pubm 0.1.7 → 0.2.1

package/README.md

@@ -58,6 +58,11 @@ npm i -g pubm
 pubm patch --preview
 ```
 
+> **Publishing to jsr?** Install the jsr CLI as a devDependency in your project:
+> ```bash
+> pnpm add -D jsr  # or npm i -D jsr / yarn add -D jsr
+> ```
+
 ---
 
 ## 🔑 Core CLI Options

package/bin/cli.js

@@ -5249,50 +5249,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
-import path8 from "node:path";
-import process11 from "node:process";
-
 // src/ecosystem/rust.ts
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path7 from "node:path";
@@ -5339,6 +5295,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -5353,7 +5320,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import path8 from "node:path";
+import process11 from "node:process";
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = process11.cwd() } = {}) {
@@ -5588,7 +5644,7 @@ function collectRegistries(ctx) {
 
 // src/registry/crates.ts
 import path9 from "node:path";
-import { exec as exec3 } from "tinyexec";
+import { exec as exec3, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5596,6 +5652,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5670,9 +5728,24 @@ var CratesRegistry = class extends Registry {
       await exec3("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", path9.join(manifestDir, "Cargo.toml"));
+      }
+      await exec3("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -5761,13 +5834,8 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-import process12 from "node:process";
-import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
-import npmCli from "@npmcli/promise-spawn";
-
 // src/registry/jsr.ts
-import { exec as exec4, NonZeroExitError } from "tinyexec";
+import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/db.ts
 import { createCipheriv, createDecipheriv, createHash } from "node:crypto";
@@ -5946,7 +6014,7 @@ var JsrRegisry = class extends Registry {
       this.packageCreationUrls = void 0;
       return true;
     } catch (error) {
-      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
       if (stderr?.includes("don't exist")) {
         const urls = [...stderr.matchAll(/https:\/\/jsr\.io\/new\S+/g)].map(
           (m) => m[0]
@@ -5965,6 +6033,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await exec4(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -6206,7 +6296,7 @@ async function jsrRegistry() {
 }
 
 // src/registry/npm.ts
-import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -6263,7 +6353,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2) {
+      if (error instanceof NonZeroExitError3) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -6341,7 +6431,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["publish", "--provenance", "--access", "public"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -6353,12 +6443,28 @@ var NpmRegistry = class extends Registry {
       await this.npm(args);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -6369,7 +6475,7 @@ var NpmRegistry = class extends Registry {
     };
   }
   classifyPublishError(error) {
-    if (error instanceof NonZeroExitError2) {
+    if (error instanceof NonZeroExitError3) {
       const stderr = error.output?.stderr ?? "";
       if (stderr.includes("EOTP")) {
         return new NpmError("OTP required for publishing", { cause: error });
@@ -6395,7 +6501,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+import process12 from "node:process";
+import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
+import npmCli from "@npmcli/promise-spawn";
 var { open } = npmCli;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6628,7 +6798,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6691,6 +6860,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -7108,13 +7285,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -7136,7 +7324,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -7174,6 +7362,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,
@@ -7225,7 +7417,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/dist/index.cjs

@@ -4814,50 +4814,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-var import_promises3 = require("fs/promises");
-var import_node_path3 = __toESM(require("path"), 1);
-var import_node_process5 = __toESM(require("process"), 1);
-
 // src/ecosystem/rust.ts
 var import_promises2 = require("fs/promises");
 var import_node_path2 = __toESM(require("path"), 1);
@@ -4904,6 +4860,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -4918,7 +4885,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+var import_promises3 = require("fs/promises");
+var import_node_path3 = __toESM(require("path"), 1);
+var import_node_process5 = __toESM(require("process"), 1);
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = import_node_process5.default.cwd() } = {}) {
@@ -5161,6 +5217,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5235,9 +5293,24 @@ var CratesRegistry = class extends Registry {
       await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", import_node_path4.default.join(manifestDir, "Cargo.toml"));
+      }
+      await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -5326,11 +5399,6 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-var import_node_process6 = __toESM(require("process"), 1);
