pubm 0.2.4 → 0.2.6

package/bin/cli.js

@@ -5466,7 +5466,7 @@ import process14 from "node:process";
 import npmCli3 from "@npmcli/promise-spawn";
 import SemVer from "semver";
 import { isCI as isCI2 } from "std-env";
-import { exec as exec8 } from "tinyexec";
+import { exec as exec9 } from "tinyexec";
 
 // src/utils/cli.ts
 var warningBadge = color.bgYellow(" Warning ");
@@ -5478,6 +5478,7 @@ function link2(text, url) {
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path8 from "node:path";
 import { parse, stringify } from "smol-toml";
+import { exec as exec4 } from "tinyexec";
 
 // src/ecosystem/ecosystem.ts
 var Ecosystem = class {
@@ -5520,6 +5521,53 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  /**
+   * Update the `version` field of dependencies that match sibling crate names.
+   * This ensures `cargo publish` works when crates depend on each other via path.
+   */
+  async updateSiblingDependencyVersions(siblingVersions) {
+    const filePath = path8.join(this.packagePath, "Cargo.toml");
+    const raw = await readFile(filePath, "utf-8");
+    const cargo = parse(raw);
+    let modified = false;
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (!sectionData) continue;
+      for (const [depName, depValue] of Object.entries(sectionData)) {
+        if (typeof depValue === "object" && depValue !== null && "path" in depValue && siblingVersions.has(depName)) {
+          const dep = depValue;
+          dep.version = siblingVersions.get(depName);
+          modified = true;
+        }
+      }
+    }
+    if (modified) {
+      await writeFile(filePath, stringify(cargo));
+    }
+    return modified;
+  }
+  async syncLockfile() {
+    const lockfilePath = await this.findLockfile();
+    if (!lockfilePath) return void 0;
+    const name = await this.packageName();
+    await exec4("cargo", ["update", "--package", name], {
+      nodeOptions: { cwd: path8.dirname(lockfilePath) }
+    });
+    return lockfilePath;
+  }
+  async findLockfile() {
+    let dir = this.packagePath;
+    const { root } = path8.parse(dir);
+    while (dir !== root) {
+      const candidate = path8.join(dir, "Cargo.lock");
+      try {
+        if ((await stat2(candidate)).isFile()) return candidate;
+      } catch {
+      }
+      dir = path8.dirname(dir);
+    }
+    return void 0;
+  }
   async dependencies() {
     const cargo = await this.readCargoToml();
     const deps = [];
@@ -5816,8 +5864,15 @@ async function replaceVersion(version2, packages) {
         );
       }
       return "jsr.json";
-    })(),
-    ...(packages ?? []).filter((pkg) => pkg.registries.includes("crates")).map(async (pkg) => {
+    })()
+  ]);
+  const cratePackages = (packages ?? []).filter(
+    (pkg) => pkg.registries.includes("crates")
+  );
+  const crateFiles = [];
+  if (cratePackages.length > 0) {
+    const ecosystems = [];
+    for (const pkg of cratePackages) {
       const eco = new RustEcosystem(path9.resolve(pkg.path));
       try {
         await eco.writeVersion(version2);
@@ -5827,10 +5882,38 @@ async function replaceVersion(version2, packages) {
           { cause: error }
         );
       }
-      return path9.join(pkg.path, "Cargo.toml");
-    })
-  ]);
-  return results.filter((v) => v);
+      ecosystems.push({ eco, pkg });
+    }
+    if (ecosystems.length > 1) {
+      const siblingVersions = /* @__PURE__ */ new Map();
+      for (const { eco } of ecosystems) {
+        siblingVersions.set(await eco.packageName(), version2);
+      }
+      await Promise.all(
+        ecosystems.map(
+          ({ eco }) => eco.updateSiblingDependencyVersions(siblingVersions)
+        )
+      );
+    }
+    for (const { eco, pkg } of ecosystems) {
+      crateFiles.push(path9.join(pkg.path, "Cargo.toml"));
+      try {
+        const lockfilePath = await eco.syncLockfile();
+        if (lockfilePath) crateFiles.push(lockfilePath);
+      } catch (error) {
+        throw new AbstractError(
+          `Failed to sync Cargo.lock at ${pkg.path}: ${error instanceof Error ? error.message : error}`,
+          { cause: error }
+        );
+      }
+    }
+  }
+  const allFiles = [];
+  for (const r of results) {
+    if (r) allFiles.push(r);
+  }
+  allFiles.push(...crateFiles);
+  return [...new Set(allFiles)];
 }
 
