@anolilab/semantic-release-pnpm 8.1.14 → 8.1.16

package/CHANGELOG.md

@@ -1,3 +1,31 @@
+## @anolilab/semantic-release-pnpm [8.1.16](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.15...@anolilab/semantic-release-pnpm@8.1.16) (2026-06-20)
+
+### Bug Fixes
+
+* **build:** add @visulima/pail devDependency to satisfy cerebro peer ([a440c7d](https://github.com/anolilab/semantic-release/commit/a440c7dc61ca5ae69b4931e7ba751c43fdc8159b))
+* **lint:** satisfy eslint-config v27 rules and make codecov upload non-blocking ([da69704](https://github.com/anolilab/semantic-release/commit/da69704ad8158cd82a4eab1259164fbbb6c82999))
+
+
+### Dependencies
+
+* **@anolilab/rc:** upgraded to 4.0.4
+
+## @anolilab/semantic-release-pnpm [8.1.15](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.14...@anolilab/semantic-release-pnpm@8.1.15) (2026-05-26)
+
+### Bug Fixes
+
+* **semantic-release-pnpm:** handle non-AggregateError in verify and skip re-publish ([#309](https://github.com/anolilab/semantic-release/issues/309)) ([6acb075](https://github.com/anolilab/semantic-release/commit/6acb075cbd3e7abf1f8c0d5417ffb661fd331646))
+* **semantic-release-pnpm:** soft-fail whoami for non-official registries ([#310](https://github.com/anolilab/semantic-release/issues/310)) ([b041d88](https://github.com/anolilab/semantic-release/commit/b041d88374957b254cc4f4561a44467a422918a9))
+
+### Miscellaneous Chores
+
+* **deps:** bump deps and upgrade to pnpm 11 ([#312](https://github.com/anolilab/semantic-release/issues/312)) ([100be77](https://github.com/anolilab/semantic-release/commit/100be77953d6c51f595b01fd092a2a83c011ed0b))
+
+
+### Dependencies
+
+* **@anolilab/rc:** upgraded to 4.0.3
+
 ## @anolilab/semantic-release-pnpm [8.1.14](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.13...@anolilab/semantic-release-pnpm@8.1.14) (2026-05-23)
 
 ## @anolilab/semantic-release-pnpm [8.1.13](https://github.com/anolilab/semantic-release/compare/@anolilab/semantic-release-pnpm@8.1.12...@anolilab/semantic-release-pnpm@8.1.13) (2026-05-23)

