(dryRun: boolean, overwrite: boolean): W
  *
  * Writes both the config file and the GitHub Actions workflow. Returns a flat array of write
  * results in the order [config, workflow]. `ScaffoldOptions.force` is translated to `overwrite`
- * when calling the workflow helpers.
+ * for the workflow alone; an existing config is never overwritten.
  */
 export declare function scaffoldFiles({ dryRun, force }: ScaffoldOptions): WriteResult[];
 export {};

package/dist/esm/init/scaffold.js

@@ -1,12 +1,12 @@
-import { existsSync, readFileSync } from 'node:fs';
+import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { findPackageRoot, writeFileWithCheck } from '@williamthorsen/nmr-core';
 import { describeError } from '@williamthorsen/toolbelt.errors';
 import { v11yCheckConfigTemplate } from "./templates.js";
 const CONFIG_PATH = '.config/v11y-check.config.json';
 const WORKFLOW_PATH = '.github/workflows/audit.yaml';
-export function scaffoldConfig({ dryRun, force }) {
-    const configResult = writeFileWithCheck(CONFIG_PATH, v11yCheckConfigTemplate, { dryRun, overwrite: force });
+export function scaffoldConfig({ dryRun }) {
+    const configResult = writeFileWithCheck(CONFIG_PATH, v11yCheckConfigTemplate, { dryRun, overwrite: false });
     return { configResult };
 }
 export function copyWorkflowTemplate(dryRun, overwrite) {
@@ -19,16 +19,17 @@ export function copyWorkflowTemplate(dryRun, overwrite) {
         return { filePath: WORKFLOW_PATH, outcome: 'failed', error: `Failed to resolve package root: ${message}` };
     }
     const templatePath = resolve(root, 'templates', 'audit.yaml.template');
-    if (!existsSync(templatePath)) {
-        return { filePath: WORKFLOW_PATH, outcome: 'failed', error: `Could not find bundled template at ${templatePath}` };
-    }
     let content;
     try {
         content = readFileSync(templatePath, 'utf8');
     }
     catch (error) {
         const message = describeError(error);
-        return { filePath: WORKFLOW_PATH, outcome: 'failed', error: `Failed to read template ${templatePath}: ${message}` };
+        return {
+            filePath: WORKFLOW_PATH,
+            outcome: 'failed',
+            error: `Failed to read bundled template at ${templatePath}: ${message}`,
+        };
     }
     return writeFileWithCheck(WORKFLOW_PATH, content, { dryRun, overwrite });
 }
@@ -36,7 +37,7 @@ export function scaffoldWorkflow(dryRun, overwrite) {
     return copyWorkflowTemplate(dryRun, overwrite);
 }
 export function scaffoldFiles({ dryRun, force }) {
-    const { configResult } = scaffoldConfig({ dryRun, force });
+    const { configResult } = scaffoldConfig({ dryRun });
     const workflowResult = scaffoldWorkflow(dryRun, force);
     return [configResult, workflowResult];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "v11y-check",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "private": false,
   "description": "Wrap audit-ci with a richer config model, typed JSON source of truth, and sync workflow",
   "keywords": [
@@ -45,7 +45,7 @@
     "templates"
   ],
   "dependencies": {
-    "@williamthorsen/nmr-core": "0.11.0",
+    "@williamthorsen/nmr-core": "0.11.1",
     "@williamthorsen/toolbelt.errors": "0.7.0",
     "audit-ci": "7.1.0",
     "zod": "4.5.4"
@@ -54,7 +54,8 @@
     "@williamthorsen/toolbelt.filesystem": "0.8.3",
     "@williamthorsen/toolbelt.testing": "0.5.1",
     "@williamthorsen/toolbelt.vitest": "0.9.0",
-    "readyup": "0.35.0"
+    "readyup": "0.36.0",
+    "vitest": "4.1.11"
   },
   "engines": {
     "node": ">=24"