@cycjimmy/semantic-release-action 7.1.0 → 7.1.1

package/README.md

@@ -178,6 +178,8 @@ steps:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 ```
 
+**NOTE**: `dry-run` mode still requires write access to the repository. At startup, semantic-release verifies push permission by running `git push --dry-run` ([`verifyAuth`](https://github.com/semantic-release/semantic-release/blob/master/lib/git.js)), and GitHub enforces write access for dry-run pushes as well — nothing is actually pushed. If the credentials cannot push — for example, the default `GITHUB_TOKEN` when the job does not grant `permissions: contents: write` — the action fails with `EGITNOPERMISSION: Cannot push to the Git repository.` even in `dry-run` mode. To fix it, grant write permission to the job, e.g. `permissions: contents: write` (or use a token with write access).
+
 #### ci
 > {Optional Input Parameter} Whether to run semantic release with CI support (default true).
 

package/docs/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [7.1.1](https://github.com/cycjimmy/semantic-release-action/compare/v7.1.0...v7.1.1) (2026-10-10)
+
+
+### Bug Fixes
+
+* **ci:** improve error handling for push permission failures ([895d556](https://github.com/cycjimmy/semantic-release-action/commit/895d556be9f4f2e382d2713f135c582cfd36d619)), closes [#312](https://github.com/cycjimmy/semantic-release-action/issues/312)
+
 # [7.1.0](https://github.com/cycjimmy/semantic-release-action/compare/v7.0.0...v7.1.0) (2026-10-09)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cycjimmy/semantic-release-action",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "GitHub Action for Semantic Release",
   "main": "index.js",
   "type": "module",

package/src/handleError.js

@@ -0,0 +1,32 @@
+import * as core from '@actions/core';
+
+const EGITNOPERMISSION_HINT =
+  `Push permission check failed (EGITNOPERMISSION). If you use the default GITHUB_TOKEN, ` +
+  `grant write access to the job, e.g. "permissions: contents: write". ` +
+  `This is also required in dry-run mode: semantic-release verifies push permission with "git push --dry-run". ` +
+  `See https://github.com/cycjimmy/semantic-release-action#dry_run`;
+
+/**
+ * Check whether an error, or any aggregated sub-error, has the given code.
+ * @param {Error|String} error
+ * @param {String} code
+ * @returns {Boolean}
+ */
+const hasErrorCode = (error, code) =>
+  error?.code === code ||
+  (Array.isArray(error?.errors) && error.errors.some((subError) => hasErrorCode(subError, code)));
+
+/**
+ * Report a failed release to GitHub Actions, adding extra hints for known semantic-release error codes.
+ * @param {Error|String} error
+ * @returns {void}
+ */
+const handleError = (error) => {
+  if (hasErrorCode(error, 'EGITNOPERMISSION')) {
+    core.warning(EGITNOPERMISSION_HINT);
+  }
+
+  core.setFailed(error);
+};
+
+export default handleError;

package/src/index.js

@@ -10,6 +10,7 @@ import {
   handleRepositoryUrlOption,
   handleSkipNpmPluginOption,
 } from './handleOptions.js';
+import handleError from './handleError.js';
 import setUpJob from './setUpJob.task.js';
 import installSpecifyingVersionSemantic from './installSpecifyingVersionSemantic.task.js';
 import assertSemanticReleaseVersion from './assertSemanticReleaseVersion.task.js';
@@ -57,5 +58,5 @@ const release = async () => {
 
 export default async () => {
   core.debug('Initialization successful');
-  release().catch(core.setFailed);
+  release().catch(handleError);
 };