chore: migrate workflow helper scripts to scripts/workflows

Author: mrlunchbox777

.github/workflows/action-validator.yaml

@@ -30,4 +30,4 @@ jobs:
             action-validator 0.5.1
 
       - name: Lint Actions
-        run: ./bsctl/scripts/workflows/action-validator_check-actions_lint-actions.sh
+        run: ./scripts/workflows/action-validator_check-actions_lint-actions.sh

.github/workflows/agents-validate.yaml

@@ -8,15 +8,15 @@ on:
       - "AGENTS.md"
       - ".agents/**"
       - ".github/workflows/agents-validate.yaml"
-      - "bsctl/scripts/workflows/agents-validate_agents-instructions-check.sh"
+      - "scripts/workflows/agents-validate_agents-instructions-check.sh"
   pull_request:
     branches:
       - main
     paths:
       - "AGENTS.md"
       - ".agents/**"
       - ".github/workflows/agents-validate.yaml"
-      - "bsctl/scripts/workflows/agents-validate_agents-instructions-check.sh"
+      - "scripts/workflows/agents-validate_agents-instructions-check.sh"
   workflow_dispatch:
 
 defaults:
@@ -36,4 +36,4 @@ jobs:
         uses: mikefarah/yq@v4
 
       - name: Validate agent instructions and skills
-        run: ./bsctl/scripts/workflows/agents-validate_agents-instructions-check.sh
+        run: ./scripts/workflows/agents-validate_agents-instructions-check.sh

.github/workflows/dependabot-autobump.yaml

@@ -53,13 +53,13 @@ jobs:
 
       - name: Bump version
         if: steps.check_autobump.outputs.already_bumped == 'false'
-        run: ./bsctl/scripts/workflows/dependabot-autobump_bump-version.sh
+        run: ./scripts/workflows/dependabot-autobump_bump-version.sh
 
       - name: Update CHANGELOG
         if: steps.check_autobump.outputs.already_bumped == 'false'
         env:
           PR_TITLE: ${{ github.event.pull_request.title }}
-        run: ./bsctl/scripts/workflows/dependabot-autobump_update-changelog.sh
+        run: ./scripts/workflows/dependabot-autobump_update-changelog.sh
 
       - name: Check for changes
         if: steps.check_autobump.outputs.already_bumped == 'false'

.github/workflows/docs-bump.yaml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Version Bump
-        run: ./bsctl/scripts/workflows/docs-bump_docs-bump_version-bump.sh
+        run: ./scripts/workflows/docs-bump_docs-bump_version-bump.sh
 
       - name: CHANGELOG Bump
-        run: ./bsctl/scripts/workflows/docs-bump_docs-bump_CHANGELOG-bump.sh
+        run: ./scripts/workflows/docs-bump_docs-bump_CHANGELOG-bump.sh

CHANGELOG.md

@@ -3,6 +3,14 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+---
+## [0.1.22] - 2026-04-09
+
+### Changed
+
+- Migrated workflow helper scripts from `bsctl/scripts/workflows/` to `scripts/workflows/` and updated workflow call sites (`docs-bump`, `dependabot-autobump`, `action-validator`, and `agents-validate`).
+- Updated #320 decommission planning docs to reflect completed script-path migration and the new neutral script location.
+
 ---
 ## [0.1.21] - 2026-04-09
 

bsctl/static/resources/constants.yaml

@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - constant for semantic versioning
-BasicSetupCliVersion: "0.1.21"
+BasicSetupCliVersion: "0.1.22"