package/dist/index.d.ts

@@ -1,123 +1,119 @@
 import stream from 'node:stream';
-
+import '@visulima/package';
 interface BranchObject {
-    channel?: string | false;
-    name: string;
-    prerelease?: boolean | string;
-    range?: string;
+  channel?: string | false;
+  name: string;
+  prerelease?: boolean | string;
+  range?: string;
 }
 type BranchSpec$1 = BranchObject | string;
 type PluginSpec<T = any> = string | [string, T];
 interface Options {
-    [name: string]: any;
-    branches?: BranchSpec$1 | ReadonlyArray<BranchSpec$1>;
-    ci?: boolean;
-    dryRun?: boolean;
-    extends?: ReadonlyArray<string> | string;
-    plugins?: ReadonlyArray<PluginSpec>;
-    repositoryUrl?: string;
-    tagFormat?: string;
+  [name: string]: any;
+  branches?: BranchSpec$1 | ReadonlyArray<BranchSpec$1>;
+  ci?: boolean;
+  dryRun?: boolean;
+  extends?: ReadonlyArray<string> | string;
+  plugins?: ReadonlyArray<PluginSpec>;
+  repositoryUrl?: string;
+  tagFormat?: string;
 }
 interface Commit {
-    author: {
-        email: string;
-        name: string;
-        short: string;
-    };
-    body: string;
-    commit: {
-        long: string;
-        short: string;
-    };
-    committer: {
-        email: string;
-        name: string;
-        short: string;
-    };
-    committerDate: string;
-    hash: string;
-    message: string;
-    subject: string;
-    tree: {
-        long: string;
-        short: string;
-    };
+  author: {
+    email: string;
+    name: string;
+    short: string;
+  };
+  body: string;
+  commit: {
+    long: string;
+    short: string;
+  };
+  committer: {
+    email: string;
+    name: string;
+    short: string;
+  };
+  committerDate: string;
+  hash: string;
+  message: string;
+  subject: string;
+  tree: {
+    long: string;
+    short: string;
+  };
 }
-
 interface CommonContext {
-    branch: BranchSpec;
-    branches: BranchSpec[];
-    cwd: string;
-    env: "object";
-    logger: {
-        error: (...message: string[]) => void;
-        log: (...message: string[]) => void;
-        success: (...message: string[]) => void;
-    };
-    options: Options;
-    stderr: stream.Writable;
-    stdout: stream.Writable;
+  branch: BranchSpec;
+  branches: BranchSpec[];
+  cwd: string;
+  env: "object";
+  logger: {
+    error: (...message: string[]) => void;
+    log: (...message: string[]) => void;
+    success: (...message: string[]) => void;
+    warn: (...message: string[]) => void;
+  };
+  options: Options;
+  stderr: stream.Writable;
+  stdout: stream.Writable;
 }
 type VerifyConditionsContext = CommonContext;
 type CommonContext2 = CommonContext & {
-    releases: Release[];
+  releases: Release[];
 };
 type AddChannelContext = CommonContext2 & {
-    commits: Commit[];
-    currentRelease: Release;
-    lastRelease: Release;
-    nextRelease: Release;
+  commits: Commit[];
+  currentRelease: Release;
+  lastRelease: Release;
+  nextRelease: Release;
 };
 type CommonContext3 = CommonContext2 & {
-    commits: Commit[];
-    lastRelease: Release;
+  commits: Commit[];
+  lastRelease: Release;
 };
 type CommonContext4 = CommonContext3 & {
-    commits: Commit[];
-    nextRelease: Release;
+  commits: Commit[];
+  nextRelease: Release;
 };
 type PrepareContext = CommonContext4;
 type PublishContext = CommonContext4;
 interface BranchSpec {
-    name: string;
-    tags?: Tag[];
+  name: string;
+  tags?: Tag[];
 }
 interface Tag {
-    channel?: string;
-    gitHead?: string;
-    gitTag?: string;
-    version?: string;
+  channel?: string;
+  gitHead?: string;
+  gitTag?: string;
+  version?: string;
 }
 interface Release {
-    channel?: string | null;
-    gitHead?: string;
-    gitTag?: string;
-    name?: string;
-    type?: "build" | "major" | "minor" | "patch" | "premajor" | "preminor" | "prepatch" | "prerelease";
-    version: string;
+  channel?: string | null;
+  gitHead?: string;
+  gitTag?: string;
+  name?: string;
+  type?: "build" | "major" | "minor" | "patch" | "premajor" | "preminor" | "prepatch" | "prerelease";
+  version: string;
 }
-
 interface PluginConfig {
-    branches?: (string | {
-        name: string;
-        prerelease: boolean;
-    })[];
-    disableScripts?: boolean;
-    npmPublish?: boolean;
-    pkgRoot?: string;
-    publishBranch?: string;
-    tarballDir?: false | string;
+  branches?: (string | {
+    name: string;
+    prerelease: boolean;
+  })[];
+  disableScripts?: boolean;
+  npmPublish?: boolean;
+  pkgRoot?: string;
+  publishBranch?: string;
+  tarballDir?: false | string;
 }
-
 interface ReleaseInfo {
-    channel: string;
-    name: string;
-    url?: string;
+  channel: string;
+  name: string;
+  url?: string;
 }
-
 declare const verifyConditions: (pluginConfig: PluginConfig, context: VerifyConditionsContext) => Promise<void>;
 declare const prepare: (pluginConfig: PluginConfig, context: PrepareContext) => Promise<void>;
 declare const publish: (pluginConfig: PluginConfig, context: PublishContext) => Promise<ReleaseInfo | false>;
 declare const addChannel: (pluginConfig: PluginConfig, context: AddChannelContext) => Promise<ReleaseInfo | false>;
-
 export { addChannel, prepare, publish, verifyConditions };

package/dist/index.js

@@ -18,7 +18,7 @@ const __cjs_getBuiltinModule = (module) => {
 };
 
 import dbg from 'debug';
-import { execa } from 'execa';
+import { execa, ExecaError } from 'execa';
 import { validRange, major, gte } from 'semver';
 import { isAccessibleSync, ensureFileSync, isAccessible, readJson, writeJson, move, writeFile } from '@visulima/fs';
 import { resolve } from '@visulima/path';
@@ -199,6 +199,21 @@ const prepare$1 = async ({ pkgRoot, tarballDir }, { cwd, env, logger, nextReleas
 };
 
