@pnpm/releasing.commands 1100.5.3 → 1100.5.4

package/lib/publish/oidc/authToken.js

@@ -1,4 +1,4 @@
-import { PnpmError } from '@pnpm/error';
+import { PnpmError, redactUrlCredentials } from '@pnpm/error';
 import npa from '@pnpm/npm-package-arg';
 import { displayError } from '../displayError.js';
 import { SHARED_CONTEXT } from '../utils/shared-context.js';
@@ -58,10 +58,11 @@ export class AuthTokenFetchError extends AuthTokenError {
     packageName;
     registry;
     constructor(error, packageName, registry) {
-        super('AUTH_TOKEN_FETCH', `Failed to fetch authToken for package ${packageName} from registry ${registry}: ${displayError(error)}`);
+        const redactedRegistry = redactUrlCredentials(registry);
+        super('AUTH_TOKEN_FETCH', `Failed to fetch authToken for package ${packageName} from registry ${redactedRegistry}: ${displayError(error)}`);
         this.errorSource = error;
         this.packageName = packageName;
-        this.registry = registry;
+        this.registry = redactedRegistry;
     }
 }
 export class AuthTokenExchangeError extends AuthTokenError {
@@ -86,10 +87,11 @@ export class AuthTokenMalformedJsonError extends AuthTokenError {
     packageName;
     registry;
     constructor(malformedJsonResponse, packageName, registry) {
-        super('AUTH_TOKEN_MALFORMED_JSON', `Failed to fetch authToken for package ${packageName} from registry ${registry} due to malformed JSON response`);
+        const redactedRegistry = redactUrlCredentials(registry);
+        super('AUTH_TOKEN_MALFORMED_JSON', `Failed to fetch authToken for package ${packageName} from registry ${redactedRegistry} due to malformed JSON response`);
         this.malformedJsonResponse = malformedJsonResponse;
         this.packageName = packageName;
-        this.registry = registry;
+        this.registry = redactedRegistry;
     }
 }
 //# sourceMappingURL=authToken.js.map

package/lib/publish/oidc/provenance.js

@@ -1,4 +1,4 @@
-import { PnpmError } from '@pnpm/error';
+import { PnpmError, redactUrlCredentials } from '@pnpm/error';
 import npa from '@pnpm/npm-package-arg';
 import { SHARED_CONTEXT } from '../utils/shared-context.js';
 /**
@@ -72,11 +72,12 @@ export class ProvenanceFailedToFetchVisibilityError extends ProvenanceError {
         else if (errorResponse?.message) {
             message = errorResponse.message;
         }
-        super('PROVENANCE_FAILED_TO_FETCH_VISIBILITY', `Failed to fetch visibility for package ${packageName} from registry ${registry} due to ${message} (status code ${status})`);
+        const redactedRegistry = redactUrlCredentials(registry);
+        super('PROVENANCE_FAILED_TO_FETCH_VISIBILITY', `Failed to fetch visibility for package ${packageName} from registry ${redactedRegistry} due to ${message} (status code ${status})`);
         this.errorResponse = errorResponse;
         this.status = status;
         this.packageName = packageName;
-        this.registry = registry;
+        this.registry = redactedRegistry;
     }
     static async createErrorFromFetchResponse(response, packageName, registry) {
         let errorResponse;

