ADR-0004 — Lockstep versioning

Status: accepted

Context

Independent versioning lets an untouched package skip releases, but forces a compatibility matrix ("which @kavo/typeorm works with which @kavo/core?") that every consumer and every bug report must consult.

Decision

All @kavo/* packages share one version and release together. Peer ranges between them pin the same version line.

Consequences

• "Kavo 0.4" fully identifies a consumer's setup; cross-package bugs are reproducible from one number.
• Occasional no-op bumps of untouched packages — trivially cheap in an automated pipeline (.github/workflows/publish.yml; changesets was considered and never adopted).
• Enforced mechanically rather than by review: before it packs anything, .github/workflows/publish.yml runs .github/scripts/verify-lockstep-versions.mjs over every package in PACKAGE_DIRS, so a tag that some package was not bumped to fails the release instead of shipping it one package short.
• A core-breaking change cannot ship before dependents catch up, because they ship in the same release.