@williamthorsen/release-kit 4.7.0 → 4.8.0

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project will be documented in this file.
 
+## [release-kit-v4.8.0] - 2026-04-17
+
+### Bug fixes
+
+- Replace broad catch with `existsSync` guard in `detectRepoType` (#229)
+
+  Fixes silent swallowing of unexpected filesystem errors in `detectRepoType`. Previously, errors like `EACCES` (permission denied) or `EMFILE` (too many open files) when reading `package.json` were caught and discarded, causing the function to silently return `'single-package'` instead of surfacing the problem.
+
+### Features
+
+- Add `push` command for safe tag pushing (#243)
+
+  Adds a `release-kit push` command that safely pushes the release commit and each tag individually, ensuring GitHub Actions fires a separate workflow run per tag. The command performs a `1 + N` push sequence: one branch push followed by one `git push --no-follow-tags origin <tag>` per resolved tag. Supports `--dry-run` (preview without pushing), `--only` (filter tags by package name), and `--tags-only` (skip the branch push).
+
 ## [release-kit-v4.7.0] - 2026-04-16
 
 ### Features
@@ -227,6 +241,10 @@ All notable changes to this project will be documented in this file.
 
 ### Features
 
+- Migrate release-kit from toolbelt (#18)
+
+  Migrates the complete `@williamthorsen/release-kit` package (v1.0.1) from `williamthorsen/toolbelt` into `packages/release-kit/`, adds shebang preservation to the shared esbuild plugin for CLI binaries, and sets up dogfooding infrastructure so this monorepo uses release-kit for its own releases.
+
 - Slim down release workflow by removing unnecessary pnpm install (#21)
 
   Make release-kit self-contained by invoking git-cliff via `npx --yes` instead of requiring it on PATH, and by appending modified file paths to the format command so lightweight formatters like `npx prettier --write` work without a full `pnpm install`. Update init templates, README, and consuming repo config/workflow to reference workflow v3.
@@ -249,12 +267,4 @@ All notable changes to this project will be documented in this file.
 
   Addresses five code quality issues and a test coverage gap identified during the release-kit migration (#5). Extracts a duplicated `isRecord` type guard into a shared module, eliminates a double-read in `bumpAllVersions`, improves error handling in `usesPnpm` by replacing a silent catch with a structured error boundary, removes an unreachable `'feature'` pattern from version defaults, and adds an integration test for scaffold template path resolution.
 
-## [release-kit-v1.0.1] - 2026-03-14
-
-### Features
-
-- Migrate release-kit from toolbelt (#18)
-
-  Migrates the complete `@williamthorsen/release-kit` package (v1.0.1) from `williamthorsen/toolbelt` into `packages/release-kit/`, adds shebang preservation to the shared esbuild plugin for CLI binaries, and sets up dogfooding infrastructure so this monorepo uses release-kit for its own releases.
-
 <!-- generated by git-cliff -->

package/dist/esm/.cache

@@ -1 +1 @@
-d3e4e5bacab96fdfcab4ae55b07b4830280060f0bc39bbada29fa8f08e2c9381
+d6a6d71f34f00ba31c3dca3b32657832693ff9c12de118fafa96fc3554835ecc

package/dist/esm/bin/release-kit.js

@@ -5,6 +5,7 @@ import { githubReleaseCommand } from "../githubReleaseCommand.js";
 import { initCommand } from "../init/initCommand.js";
 import { prepareCommand } from "../prepareCommand.js";
 import { publishCommand } from "../publishCommand.js";
+import { pushCommand } from "../pushCommand.js";
 import { generateCommand } from "../sync-labels/generateCommand.js";
 import { syncLabelsInitCommand } from "../sync-labels/initCommand.js";
 import { syncLabelsCommand } from "../sync-labels/syncCommand.js";
@@ -18,6 +19,7 @@ Commands:
   prepare          Run release preparation (auto-discovers workspaces)
   commit           Stage changes and create the release commit
   tag              Create annotated git tags from the tags file
+  push             Push release commit and tags (one push per tag)
   publish          Publish packages with release tags on HEAD
   github-release   Create GitHub Releases from changelog.json for tags on HEAD
   init             Initialize release-kit in the current repository
@@ -128,6 +130,20 @@ Options:
   --help, -h         Show this help message
 `);
 }
+function showPushHelp() {
+  console.info(`
+Usage: release-kit push [options]
+
+Push the release commit and each tag individually, ensuring GitHub Actions
+fires a separate workflow run per tag.
+
+Options:
+  --dry-run              Preview without pushing
+  --only=name1,name2     Only push tags for the named packages (comma-separated, monorepo only)
+  --tags-only            Skip the branch push (push tags only)
+  --help, -h             Show this help message
+`);
+}
 function showGithubReleaseHelp() {
   console.info(`
 Usage: release-kit github-release [options]
@@ -194,6 +210,14 @@ if (command === "tag") {
   tagCommand(flags);
   process.exit(0);
 }
+if (command === "push") {
+  if (flags.some((f) => f === "--help" || f === "-h")) {
+    showPushHelp();
+    process.exit(0);
+  }
+  await pushCommand(flags);
+  process.exit(0);
+}
 if (command === "github-release") {
   if (flags.some((f) => f === "--help" || f === "-h")) {
     showGithubReleaseHelp();