docs/plans/bsctl-codeql-decommission-plan.md

@@ -14,9 +14,9 @@ Retire remaining `bsctl` Go CLI and CodeQL dependencies without breaking release
 | Area | Current dependency | Why it exists today | Replacement target | Removal gate |
 | --- | --- | --- | --- | --- |
 | Release candidate workflow | `.github/workflows/release.yml` reads `resources/version.yaml` (legacy fallback to `bsctl/static/resources/constants.yaml` during transition) | Version source for candidate metadata | Complete cutover to root-level version source | Candidate workflow passes with no `bsctl` path usage |
-| Docs bump workflow | `.github/workflows/docs-bump.yaml` invokes `bsctl/scripts/workflows/docs-bump_*` | Enforces version/changelog divergence and date checks | Promote scripts to root-level workflow scripts (or equivalent maintained path) | Docs-bump checks pass using replacement scripts |
-| Dependabot autobump | `.github/workflows/dependabot-autobump.yaml` invokes `bsctl/scripts/workflows/dependabot-autobump_*` and stages `resources/version.yaml` (plus legacy constants during transition) | Automates patch bump + changelog update for dep PRs | Update to replacement version source + script paths | Dependabot autobump PR succeeds without `bsctl` references |
-| Action validator and agents validate | Workflows call scripts in `bsctl/scripts/workflows/*` | Existing script organization | Relocate scripts to neutral location (for example `scripts/workflows/`) | Validation workflows remain green after path migration |
+| Docs bump workflow | `.github/workflows/docs-bump.yaml` invokes `scripts/workflows/docs-bump_*` | Enforces version/changelog divergence and date checks | Keep scripts in root-level workflow script location | Docs-bump checks pass using replacement scripts |
+| Dependabot autobump | `.github/workflows/dependabot-autobump.yaml` invokes `scripts/workflows/dependabot-autobump_*` and stages `resources/version.yaml` (plus legacy constants during transition) | Automates patch bump + changelog update for dep PRs | Keep script paths and finalize legacy-version cleanup later | Dependabot autobump PR succeeds without `bsctl` references |
+| Action validator and agents validate | Workflows call scripts in `scripts/workflows/*` | Existing script organization | Keep scripts in neutral location | Validation workflows remain green after path migration |
 | Code scanning | `.github/workflows/codeql.yaml` scans Go | Security coverage for Go code under `bsctl/` | Re-scope/remove CodeQL after supported-language coverage decision | `bsctl` removal complete and security coverage documented |
 | Label automation | `.github/labeler.yaml` maps `bsctl/**/*` to change labels | Surfacing path-based impact in PRs | Replace with new paths or retire mapping if no longer needed | Label behavior remains correct after path removals |
 | Agent guidance and skills | `AGENTS.md`, `.agents/skills/*.md`, docs reference `resources/version.yaml` (legacy mention only for transition) | Instructions aligned with current version source | Update docs to new source-of-truth path | No remaining mandatory guidance references to retired path |
@@ -31,7 +31,7 @@ Retire remaining `bsctl` Go CLI and CodeQL dependencies without breaking release
 
 ### Phase B: Script-path migration
 
-- Move workflow helper scripts out of `bsctl/scripts/workflows/`.
+- Workflow helper scripts are now in `scripts/workflows/`; keep call sites aligned.
 - Update all workflow call sites to the new script locations.
 - Validate behavior parity in CI.
 

resources/version.yaml

@@ -1,2 +1,2 @@
 # BasicSetupCliVersion - primary version source for releases and docs bump automation
-BasicSetupCliVersion: "0.1.21"
+BasicSetupCliVersion: "0.1.22"

…-validator_check-actions_lint-actions.sh …-validator_check-actions_lint-actions.shbsctl/scripts/workflows/action-validator_check-actions_lint-actions.sh renamed to scripts/workflows/action-validator_check-actions_lint-actions.sh bsctl/scripts/workflows/action-validator_check-actions_lint-actions.sh renamed to scripts/workflows/action-validator_check-actions_lint-actions.sh

@@ -1,5 +1,5 @@
 #! /usr/bin/env bash
 
-find .github/workflows -type f \( -iname \*.yaml -o -iname \*.yml \) \
-    | grep -v codeql.yaml \
-    | xargs -I {} action-validator --verbose {}
+find .github/workflows -type f \( -iname \*.yaml -o -iname \*.yml \) |
+	grep -v codeql.yaml |
+	xargs -I {} action-validator --verbose {}