nextchanges: Cut over to upstream tagging.py

.github/workflows/changelog-preview.yml

@@ -46,7 +46,7 @@ jobs:
           # Render into a variable first so a renderer error fails this step
           # (rather than being swallowed by a pipe), then emit the .md directly
           # into the job summary so GitHub renders it as the changelog.
-          preview=$(uv run --locked internal/genkit/release_tagging.py --preview)
+          preview=$(uv run --locked internal/genkit/tagging.py --preview)
           {
             echo '## Changelog preview'
             echo ''

.github/workflows/tagging.yml

@@ -88,17 +88,17 @@ jobs:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           PACKAGES: ${{ inputs.packages }}
-          # Branch the release is cut from. internal/genkit/release_tagging.py commits the
+          # Branch the release is cut from. internal/genkit/tagging.py commits the
           # changelog bump and creates the tag on this branch, and its
           # concurrent-advance guard checks this branch. Matches the ref
           # checked out above (``RELEASE_REF``): the dispatched branch for
           # terraform, main everywhere else.
           DECO_TAGGING_REF: ${{ env.RELEASE_REF }}
         run: |
           if [ -n "$PACKAGES" ]; then
-            uv run --locked internal/genkit/release_tagging.py --package "$PACKAGES"
+            uv run --locked internal/genkit/tagging.py --package "$PACKAGES"
           else
-            uv run --locked internal/genkit/release_tagging.py
+            uv run --locked internal/genkit/tagging.py
           fi
 
       - name: Upload created tags artifact

Taskfile.yml

@@ -298,7 +298,7 @@ tasks:
       # Validate placement first so a misplaced fragment fails loudly instead of
       # being silently skipped by the renderer (see validate_nextchanges.py).
       - task: check-changelog
-      - "uv run --locked internal/genkit/release_tagging.py --preview"
+      - "uv run --locked internal/genkit/tagging.py --preview"
 
   deadcode:
     desc: Check for dead code
@@ -894,17 +894,14 @@ tasks:
       - rm .github/workflows/next-changelog.yml
       - mv tagging.py internal/genkit/tagging.py
       - mv tagging.py.lock internal/genkit/tagging.py.lock
-      # The release runs internal/genkit/release_tagging.py, a repo-owned wrapper
-      # that renders CHANGELOG.md from .nextchanges/ around the synced tagging.py.
-      # Point the workflow at it (genkit emits a bare `tagging.py`) and give the
-      # wrapper a matching lock (it declares the same deps).
+      # The release workflow tagging.yml expects tagging.py in a different location
+      # so we rewrite via sed
       - |
         if [ "$(uname)" = "Darwin" ]; then
-          sed -i '' 's|tagging.py|internal/genkit/release_tagging.py|g' .github/workflows/tagging.yml
+          sed -i '' 's|tagging.py|internal/genkit/tagging.py|g' .github/workflows/tagging.yml
         else
-          sed -i 's|tagging.py|internal/genkit/release_tagging.py|g' .github/workflows/tagging.yml
+          sed -i 's|tagging.py|internal/genkit/tagging.py|g' .github/workflows/tagging.yml
         fi
-      - cp internal/genkit/tagging.py.lock internal/genkit/release_tagging.py.lock
       # In an environment configured with the internal PyPI proxy, uv bakes the
       # proxy URL into the resolved locks. Unlike pydabs (which blind-reverts its
       # locks because codegen never wants to change them), these locks legitimately