package/lib/publish/publishPackedPkg.js

@@ -1,5 +1,5 @@
 import fs from 'node:fs/promises';
-import { PnpmError } from '@pnpm/error';
+import { PnpmError, redactUrlCredentials } from '@pnpm/error';
 import { globalInfo, globalWarn } from '@pnpm/logger';
 import { createDispatchedFetch } from '@pnpm/network.fetch';
 import { DEFAULT_REGISTRY_SCOPE } from '@pnpm/types';
@@ -20,7 +20,8 @@ export async function publishPackedPkg(packResult, opts) {
     const { name, version } = publishedManifest;
     const { registry } = publishOptions;
     const isStage = opts.stage === true;
-    globalInfo(`📦 ${name}@${version} → ${registry ?? 'the default registry'}`);
+    // Redact any `user:pass@` credentials a registry= URL may carry so they don't leak into logs.
+    globalInfo(`📦 ${name}@${version} → ${registry != null ? redactUrlCredentials(registry) : 'the default registry'}`);
     const summary = createPublishSummary({ publishedManifest, tarballPath, contents, unpackedSize }, tarballData);
     if (opts.dryRun) {
         globalWarn(`Skip ${isStage ? 'staging' : 'publishing'} ${name}@${version} (dry run)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/releasing.commands",
-  "version": "1100.5.3",
+  "version": "1100.5.4",
   "description": "Commands for deploy, pack, and publish",
   "keywords": [
     "pnpm",
@@ -53,32 +53,32 @@
     "write-json-file": "^7.0.0",
     "write-yaml-file": "^6.0.0",
     "@pnpm/bins.resolver": "1100.0.8",
+    "@pnpm/cli.common-cli-options-help": "1100.0.2",
     "@pnpm/config.pick-registry-for-package": "1100.0.9",
-    "@pnpm/config.reader": "1101.11.0",
+    "@pnpm/cli.utils": "1101.0.13",
+    "@pnpm/config.reader": "1101.11.1",
     "@pnpm/constants": "1100.0.0",
-    "@pnpm/cli.common-cli-options-help": "1100.0.2",
     "@pnpm/deps.path": "1100.0.8",
-    "@pnpm/catalogs.types": "1100.0.0",
-    "@pnpm/engine.runtime.commands": "1100.1.8",
+    "@pnpm/engine.runtime.commands": "1100.1.9",
+    "@pnpm/engine.runtime.node-resolver": "1101.1.11",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/engine.runtime.node-resolver": "1101.1.10",
     "@pnpm/exec.lifecycle": "1100.1.2",
-    "@pnpm/fetching.directory-fetcher": "1100.0.19",
-    "@pnpm/cli.utils": "1101.0.13",
     "@pnpm/exec.pnpm-cli-runner": "1100.0.1",
+    "@pnpm/fetching.directory-fetcher": "1100.0.19",
+    "@pnpm/catalogs.types": "1100.0.0",
     "@pnpm/fs.indexed-pkg-importer": "1100.0.17",
     "@pnpm/fs.packlist": "1100.0.1",
-    "@pnpm/installing.client": "1100.2.11",
-    "@pnpm/installing.commands": "1100.10.2",
     "@pnpm/fs.is-empty-dir-or-nothing": "1100.0.0",
-    "@pnpm/lockfile.fs": "1100.1.8",
-    "@pnpm/network.fetch": "1100.1.4",
+    "@pnpm/installing.client": "1100.2.12",
+    "@pnpm/installing.commands": "1100.10.3",
     "@pnpm/lockfile.types": "1100.0.13",
+    "@pnpm/lockfile.fs": "1100.1.9",
     "@pnpm/network.auth-header": "1101.1.3",
+    "@pnpm/network.fetch": "1100.1.4",
     "@pnpm/network.git-utils": "1100.0.2",
-    "@pnpm/releasing.exportable-manifest": "1100.1.9",
-    "@pnpm/resolving.resolver-base": "1100.5.1",
     "@pnpm/network.web-auth": "1101.2.0",
+    "@pnpm/resolving.resolver-base": "1100.5.1",
+    "@pnpm/releasing.exportable-manifest": "1100.1.9",
     "@pnpm/types": "1101.3.2",
     "@pnpm/workspace.projects-sorter": "1100.0.8"
   },
@@ -106,14 +106,14 @@
     "@pnpm/assert-project": "1100.0.18",
     "@pnpm/catalogs.config": "1100.0.2",
     "@pnpm/hooks.pnpmfile": "1100.0.17",
-    "@pnpm/prepare": "1100.0.18",
-    "@pnpm/releasing.commands": "1100.5.3",
     "@pnpm/logger": "1100.0.0",
-    "@pnpm/test-fixtures": "1100.0.0",
+    "@pnpm/releasing.commands": "1100.5.4",
+    "@pnpm/prepare": "1100.0.18",
     "@pnpm/test-ipc-server": "1100.0.0",
-    "@pnpm/testing.command-defaults": "1100.0.8",
+    "@pnpm/test-fixtures": "1100.0.0",
     "@pnpm/testing.registry-mock": "1100.0.8",
-    "@pnpm/workspace.projects-filter": "1100.0.24"
+    "@pnpm/testing.command-defaults": "1100.0.8",
+    "@pnpm/workspace.projects-filter": "1100.0.25"
   },
   "engines": {
     "node": ">=22.13"