@qlover/fe-release 5.0.6 → 5.3.1

package/dist/cli.cjs

@@ -28,7 +28,7 @@ var import_commander = require("commander");
 
 // package.json
 var description = "A tool for releasing front-end projects, supporting multiple release modes and configurations, simplifying the release process and improving efficiency.";
-var version = "5.0.6";
+var version = "5.3.1";
 
 // src/cli.ts
 var import_semver = __toESM(require("semver"), 1);
@@ -82,6 +82,10 @@ var releaseJson = {
     branchName: "release/${repoName}-${releaseId}",
     releaseTagName: "release-tag-${count}-patch-${releaseId}",
     commitMessage: "chore(release): ${spaces}",
+    /** GitHub release title template (createRelease mode) */
+    releaseName: "${name}@${version}",
+    /** Path prefixes skipped when creating GitHub releases */
+    ignoreReleasePaths: [],
     label: {
       name: "CI-Release",
       color: "1A7F37",
@@ -1606,6 +1610,22 @@ var ChangesetVersion = class extends import_scripts_context4.ScriptPlugin {
   get ignoreNonUpdatedPackages() {
     return !!this.config.ignoreNonUpdatedPackages;
   }
+  get useTrustedPublishing() {
+    return !!(this.config.useTrustedPublishing || this.context.parameters.changesetVersion?.useTrustedPublishing);
+  }
+  /**
+   * True when publish should use npm Trusted Publishing (OIDC) instead of NPM_TOKEN.
+   */
+  isTrustedPublishingEnv() {
+    if (this.useTrustedPublishing) {
+      return true;
+    }
+    const envFlag = this.context.getEnv("FE_RELEASE_TRUSTED_PUBLISHING");
+    if (envFlag === "1" || envFlag === "true") {
+      return true;
+    }
+    return Boolean(this.context.getEnv("ACTIONS_ID_TOKEN_REQUEST_URL"));
+  }
   shouldProcessWorkspace(workspace) {
     return shouldProcessWorkspace(workspace, this.ignoreNonUpdatedPackages);
   }
@@ -1627,15 +1647,26 @@ var ChangesetVersion = class extends import_scripts_context4.ScriptPlugin {
     }
   }
   /**
-   * Ensure NPM_TOKEN is available and configured before changeset publish.
+   * Configure npm auth before changeset publish.
    *
-   * Only required for `publish` / `both` modes. Version-only runs (release PR)
-   * do not need an npm auth token.
+   * Uses Trusted Publishing (OIDC) when detected; otherwise requires `NPM_TOKEN`.
+   * Version-only runs (release PR) do not need npm auth.
    */
   async validateNpmToken() {
+    if (this.isTrustedPublishingEnv()) {
+      this.logger.info(
+        "Using npm Trusted Publishing (OIDC); skip NPM_TOKEN auth setup"
+      );
+      if (this.context.dryRun) {
+        this.logDryRun("Would publish via npm Trusted Publishing (OIDC)");
+      }
+      return;
+    }
     const npmToken = this.context.getEnv("NPM_TOKEN");
     if (!npmToken) {
-      throw new Error("NPM_TOKEN is not set");
+      throw new Error(
+        "NPM_TOKEN is not set. Enable Trusted Publishing (OIDC) or provide NPM_TOKEN."
+      );
     }
     if (this.context.dryRun) {
       this.logDryRun(
@@ -2745,7 +2776,7 @@ var GithubManager = class {
    */
   getOctokitReleaseOptions(options) {
     const {
-      releaseName,
+      releaseName = releaseJson.github.releaseName,
       draft = false,
       preRelease = false,
       autoGenerate = false,
@@ -2754,7 +2785,7 @@ var GithubManager = class {
       discussionCategoryName = void 0
     } = this.context.getParameters("github");
     const name = releaseName;
-    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes));
+    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes ?? ""));
     return {
       name,
       make_latest: makeLatest.toString(),
@@ -3518,6 +3549,7 @@ var ReleaseFormatter = class {
 var Github = class extends GitBase {
   releaseFormatter;
   githubManager;
+  pather = new Pather();
   constructor(context, props = {}) {
     super(context, "github", props);
     this.releaseFormatter = new ReleaseFormatter(
@@ -3529,6 +3561,9 @@ var Github = class extends GitBase {
   get mode() {
     return this.config.mode || releaseJson.github.mode;
   }
+  get ignoreReleasePaths() {
+    return this.config.ignoreReleasePaths ?? [...releaseJson.github.ignoreReleasePaths];
+  }
   async onBefore() {
     await super.onBefore();
     await this.githubManager.validateToken();