 // src/utils/package-manager.ts
@@ -5869,7 +5952,7 @@ function collectRegistries(ctx) {
 
 // src/registry/crates.ts
 import path10 from "node:path";
-import { exec as exec4, NonZeroExitError } from "tinyexec";
+import { exec as exec5, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5909,7 +5992,7 @@ var CratesRegistry = class extends Registry {
   }
   async isInstalled() {
     try {
-      await exec4("cargo", ["--version"]);
+      await exec5("cargo", ["--version"]);
       return true;
     } catch {
       return false;
@@ -5950,7 +6033,7 @@ var CratesRegistry = class extends Registry {
       if (manifestDir) {
         args.push("--manifest-path", path10.join(manifestDir, "Cargo.toml"));
       }
-      await exec4("cargo", args, { throwOnError: true });
+      await exec5("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
       const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
@@ -5965,7 +6048,7 @@ ${stderr}` : "Failed to run `cargo publish`";
       if (manifestDir) {
         args.push("--manifest-path", path10.join(manifestDir, "Cargo.toml"));
       }
-      await exec4("cargo", args, { throwOnError: true });
+      await exec5("cargo", args, { throwOnError: true });
     } catch (error) {
       const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
       const message = stderr ? `Failed to run \`cargo publish --dry-run\`:
@@ -6063,7 +6146,7 @@ var cratesPublishTasks = createCratesPublishTask();
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter2 } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/jsr.ts
-import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec6, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/package-name.ts
 import { builtinModules } from "node:module";
@@ -6130,7 +6213,7 @@ var JsrRegisry = class extends Registry {
     this.client = new JsrClient(getApiEndpoint(this.registry));
   }
   async jsr(args) {
-    const { stdout } = await exec5("jsr", args, { throwOnError: true });
+    const { stdout } = await exec6("jsr", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -6146,7 +6229,7 @@ var JsrRegisry = class extends Registry {
   }
   async ping() {
     try {
-      const { stdout } = await exec5(
+      const { stdout } = await exec6(
         "ping",
         [new URL(this.registry).hostname, "-c", "1"],
         { throwOnError: true }
@@ -6161,7 +6244,7 @@ var JsrRegisry = class extends Registry {
   }
   async publish() {
     try {
-      await exec5(
+      await exec6(
         "jsr",
         ["publish", "--allow-dirty", "--token", `${JsrClient.token}`],
         {
@@ -6192,7 +6275,7 @@ ${stderr}` : ""}`,
   }
   async dryRunPublish() {
     try {
-      await exec5(
+      await exec6(
         "jsr",
         [
           "publish",
@@ -6452,7 +6535,7 @@ async function jsrRegistry() {
 // src/registry/npm.ts
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { exec as exec6, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
+import { exec as exec7, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -6465,7 +6548,7 @@ var NpmRegistry = class extends Registry {
     __publicField(this, "registry", "https://registry.npmjs.org");
   }
   async npm(args) {
-    const { stdout } = await exec6("npm", args, { throwOnError: true });
+    const { stdout } = await exec7("npm", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -6576,7 +6659,7 @@ var NpmRegistry = class extends Registry {
   }
   async ping() {
     try {
-      await exec6("npm", ["ping"], { throwOnError: true });
+      await exec7("npm", ["ping"], { throwOnError: true });
       return true;
     } catch (error) {
       throw new NpmError("Failed to run `npm ping`", { cause: error });
@@ -6607,7 +6690,7 @@ var NpmRegistry = class extends Registry {
   }
   async dryRunPublish() {
     try {
-      await exec6("npm", ["publish", "--dry-run"], {
+      await exec7("npm", ["publish", "--dry-run"], {
         throwOnError: true,
         nodeOptions: {
           env: {
@@ -7245,10 +7328,10 @@ var prerequisitesCheckTask = (options) => {
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter6 } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/custom-registry.ts
-import { exec as exec7 } from "tinyexec";
+import { exec as exec8 } from "tinyexec";
 var CustomRegistry = class extends NpmRegistry {
   async npm(args) {
-    const { stdout } = await exec7(
+    const { stdout } = await exec8(
       "npm",
       args.concat("--registry", this.registry),
       { throwOnError: true }
@@ -7564,7 +7647,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await exec8(packageManager, ["run", ctx2.testScript], {
+              await exec9(packageManager, ["run", ctx2.testScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7581,7 +7664,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await exec8(packageManager, ["run", ctx2.buildScript], {
+              await exec9(packageManager, ["run", ctx2.buildScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7641,7 +7724,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipPublish || !!ctx2.preview || options.preflight,
+          skip: (ctx2) => !!options.skipPublish || !!ctx2.preview || !!options.preflight,
           title: "Publishing",
           task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
@@ -7667,7 +7750,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipReleaseDraft || !!ctx2.preview,
+          skip: (ctx2) => !!options.skipReleaseDraft || !!ctx2.preview,
           title: "Creating release draft on GitHub",
           task: async (ctx2, task) => {
             const git = new Git();

