node-publisher 3.3.0 → 3.4.0

package/.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# CODEOWNERS file
+# This file defines who should review code changes in this repository.
+
+* @zendesk/guide

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+### v3.3.0 (2025-09-03)
+
+#### Pull requests
+
+- [#63](https://github.com/zendesk/node-publisher/pull/63) Yarn berry ([Albert Fernández](mailto:afernandez@zendesk.com))
+
+#### Commits to master
+
+- [v3.3.0](https://github.com/zendesk/node-publisher/commit/66a2c7bc585fefea462900fb182b15348783be41) ([Sune Simonsen](mailto:sune@we-knowhow.dk))
+- [Update changelog](https://github.com/zendesk/node-publisher/commit/54a067bd971bd8a9ffe749f4058d9fe89288f200) ([Sune Simonsen](mailto:sune@we-knowhow.dk))
+
 ### v3.2.1 (2025-07-11)
 
 #### Pull requests

package/README.md

@@ -14,6 +14,7 @@ This is a configurable release automation tool for node packages inspired by [cr
 ![repo-checks](https://github.com/zendesk/node-publisher/workflows/repo-checks/badge.svg)
 
 # Getting started
+
 ## 1. Install the package:
 
 ```sh
@@ -50,7 +51,7 @@ For more info, read the [Prerequisites section](#prerequisites).
 npm run release -- <version>
 ```
 
-or 
+or
 
 ```sh
 yarn release <version>
@@ -127,6 +128,7 @@ The lifecycle hooks can be redefined in the form of a configurable YAML file. Ad
 * `rollback [Boolean]` - rolls back to the latest commit fetched after the `prepare` step. The rollback itself happens in the `after_failure` step and only if this flag is set to `true`.
 
 ## Default configuration
+
 The exact configuration depends on the npm client being used and the contents of your `package.json` file. In case you use yarn, the default configuration will look like this:
 
 ```yaml
@@ -165,11 +167,13 @@ changelog:
 # Development
 
 ## Install packages
+
 ```sh
 yarn
 ```
 
 ## Release a new version
+
 ```sh
 yarn release <version>
 ```
@@ -186,6 +190,7 @@ Contributing to `node-publisher` is fairly easy, as long as the following steps
 6. Mention one or more of the maintainers to get the Pull Request approved and merged
 
 ## Maintainers
+
 - Attila Večerek ([@vecerek](https://github.com/vecerek/))
 - Sune Simonsen ([@sunesimonsen](https://github.com/sunesimonsen/))
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-publisher",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "description": "A configurable release automation tool inspired by create-react-app and Travis CI.",
   "author": "Attila Večerek <avecerek@zendesk.com>",
   "homepage": "https://github.com/zendesk/node-publisher#readme",
@@ -21,12 +21,16 @@
     "test": "jest",
     "travis": "yarn lint && yarn test"
   },
+  "resolutions": {
+    "tmp": "^0.2.4",
+    "form-data": "^3.0.4"
+  },
   "dependencies": {
     "check-node-version": "3.2.0",
     "commander": "2.15.1",
     "inquirer": "6.5.0",
-    "js-yaml": "3.13.1",
-    "offline-github-changelog": "3.1.0",
+    "js-yaml": "4.1.1",
+    "offline-github-changelog": "4.0.0",
     "semver": "7.7.2"
   },
   "devDependencies": {

package/src/utils/config/index.js

@@ -1,6 +1,6 @@
 const yaml = require('js-yaml');
 
-const readReleaseConfig = str => yaml.safeLoad(str);
+const readReleaseConfig = str => yaml.load(str);
 
 const buildReleaseConfig = env => {
   const client = env.npmClient === 'yarn-berry' ? 'yarn' : env.npmClient;