@@ -3554,6 +3589,9 @@ var Github = class extends GitBase {
           if (workspace.dependencyRelease) {
             return workspace;
           }
+          if (this.mode === "createRelease" && this.isIgnoredReleasePath(workspace)) {
+            return workspace;
+          }
           return githubChangelog.enrichWorkspaceChangelog(workspace);
         })
       )
@@ -3562,6 +3600,13 @@ var Github = class extends GitBase {
   }
   async onSuccess() {
     const workspaces = this.context.requireWorkspaces();
+    if (this.mode === "createRelease") {
+      await this.step({
+        label: "Create GitHub Releases",
+        task: () => this.createGithubReleases(workspaces)
+      });
+      return;
+    }
     const releaseBranchResult = await this.step({
       label: "Create Release Branch",
       task: () => this.createReleaseBranch(workspaces)
@@ -3578,6 +3623,63 @@ var Github = class extends GitBase {
     }
     await this.handleReleasePullRequest(workspaces, releaseBranchResult);
   }
+  /**
+   * Whether this workspace path is under an ignoreReleasePaths entry.
+   */
+  isIgnoredReleasePath(workspace) {
+    const ignorePaths = this.ignoreReleasePaths;
+    if (ignorePaths.length === 0) {
+      return false;
+    }
+    return ignorePaths.some(
+      (ignorePath) => this.pather.isSubPath(workspace.path, ignorePath)
+    );
+  }
+  /**
+   * Workspaces that should receive a GitHub Release in createRelease mode.
+   *
+   * Requires `tagName`. Skips dependency-release packages and paths matched
+   * by {@link GithubProps.ignoreReleasePaths}. Private packages are included
+   * when they have a tag.
+   */
+  getReleaseWorkspaces(workspaces) {
+    return workspaces.filter((workspace) => {
+      if (!workspace.tagName) {
+        return false;
+      }
+      if (workspace.dependencyRelease) {
+        return false;
+      }
+      if (this.isIgnoredReleasePath(workspace)) {
+        this.logger.info(
+          `Skip GitHub Release for ignored path: ${workspace.path} (${workspace.tagName})`
+        );
+        return false;
+      }
+      return true;
+    });
+  }
+  /**
+   * Create a GitHub Release for each eligible workspace.
+   *
+   * Release notes use the enriched workspace changelog from `onExec`.
+   */
+  async createGithubReleases(workspaces) {
+    const releaseWorkspaces = this.getReleaseWorkspaces(workspaces);
+    if (releaseWorkspaces.length === 0) {
+      this.logger.warn("No workspaces eligible for GitHub Release creation");
+      return;
+    }
+    this.logger.info(
+      `Creating GitHub Releases (${releaseWorkspaces.length}):
+${releaseWorkspaces.map((w) => `  ${w.tagName}`).join("\n")}`
+    );
+    await Promise.all(
+      releaseWorkspaces.map(
+        (workspace) => this.githubManager.createRelease(workspace)
+      )
+    );
+  }
   /**
    * Create the release PR and optionally auto-merge it.
    *
@@ -3907,6 +4009,9 @@ function programArgs() {
   ).option(
     "--changelog.ignore-non-updated-packages",
     "Alias of --changesetVersion.ignore-non-updated-packages"
+  ).option(
+    "--changesetVersion.use-trusted-publishing",
+    "Use npm Trusted Publishing (OIDC) instead of NPM_TOKEN (fe-config: release.changesetVersion.useTrustedPublishing)"
   ).option(
     "--changesetVersion.mode <mode>",
     "ChangesetVersion mode: version (default), publish, or both (fe-config: release.changesetVersion.mode)",
@@ -3933,6 +4038,22 @@ function programArgs() {
   ).option(
     "--workspaces.skip",
     "Skip the Workspaces plugin"
+  ).option(
+    "--github.mode <mode>",
+    "Github mode: createPR (default) or createRelease (fe-config: release.github.mode)",
+    (value) => {
+      if (value !== "createPR" && value !== "createRelease") {
+        throw new Error(
+          'Invalid github.mode. Must be "createPR" or "createRelease"'
+        );
+      }
+      return value;
+    },
+    "createPR"
+  ).option(
+    "--github.ignore-release-paths <paths>",
+    "Path prefixes to skip when creating GitHub Releases, comma-separated (fe-config: release.github.ignoreReleasePaths)",
+    splitWithComma
   ).option(
     "--github.skip [lifecycle]",
     "Skip the Github plugin (no value) or a lifecycle such as onSuccess"