package/dist/index.cjs

@@ -4486,7 +4486,7 @@ var Listr = (_a23 = class {
 // src/tasks/runner.ts
 var import_semver3 = __toESM(require("semver"), 1);
 var import_std_env = require("std-env");
-var import_tinyexec7 = require("tinyexec");
+var import_tinyexec8 = require("tinyexec");
 
 // src/error.ts
 var AbstractError = class extends Error {
@@ -4818,6 +4818,7 @@ function link2(text, url) {
 var import_promises2 = require("fs/promises");
 var import_node_path2 = __toESM(require("path"), 1);
 var import_smol_toml = require("smol-toml");
+var import_tinyexec2 = require("tinyexec");
 
 // src/ecosystem/ecosystem.ts
 var Ecosystem = class {
@@ -4860,6 +4861,53 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
   }
+  /**
+   * Update the `version` field of dependencies that match sibling crate names.
+   * This ensures `cargo publish` works when crates depend on each other via path.
+   */
+  async updateSiblingDependencyVersions(siblingVersions) {
+    const filePath = import_node_path2.default.join(this.packagePath, "Cargo.toml");
+    const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
+    const cargo = (0, import_smol_toml.parse)(raw);
+    let modified = false;
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (!sectionData) continue;
+      for (const [depName, depValue] of Object.entries(sectionData)) {
+        if (typeof depValue === "object" && depValue !== null && "path" in depValue && siblingVersions.has(depName)) {
+          const dep = depValue;
+          dep.version = siblingVersions.get(depName);
+          modified = true;
+        }
+      }
+    }
+    if (modified) {
+      await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
+    }
+    return modified;
+  }
+  async syncLockfile() {
+    const lockfilePath = await this.findLockfile();
+    if (!lockfilePath) return void 0;
+    const name = await this.packageName();
+    await (0, import_tinyexec2.exec)("cargo", ["update", "--package", name], {
+      nodeOptions: { cwd: import_node_path2.default.dirname(lockfilePath) }
+    });
+    return lockfilePath;
+  }
+  async findLockfile() {
+    let dir = this.packagePath;
+    const { root } = import_node_path2.default.parse(dir);
+    while (dir !== root) {
+      const candidate = import_node_path2.default.join(dir, "Cargo.lock");
+      try {
+        if ((await (0, import_promises2.stat)(candidate)).isFile()) return candidate;
+      } catch {
+      }
+      dir = import_node_path2.default.dirname(dir);
+    }
+    return void 0;
+  }
   async dependencies() {
     const cargo = await this.readCargoToml();
     const deps = [];
@@ -5156,8 +5204,15 @@ async function replaceVersion(version2, packages) {
         );
       }
       return "jsr.json";
-    })(),
-    ...(packages ?? []).filter((pkg) => pkg.registries.includes("crates")).map(async (pkg) => {
+    })()
+  ]);
+  const cratePackages = (packages ?? []).filter(
+    (pkg) => pkg.registries.includes("crates")
+  );
+  const crateFiles = [];
+  if (cratePackages.length > 0) {
+    const ecosystems = [];
+    for (const pkg of cratePackages) {
       const eco = new RustEcosystem(import_node_path3.default.resolve(pkg.path));
       try {
         await eco.writeVersion(version2);
@@ -5167,10 +5222,38 @@ async function replaceVersion(version2, packages) {
           { cause: error }
