v11y-check 0.19.0 → 0.19.2

package/.meta/changelog.json

@@ -1,4 +1,32 @@
 [
+  {
+    "version": "0.19.2",
+    "date": "2026-10-12",
+    "sections": [
+      {
+        "title": "📦 Dependencies",
+        "audience": "dev",
+        "items": [{ "description": "Bumped `@williamthorsen/nmr-core` to 0.13.3" }]
+      }
+    ]
+  },
+  {
+    "version": "0.19.1",
+    "date": "2026-10-08",
+    "sections": [
+      {
+        "title": "📚 Documentation",
+        "audience": "dev",
+        "items": [
+          {
+            "description": "Updates the readyup examples in the `nmr`, `release-kit`, and `v11y-check` READMEs and the `nmr` rulebook to use the `sources` key and `rdy run --sources`, and states that `--sources` needs readyup 0.40 or later. (#977)",
+            "hash": "41177f8f562d59a4cf0aff9d24199dbd370bb1a1",
+            "entry": 4
+          }
+        ]
+      }
+    ]
+  },
   {
     "version": "0.19.0",
     "date": "2026-10-01",

package/.readyup/kits/default.js

@@ -1,6 +1,6 @@
 /** @noformat -- @generated. Do not edit. Compiled by rdy. */
 /* eslint-disable */
-export const __readyupVersion = "0.38.0";
+export const __readyupVersion = "0.40.0";
 
 
 // .readyup/kits/default.ts
@@ -63,7 +63,7 @@ var default_default = defineRdyKit({
   ]
 });
 function getMinVersion() {
-  const picked = { "version": "0.19.0" };
+  const picked = { "version": "0.19.2" };
   if (typeof picked["version"] !== "string") {
     throw new TypeError("v11y-check/package.json: 'version' must be a string");
   }

package/.readyup/manifest.json

@@ -13,7 +13,7 @@
           "path": "kits/default.ts"
         },
         {
-          "hash": "819284aa",
+          "hash": "d4e975bf",
           "kind": "inline",
           "path": "../package.json",
           "paths": [
@@ -23,10 +23,10 @@
       ],
       "name": "default",
       "path": "kits/default.js",
-      "readyupVersion": "0.38.0",
+      "readyupVersion": "0.40.0",
       "source": "kits/default.ts",
       "sourceHash": "3ca06efb",
-      "targetHash": "32c10111"
+      "targetHash": "8455f437"
     }
   ]
 }

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.19.2 — 2026-10-12
+
+### 📦 Dependencies
+
+- Bumped `@williamthorsen/nmr-core` to 0.13.3
+
+## 0.19.1 — 2026-10-08
+
+### 📚 Documentation
+
+- Updates the readyup examples in the `nmr`, `release-kit`, and `v11y-check` READMEs and the `nmr` rulebook to use the `sources` key and `rdy run --sources`, and states that `--sources` needs readyup 0.40 or later. (#977)
+
 ## 0.19.0 — 2026-10-01
 
 ### 🎉 Features

package/README.md

@@ -4,19 +4,7 @@
 
 Wraps [audit-ci](https://github.com/IBM/audit-ci) with a richer config model, typed JSON source of truth, and a sync workflow that automates allowlist management.
 
-<!-- section:release-notes -->
-## Release notes — v0.19.0 (2026-10-01)
-
-### 🎉 Features
-
-- Adds `v11y update-templates`, which writes `.github/workflows/audit.yaml` when it is missing or differs from the installed template, prints a diff of the update, and never reads or writes the config file. (#952)
-- Changes the readyup kits' fix messages for a workflow that differs from its template, or that references a deprecated tag, to recommend `update-templates` rather than `init --force`. (#952)
-
-### 🐛 Bug fixes
-
-- Rewords the `v11y-check` README and the message that `v11y` prints for missing build output, which addressed the reader in the second person and used em-dashes and figurative verbs. (#939)
-- Fixes the issue that two comments in the `audit.yaml` workflow generated by `v11y init` did not follow the project's writing rules; the v11y-check kit check reports a previously generated `audit.yaml` as stale until `v11y init --force` regenerates it. (#946)
-<!-- /section:release-notes -->
+<!-- section:release-notes --><!-- /section:release-notes -->
 
 ## Installation
 
@@ -159,6 +147,8 @@ The scaffolded workflow triggers on pull requests to `main`/`next`, on a daily s
 
 The reusable workflow installs pnpm with [`pnpm/setup`](https://github.com/pnpm/setup), which installs pnpm 11 or newer only and reads the version from the repository's `devEngines.packageManager` or `packageManager` field. A repository pinned below that cannot run it.
 