package/dist/cli.js

@@ -5,7 +5,7 @@ import { Command } from "commander";
 
 // package.json
 var description = "A tool for releasing front-end projects, supporting multiple release modes and configurations, simplifying the release process and improving efficiency.";
-var version = "5.0.6";
+var version = "5.3.1";
 
 // src/cli.ts
 import semver from "semver";
@@ -59,6 +59,10 @@ var releaseJson = {
     branchName: "release/${repoName}-${releaseId}",
     releaseTagName: "release-tag-${count}-patch-${releaseId}",
     commitMessage: "chore(release): ${spaces}",
+    /** GitHub release title template (createRelease mode) */
+    releaseName: "${name}@${version}",
+    /** Path prefixes skipped when creating GitHub releases */
+    ignoreReleasePaths: [],
     label: {
       name: "CI-Release",
       color: "1A7F37",
@@ -1586,6 +1590,22 @@ var ChangesetVersion = class extends ScriptPlugin2 {
   get ignoreNonUpdatedPackages() {
     return !!this.config.ignoreNonUpdatedPackages;
   }
+  get useTrustedPublishing() {
+    return !!(this.config.useTrustedPublishing || this.context.parameters.changesetVersion?.useTrustedPublishing);
+  }
+  /**
+   * True when publish should use npm Trusted Publishing (OIDC) instead of NPM_TOKEN.
+   */
+  isTrustedPublishingEnv() {
+    if (this.useTrustedPublishing) {
+      return true;
+    }
+    const envFlag = this.context.getEnv("FE_RELEASE_TRUSTED_PUBLISHING");
+    if (envFlag === "1" || envFlag === "true") {
+      return true;
+    }
+    return Boolean(this.context.getEnv("ACTIONS_ID_TOKEN_REQUEST_URL"));
+  }
   shouldProcessWorkspace(workspace) {
     return shouldProcessWorkspace(workspace, this.ignoreNonUpdatedPackages);
   }
@@ -1607,15 +1627,26 @@ var ChangesetVersion = class extends ScriptPlugin2 {
     }
   }
   /**
-   * Ensure NPM_TOKEN is available and configured before changeset publish.
+   * Configure npm auth before changeset publish.
    *
-   * Only required for `publish` / `both` modes. Version-only runs (release PR)
-   * do not need an npm auth token.
+   * Uses Trusted Publishing (OIDC) when detected; otherwise requires `NPM_TOKEN`.
+   * Version-only runs (release PR) do not need npm auth.
    */
   async validateNpmToken() {
+    if (this.isTrustedPublishingEnv()) {
+      this.logger.info(
+        "Using npm Trusted Publishing (OIDC); skip NPM_TOKEN auth setup"
+      );
+      if (this.context.dryRun) {
+        this.logDryRun("Would publish via npm Trusted Publishing (OIDC)");
+      }
+      return;
+    }
     const npmToken = this.context.getEnv("NPM_TOKEN");
     if (!npmToken) {
-      throw new Error("NPM_TOKEN is not set");
+      throw new Error(
+        "NPM_TOKEN is not set. Enable Trusted Publishing (OIDC) or provide NPM_TOKEN."
+      );
     }
     if (this.context.dryRun) {
       this.logDryRun(
@@ -2725,7 +2756,7 @@ var GithubManager = class {
    */
   getOctokitReleaseOptions(options) {
     const {
-      releaseName,
+      releaseName = releaseJson.github.releaseName,
       draft = false,
       preRelease = false,
       autoGenerate = false,
@@ -2734,7 +2765,7 @@ var GithubManager = class {
       discussionCategoryName = void 0
     } = this.context.getParameters("github");
     const name = releaseName;
-    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes));
+    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes ?? ""));
     return {
       name,
       make_latest: makeLatest.toString(),
@@ -3498,6 +3529,7 @@ var ReleaseFormatter = class {
 var Github = class extends GitBase {
   releaseFormatter;
   githubManager;
+  pather = new Pather();
   constructor(context, props = {}) {
     super(context, "github", props);
     this.releaseFormatter = new ReleaseFormatter(
@@ -3509,6 +3541,9 @@ var Github = class extends GitBase {
   get mode() {
     return this.config.mode || releaseJson.github.mode;
   }
+  get ignoreReleasePaths() {
+    return this.config.ignoreReleasePaths ?? [...releaseJson.github.ignoreReleasePaths];
+  }
   async onBefore() {
     await super.onBefore();
     await this.githubManager.validateToken();
@@ -3534,6 +3569,9 @@ var Github = class extends GitBase {
