@picgo/bump-version 2.0.0 → 2.1.0

package/.github/workflows/publish.yml

@@ -1,4 +1,7 @@
 name: publish
+permissions:
+  contents: read
+  id-token: write
 
 on:
   push:
@@ -16,12 +19,13 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
+          run_install: false
           version: 10
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 25
           registry-url: https://registry.npmjs.org
           cache: pnpm
 
@@ -31,7 +35,8 @@ jobs:
       - name: Lint
         run: pnpm run lint
 
+      - name: Unset NODE_AUTH_TOKEN
+        run: unset NODE_AUTH_TOKEN
+
       - name: Publish
-        run: pnpm publish --access public --no-git-checks
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --access public --provenance --no-git-checks

package/CHANGELOG.md

@@ -1,3 +1,25 @@
+# :tada: 2.1.0 (2026-08-22)
+
+
+### :sparkles: Features
+
+* add non-interactive mode and an explicit --version ([278d034](https://github.com/PicGo/bump-version/commit/278d034))
+
+
+### :bug: Bug Fixes
+
+* fix deps bug ([caba420](https://github.com/PicGo/bump-version/commit/caba420))
+* github actions error ([03c0733](https://github.com/PicGo/bump-version/commit/03c0733))
+* write the version when --no-dry is passed ([1c042cd](https://github.com/PicGo/bump-version/commit/1c042cd))
+
+
+### :package: Chore
+
+* update actions ([4b0c924](https://github.com/PicGo/bump-version/commit/4b0c924))
+* update readme ([1819726](https://github.com/PicGo/bump-version/commit/1819726))
+
+
+
 # :tada: 2.0.0 (2025-12-10)
 
 

package/README.md

@@ -24,15 +24,15 @@ It's now only available for Node.js projects. Thanks [standard-version](https://
 ## Installation
 
 ```bash
-npm install -D  @picgo/bump-version commitizen
+npm install -D  @picgo/bump-version commitizen cz-customizable
 
 #or
 
-yarn add -D  @picgo/bump-version commitizen
+yarn add -D  @picgo/bump-version commitizen cz-customizable
 
 #or
 
-pnpm add -D  @picgo/bump-version commitizen
+pnpm add -D  @picgo/bump-version commitizen cz-customizable
 ```
 
 Also, add the following data at the top level in your `package.json` to properly config `bump-version` (replace old `config` if you have already configured `commitizen` or `cz-customizable` before):
@@ -127,7 +127,10 @@ Usage
   bump-version
 
 Example
-  bump-version -t major
+  bump-version -t major                 Interactive, confirms before running
+  bump-version -t minor -y              Non-interactive, no TTY needed
+  bump-version --version 1.0.0 -y       Bump to an exact version
+  bump-version -t minor -y -d           Preview without changing anything
 
 Options
   -a, --preid-alpha             Prerelease id: alpha. Exp. 1.0.0.alpha-0
@@ -147,6 +150,13 @@ Options
   -t, --type                    Release type. [major, minor, patch, premajor, preminor, prepatch, prerelease]
                                 Default: patch
 
+  -y, --yes                     Skip all prompts and run immediately. Needs no TTY,
+                                so it works in CI and in scripts
+                                Default: false
+
+      --version                 Bump to this exact version instead of deriving one
+                                from --type. A leading "v" is accepted. Exp. 1.0.0
+
   --push                        Auto push commits to origin master
                                 Default: false
 