package/dist/esm/index.d.ts

@@ -27,6 +27,8 @@ export { injectSection } from './injectSection.ts';
 export { COMMIT_PREPROCESSOR_PATTERNS, parseCommitMessage } from './parseCommitMessage.ts';
 export { RELEASE_SUMMARY_FILE, RELEASE_TAGS_FILE, writeReleaseTags } from './prepareCommand.ts';
 export { publishPackage } from './publish.ts';
+export type { PushReleaseOptions } from './pushRelease.ts';
+export { pushRelease } from './pushRelease.ts';
 export { releasePrepare } from './releasePrepare.ts';
 export { releasePrepareMono } from './releasePrepareMono.ts';
 export type { RenderOptions } from './renderReleaseNotes.ts';

package/dist/esm/index.js

@@ -23,6 +23,7 @@ import { injectSection } from "./injectSection.js";
 import { COMMIT_PREPROCESSOR_PATTERNS, parseCommitMessage } from "./parseCommitMessage.js";
 import { RELEASE_SUMMARY_FILE, RELEASE_TAGS_FILE, writeReleaseTags } from "./prepareCommand.js";
 import { publishPackage } from "./publish.js";
+import { pushRelease } from "./pushRelease.js";
 import { releasePrepare } from "./releasePrepare.js";
 import { releasePrepareMono } from "./releasePrepareMono.js";
 import { matchesAudience, renderReleaseNotesMulti, renderReleaseNotesSingle } from "./renderReleaseNotes.js";
@@ -60,6 +61,7 @@ export {
   matchesAudience,
   parseCommitMessage,
   publishPackage,
+  pushRelease,
   releasePrepare,
   releasePrepareMono,
   renderReleaseNotesMulti,

package/dist/esm/init/detectRepoType.js

@@ -4,13 +4,12 @@ function detectRepoType() {
   if (existsSync("pnpm-workspace.yaml")) {
     return "monorepo";
   }
-  try {
+  if (existsSync("package.json")) {
     const raw = readFileSync("package.json", "utf8");
     const pkg = parseJsonRecord(raw);
     if (pkg !== void 0 && Array.isArray(pkg.workspaces)) {
       return "monorepo";
     }
-  } catch {
   }
   return "single-package";
 }

package/dist/esm/init/templates.js

@@ -36,7 +36,7 @@ export default config;
 `;
 }
 function publishWorkflow(repoType) {
-  const tagPattern = repoType === "monorepo" ? "'*-v[0-9]*'" : "'v[0-9]*'";
+  const tagPattern = repoType === "monorepo" ? "'*-v[0-9]*.[0-9]*.[0-9]*'" : "'v[0-9]*.[0-9]*.[0-9]*'";
   return `# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Publish
 
@@ -51,9 +51,9 @@ permissions:
 
 jobs:
   publish:
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/publish.reusable.yaml@publish-workflow-v1
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/publish.reusable.yaml@workflow/publish-v1
     with:
-      provenance: false # Set to true for public repos to generate npm provenance attestations
+      provenance: true
 `;
 }
 function releaseWorkflow(repoType) {
@@ -78,7 +78,7 @@ on:
           - minor
           - major
       force:
-        description: 'Force a version bump even when there are no release-worthy changes'
+        description: 'Force a release even when there are no commits since the last tag (requires --bump)'
         required: false
         type: boolean
         default: false
@@ -89,7 +89,7 @@ permissions:
 
 jobs:
   release:
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/release.reusable.yaml@release-workflow-v1
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/release.reusable.yaml@workflow/release-v1
     with:
       only: \${{ inputs.only }}
       bump: \${{ inputs.bump }}
@@ -112,7 +112,7 @@ on:
           - minor
           - major
       force:
-        description: 'Force a version bump even when there are no release-worthy changes'
+        description: 'Force a release even when there are no commits since the last tag (requires --bump)'
         required: false
         type: boolean
         default: false
@@ -123,7 +123,7 @@ permissions:
 
 jobs:
   release:
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/release.reusable.yaml@release-workflow-v1
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/release.reusable.yaml@workflow/release-v1
     with:
       bump: \${{ inputs.bump }}
       force: \${{ inputs.force }}