           if (workspace.dependencyRelease) {
             return workspace;
           }
+          if (this.mode === "createRelease" && this.isIgnoredReleasePath(workspace)) {
+            return workspace;
+          }
           return githubChangelog.enrichWorkspaceChangelog(workspace);
         })
       )
@@ -3542,6 +3580,13 @@ var Github = class extends GitBase {
   }
   async onSuccess() {
     const workspaces = this.context.requireWorkspaces();
+    if (this.mode === "createRelease") {
+      await this.step({
+        label: "Create GitHub Releases",
+        task: () => this.createGithubReleases(workspaces)
+      });
+      return;
+    }
     const releaseBranchResult = await this.step({
       label: "Create Release Branch",
       task: () => this.createReleaseBranch(workspaces)
@@ -3558,6 +3603,63 @@ var Github = class extends GitBase {
     }
     await this.handleReleasePullRequest(workspaces, releaseBranchResult);
   }
+  /**
+   * Whether this workspace path is under an ignoreReleasePaths entry.
+   */
+  isIgnoredReleasePath(workspace) {
+    const ignorePaths = this.ignoreReleasePaths;
+    if (ignorePaths.length === 0) {
+      return false;
+    }
+    return ignorePaths.some(
+      (ignorePath) => this.pather.isSubPath(workspace.path, ignorePath)
+    );
+  }
+  /**
+   * Workspaces that should receive a GitHub Release in createRelease mode.
+   *
+   * Requires `tagName`. Skips dependency-release packages and paths matched
+   * by {@link GithubProps.ignoreReleasePaths}. Private packages are included
+   * when they have a tag.
+   */
+  getReleaseWorkspaces(workspaces) {
+    return workspaces.filter((workspace) => {
+      if (!workspace.tagName) {
+        return false;
+      }
+      if (workspace.dependencyRelease) {
+        return false;
+      }
+      if (this.isIgnoredReleasePath(workspace)) {
+        this.logger.info(
+          `Skip GitHub Release for ignored path: ${workspace.path} (${workspace.tagName})`
+        );
+        return false;
+      }
+      return true;
+    });
+  }
+  /**
+   * Create a GitHub Release for each eligible workspace.
+   *
+   * Release notes use the enriched workspace changelog from `onExec`.
+   */
+  async createGithubReleases(workspaces) {
+    const releaseWorkspaces = this.getReleaseWorkspaces(workspaces);
+    if (releaseWorkspaces.length === 0) {
+      this.logger.warn("No workspaces eligible for GitHub Release creation");
+      return;
+    }
+    this.logger.info(
+      `Creating GitHub Releases (${releaseWorkspaces.length}):
+${releaseWorkspaces.map((w) => `  ${w.tagName}`).join("\n")}`
+    );
+    await Promise.all(
+      releaseWorkspaces.map(
+        (workspace) => this.githubManager.createRelease(workspace)
+      )
+    );
+  }
   /**
    * Create the release PR and optionally auto-merge it.
    *
@@ -3887,6 +3989,9 @@ function programArgs() {
   ).option(
     "--changelog.ignore-non-updated-packages",
     "Alias of --changesetVersion.ignore-non-updated-packages"
+  ).option(
+    "--changesetVersion.use-trusted-publishing",
+    "Use npm Trusted Publishing (OIDC) instead of NPM_TOKEN (fe-config: release.changesetVersion.useTrustedPublishing)"
   ).option(
     "--changesetVersion.mode <mode>",
     "ChangesetVersion mode: version (default), publish, or both (fe-config: release.changesetVersion.mode)",
@@ -3913,6 +4018,22 @@ function programArgs() {
   ).option(
     "--workspaces.skip",
     "Skip the Workspaces plugin"
+  ).option(
+    "--github.mode <mode>",
+    "Github mode: createPR (default) or createRelease (fe-config: release.github.mode)",
+    (value) => {
+      if (value !== "createPR" && value !== "createRelease") {
+        throw new Error(
+          'Invalid github.mode. Must be "createPR" or "createRelease"'
+        );
+      }
+      return value;
+    },
+    "createPR"
+  ).option(
+    "--github.ignore-release-paths <paths>",
+    "Path prefixes to skip when creating GitHub Releases, comma-separated (fe-config: release.github.ignoreReleasePaths)",
+    splitWithComma
   ).option(
     "--github.skip [lifecycle]",
     "Skip the Github plugin (no value) or a lifecycle such as onSuccess"

