bulk-release 2.18.1 → 2.18.3

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [2.18.3](https://github.com/semrel-extra/zx-bulk-release/compare/v2.18.2...v2.18.3) (2026-04-05)
+
+### Fixes & improvements
+* fix: use default gh username ([5f3ae20](https://github.com/semrel-extra/zx-bulk-release/commit/5f3ae20f4977b8c1f1d09a7367d15d78c211e6a8))
+
+## [2.18.2](https://github.com/semrel-extra/zx-bulk-release/compare/v2.18.1...v2.18.2) (2026-04-05)
+
+### Fixes & improvements
+* fix: enhance recovery ([2bb5c4d](https://github.com/semrel-extra/zx-bulk-release/commit/2bb5c4dbd9ccf9a54ecc26065f5693517b815472))
+
 ## [2.18.1](https://github.com/semrel-extra/zx-bulk-release/compare/v2.18.0...v2.18.1) (2026-04-05)
 
 ### Fixes & improvements

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "bulk-release",
   "alias": "bulk-release",
-  "version": "2.18.1",
+  "version": "2.18.3",
   "description": "zx-based alternative for multi-semantic-release",
   "type": "module",
   "exports": {

package/src/main/js/api/git.js

@@ -115,6 +115,9 @@ export const pushTag = async ({cwd, tag, gitCommitterName, gitCommitterEmail}) =
     git push origin ${tag}`
 }
 
+export const fetchTags = async (cwd) =>
+  $({cwd})`git fetch --tags`
+
 export const deleteRemoteTag = async ({cwd, tag}) => {
   log()(`rolling back remote tag '${tag}'`)
   await $({cwd, nothrow: true})`git push origin :refs/tags/${tag}`

package/src/main/js/config.js

@@ -58,7 +58,7 @@ export const normalizeMetaConfig = (meta) =>
 
 export const parseEnv = ({GH_USER, GH_USERNAME, GH_META, GITHUB_USER, GITHUB_USERNAME, GH_TOKEN, GITHUB_TOKEN, NPM_TOKEN, NPM_REGISTRY, NPMRC, NPM_USERCONFIG, NPM_CONFIG_USERCONFIG, NPM_PROVENANCE, NPM_OIDC, ACTIONS_ID_TOKEN_REQUEST_URL, GIT_COMMITTER_NAME, GIT_COMMITTER_EMAIL} = process.env) =>
   ({
-    ghUser:             GH_USER || GH_USERNAME || GITHUB_USER || GITHUB_USERNAME,
+    ghUser:             GH_USER || GH_USERNAME || GITHUB_USER || GITHUB_USERNAME || ((GH_TOKEN || GITHUB_TOKEN) ? 'x-access-token' : undefined),
     ghToken:            GH_TOKEN || GITHUB_TOKEN,
     ghMeta:             GH_META,
     npmConfig:          NPMRC || NPM_USERCONFIG || NPM_CONFIG_USERCONFIG,

package/src/main/js/processor/release.js

@@ -6,6 +6,7 @@ import {topo, traverseQueue} from './deps.js'
 import {createReport} from '../log.js'
 import {exec} from './exec.js'
 import {contextify, recover} from '../steps/contextify.js'
+import {fetchTags} from '../api/git.js'
 import {analyze} from '../steps/analyze.js'
 import {build} from '../steps/build.js'
 import {publish} from '../steps/publish.js'
@@ -31,6 +32,7 @@ export const run = async ({cwd = process.cwd(), env, flags = {}} = {}) => within
   // --recover: standalone mode — clean orphan tags and exit.
   // Run the full pipeline again after this to rebuild and publish affected packages.
   if (flags.recover) {
+    await fetchTags(cwd)
     let recovered = 0
     for (const name of queue) {
       const pkg = packages[name]

package/src/main/js/steps/contextify.js

@@ -29,6 +29,7 @@ export const rollbackRelease = async (pkg) => {
 
   const cwd = pkg.context.git.root
   const {ghBasicAuth: basicAuth, ghToken, gitCommitterName, gitCommitterEmail} = pkg.config
+  if (!basicAuth) throw new Error('rollback requires git credentials (GH_TOKEN)')
   const {repoName} = await getRepo(cwd, {basicAuth})
 
   log({pkg})(`rollback: cleaning up failed release for tag '${tag}'`)
@@ -98,6 +99,7 @@ export const recover = async (pkg) => {
 
   const cwd = await getRoot(pkg.absPath)
   const {ghBasicAuth: basicAuth, ghToken, gitCommitterName, gitCommitterEmail} = pkg.config
+  if (!basicAuth) throw new Error('recover requires git credentials (GH_TOKEN)')
   const {repoName} = await getRepo(cwd, {basicAuth})
 
   log({pkg})(`recover: tag '${tag.ref}' exists but ${pkg.name}@${tag.version} not found on npm, rolling back failed release`)