         );
       }
-      return import_node_path3.default.join(pkg.path, "Cargo.toml");
-    })
-  ]);
-  return results.filter((v) => v);
+      ecosystems.push({ eco, pkg });
+    }
+    if (ecosystems.length > 1) {
+      const siblingVersions = /* @__PURE__ */ new Map();
+      for (const { eco } of ecosystems) {
+        siblingVersions.set(await eco.packageName(), version2);
+      }
+      await Promise.all(
+        ecosystems.map(
+          ({ eco }) => eco.updateSiblingDependencyVersions(siblingVersions)
+        )
+      );
+    }
+    for (const { eco, pkg } of ecosystems) {
+      crateFiles.push(import_node_path3.default.join(pkg.path, "Cargo.toml"));
+      try {
+        const lockfilePath = await eco.syncLockfile();
+        if (lockfilePath) crateFiles.push(lockfilePath);
+      } catch (error) {
+        throw new AbstractError(
+          `Failed to sync Cargo.lock at ${pkg.path}: ${error instanceof Error ? error.message : error}`,
+          { cause: error }
+        );
+      }
+    }
+  }
+  const allFiles = [];
+  for (const r of results) {
+    if (r) allFiles.push(r);
+  }
+  allFiles.push(...crateFiles);
+  return [...new Set(allFiles)];
 }
 
 // src/utils/package-manager.ts
@@ -5332,7 +5415,7 @@ function injectTokensToEnv(tokens) {
 
 // src/registry/crates.ts
 var import_node_path5 = __toESM(require("path"), 1);
-var import_tinyexec2 = require("tinyexec");
+var import_tinyexec3 = require("tinyexec");
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5372,7 +5455,7 @@ var CratesRegistry = class extends Registry {
   }
   async isInstalled() {
     try {
-      await (0, import_tinyexec2.exec)("cargo", ["--version"]);
+      await (0, import_tinyexec3.exec)("cargo", ["--version"]);
       return true;
     } catch {
       return false;
@@ -5413,10 +5496,10 @@ var CratesRegistry = class extends Registry {
       if (manifestDir) {
         args.push("--manifest-path", import_node_path5.default.join(manifestDir, "Cargo.toml"));
       }
-      await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
+      await (0, import_tinyexec3.exec)("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
-      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof import_tinyexec3.NonZeroExitError ? error.output?.stderr : void 0;
       const message = stderr ? `Failed to run \`cargo publish\`:
 ${stderr}` : "Failed to run `cargo publish`";
       throw new CratesError(message, { cause: error });
@@ -5428,9 +5511,9 @@ ${stderr}` : "Failed to run `cargo publish`";
       if (manifestDir) {
         args.push("--manifest-path", import_node_path5.default.join(manifestDir, "Cargo.toml"));
       }
-      await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
+      await (0, import_tinyexec3.exec)("cargo", args, { throwOnError: true });
     } catch (error) {
-      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof import_tinyexec3.NonZeroExitError ? error.output?.stderr : void 0;
       const message = stderr ? `Failed to run \`cargo publish --dry-run\`:
 ${stderr}` : "Failed to run `cargo publish --dry-run`";
       throw new CratesError(message, { cause: error });
@@ -5526,7 +5609,7 @@ var cratesPublishTasks = createCratesPublishTask();
 var import_prompt_adapter_enquirer = require("@listr2/prompt-adapter-enquirer");
 