package/dist/index.cjs

@@ -79,6 +79,10 @@ var releaseJson = {
     branchName: "release/${repoName}-${releaseId}",
     releaseTagName: "release-tag-${count}-patch-${releaseId}",
     commitMessage: "chore(release): ${spaces}",
+    /** GitHub release title template (createRelease mode) */
+    releaseName: "${name}@${version}",
+    /** Path prefixes skipped when creating GitHub releases */
+    ignoreReleasePaths: [],
     label: {
       name: "CI-Release",
       color: "1A7F37",
@@ -1611,6 +1615,22 @@ var ChangesetVersion = class extends import_scripts_context4.ScriptPlugin {
   get ignoreNonUpdatedPackages() {
     return !!this.config.ignoreNonUpdatedPackages;
   }
+  get useTrustedPublishing() {
+    return !!(this.config.useTrustedPublishing || this.context.parameters.changesetVersion?.useTrustedPublishing);
+  }
+  /**
+   * True when publish should use npm Trusted Publishing (OIDC) instead of NPM_TOKEN.
+   */
+  isTrustedPublishingEnv() {
+    if (this.useTrustedPublishing) {
+      return true;
+    }
+    const envFlag = this.context.getEnv("FE_RELEASE_TRUSTED_PUBLISHING");
+    if (envFlag === "1" || envFlag === "true") {
+      return true;
+    }
+    return Boolean(this.context.getEnv("ACTIONS_ID_TOKEN_REQUEST_URL"));
+  }
   shouldProcessWorkspace(workspace) {
     return shouldProcessWorkspace(workspace, this.ignoreNonUpdatedPackages);
   }
@@ -1632,15 +1652,26 @@ var ChangesetVersion = class extends import_scripts_context4.ScriptPlugin {
     }
   }
   /**
-   * Ensure NPM_TOKEN is available and configured before changeset publish.
+   * Configure npm auth before changeset publish.
    *
-   * Only required for `publish` / `both` modes. Version-only runs (release PR)
-   * do not need an npm auth token.
+   * Uses Trusted Publishing (OIDC) when detected; otherwise requires `NPM_TOKEN`.
+   * Version-only runs (release PR) do not need npm auth.
    */
   async validateNpmToken() {
+    if (this.isTrustedPublishingEnv()) {
+      this.logger.info(
+        "Using npm Trusted Publishing (OIDC); skip NPM_TOKEN auth setup"
+      );
+      if (this.context.dryRun) {
+        this.logDryRun("Would publish via npm Trusted Publishing (OIDC)");
+      }
+      return;
+    }
     const npmToken = this.context.getEnv("NPM_TOKEN");
     if (!npmToken) {
-      throw new Error("NPM_TOKEN is not set");
+      throw new Error(
+        "NPM_TOKEN is not set. Enable Trusted Publishing (OIDC) or provide NPM_TOKEN."
+      );
     }
     if (this.context.dryRun) {
       this.logDryRun(
@@ -2750,7 +2781,7 @@ var GithubManager = class {
    */
   getOctokitReleaseOptions(options) {
     const {
-      releaseName,
+      releaseName = releaseJson.github.releaseName,
       draft = false,
       preRelease = false,
       autoGenerate = false,
@@ -2759,7 +2790,7 @@ var GithubManager = class {
       discussionCategoryName = void 0
     } = this.context.getParameters("github");
     const name = releaseName;
-    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes));
+    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes ?? ""));
     return {
       name,
       make_latest: makeLatest.toString(),
@@ -3523,6 +3554,7 @@ var ReleaseFormatter = class {
 var Github = class extends GitBase {
   releaseFormatter;
   githubManager;
+  pather = new Pather();
   constructor(context, props = {}) {
     super(context, "github", props);
     this.releaseFormatter = new ReleaseFormatter(
@@ -3534,6 +3566,9 @@ var Github = class extends GitBase {
   get mode() {
     return this.config.mode || releaseJson.github.mode;
   }
+  get ignoreReleasePaths() {
+    return this.config.ignoreReleasePaths ?? [...releaseJson.github.ignoreReleasePaths];
+  }
   async onBefore() {
     await super.onBefore();
     await this.githubManager.validateToken();
@@ -3559,6 +3594,9 @@ var Github = class extends GitBase {
           if (workspace.dependencyRelease) {
             return workspace;
           }
+          if (this.mode === "createRelease" && this.isIgnoredReleasePath(workspace)) {
+            return workspace;
+          }
           return githubChangelog.enrichWorkspaceChangelog(workspace);
         })
       )
@@ -3567,6 +3605,13 @@ var Github = class extends GitBase {
   }
   async onSuccess() {
     const workspaces = this.context.requireWorkspaces();
+    if (this.mode === "createRelease") {
+      await this.step({
+        label: "Create GitHub Releases",
+        task: () => this.createGithubReleases(workspaces)
+      });
+      return;
+    }
     const releaseBranchResult = await this.step({
       label: "Create Release Branch",
       task: () => this.createReleaseBranch(workspaces)
@@ -3583,6 +3628,63 @@ var Github = class extends GitBase {
     }
     await this.handleReleasePullRequest(workspaces, releaseBranchResult);
   }
+  /**
+   * Whether this workspace path is under an ignoreReleasePaths entry.
+   */
+  isIgnoredReleasePath(workspace) {
+    const ignorePaths = this.ignoreReleasePaths;
+    if (ignorePaths.length === 0) {
+      return false;
+    }
+    return ignorePaths.some(
+      (ignorePath) => this.pather.isSubPath(workspace.path, ignorePath)
+    );
+  }
+  /**
+   * Workspaces that should receive a GitHub Release in createRelease mode.
+   *
+   * Requires `tagName`. Skips dependency-release packages and paths matched
+   * by {@link GithubProps.ignoreReleasePaths}. Private packages are included
+   * when they have a tag.
+   */
+  getReleaseWorkspaces(workspaces) {
+    return workspaces.filter((workspace) => {
+      if (!workspace.tagName) {
+        return false;
+      }
+      if (workspace.dependencyRelease) {
+        return false;
+      }
+      if (this.isIgnoredReleasePath(workspace)) {
+        this.logger.info(
+          `Skip GitHub Release for ignored path: ${workspace.path} (${workspace.tagName})`
+        );
+        return false;
+      }
+      return true;
+    });
+  }
+  /**
+   * Create a GitHub Release for each eligible workspace.
+   *
+   * Release notes use the enriched workspace changelog from `onExec`.
+   */
+  async createGithubReleases(workspaces) {
+    const releaseWorkspaces = this.getReleaseWorkspaces(workspaces);
+    if (releaseWorkspaces.length === 0) {
+      this.logger.warn("No workspaces eligible for GitHub Release creation");
+      return;
+    }
+    this.logger.info(
+      `Creating GitHub Releases (${releaseWorkspaces.length}):
+${releaseWorkspaces.map((w) => `  ${w.tagName}`).join("\n")}`
+    );
+    await Promise.all(
+      releaseWorkspaces.map(
+        (workspace) => this.githubManager.createRelease(workspace)
+      )
+    );
+  }
   /**
    * Create the release PR and optionally auto-merge it.
    *