package/dist/esm/prepareCommand.js

@@ -25,7 +25,7 @@ Usage: npx @williamthorsen/release-kit prepare [options]
 Options:
   --dry-run             Run without modifying any files
   --bump=major|minor|patch  Override the bump type for all components
-  --force               Bypass the "no commits since last tag" check (monorepo only, requires --bump)
+  --force               Force a release even when there are no commits since the last tag (requires --bump)
   --no-git-checks, -n   Skip the clean-working-tree check
   --only=name1,name2    Only process the named components (comma-separated, monorepo only)
   --help                Show this help message

package/dist/esm/pushCommand.d.ts

@@ -0,0 +1 @@
+export declare function pushCommand(argv: string[]): Promise<void>;

package/dist/esm/pushCommand.js

@@ -0,0 +1,46 @@
+import { parseArgs, translateParseError } from "@williamthorsen/node-monorepo-core";
+import { pushRelease } from "./pushRelease.js";
+import { resolveCommandTags } from "./resolveCommandTags.js";
+const pushFlagSchema = {
+  dryRun: { long: "--dry-run", type: "boolean" },
+  only: { long: "--only", type: "string" },
+  tagsOnly: { long: "--tags-only", type: "boolean" }
+};
+async function pushCommand(argv) {
+  let parsed;
+  try {
+    parsed = parseArgs(argv, pushFlagSchema);
+  } catch (error) {
+    console.error(`Error: ${translateParseError(error)}`);
+    process.exit(1);
+  }
+  const { dryRun, tagsOnly } = parsed.flags;
+  const only = parsed.flags.only?.split(",");
+  const resolvedTags = await resolveCommandTags(only);
+  if (resolvedTags.length === 0) {
+    return;
+  }
+  const prefix = dryRun ? "[dry-run] Would push" : "Pushing";
+  if (!tagsOnly) {
+    console.info(`${prefix} branch and ${resolvedTags.length} tag(s):`);
+  } else {
+    console.info(`${prefix} ${resolvedTags.length} tag(s):`);
+  }
+  for (const { tag } of resolvedTags) {
+    console.info(`  ${tag}`);
+  }
+  try {
+    const steps = pushRelease(resolvedTags, { dryRun, tagsOnly });
+    if (dryRun) {
+      for (const step of steps) {
+        console.info(`[dry-run] ${step.command.join(" ")}`);
+      }
+    }
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exit(1);
+  }
+}
+export {
+  pushCommand
+};

package/dist/esm/pushRelease.d.ts

@@ -0,0 +1,11 @@
+import type { ResolvedTag } from './resolveReleaseTags.ts';
+export interface PushReleaseOptions {
+    dryRun?: boolean;
+    tagsOnly?: boolean;
+}
+export interface PushStep {
+    type: 'branch' | 'tag';
+    ref: string;
+    command: readonly [string, ...string[]];
+}
+export declare function pushRelease(resolvedTags: ResolvedTag[], options?: PushReleaseOptions): PushStep[];

package/dist/esm/pushRelease.js

@@ -0,0 +1,26 @@
+import { execFileSync } from "node:child_process";
+function pushRelease(resolvedTags, options = {}) {
+  const { dryRun = false, tagsOnly = false } = options;
+  const steps = [];
+  if (!tagsOnly) {
+    const branch = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    const command = ["git", "push", "origin", branch];
+    steps.push({ type: "branch", ref: branch, command });
+  }
+  for (const { tag } of resolvedTags) {
+    const command = ["git", "push", "--no-follow-tags", "origin", tag];
+    steps.push({ type: "tag", ref: tag, command });
+  }
+  if (!dryRun) {
+    for (const step of steps) {
+      execFileSync(step.command[0], step.command.slice(1), { stdio: "inherit" });
+    }
+  }
+  return steps;
+}
+export {
+  pushRelease
+};

package/dist/esm/sync-labels/templates.js

@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   sync:
-    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@sync-labels-workflow-v1
+    uses: williamthorsen/node-monorepo-tools/.github/workflows/sync-labels.reusable.yaml@workflow/sync-labels-v1
 `;
 }
 function buildScopeLabels(workspacePaths) {

package/dist/esm/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "4.7.0";
+export declare const VERSION = "4.8.0";

package/dist/esm/version.js

@@ -1,4 +1,4 @@
-const VERSION = "4.7.0";
+const VERSION = "4.8.0";
 export {
   VERSION
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williamthorsen/release-kit",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "description": "Version-bumping and changelog-generation toolkit for release workflows",
   "keywords": [],
   "homepage": "https://github.com/williamthorsen/node-monorepo-tools/tree/main/packages/release-kit#readme",
@@ -35,7 +35,7 @@
     "jiti": "2.6.1",
     "js-yaml": "4.1.1",
     "json-stringify-pretty-compact": "4.0.0",
-    "@williamthorsen/node-monorepo-core": "0.2.6"
+    "@williamthorsen/node-monorepo-core": "0.2.7"
   },
   "devDependencies": {
     "@types/js-yaml": "4.0.9",