 // src/registry/jsr.ts
-var import_tinyexec3 = require("tinyexec");
+var import_tinyexec4 = require("tinyexec");
 
 // src/utils/package-name.ts
 var import_node_module = require("module");
@@ -5594,7 +5677,7 @@ var JsrRegisry = class extends Registry {
     this.client = new JsrClient(getApiEndpoint(this.registry));
   }
   async jsr(args) {
-    const { stdout } = await (0, import_tinyexec3.exec)("jsr", args, { throwOnError: true });
+    const { stdout } = await (0, import_tinyexec4.exec)("jsr", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -5610,7 +5693,7 @@ var JsrRegisry = class extends Registry {
   }
   async ping() {
     try {
-      const { stdout } = await (0, import_tinyexec3.exec)(
+      const { stdout } = await (0, import_tinyexec4.exec)(
         "ping",
         [new URL(this.registry).hostname, "-c", "1"],
         { throwOnError: true }
@@ -5625,7 +5708,7 @@ var JsrRegisry = class extends Registry {
   }
   async publish() {
     try {
-      await (0, import_tinyexec3.exec)(
+      await (0, import_tinyexec4.exec)(
         "jsr",
         ["publish", "--allow-dirty", "--token", `${JsrClient.token}`],
         {
@@ -5635,7 +5718,7 @@ var JsrRegisry = class extends Registry {
       this.packageCreationUrls = void 0;
       return true;
     } catch (error) {
-      const stderr = error instanceof import_tinyexec3.NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof import_tinyexec4.NonZeroExitError ? error.output?.stderr : void 0;
       if (stderr?.includes("don't exist")) {
         const urls = [...stderr.matchAll(/https:\/\/jsr\.io\/new\S+/g)].map(
           (m) => m[0]
@@ -5656,7 +5739,7 @@ ${stderr}` : ""}`,
   }
   async dryRunPublish() {
     try {
-      await (0, import_tinyexec3.exec)(
+      await (0, import_tinyexec4.exec)(
         "jsr",
         [
           "publish",
@@ -5916,7 +5999,7 @@ async function jsrRegistry() {
 // src/registry/npm.ts
 var import_node_os = require("os");
 var import_node_path6 = require("path");
-var import_tinyexec4 = require("tinyexec");
+var import_tinyexec5 = require("tinyexec");
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -5929,7 +6012,7 @@ var NpmRegistry = class extends Registry {
     __publicField(this, "registry", "https://registry.npmjs.org");
   }
   async npm(args) {
-    const { stdout } = await (0, import_tinyexec4.exec)("npm", args, { throwOnError: true });
+    const { stdout } = await (0, import_tinyexec5.exec)("npm", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -5973,7 +6056,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof import_tinyexec4.NonZeroExitError) {
+      if (error instanceof import_tinyexec5.NonZeroExitError) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -6040,7 +6123,7 @@ var NpmRegistry = class extends Registry {
   }
   async ping() {
     try {
-      await (0, import_tinyexec4.exec)("npm", ["ping"], { throwOnError: true });
+      await (0, import_tinyexec5.exec)("npm", ["ping"], { throwOnError: true });
       return true;
     } catch (error) {
       throw new NpmError("Failed to run `npm ping`", { cause: error });
@@ -6051,7 +6134,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["publish", "--provenance", "--access", "public"]);
       return true;
     } catch (error) {
-      if (error instanceof import_tinyexec4.NonZeroExitError && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof import_tinyexec5.NonZeroExitError && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -6063,7 +6146,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(args);
       return true;
     } catch (error) {
-      if (error instanceof import_tinyexec4.NonZeroExitError && error.output?.stderr.includes("EOTP")) {
+      if (error instanceof import_tinyexec5.NonZeroExitError && error.output?.stderr.includes("EOTP")) {
         return false;
       }
       throw this.classifyPublishError(error);
@@ -6071,7 +6154,7 @@ var NpmRegistry = class extends Registry {
   }
   async dryRunPublish() {
     try {
-      await (0, import_tinyexec4.exec)("npm", ["publish", "--dry-run"], {
+      await (0, import_tinyexec5.exec)("npm", ["publish", "--dry-run"], {
         throwOnError: true,
         nodeOptions: {
           env: {
@@ -6081,7 +6164,7 @@ var NpmRegistry = class extends Registry {
         }
       });
     } catch (error) {
-      const stderr = error instanceof import_tinyexec4.NonZeroExitError ? error.output?.stderr : void 0;
+      const stderr = error instanceof import_tinyexec5.NonZeroExitError ? error.output?.stderr : void 0;
       throw new NpmError(
         `Failed to run \`npm publish --dry-run\`${stderr ? `
 ${stderr}` : ""}`,
@@ -6108,7 +6191,7 @@ ${stderr}` : ""}`,
     };
   }
   classifyPublishError(error) {
-    if (error instanceof import_tinyexec4.NonZeroExitError) {
+    if (error instanceof import_tinyexec5.NonZeroExitError) {
       const stderr = error.output?.stderr ?? "";
       if (stderr.includes("EOTP")) {
         return new NpmError("OTP required for publishing", { cause: error });
@@ -6562,7 +6645,7 @@ var npmPublishTasks = {
 // src/tasks/preflight.ts
 var import_node_crypto2 = require("crypto");
 var import_prompt_adapter_enquirer4 = require("@listr2/prompt-adapter-enquirer");
-var import_tinyexec5 = require("tinyexec");
+var import_tinyexec6 = require("tinyexec");
 var PreflightError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -6589,7 +6672,7 @@ async function syncGhSecrets(tokens) {
   for (const [registry, token] of Object.entries(tokens)) {
     const config = TOKEN_CONFIG[registry];
     if (!config) continue;
-    const result = (0, import_tinyexec5.exec)("gh", ["secret", "set", config.ghSecretName], {
+    const result = (0, import_tinyexec6.exec)("gh", ["secret", "set", config.ghSecretName], {
       throwOnError: true
     });
     const proc = result.process;
@@ -6783,10 +6866,10 @@ var prerequisitesCheckTask = (options) => {
 var import_prompt_adapter_enquirer6 = require("@listr2/prompt-adapter-enquirer");
 
