@anolilab/semantic-release-pnpm 8.1.0 → 8.1.2

package/CHANGELOG.md

@@ -1,3 +1,16 @@
+## @anolilab/semantic-release-pnpm [8.1.2](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.1...@anolilab/semantic-release-pnpm@8.1.2) (2026-04-17)
+
+
+### Dependencies
+
+* **@anolilab/rc:** upgraded to 4.0.2
+
+## @anolilab/semantic-release-pnpm [8.1.1](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.0...@anolilab/semantic-release-pnpm@8.1.1) (2026-04-15)
+
+### Bug Fixes
+
+* **semantic-release-pnpm:** support pnpm v10 in prepare step ([f1dee76](https://github.com/anolilab/semantic-release/commit/f1dee765dc2278cecde34e85bc6d7096eeeba3d5))
+
 ## @anolilab/semantic-release-pnpm [8.1.0](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.0.0...@anolilab/semantic-release-pnpm@8.1.0) (2026-04-08)
 
 ### Features

package/README.md

@@ -180,9 +180,9 @@ Provenance applies specifically to publishing, so configure it under `publishCon
 
 ### Environment variables
 
-| Variable       | Description                                                                                                                                                                                                                        |
-| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `NPM_TOKEN`    | Npm token created via [npm token create](https://docs.npmjs.com/getting-started/working_with_tokens#how-to-create-new-tokens)                                                                                                      |
+| Variable       | Description                                                                                                                                                                                                                                                                                  |
+| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `NPM_TOKEN`    | Npm token created via [npm token create](https://docs.npmjs.com/getting-started/working_with_tokens#how-to-create-new-tokens)                                                                                                                                                                |
 | `NPM_ID_TOKEN` | OIDC identity token for [trusted publishing](https://docs.npmjs.com/trusted-publishers). Must be configured in your CI job (see [GitLab](#trusted-publishing-for-gitlab-pipelines), [CircleCI](#trusted-publishing-for-circleci)). Takes priority over CI-specific token retrieval when set. |
 
 ### Options

package/dist/index.js

@@ -19,12 +19,12 @@ const __cjs_getBuiltinModule = (module) => {
 
 import dbg from 'debug';
 import { execa } from 'execa';
-import { validRange, gte } from 'semver';
-import { isAccessibleSync, ensureFileSync, move, writeFile } from '@visulima/fs';
+import { validRange, major, gte } from 'semver';
+import { isAccessibleSync, ensureFileSync, isAccessible, readJson, writeJson, move, writeFile } from '@visulima/fs';
 import { resolve } from '@visulima/path';
 import { rc } from '@anolilab/rc';
 import normalizeUrl from 'normalize-url';
-import { findPackageJson, getPackageManagerVersion } from '@visulima/package';
+import { getPackageManagerVersion, findPackageJson } from '@visulima/package';
 import SemanticReleaseError from '@semantic-release/error';
 import { stringify } from 'ini';
 import getAuthToken from 'registry-auth-token';
@@ -158,7 +158,11 @@ const debug$7 = dbg("semantic-release-pnpm:prepare");
 const prepare$1 = async ({ pkgRoot, tarballDir }, { cwd, env, logger, nextRelease: { version }, stderr, stdout }) => {
   const basePath = pkgRoot ? resolve(cwd, pkgRoot) : cwd;
   logger.log("Write version %s to package.json in %s", version, basePath);
-  const versionResult = execa("pnpm", ["version", version, "--no-git-tag-version", "--allow-same-version"], {
+  const pnpmVersion = getPackageManagerVersion("pnpm");
+  const pnpmMajor = major(pnpmVersion);
+  debug$7("Detected pnpm major version: %d", pnpmMajor);
+  const versionArguments = pnpmMajor >= 10 ? ["pkg", "set", `version=${version}`] : ["version", version, "--no-git-tag-version", "--allow-same-version"];
+  const versionResult = execa("pnpm", versionArguments, {
     cwd: basePath,
     env,
     preferLocal: true
@@ -166,6 +170,15 @@ const prepare$1 = async ({ pkgRoot, tarballDir }, { cwd, env, logger, nextReleas
   versionResult.stdout.pipe(stdout, { end: false });
   versionResult.stderr.pipe(stderr, { end: false });
   await versionResult;
+  if (pnpmMajor >= 10) {
+    const shrinkwrapPath = resolve(basePath, "npm-shrinkwrap.json");
+    if (await isAccessible(shrinkwrapPath)) {
+      debug$7(`Updating npm-shrinkwrap.json at ${shrinkwrapPath}`);
+      const shrinkwrap = await readJson(shrinkwrapPath);
+      shrinkwrap.version = version;
+      await writeJson(shrinkwrapPath, shrinkwrap, { indent: 2 });
+    }
+  }
   if (tarballDir) {
     logger.log("Creating npm package version %s", version);
     const packResult = execa("pnpm", ["pack", basePath], { cwd, env, preferLocal: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anolilab/semantic-release-pnpm",
-  "version": "8.1.0",
+  "version": "8.1.2",
   "description": "Semantic-release plugin to publish a npm package with pnpm.",
   "keywords": [
     "anolilab",
@@ -61,7 +61,7 @@
   ],
   "dependencies": {
     "@actions/core": "3.0.0",
-    "@anolilab/rc": "4.0.1",
+    "@anolilab/rc": "4.0.2",
     "@semantic-release/error": "^4.0.0",
     "@visulima/fs": "^4.1.0",
     "@visulima/package": "^4.1.7",