package/dist/index.d.ts

@@ -253,7 +253,7 @@ interface ReleaseFormatterConfig {
 
 /**
  * @module Github
- * @description GitHub changelog enrichment and release PR plugin
+ * @description GitHub changelog enrichment, release PR, and GitHub Release plugin
  *
  * Third plugin in the default release pipeline (after {@link Workspaces} and
  * {@link ChangesetVersion}). Extends {@link GitBase} for git operations and
@@ -262,33 +262,48 @@ interface ReleaseFormatterConfig {
  * Pipeline phases:
  * - **onBefore**: validate GitHub token; seed {@link ReleaseFormatter} context
  * - **onExec**: enrich workspace changelogs with PR/commit links via {@link GithubChangelog}
- * - **onSuccess**: create release branch, commit, push, and open PR (unless skipped)
+ * - **onSuccess**:
+ *   - `createPR` — create release branch, commit, push, and open PR (unless skipped)
+ *   - `createRelease` — create a GitHub Release per workspace (tag + changelog body)
  *
- * Release branch flow:
+ * Release branch flow (`createPR`):
  * 1. `ReleaseFormatter.getReleaseBranch()` — derive branch and tag names from templates
  * 2. Create branch from `sourceBranch`, commit version/changelog changes, push
  * 3. Open PR with formatted title/body and optional labels
  * 4. Auto-merge when `autoMergeReleasePr` is enabled
  *
+ * GitHub Release flow (`createRelease`):
+ * 1. Filter workspaces with `tagName`, skipping `dependencyRelease` and
+ *    paths matched by {@link GithubProps.ignoreReleasePaths}
+ * 2. Call {@link GithubManager.createRelease} with workspace changelog as notes
+ *
  * @example Skip PR creation (local dry-run)
  * ```bash
  * fe-release --github.skip-create-release-pr --dry-run
  * ```
  *
+ * @example Publish + GitHub Releases (ignore examples)
+ * ```bash
+ * fe-release --changesetVersion.mode publish \
+ *   --github.mode createRelease \
+ *   --github.ignore-release-paths examples
+ * ```
+ *
  * @example fe-config label and merge settings
  * ```json
  * {
  *   "release": {
  *     "github": {
  *       "autoMergeReleasePr": false,
- *       "label": { "name": "CI-Release" }
+ *       "label": { "name": "CI-Release" },
+ *       "ignoreReleasePaths": ["examples"]
  *     }
  *   }
  * }
  * ```
  */
 
-type GithubMode = 'createPR';
+type GithubMode = 'createPR' | 'createRelease';
 type GithubLabel = {
     /**
      * Hexadecimal color code for label appearance
@@ -345,8 +360,8 @@ interface GithubProps extends ReleaseFormatterConfig, GitBaseProps {
     /**
      * Plugin work mode
      *
-     * Currently only `createPR` is supported: enrich changelogs in `onExec`,
-     * then create release branch and PR in `onSuccess`.
+     * - `createPR`: enrich changelogs in `onExec`, then create release branch and PR in `onSuccess`
+     * - `createRelease`: enrich changelogs in `onExec`, then create GitHub Releases in `onSuccess`
      *
      * @default `'createPR'`
      */
@@ -423,6 +438,22 @@ interface GithubProps extends ReleaseFormatterConfig, GitBaseProps {
      * @default false
      */
     skipCreateReleasePr?: boolean;
+    /**
+     * Workspace path prefixes to skip when creating GitHub Releases.
+     *
+     * Matched with segment-aware path containment (e.g. `examples` skips
+     * `examples/react-seed`). Applies only in `createRelease` mode.
+     *
+     * CLI: `--github.ignore-release-paths`
+     * fe-config: `release.github.ignoreReleasePaths`
+     *
+     * @default `[]`
+     * @example
+     * ```json
+     * { "ignoreReleasePaths": ["examples", "apps/docs"] }
+     * ```
+     */
+    ignoreReleasePaths?: string[];
     /**
      * Configuration for release pull request labels
      *
@@ -850,7 +881,8 @@ interface ChangeLogInterface {
  * Changesets CLI for monorepo version bumps.
  *
  * Pipeline phases:
- * - **onBefore**: validate `.changeset` directory; validate `NPM_TOKEN` when mode includes publish
+ * - **onBefore**: validate `.changeset` directory; configure npm auth when mode includes publish
+ *   (`NPM_TOKEN` for token auth, or skip when Trusted Publishing / OIDC is detected)
  * - **onExec**: generate per-workspace git changelogs (skips `dependencyRelease`
  *   when `ignoreNonUpdatedPackages` is enabled)
  * - **onSuccess**: run version and/or publish flow based on `mode`
@@ -963,6 +995,17 @@ interface ChangesetVersionProps extends GitChangelogOptions, ScriptPluginProps {
      * @default false
      */
     ignoreNonUpdatedPackages?: boolean;
+    /**
+     * Use npm Trusted Publishing (OIDC) instead of `NPM_TOKEN`.
+     *
+     * When enabled (or when GitHub Actions OIDC env is detected), publish skips
+     * writing `_authToken` to npm config so the CLI can exchange OIDC credentials.
+     *
+     * CLI: `--changesetVersion.use-trusted-publishing`
+     *
+     * @default false
+     */
+    useTrustedPublishing?: boolean;
 }
 /**
  * Manages changelog generation, changeset file creation, and Changesets CLI execution.
@@ -977,14 +1020,19 @@ declare class ChangesetVersion extends ScriptPlugin<ReleaseContext, ChangesetVer
     get changesetConfigPath(): string;
     protected get mode(): ChangesetVersionMode;
     protected get ignoreNonUpdatedPackages(): boolean;
+    protected get useTrustedPublishing(): boolean;
+    /**
+     * True when publish should use npm Trusted Publishing (OIDC) instead of NPM_TOKEN.
+     */
+    protected isTrustedPublishingEnv(): boolean;
     protected shouldProcessWorkspace(workspace: WorkspaceInterface): boolean;
     protected getProcessableWorkspaces(workspaces: WorkspaceInterface[]): WorkspaceInterface[];
     onBefore(): Promise<void>;
     /**
-     * Ensure NPM_TOKEN is available and configured before changeset publish.
+     * Configure npm auth before changeset publish.
      *
-     * Only required for `publish` / `both` modes. Version-only runs (release PR)
-     * do not need an npm auth token.
+     * Uses Trusted Publishing (OIDC) when detected; otherwise requires `NPM_TOKEN`.
+     * Version-only runs (release PR) do not need npm auth.
      */
     protected validateNpmToken(): Promise<void>;
     onExec(_context: ReleaseContext): Promise<void>;
@@ -1465,6 +1513,10 @@ declare const releaseJson: {
         readonly branchName: "release/${repoName}-${releaseId}";
         readonly releaseTagName: "release-tag-${count}-patch-${releaseId}";
         readonly commitMessage: "chore(release): ${spaces}";
+        /** GitHub release title template (createRelease mode) */
+        readonly releaseName: "${name}@${version}";
+        /** Path prefixes skipped when creating GitHub releases */
+        readonly ignoreReleasePaths: readonly string[];
         readonly label: {
             readonly name: "CI-Release";
             readonly color: "1A7F37";