@@ -157,6 +167,24 @@ Options
                                 Default: changelog will be created
 ```
 
+#### Non-interactive use
+
+Without `-y` the tool always asks for confirmation, which needs a TTY and therefore fails in CI, in `npm run` chains and in agent sessions. `-y` skips every prompt:
+
+```bash
+bump-version -t minor -y              # 0.1.0 -> 0.2.0
+bump-version --version 1.0.0 -y       # bump to exactly 1.0.0
+bump-version --version v1.0.0 -y      # same; a leading "v" is accepted
+```
+
+`--version` takes precedence over `--type`, and is rejected when it is not valid semver or is not greater than the current version. Invalid input exits with code `1`, so a CI step fails rather than tagging the wrong version.
+
+Pair it with `-d` to see exactly what a release would do — the new version, the generated changelog — without writing, committing or tagging anything:
+
+```bash
+bump-version -t minor -y -d
+```
+
 Don't know which version should be the next? Never mind:
 
 If you reject the default next version, then you can choose which version you want or customize one.

package/bin/bump-version

@@ -22,8 +22,12 @@ let argv = minimist(process.argv.slice(2), {
     'file': 'f', // changelog file,
     'path': 'p', // package.json's path
     'help': 'h', // help message
-    'type': 't' // bump type
-  }
+    'type': 't', // bump type
+    'yes': 'y' // skip prompts
+  },
+  // Without this, `--version 1.0.0-beta.1` is parsed as a number and loses
+  // everything after the first dot.
+  string: ['version', 'type', 'file', 'path']
 })
 
 if (argv.h) {
@@ -38,9 +42,32 @@ if (currentVersion === undefined) {
   process.exit(0)
 }
 let preid = argv.a ? 'alpha' : argv.b ? 'beta' : ''
-let nextVersion = semver.inc(currentVersion, releaseType, preid)
 let releaseTypes = ['major', 'minor', 'patch', 'premajor', 'preminor', 'prepatch', 'prerelease']
 
+// An explicit --version wins over --type: naming a version is unambiguous,
+// so silently deriving a different one from the type would be surprising.
+let explicitVersion = typeof argv.version === 'string' ? argv.version.trim() : ''
+let nextVersion
+if (explicitVersion !== '') {
+  // Accept a leading `v` because that is how the tag is written and how
+  // people say it out loud.
+  nextVersion = semver.valid(explicitVersion.replace(/^v/, ''))
+  if (nextVersion === null) {
+    logger(`Invalid version: ${explicitVersion}`, 'error')
+    process.exit(1)
+  }
+  if (semver.lte(nextVersion, currentVersion)) {
+    logger(`Version ${nextVersion} is not greater than the current ${currentVersion}!`, 'error')
+    process.exit(1)
+  }
+} else {
+  if (!releaseTypes.includes(releaseType)) {
+    logger(`Invalid release type: ${releaseType}. Expected one of ${releaseTypes.join(', ')}`, 'error')
+    process.exit(1)
+  }
+  nextVersion = semver.inc(currentVersion, releaseType, preid)
+}
+
 function generateReleaseTypes (types) {
   return types.map(item => {
     let version = semver.inc(currentVersion, item, (preid || 'alpha'))
@@ -71,6 +98,14 @@ BumpVersion -- By PicGo Group
   `
 );
 (async () => {
+  // Non-interactive path: no prompt is written at all, so this works with no
+  // TTY attached (CI, `pnpm release` from a script, an agent session).
+  if (argv.yes) {
+    console.log(`Bumping ${currentVersion} -> ${nextVersion}${argv.dry ? ' (dry run)' : ''}`)
+    await mainLifeCycle(argv, currentVersion, nextVersion)
+    return
+  }
+
   let answer = await inquirer.prompt(promptList)
   if (answer.confirmVersion) {
     await mainLifeCycle(argv, currentVersion, nextVersion)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@picgo/bump-version",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "",
   "main": "index.js",
   "bin": {
@@ -9,6 +9,13 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "test": "echo \"Error: no test specified\"",
+    "cz": "git-cz",
+    "release": "node ./bin/bump-version",
+    "lint": "eslint --ext .js .",
+    "lint:fix": "eslint --ext .js --fix ."
+  },
   "husky": {
     "hooks": {
       "pre-commit": "npm run lint",
@@ -17,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/PicGo/bump-version.git"
+    "url": "https://github.com/PicGo/bump-version"
   },
   "author": "Molunerfinn",
   "license": "MIT",
@@ -62,12 +69,5 @@
   },
   "engines": {
     "node": ">=20.0.0"
-  },
-  "scripts": {
-    "test": "echo \"Error: no test specified\"",
-    "cz": "git-cz",
-    "release": "node ./bin/bump-version",
-    "lint": "eslint --ext .js .",
-    "lint:fix": "eslint --ext .js --fix ."
   }
-}
+}

package/src/bumpVersion.js

@@ -2,9 +2,9 @@ const fs = require('fs')
 const checkFileAndGetPath = require('./utils').checkFileAndGetPath
 let versionFiles = ['package.json', 'package-lock.json']
 module.exports = (argv, version) => {
-  if (argv.dry === false) {
-    return Promise.resolve()
-  }
+  // No early return for `dry` here: the write itself is guarded below, so
+  // bailing out would also skip it for `--no-dry`, leaving commit and tag to
+  // run against an unchanged version.
   versionFiles = checkFileAndGetPath(argv, versionFiles)
 
   for (let file of versionFiles) {

package/src/utils.js

@@ -17,7 +17,10 @@ Usage
   bump-version
 
 Example
-  bump-version -t major
+  bump-version -t major                 Interactive, confirms before running
+  bump-version -t minor -y              Non-interactive, no TTY needed
+  bump-version --version 1.0.0 -y       Bump to an exact version
+  bump-version -t minor -y -d           Preview without changing anything
 
 Options
   -a, --preid-alpha             Prerelease id: alpha. Exp. 1.0.0.alpha-0
@@ -37,6 +40,13 @@ Options
   -t, --type                    Release type. [major, minor, patch, premajor, preminor, prepatch, prerelease]
                                 Default: patch
 
+  -y, --yes                     Skip all prompts and run immediately. Needs no TTY,
+                                so it works in CI and in scripts
+                                Default: false
+
+      --version                 Bump to this exact version instead of deriving one
+                                from --type. A leading "v" is accepted. Exp. 1.0.0
+
   --push                        Auto push commits to origin master
                                 Default: false