-var import_prompt_adapter_enquirer = require("@listr2/prompt-adapter-enquirer");
-var import_promise_spawn = __toESM(require("@npmcli/promise-spawn"), 1);
-
 // src/registry/jsr.ts
 var import_tinyexec3 = require("tinyexec");
 
@@ -5532,6 +5600,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await (0, import_tinyexec3.exec)(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof import_tinyexec3.NonZeroExitError ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -5926,6 +6016,22 @@ var NpmRegistry = class extends Registry {
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -5962,7 +6068,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+var import_node_process6 = __toESM(require("process"), 1);
+var import_prompt_adapter_enquirer = require("@listr2/prompt-adapter-enquirer");
+var import_promise_spawn = __toESM(require("@npmcli/promise-spawn"), 1);
 var { open } = import_promise_spawn.default;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6195,7 +6365,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6258,6 +6427,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -6676,13 +6853,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -6704,7 +6892,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -6742,6 +6930,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,
@@ -6793,7 +6985,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/dist/index.js

@@ -4781,50 +4781,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/utils/rollback.ts
-var rollbacks = [];
-function addRollback(rollback2, context) {
-  rollbacks.push({ fn: rollback2, ctx: context });
-}
-var called = false;
-async function rollback() {
-  if (called) return void 0;
-  called = true;
-  if (rollbacks.length <= 0) return void 0;
-  console.log("Rollback...");
-  const results = await Promise.allSettled(
-    rollbacks.map(({ fn, ctx }) => fn(ctx))
-  );
-  const failures = results.filter(
-    (r) => r.status === "rejected"
-  );
-  if (failures.length > 0) {
-    for (const failure of failures) {
-      console.error(
-        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
-      );
-    }
-    console.log(
-      "Rollback completed with errors. Some operations may require manual recovery."
-    );
-  } else {
-    console.log("Rollback completed");
-  }
-}
-
-// src/utils/listr.ts
-function createListr(...args) {
-  const listr = new Listr(...args);
-  listr.isRoot = () => false;
-  listr.externalSignalHandler = rollback;
-  return listr;
-}
-
-// src/utils/package.ts
-import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
-import path3 from "node:path";
-import process7 from "node:process";
-
 // src/ecosystem/rust.ts
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path2 from "node:path";
@@ -4871,6 +4827,17 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
   manifestFiles() {
     return ["Cargo.toml"];
   }
@@ -4885,7 +4852,96 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/crate-graph.ts
+async function sortCratesByDependencyOrder(cratePaths) {
+  if (cratePaths.length <= 1) return cratePaths;
+  const crateInfos = await Promise.all(
+    cratePaths.map(async (cratePath) => {
+      const eco = new RustEcosystem(cratePath);
+      const name = await eco.packageName();
+      const deps = await eco.dependencies();
+      return { cratePath, name, deps };
+    })
+  );
+  const nameSet = new Set(crateInfos.map((c) => c.name));
+  const nameToPath = new Map(crateInfos.map((c) => [c.name, c.cratePath]));
+  const internalDeps = /* @__PURE__ */ new Map();
+  const inDegree = /* @__PURE__ */ new Map();
+  for (const name of nameSet) {
+    inDegree.set(name, 0);
+  }
+  for (const crate of crateInfos) {
+    const filtered = crate.deps.filter((d2) => nameSet.has(d2));
+    internalDeps.set(crate.name, filtered);
+    for (const _dep of filtered) {
+      inDegree.set(crate.name, (inDegree.get(crate.name) ?? 0) + 1);
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0) queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    sorted.push(current);
+    for (const [name, deps] of internalDeps) {
+      if (deps.includes(current)) {
+        const newDegree = (inDegree.get(name) ?? 0) - 1;
+        inDegree.set(name, newDegree);
+        if (newDegree === 0) queue.push(name);
+      }
+    }
+  }
+  if (sorted.length !== nameSet.size) {
+    throw new Error("Circular dependency detected among configured crates");
+  }
+  return sorted.map((name) => nameToPath.get(name));
+}
+
+// src/utils/rollback.ts
+var rollbacks = [];
+function addRollback(rollback2, context) {
+  rollbacks.push({ fn: rollback2, ctx: context });
+}
+var called = false;
+async function rollback() {
+  if (called) return void 0;
+  called = true;
+  if (rollbacks.length <= 0) return void 0;
+  console.log("Rollback...");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
+}
+
+// src/utils/listr.ts
+function createListr(...args) {
+  const listr = new Listr(...args);
+  listr.isRoot = () => false;
+  listr.externalSignalHandler = rollback;
+  return listr;
+}
+
 // src/utils/package.ts
+import { readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import path3 from "node:path";
+import process7 from "node:process";
 var cachedPackageJson = {};
 var cachedJsrJson = {};
 function patchCachedJsrJson(contents, { cwd = process7.cwd() } = {}) {
