@anolilab/semantic-release-pnpm 8.1.13 → 8.1.15

package/CHANGELOG.md

@@ -1,3 +1,21 @@
+## @anolilab/semantic-release-pnpm [8.1.15](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.14...@anolilab/semantic-release-pnpm@8.1.15) (2026-05-26)
+
+### Bug Fixes
+
+* **semantic-release-pnpm:** handle non-AggregateError in verify and skip re-publish ([#309](https://github.com/anolilab/semantic-release/issues/309)) ([6acb075](https://github.com/anolilab/semantic-release/commit/6acb075cbd3e7abf1f8c0d5417ffb661fd331646))
+* **semantic-release-pnpm:** soft-fail whoami for non-official registries ([#310](https://github.com/anolilab/semantic-release/issues/310)) ([b041d88](https://github.com/anolilab/semantic-release/commit/b041d88374957b254cc4f4561a44467a422918a9))
+
+### Miscellaneous Chores
+
+* **deps:** bump deps and upgrade to pnpm 11 ([#312](https://github.com/anolilab/semantic-release/issues/312)) ([100be77](https://github.com/anolilab/semantic-release/commit/100be77953d6c51f595b01fd092a2a83c011ed0b))
+
+
+### Dependencies
+
+* **@anolilab/rc:** upgraded to 4.0.3
+
+## @anolilab/semantic-release-pnpm [8.1.14](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.13...@anolilab/semantic-release-pnpm@8.1.14) (2026-05-23)
+
 ## @anolilab/semantic-release-pnpm [8.1.13](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.12...@anolilab/semantic-release-pnpm@8.1.13) (2026-05-23)
 
 ## @anolilab/semantic-release-pnpm [8.1.12](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.11...@anolilab/semantic-release-pnpm@8.1.12) (2026-05-23)

package/dist/index.d.ts

@@ -53,6 +53,7 @@ interface CommonContext {
         error: (...message: string[]) => void;
         log: (...message: string[]) => void;
         success: (...message: string[]) => void;
+        warn: (...message: string[]) => void;
     };
     options: Options;
     stderr: stream.Writable;

package/dist/index.js

@@ -18,7 +18,7 @@ const __cjs_getBuiltinModule = (module) => {
 };
 
 import dbg from 'debug';
-import { execa } from 'execa';
+import { execa, ExecaError } from 'execa';
 import { validRange, major, gte } from 'semver';
 import { isAccessibleSync, ensureFileSync, isAccessible, readJson, writeJson, move, writeFile } from '@visulima/fs';
 import { resolve } from '@visulima/path';
@@ -199,6 +199,21 @@ const prepare$1 = async ({ pkgRoot, tarballDir }, { cwd, env, logger, nextReleas
 };
 
 const debug$6 = dbg("semantic-release-pnpm:publish");
+const ALREADY_PUBLISHED_PHRASE = "cannot publish over the previously published versions";
+const isAlreadyPublishedError = (error) => {
+  const haystacks = [error.stderr, error.shortMessage, error.message].filter((value) => typeof value === "string");
+  return haystacks.some((value) => value.includes(ALREADY_PUBLISHED_PHRASE));
+};
+const handlePublishError = (error, packageJson, context, distributionTag, registry) => {
+  const { logger, nextRelease: { version } } = context;
+  const errorMessage = error instanceof Error ? error.message : String(error);
+  if (error instanceof ExecaError && isAlreadyPublishedError(error)) {
+    logger.log(`Package ${packageJson.name ?? ""}@${version} is already published at dist-tag @${distributionTag} on ${registry}, skipping`);
+    return getReleaseInfo(packageJson, context, distributionTag, registry);
+  }
+  logger.log(`Failed to publish ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}: ${errorMessage}`);
+  throw new AggregateError([error], errorMessage, { cause: error });
+};
 const publish$1 = async (pluginConfig, packageJson, context) => {
   const {
     cwd,
@@ -237,9 +252,7 @@ const publish$1 = async (pluginConfig, packageJson, context) => {
     try {
       await result;
     } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      logger.log(`Failed to publish ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}: ${errorMessage}`);
-      throw new AggregateError([error], errorMessage, { cause: error });
+      return handlePublishError(error, packageJson, context, distributionTag, registry);
     }
     logger.log(`Published ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}`);
     return getReleaseInfo(packageJson, context, distributionTag, registry);
@@ -576,11 +589,17 @@ const verifyAuthContextAgainstRegistry = async (npmrc, registry, context) => {
       }
     } catch (error) {
       if (isConnectionError(error)) {
-        const semanticError2 = getError("EINVALIDNPMAUTH", { registry });
-        throw new AggregateError([semanticError2], semanticError2.message, { cause: error });
+        const semanticError = getError("EINVALIDNPMAUTH", { registry });
+        throw new AggregateError([semanticError], semanticError.message, { cause: error });
       }
-      const semanticError = getError("EINVALIDNPMTOKEN", { registry });
-      throw new AggregateError([semanticError], semanticError.message, { cause: error });
+      if (normalizeUrl(registry) === normalizeUrl(OFFICIAL_REGISTRY)) {
+        const semanticError = getError("EINVALIDNPMTOKEN", { registry });
+        throw new AggregateError([semanticError], semanticError.message, { cause: error });
+      }
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      context.logger.warn(
+        `Could not verify auth via "pnpm whoami" on custom registry "${registry}" (${errorMessage}). This registry may not support /-/whoami for the configured token type (e.g. GitLab Package Registry with deploy tokens). The publish step will surface any real credential errors.`
+      );
     }
   })();
   whoamiCache.set(cacheKey, verificationPromise);
@@ -678,7 +697,7 @@ const verify = async (pluginConfig, context) => {
   } catch (error) {
     const typedError = error;
     errorsMessage += typedError.message;
-    errors = [...errors, ...typedError.errors];
+    errors = [...errors, ...Array.isArray(typedError.errors) ? typedError.errors : [typedError]];
   }
   try {
     const packageJson = await getPackage(pluginConfig, context);
@@ -692,7 +711,7 @@ const verify = async (pluginConfig, context) => {
   } catch (error) {
     const typedError = error;
     errorsMessage += typedError.message;
-    errors = [...errors, ...typedError.errors];
+    errors = [...errors, ...Array.isArray(typedError.errors) ? typedError.errors : [typedError]];
   }
   if (errors.length > 0) {
     throw new AggregateError(errors, errorsMessage);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anolilab/semantic-release-pnpm",
-  "version": "8.1.13",
+  "version": "8.1.15",
   "description": "Semantic-release plugin to publish a npm package with pnpm.",
   "keywords": [
     "anolilab",
@@ -61,7 +61,7 @@
   ],
   "dependencies": {
     "@actions/core": "3.0.1",
-    "@anolilab/rc": "4.0.2",
+    "@anolilab/rc": "4.0.3",
     "@semantic-release/error": "^4.0.0",
     "@visulima/fs": "^4.1.0",
     "@visulima/package": "^4.1.7",
@@ -69,10 +69,10 @@
     "debug": "^4.4.3",
     "env-ci": "^11.2.0",
     "execa": "^9.6.1",
-    "ini": "^6.0.0",
-    "normalize-url": "9.0.0",
+    "ini": "^7.0.0",
+    "normalize-url": "9.0.1",
     "registry-auth-token": "5.1.1",
-    "semver": "7.8.0"
+    "semver": "7.8.1"
   },
   "engines": {
     "node": "^22.14.0 || >=24.10.0"