diff --git a/WORKFLOW.md b/WORKFLOW.md
index 965635b..f4f9fac 100644
--- a/WORKFLOW.md
+++ b/WORKFLOW.md
@@ -16,9 +16,11 @@ Each guarantee names the **failure it prevents**, so the reason survives a reimp
 
 A run targets **one branch, the one it was triggered on** (`github.ref_name`): `main` builds a stable
 release, `develop` a prerelease. The version is computed once and threaded downstream. A pull request
-builds and tests but never publishes. The package **publishes itself** when a shipped input changes (the
-source, the embedded data, the version floor, or the build configuration), so releases track the code
-without a person cutting them. A maintainer dispatches only to force a release. Dependabot and codegen
+builds and tests but never publishes. The package **publishes itself** when a shipped input changes - the
+source, the embedded data, the version floor, the build configuration, or the package versions
+(`Directory.Packages.props`) - so releases track the code without a person cutting them. Listing the package
+versions means a dependency bump republishes too, keeping the package's declared dependencies current. A
+maintainer dispatches only to force a release. Dependabot and codegen
 pull requests merge themselves once their checks pass.
 
 ### Glossary