bulk-release 2.16.2 → 2.18.0

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [2.18.0](https://github.com/semrel-extra/zx-bulk-release/compare/v2.17.0...v2.18.0) (2026-04-05)
+
+### Features
+* feat: introduce recovery mode ([2f15fd8](https://github.com/semrel-extra/zx-bulk-release/commit/2f15fd83cfb41a4a55a4ab12d880c00e24c5c717))
+
+## [2.17.0](https://github.com/semrel-extra/zx-bulk-release/compare/v2.16.2...v2.17.0) (2026-04-05)
+
+### Features
+* feat: rollback git tags on npm push issues ([3d55439](https://github.com/semrel-extra/zx-bulk-release/commit/3d55439a150f08bf2c0cf3d1edae9f327abce0e4))
+
 ## [2.16.2](https://github.com/semrel-extra/zx-bulk-release/compare/v2.16.1...v2.16.2) (2026-04-05)
 
 ### Fixes & improvements

package/README.md

@@ -50,6 +50,7 @@ GH_TOKEN=ghtoken GH_USER=username NPM_TOKEN=npmtoken npx zx-bulk-release [opts]
 | `--dry-run` / `--no-publish` | Disable any publish logic                                                                                                 |                  |
 | `--report`                   | Persist release state to file                                                                                             |                  |
 | `--snapshot`                 | Disable any publishing steps except of `npm` and `publishCmd` (if defined), then  push packages to the `snapshot` channel |                  |  
+| `--recover`                  | Remove orphan git tags (tag pushed but npm publish failed) and retry release                                               |                  |
 | `--debug`                    | Enable [zx](https://github.com/google/zx#verbose) verbose mode                                                            |                  |
 | `--version` / `-v`           | Print own version                                                                                                         |                  |
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "bulk-release",
   "alias": "bulk-release",
-  "version": "2.16.2",
+  "version": "2.18.0",
   "description": "zx-based alternative for multi-semantic-release",
   "type": "module",
   "exports": {

package/src/main/js/api/git.js

@@ -109,11 +109,18 @@ export const getTags = async (cwd, ref) =>
 
 export const pushTag = async ({cwd, tag, gitCommitterName, gitCommitterEmail}) => {
   await setUserConfig(cwd, gitCommitterName, gitCommitterEmail)
+
   await $({cwd})`
     git tag -m ${tag} ${tag} &&
     git push origin ${tag}`
 }
 
+export const deleteRemoteTag = async ({cwd, tag}) => {
+  log()(`rolling back remote tag '${tag}'`)
+  await $({cwd, nothrow: true})`git push origin :refs/tags/${tag}`
+  await $({cwd, nothrow: true})`git tag -d ${tag}`
+}
+
 // Memoize prevents .git/config lock
 // https://github.com/qiwi/packasso/actions/runs/4539987310/jobs/8000403413#step:7:282
 export const setUserConfig = memoizeBy(async(cwd, gitCommitterName, gitCommitterEmail) => $({cwd})`

package/src/main/js/steps/contextify.js

@@ -1,12 +1,19 @@
 import {getPkgConfig} from '../config.js'
 import {getLatest} from '../processor/meta.js'
-import {getRoot, getSha} from '../api/git.js'
+import {getRoot, getSha, deleteRemoteTag} from '../api/git.js'
+import {fetchManifest} from '../api/npm.js'
+import {log} from '../log.js'
 import {$} from 'zx-extra'
 
 // Inspired by https://docs.github.com/en/actions/learn-github-actions/contexts
 export const contextify = async (pkg, {packages, root, flags, env}) => {
   pkg.config = await getPkgConfig([pkg.absPath, root.absPath], env)
   pkg.latest = await getLatest(pkg)
+
+  if (flags.recover && pkg.latest.tag) {
+    await recover(pkg)
+  }
+
   pkg.context = {
     git: {
       sha: await getSha(pkg.absPath),
@@ -17,3 +24,25 @@ export const contextify = async (pkg, {packages, root, flags, env}) => {
     packages
   }
 }
+
+// Verify that the latest tagged version actually exists on npm.
+// If not (tag was pushed but npm publish failed), delete the orphan tag
+// so the next analyze phase can re-detect changes and retry the release.
+const recover = async (pkg) => {
+  const needsNpm = !pkg.manifest.private && pkg.config.npmPublish !== false
+  if (!needsNpm) return
+
+  const {tag} = pkg.latest
+  const manifest = await fetchManifest({
+    name: pkg.name,
+    version: tag.version,
+    config: pkg.config,
+  }, {nothrow: true})
+
+  if (!manifest) {
+    const cwd = await getRoot(pkg.absPath)
+    log({pkg})(`recover: tag '${tag.ref}' exists but ${pkg.name}@${tag.version} not found on npm, removing orphan tag`)
+    await deleteRemoteTag({cwd, tag: tag.ref})
+    pkg.latest = await getLatest(pkg)
+  }
+}

package/src/main/js/steps/publish.js

@@ -5,14 +5,11 @@ import {npmPersist, npmPublish} from '../api/npm.js'
 import {prepareMeta, pushMeta, pushReleaseTag} from '../processor/meta.js'
 import {pushChangelog} from '../api/changelog.js'
 import {ghPages, ghRelease} from '../api/gh.js'
+import {deleteRemoteTag} from '../api/git.js'
 
 export const publish = memoizeBy(async (pkg, run = exec) => within(async () => {
   $.scope = pkg.name
 
-  // Debug
-  // https://www.npmjs.com/package/@packasso/preset-ts-tsc-uvu/v/0.0.0?activeTab=code
-  // https://github.com/qiwi/packasso/actions/runs/4514909191/jobs/7951564982#step:7:817
-  // https://github.com/qiwi/packasso/blob/meta/2023-3-24-packasso-preset-ts-tsc-uvu-0-21-0-f0.json
   if (pkg.version !== pkg.manifest.version) {
     throw new Error('package.json version not synced')
   }
@@ -27,14 +24,26 @@ export const publish = memoizeBy(async (pkg, run = exec) => within(async () => {
     ])
   } else {
     await pushReleaseTag(pkg)
-    await Promise.all([
-      pushMeta(pkg),
-      pushChangelog(pkg),
-      npmPublish(pkg),
-      ghRelease(pkg),
-      ghPages(pkg),
-      run(pkg, 'publishCmd')
-    ])
+    try {
+      await Promise.all([
+        pushMeta(pkg),
+        pushChangelog(pkg),
+        npmPublish(pkg),
+        ghRelease(pkg),
+        ghPages(pkg),
+        run(pkg, 'publishCmd')
+      ])
+    } catch (e) {
+      // Rollback the tag only for npm-published packages so the next run can retry.
+      // Git-tag-only packages (private or npmPublish: false) keep their tag — it IS the release.
+      const needsNpm = !pkg.manifest.private && pkg.config.npmPublish !== false
+      const cwd = pkg.context.git.root
+      const tag = pkg.context.git.tag
+      if (tag && needsNpm) {
+        await deleteRemoteTag({cwd, tag})
+      }
+      throw e
+    }
   }
   pkg.published = true
 }))