@@ -5120,7 +5176,7 @@ function collectRegistries(ctx) {
 
 // src/registry/crates.ts
 import path4 from "node:path";
-import { exec as exec3 } from "tinyexec";
+import { exec as exec3, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5128,6 +5184,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5202,9 +5260,24 @@ var CratesRegistry = class extends Registry {
       await exec3("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      throw new CratesError("Failed to run `cargo publish`", {
-        cause: error
-      });
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Failed to run \`cargo publish\`:
+${stderr}` : "Failed to run `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", path4.join(manifestDir, "Cargo.toml"));
+      }
+      await exec3("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
     }
   }
   async isPublished() {
@@ -5293,13 +5366,8 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-import process8 from "node:process";
-import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
-import npmCli from "@npmcli/promise-spawn";
-
 // src/registry/jsr.ts
-import { exec as exec4, NonZeroExitError } from "tinyexec";
+import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/db.ts
 import { createCipheriv, createDecipheriv, createHash } from "node:crypto";
@@ -5478,7 +5546,7 @@ var JsrRegisry = class extends Registry {
       this.packageCreationUrls = void 0;
       return true;
     } catch (error) {
-      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
       if (stderr?.includes("don't exist")) {
         const urls = [...stderr.matchAll(/https:\/\/jsr\.io\/new\S+/g)].map(
           (m) => m[0]
@@ -5497,6 +5565,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await exec4(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -5738,7 +5828,7 @@ async function jsrRegistry() {
 }
 
 // src/registry/npm.ts
-import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -5795,7 +5885,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2) {
+      if (error instanceof NonZeroExitError3) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -5873,7 +5963,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["publish", "--provenance", "--access", "public"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -5885,12 +5975,28 @@ var NpmRegistry = class extends Registry {
       await this.npm(args);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof NonZeroExitError3 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -5901,7 +6007,7 @@ var NpmRegistry = class extends Registry {
     };
   }
   classifyPublishError(error) {
-    if (error instanceof NonZeroExitError2) {
+    if (error instanceof NonZeroExitError3) {
       const stderr = error.output?.stderr ?? "";
       if (stderr.includes("EOTP")) {
         return new NpmError("OTP required for publishing", { cause: error });
@@ -5927,7 +6033,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+import process8 from "node:process";
+import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
+import npmCli from "@npmcli/promise-spawn";
 var { open } = npmCli;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6160,7 +6330,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6223,6 +6392,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -6640,13 +6817,24 @@ function registryTask(registry) {
       return npmPublishTasks;
   }
 }
-function collectPublishTasks(ctx) {
+async function collectPublishTasks(ctx) {
   if (ctx.packages?.length) {
-    return ctx.packages.flatMap(
-      (pkg) => pkg.registries.map(
-        (reg) => reg === "crates" ? createCratesPublishTask(pkg.path) : registryTask(reg)
-      )
+    const nonCratesTasks = ctx.packages.flatMap(
+      (pkg) => pkg.registries.filter((reg) => reg !== "crates").map((reg) => registryTask(reg))
     );
+    const cratesPaths = ctx.packages.filter((pkg) => pkg.registries.includes("crates")).map((pkg) => pkg.path);
+    if (cratesPaths.length === 0) {
+      return nonCratesTasks;
+    }
+    const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const sequentialCratesTask = {
+      title: "Publishing to crates.io (sequential)",
+      task: (_ctx, task) => task.newListr(
+        sortedPaths.map((p) => createCratesPublishTask(p)),
+        { concurrent: false }
+      )
+    };
+    return [...nonCratesTasks, sequentialCratesTask];
   }
   return collectRegistries(ctx).map(registryTask);
 }
@@ -6668,7 +6856,7 @@ async function run(options) {
     await createListr(
       options.publishOnly ? {
         title: "Publishing",
-        task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+        task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
           concurrent: true
         })
       } : [
@@ -6706,6 +6894,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,
@@ -6757,7 +6949,7 @@ async function run(options) {
         {
           skip: (ctx2) => options.skipPublish || !!ctx2.preview,
           title: "Publishing",
-          task: (ctx2, parentTask) => parentTask.newListr(collectPublishTasks(ctx2), {
+          task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
           })
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubm",
-  "version": "0.1.7",
+  "version": "0.2.1",
   "engines": {
     "node": ">=18",
     "git": ">=2.11.0"