package/dist/index.js

@@ -27,6 +27,10 @@ var releaseJson = {
     branchName: "release/${repoName}-${releaseId}",
     releaseTagName: "release-tag-${count}-patch-${releaseId}",
     commitMessage: "chore(release): ${spaces}",
+    /** GitHub release title template (createRelease mode) */
+    releaseName: "${name}@${version}",
+    /** Path prefixes skipped when creating GitHub releases */
+    ignoreReleasePaths: [],
     label: {
       name: "CI-Release",
       color: "1A7F37",
@@ -1562,6 +1566,22 @@ var ChangesetVersion = class extends ScriptPlugin2 {
   get ignoreNonUpdatedPackages() {
     return !!this.config.ignoreNonUpdatedPackages;
   }
+  get useTrustedPublishing() {
+    return !!(this.config.useTrustedPublishing || this.context.parameters.changesetVersion?.useTrustedPublishing);
+  }
+  /**
+   * True when publish should use npm Trusted Publishing (OIDC) instead of NPM_TOKEN.
+   */
+  isTrustedPublishingEnv() {
+    if (this.useTrustedPublishing) {
+      return true;
+    }
+    const envFlag = this.context.getEnv("FE_RELEASE_TRUSTED_PUBLISHING");
+    if (envFlag === "1" || envFlag === "true") {
+      return true;
+    }
+    return Boolean(this.context.getEnv("ACTIONS_ID_TOKEN_REQUEST_URL"));
+  }
   shouldProcessWorkspace(workspace) {
     return shouldProcessWorkspace(workspace, this.ignoreNonUpdatedPackages);
   }
@@ -1583,15 +1603,26 @@ var ChangesetVersion = class extends ScriptPlugin2 {
     }
   }
   /**
-   * Ensure NPM_TOKEN is available and configured before changeset publish.
+   * Configure npm auth before changeset publish.
    *
-   * Only required for `publish` / `both` modes. Version-only runs (release PR)
-   * do not need an npm auth token.
+   * Uses Trusted Publishing (OIDC) when detected; otherwise requires `NPM_TOKEN`.
+   * Version-only runs (release PR) do not need npm auth.
    */
   async validateNpmToken() {
+    if (this.isTrustedPublishingEnv()) {
+      this.logger.info(
+        "Using npm Trusted Publishing (OIDC); skip NPM_TOKEN auth setup"
+      );
+      if (this.context.dryRun) {
+        this.logDryRun("Would publish via npm Trusted Publishing (OIDC)");
+      }
+      return;
+    }
     const npmToken = this.context.getEnv("NPM_TOKEN");
     if (!npmToken) {
-      throw new Error("NPM_TOKEN is not set");
+      throw new Error(
+        "NPM_TOKEN is not set. Enable Trusted Publishing (OIDC) or provide NPM_TOKEN."
+      );
     }
     if (this.context.dryRun) {
       this.logDryRun(
@@ -2701,7 +2732,7 @@ var GithubManager = class {
    */
   getOctokitReleaseOptions(options) {
     const {
-      releaseName,
+      releaseName = releaseJson.github.releaseName,
       draft = false,
       preRelease = false,
       autoGenerate = false,
@@ -2710,7 +2741,7 @@ var GithubManager = class {
       discussionCategoryName = void 0
     } = this.context.getParameters("github");
     const name = releaseName;
-    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes));
+    const body = autoGenerate ? "" : this.truncateBody(String(releaseNotes ?? ""));
     return {
       name,
       make_latest: makeLatest.toString(),
@@ -3474,6 +3505,7 @@ var ReleaseFormatter = class {
 var Github = class extends GitBase {
   releaseFormatter;
   githubManager;
+  pather = new Pather();
   constructor(context, props = {}) {
     super(context, "github", props);
     this.releaseFormatter = new ReleaseFormatter(
@@ -3485,6 +3517,9 @@ var Github = class extends GitBase {
   get mode() {
     return this.config.mode || releaseJson.github.mode;
   }
+  get ignoreReleasePaths() {
+    return this.config.ignoreReleasePaths ?? [...releaseJson.github.ignoreReleasePaths];
+  }
   async onBefore() {