 const debug$6 = dbg("semantic-release-pnpm:publish");
+const ALREADY_PUBLISHED_PHRASE = "cannot publish over the previously published versions";
+const isAlreadyPublishedError = (error) => {
+  const haystacks = [error.stderr, error.shortMessage, error.message].filter((value) => typeof value === "string");
+  return haystacks.some((value) => value.includes(ALREADY_PUBLISHED_PHRASE));
+};
+const handlePublishError = (error, packageJson, context, distributionTag, registry) => {
+  const { logger, nextRelease: { version } } = context;
+  const errorMessage = error instanceof Error ? error.message : String(error);
+  if (error instanceof ExecaError && isAlreadyPublishedError(error)) {
+    logger.log(`Package ${packageJson.name ?? ""}@${version} is already published at dist-tag @${distributionTag} on ${registry}, skipping`);
+    return getReleaseInfo(packageJson, context, distributionTag, registry);
+  }
+  logger.log(`Failed to publish ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}: ${errorMessage}`);
+  throw new AggregateError([error], errorMessage, { cause: error });
+};
 const publish$1 = async (pluginConfig, packageJson, context) => {
   const {
     cwd,
@@ -237,9 +252,7 @@ const publish$1 = async (pluginConfig, packageJson, context) => {
     try {
       await result;
     } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      logger.log(`Failed to publish ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}: ${errorMessage}`);
-      throw new AggregateError([error], errorMessage, { cause: error });
+      return handlePublishError(error, packageJson, context, distributionTag, registry);
     }
     logger.log(`Published ${packageJson.name ?? ""}@${version} to dist-tag @${distributionTag} on ${registry}`);
     return getReleaseInfo(packageJson, context, distributionTag, registry);
@@ -576,11 +589,17 @@ const verifyAuthContextAgainstRegistry = async (npmrc, registry, context) => {
       }
     } catch (error) {
       if (isConnectionError(error)) {
-        const semanticError2 = getError("EINVALIDNPMAUTH", { registry });
-        throw new AggregateError([semanticError2], semanticError2.message, { cause: error });
+        const semanticError = getError("EINVALIDNPMAUTH", { registry });
+        throw new AggregateError([semanticError], semanticError.message, { cause: error });
       }
-      const semanticError = getError("EINVALIDNPMTOKEN", { registry });
-      throw new AggregateError([semanticError], semanticError.message, { cause: error });
+      if (normalizeUrl(registry) === normalizeUrl(OFFICIAL_REGISTRY)) {
+        const semanticError = getError("EINVALIDNPMTOKEN", { registry });
+        throw new AggregateError([semanticError], semanticError.message, { cause: error });
+      }
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      context.logger.warn(
+        `Could not verify auth via "pnpm whoami" on custom registry "${registry}" (${errorMessage}). This registry may not support /-/whoami for the configured token type (e.g. GitLab Package Registry with deploy tokens). The publish step will surface any real credential errors.`
+      );
     }
   })();
   whoamiCache.set(cacheKey, verificationPromise);
@@ -678,7 +697,7 @@ const verify = async (pluginConfig, context) => {
   } catch (error) {
     const typedError = error;
     errorsMessage += typedError.message;
-    errors = [...errors, ...typedError.errors];
+    errors = [...errors, ...Array.isArray(typedError.errors) ? typedError.errors : [typedError]];
   }
   try {
     const packageJson = await getPackage(pluginConfig, context);
@@ -692,7 +711,7 @@ const verify = async (pluginConfig, context) => {
   } catch (error) {
     const typedError = error;
     errorsMessage += typedError.message;
-    errors = [...errors, ...typedError.errors];
+    errors = [...errors, ...Array.isArray(typedError.errors) ? typedError.errors : [typedError]];
   }
   if (errors.length > 0) {
     throw new AggregateError(errors, errorsMessage);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anolilab/semantic-release-pnpm",
-  "version": "8.1.14",
+  "version": "8.1.16",
   "description": "Semantic-release plugin to publish a npm package with pnpm.",
   "keywords": [
     "anolilab",
@@ -61,7 +61,7 @@
   ],
   "dependencies": {
     "@actions/core": "3.0.1",
-    "@anolilab/rc": "4.0.2",
+    "@anolilab/rc": "4.0.4",
     "@semantic-release/error": "^4.0.0",
     "@visulima/fs": "^4.1.0",
     "@visulima/package": "^4.1.7",
@@ -72,7 +72,7 @@
     "ini": "^6.0.0",
     "normalize-url": "9.0.1",
     "registry-auth-token": "5.1.1",
-    "semver": "7.8.0"
+    "semver": "7.8.4"
   },
   "engines": {
     "node": "^22.14.0 || >=24.10.0"