v11y-check 0.19.0 → 0.19.1

package/.meta/changelog.json

@@ -1,4 +1,21 @@
 [
+  {
+    "version": "0.19.1",
+    "date": "2026-10-08",
+    "sections": [
+      {
+        "title": "📚 Documentation",
+        "audience": "dev",
+        "items": [
+          {
+            "description": "Updates the readyup examples in the `nmr`, `release-kit`, and `v11y-check` READMEs and the `nmr` rulebook to use the `sources` key and `rdy run --sources`, and states that `--sources` needs readyup 0.40 or later. (#977)",
+            "hash": "41177f8f562d59a4cf0aff9d24199dbd370bb1a1",
+            "entry": 4
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "0.19.0",
     "date": "2026-10-01",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.38.0";
+export const __readyupVersion = "0.40.0";
 
 
 // .readyup/kits/default.ts
@@ -63,7 +63,7 @@ var default_default = defineRdyKit({
   ]
 });
 function getMinVersion() {
-  const picked = { "version": "0.19.0" };
+  const picked = { "version": "0.19.1" };
   if (typeof picked["version"] !== "string") {
     throw new TypeError("v11y-check/package.json: 'version' must be a string");
   }

package/.readyup/manifest.json

@@ -13,7 +13,7 @@
           "path": "kits/default.ts"
         },
         {
-          "hash": "819284aa",
+          "hash": "748da3ab",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -23,10 +23,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.38.0",
+      "readyupVersion": "0.40.0",
       "source": "kits/default.ts",
       "sourceHash": "3ca06efb",
-      "targetHash": "32c10111"
+      "targetHash": "2f0f7205"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.19.1 — 2026-10-08
+
+### 📚 Documentation
+
+- Updates the readyup examples in the `nmr`, `release-kit`, and `v11y-check` READMEs and the `nmr` rulebook to use the `sources` key and `rdy run --sources`, and states that `--sources` needs readyup 0.40 or later. (#977)
+
 ## 0.19.0 — 2026-10-01
 
 ### 🎉 Features

package/README.md

@@ -4,19 +4,7 @@
 
 Wraps [audit-ci](https://github.com/IBM/audit-ci) with a richer config model, typed JSON source of truth, and a sync workflow that automates allowlist management.
 
-<!-- section:release-notes -->
-## Release notes — v0.19.0 (2026-10-01)
-
-### 🎉 Features
-
-- Adds `v11y update-templates`, which writes `.github/workflows/audit.yaml` when it is missing or differs from the installed template, prints a diff of the update, and never reads or writes the config file. (#952)
-- Changes the readyup kits' fix messages for a workflow that differs from its template, or that references a deprecated tag, to recommend `update-templates` rather than `init --force`. (#952)
-
-### 🐛 Bug fixes
-
-- Rewords the `v11y-check` README and the message that `v11y` prints for missing build output, which addressed the reader in the second person and used em-dashes and figurative verbs. (#939)
-- Fixes the issue that two comments in the `audit.yaml` workflow generated by `v11y init` did not follow the project's writing rules; the v11y-check kit check reports a previously generated `audit.yaml` as stale until `v11y init --force` regenerates it. (#946)
-<!-- /section:release-notes -->
+<!-- section:release-notes --><!-- /section:release-notes -->
 
 ## Installation
 
@@ -170,17 +158,17 @@ Add `readyup` as a devDependency, then name v11y-check in its config:
 import { defineRdyConfig } from 'readyup';
 
 export default defineRdyConfig({
-  packages: ['v11y-check'],
+  sources: ['npm:v11y-check'],
 });
 ```
 
 ```bash
-rdy run --packages              # every kit that each listed package publishes
+rdy run --sources               # every kit that each listed package publishes
 rdy run --from npm:v11y-check   # v11y-check's kit alone, without the config entry
 rdy list --from npm:v11y-check  # what v11y-check publishes
 ```
 
-`--packages` is the form that keeps working if v11y-check publishes further kits. Every form needs `readyup` 0.23 or later, and `v11y-check` as a _direct_ devDependency: A strict pnpm layout links only direct dependencies into the project, which leaves a transitive copy unreachable.
+`--sources` is the form that keeps working if v11y-check publishes further kits. `--sources` needs `readyup` 0.40 or later and `--from` needs 0.23 or later, and every form needs `v11y-check` as a _direct_ devDependency: A strict pnpm layout links only direct dependencies into the project, which leaves a transitive copy unreachable.
 
 The kit is no longer reachable through `rdy run --from github:williamthorsen/node-monorepo-tools`. Repos still using that form should switch to one of the invocations above.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "v11y-check",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "private": false,
   "description": "Wrap audit-ci with a richer config model, typed JSON source of truth, and sync workflow",
   "keywords": [
@@ -45,17 +45,17 @@
     "templates"
   ],
   "dependencies": {
-    "@williamthorsen/nmr-core": "0.13.1",
-    "@williamthorsen/toolbelt.errors": "0.8.1",
+    "@williamthorsen/nmr-core": "0.13.2",
+    "@williamthorsen/toolbelt.errors": "0.8.2",
     "audit-ci": "7.1.0",
     "zod": "4.6.5"
   },
   "devDependencies": {
-    "@williamthorsen/toolbelt.filesystem": "0.9.1",
-    "@williamthorsen/toolbelt.testing": "0.6.1",
-    "@williamthorsen/toolbelt.vitest": "0.10.1",
+    "@williamthorsen/toolbelt.filesystem": "0.9.2",
+    "@williamthorsen/toolbelt.testing": "0.6.2",
+    "@williamthorsen/toolbelt.vitest": "0.10.2",
     "esbuild": "0.28.2",
-    "readyup": "0.38.0",
+    "readyup": "0.40.0",
     "vitest": "4.1.11"
   },
   "engines": {