@itcase/config 1.7.9 → 1.7.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itcase/config",
-  "version": "1.7.9",
+  "version": "1.7.11",
   "author": "ITCase",
   "description": "ITCase Config",
   "engines": {

package/semantic-release/common.js

@@ -17,8 +17,11 @@ const releaseNotesFromIssuesScript = join(
   'releaseNotesFromIssues.js',
 )
 
-// Ссылки на задачи из PR. Репозиторий задач и токен приходят из CI:
-// RELEASE_NOTES_ISSUES_REPO, RELEASE_NOTES_GH_TOKEN.
+// Ссылки на задачи из PR.
+// RELEASE_NOTES_PULLS_REPO — репозиторий pull request'ов, если это не репозиторий Actions.
+// Его и задачи читает RELEASE_NOTES_GH_TOKEN.
+// Без RELEASE_NOTES_PULLS_REPO pull request'ы читает GITHUB_TOKEN в текущем репозитории.
+// RELEASE_NOTES_ISSUES_REPO — репозиторий задач.
 const releaseNotesFromIssuesPlugin = [
   '@semantic-release/exec',
   {

package/semantic-release/releaseNotesFromIssues.js

@@ -14,12 +14,22 @@ import { join } from 'node:path'
  */
 const [lastTagArg, nextTagArg] = process.argv.slice(2)
 
-// Token is passed from GitHub Actions env and used for all API calls
-const githubToken = process.env.RELEASE_NOTES_GH_TOKEN
+// Pull requests of the repository where Actions runs.
+// Used only when RELEASE_NOTES_PULLS_REPO is not set.
+const repositoryToken = process.env.GITHUB_TOKEN || process.env.GH_TOKEN
+
+// Issues and, when configured, pull requests of another repository.
+// The workflow token cannot read them.
+const issuesToken = process.env.RELEASE_NOTES_GH_TOKEN
 
 const currentProjectOwner = process.env.GITHUB_REPOSITORY?.split('/')[0]
 const currentProjectRepo = process.env.GITHUB_REPOSITORY?.split('/')[1]
 
+// Repository with pull requests, when it is not the Actions repository.
+const releaseNotesPullsRepo = process.env.RELEASE_NOTES_PULLS_REPO
+const pullsProjectOwner = releaseNotesPullsRepo?.split('/')[0]
+const pullsProjectRepo = releaseNotesPullsRepo?.split('/')[1]
+
 // Repository with all issues. Not this project repository.
 // Used when PR text contains "Issue: #123".
 const releaseNotesIssuesRepo = process.env.RELEASE_NOTES_ISSUES_REPO
@@ -27,8 +37,28 @@ const releaseNotesIssuesRepo = process.env.RELEASE_NOTES_ISSUES_REPO
 const issuesProjectOwner = releaseNotesIssuesRepo?.split('/')[0]
 const issuesProjectRepo = releaseNotesIssuesRepo?.split('/')[1]
 
-if (!currentProjectOwner || !currentProjectRepo || !githubToken) {
-  throw new Error('Missing "GITHUB_REPOSITORY" or "RELEASE_NOTES_GH_TOKEN"')
+const pullRequestOwner = pullsProjectOwner || currentProjectOwner
+const pullRequestRepo = pullsProjectRepo || currentProjectRepo
+const pullRequestToken = releaseNotesPullsRepo ? issuesToken : repositoryToken
+
+if (!currentProjectOwner || !currentProjectRepo) {
+  throw new Error('Missing "GITHUB_REPOSITORY"')
+}
+
+if (releaseNotesPullsRepo && (!pullsProjectOwner || !pullsProjectRepo)) {
+  throw new Error('Invalid "RELEASE_NOTES_PULLS_REPO". Expected "owner/repo"')
+}
+
+if (!pullRequestToken) {
+  throw new Error(
+    releaseNotesPullsRepo
+      ? 'Missing "RELEASE_NOTES_GH_TOKEN"'
+      : 'Missing "GITHUB_TOKEN"',
+  )
+}
+
+if (!issuesToken) {
+  throw new Error('Missing "RELEASE_NOTES_GH_TOKEN"')
 }
 
 if (!issuesProjectOwner || !issuesProjectRepo) {
@@ -269,7 +299,7 @@ async function run() {
 }
 
 // Small helper for GitHub REST API with common headers and query serialization.
-async function fetchGithubApi(pathname, queryParams = {}) {
+async function fetchGithubApi(pathname, token, queryParams = {}) {
   const apiUrl = new URL(`https://api.github.com${pathname}`)
 
   for (const [key, value] of Object.entries(queryParams)) {
@@ -282,7 +312,7 @@ async function fetchGithubApi(pathname, queryParams = {}) {
   const response = await fetch(apiUrl, {
     headers: {
       Accept: 'application/vnd.github+json',
-      Authorization: `Bearer ${githubToken}`,
+      Authorization: `Bearer ${token}`,
       'User-Agent': 'semantic-release-issues-notes',
       // GitHub REST API version header
       'X-GitHub-Api-Version': '2026-03-10',
@@ -426,10 +456,24 @@ function getGitCommitsInRange(fromRef, toRef) {
 async function getAssociatedPullRequestsForCommit(commitSha) {
   // GitHub endpoint that returns PRs linked to a commit SHA.
   // Works for both merge-commit and regular commits associated with PRs.
-  const response = await fetchGithubApi(
-    `/repos/${currentProjectOwner}/${currentProjectRepo}/commits/${commitSha}/pulls`,
-  )
-  return Array.isArray(response) ? response : []
+  // The commit has to exist in pullRequestOwner/pullRequestRepo.
+  // A SHA from another git history is not a pull request there.
+  try {
+    const response = await fetchGithubApi(
+      `/repos/${pullRequestOwner}/${pullRequestRepo}/commits/${commitSha}/pulls`,
+      pullRequestToken,
+    )
+    return Array.isArray(response) ? response : []
+  } catch (error) {
+    if (String(error?.message).includes('(422)')) {
+      console.error(
+        `[release-notes] Commit ${commitSha} is not in ${pullRequestOwner}/${pullRequestRepo}`,
+      )
+      return []
+    }
+
+    throw error
+  }
 }
 
 async function loadIssuesInBatches(refs) {
@@ -449,7 +493,7 @@ async function loadIssue(ref) {
   const [issueOwner, issueRepo] = repoRef.split('/')
   const issuePath = `/repos/${issueOwner}/${issueRepo}/issues/${issueNumber}`
   try {
-    return await fetchGithubApi(issuePath)
+    return await fetchGithubApi(issuePath, issuesToken)
   } catch (error) {
     throw new Error(
       `Failed to load issue for ref="${ref}" using path="${issuePath}"`,