+The reusable workflow runs on `ubuntu-latest` unless the repository's `CI_RUNS_ON` variable names another runner; see [Runner selection](https://github.com/williamthorsen/node-monorepo-tools/blob/main/.github/workflows/README.md#runner-selection).
+
 ## Readiness checks
 
 v11y-check publishes a [readyup](https://www.npmjs.com/package/readyup) kit that checks a consuming repo against the release that it has installed: that v11y-check is a devDependency at or above the current version, that audit-ci configs are under `.config/audit-ci/`, and that `.github/workflows/audit.yaml` matches the template scaffolded by this package. The kit is included in the package, so it checks against the installed version rather than whatever a repository ref happens to point at.
@@ -170,17 +160,17 @@ Add `readyup` as a devDependency, then name v11y-check in its config:
 import { defineRdyConfig } from 'readyup';
 
 export default defineRdyConfig({
-  packages: ['v11y-check'],
+  sources: ['npm:v11y-check'],
 });
 ```
 
 ```bash
-rdy run --packages              # every kit that each listed package publishes
+rdy run --sources               # every kit that each listed package publishes
 rdy run --from npm:v11y-check   # v11y-check's kit alone, without the config entry
 rdy list --from npm:v11y-check  # what v11y-check publishes
 ```
 
-`--packages` is the form that keeps working if v11y-check publishes further kits. Every form needs `readyup` 0.23 or later, and `v11y-check` as a _direct_ devDependency: A strict pnpm layout links only direct dependencies into the project, which leaves a transitive copy unreachable.
+`--sources` is the form that keeps working if v11y-check publishes further kits. `--sources` needs `readyup` 0.40 or later and `--from` needs 0.23 or later, and every form needs `v11y-check` as a _direct_ devDependency: A strict pnpm layout links only direct dependencies into the project, which leaves a transitive copy unreachable.
 
 The kit is no longer reachable through `rdy run --from github:williamthorsen/node-monorepo-tools`. Repos still using that form should switch to one of the invocations above.
 

package/dist/esm/bin/route.js

@@ -1,11 +1,11 @@
 import process from 'node:process';
-import { parseArgs, readPackageVersion, reportError } from '@williamthorsen/nmr-core';
+import { parseArgs, reportError, resolveSelfVersion } from '@williamthorsen/nmr-core';
 import { describeError } from '@williamthorsen/toolbelt.errors';
 import { auditCommand, checkCommand, syncCommand } from "../cli.js";
 import { initCommand } from "../init/initCommand.js";
 import { updateTemplatesCommand } from "../init/updateTemplatesCommand.js";
 import { OUTPUT_STYLE_ENV_VAR, resolveStyles } from "../resolveStyles.js";
-const VERSION = readPackageVersion(import.meta.url);
+const VERSION = resolveSelfVersion(import.meta.url);
 const SUBCOMMANDS = ['check', 'init', 'sync', 'update-templates'];
 const MIN_PREFIX_LENGTH = 3;
 function showHelp() {

package/dist/esm/init/templates.js

@@ -1,5 +1,5 @@
-import { readPackageVersion } from '@williamthorsen/nmr-core';
-const VERSION = readPackageVersion(import.meta.url);
+import { resolveSelfVersion } from '@williamthorsen/nmr-core';
+const VERSION = resolveSelfVersion(import.meta.url);
 function buildSchemaUrl() {
     return `https://github.com/williamthorsen/node-monorepo-tools/raw/v11y-check-v${VERSION}/packages/v11y-check/schemas/config.json`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "v11y-check",
-  "version": "0.19.0",
+  "version": "0.19.2",
   "private": false,
   "description": "Wrap audit-ci with a richer config model, typed JSON source of truth, and sync workflow",
   "keywords": [
@@ -45,17 +45,17 @@
     "templates"
   ],
   "dependencies": {
-    "@williamthorsen/nmr-core": "0.13.1",
-    "@williamthorsen/toolbelt.errors": "0.8.1",
+    "@williamthorsen/nmr-core": "0.13.3",
+    "@williamthorsen/toolbelt.errors": "0.8.3",
     "audit-ci": "7.1.0",
     "zod": "4.6.5"
   },
   "devDependencies": {
-    "@williamthorsen/toolbelt.filesystem": "0.9.1",
-    "@williamthorsen/toolbelt.testing": "0.6.1",
-    "@williamthorsen/toolbelt.vitest": "0.10.1",
+    "@williamthorsen/toolbelt.filesystem": "0.9.3",
+    "@williamthorsen/toolbelt.testing": "0.6.3",
+    "@williamthorsen/toolbelt.vitest": "0.10.3",
     "esbuild": "0.28.2",
-    "readyup": "0.38.0",
+    "readyup": "0.40.0",
     "vitest": "4.1.11"
   },
   "engines": {