     await super.onBefore();
     await this.githubManager.validateToken();
@@ -3510,6 +3545,9 @@ var Github = class extends GitBase {
           if (workspace.dependencyRelease) {
             return workspace;
           }
+          if (this.mode === "createRelease" && this.isIgnoredReleasePath(workspace)) {
+            return workspace;
+          }
           return githubChangelog.enrichWorkspaceChangelog(workspace);
         })
       )
@@ -3518,6 +3556,13 @@ var Github = class extends GitBase {
   }
   async onSuccess() {
     const workspaces = this.context.requireWorkspaces();
+    if (this.mode === "createRelease") {
+      await this.step({
+        label: "Create GitHub Releases",
+        task: () => this.createGithubReleases(workspaces)
+      });
+      return;
+    }
     const releaseBranchResult = await this.step({
       label: "Create Release Branch",
       task: () => this.createReleaseBranch(workspaces)
@@ -3534,6 +3579,63 @@ var Github = class extends GitBase {
     }
     await this.handleReleasePullRequest(workspaces, releaseBranchResult);
   }
+  /**
+   * Whether this workspace path is under an ignoreReleasePaths entry.
+   */
+  isIgnoredReleasePath(workspace) {
+    const ignorePaths = this.ignoreReleasePaths;
+    if (ignorePaths.length === 0) {
+      return false;
+    }
+    return ignorePaths.some(
+      (ignorePath) => this.pather.isSubPath(workspace.path, ignorePath)
+    );
+  }
+  /**
+   * Workspaces that should receive a GitHub Release in createRelease mode.
+   *
+   * Requires `tagName`. Skips dependency-release packages and paths matched
+   * by {@link GithubProps.ignoreReleasePaths}. Private packages are included
+   * when they have a tag.
+   */
+  getReleaseWorkspaces(workspaces) {
+    return workspaces.filter((workspace) => {
+      if (!workspace.tagName) {
+        return false;
+      }
+      if (workspace.dependencyRelease) {
+        return false;
+      }
+      if (this.isIgnoredReleasePath(workspace)) {
+        this.logger.info(
+          `Skip GitHub Release for ignored path: ${workspace.path} (${workspace.tagName})`
+        );
+        return false;
+      }
+      return true;
+    });
+  }
+  /**
+   * Create a GitHub Release for each eligible workspace.
+   *
+   * Release notes use the enriched workspace changelog from `onExec`.
+   */
+  async createGithubReleases(workspaces) {
+    const releaseWorkspaces = this.getReleaseWorkspaces(workspaces);
+    if (releaseWorkspaces.length === 0) {
+      this.logger.warn("No workspaces eligible for GitHub Release creation");
+      return;
+    }
+    this.logger.info(
+      `Creating GitHub Releases (${releaseWorkspaces.length}):
+${releaseWorkspaces.map((w) => `  ${w.tagName}`).join("\n")}`
+    );
+    await Promise.all(
+      releaseWorkspaces.map(
+        (workspace) => this.githubManager.createRelease(workspace)
+      )
+    );
+  }
   /**
    * Create the release PR and optionally auto-merge it.
    *

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@qlover/fe-release",
   "description": "A tool for releasing front-end projects, supporting multiple release modes and configurations, simplifying the release process and improving efficiency.",
-  "version": "5.0.6",
+  "version": "5.3.1",
   "type": "module",
   "private": false,
   "homepage": "https://github.com/qlover/fe-base/tree/master/packages/fe-release",
@@ -59,8 +59,8 @@
     "lodash-es": "^4.17.22",
     "p-limit": "^6.2.0",
     "semver": "^7.5.4",
-    "@qlover/env-loader": "1.0.2",
-    "@qlover/fe-corekit": "3.4.4",
+    "@qlover/env-loader": "1.1.0",
+    "@qlover/fe-corekit": "3.4.6",
     "@qlover/logger": "1.2.1",
     "@qlover/scripts-context": "2.3.3"
   },