 // src/registry/custom-registry.ts
-var import_tinyexec6 = require("tinyexec");
+var import_tinyexec7 = require("tinyexec");
 var CustomRegistry = class extends NpmRegistry {
   async npm(args) {
-    const { stdout } = await (0, import_tinyexec6.exec)(
+    const { stdout } = await (0, import_tinyexec7.exec)(
       "npm",
       args.concat("--registry", this.registry),
       { throwOnError: true }
@@ -7103,7 +7186,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await (0, import_tinyexec7.exec)(packageManager, ["run", ctx2.testScript], {
+              await (0, import_tinyexec8.exec)(packageManager, ["run", ctx2.testScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7120,7 +7203,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await (0, import_tinyexec7.exec)(packageManager, ["run", ctx2.buildScript], {
+              await (0, import_tinyexec8.exec)(packageManager, ["run", ctx2.buildScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7180,7 +7263,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipPublish || !!ctx2.preview || options.preflight,
+          skip: (ctx2) => !!options.skipPublish || !!ctx2.preview || !!options.preflight,
           title: "Publishing",
           task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
@@ -7206,7 +7289,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipReleaseDraft || !!ctx2.preview,
+          skip: (ctx2) => !!options.skipReleaseDraft || !!ctx2.preview,
           title: "Creating release draft on GitHub",
           task: async (ctx2, task) => {
             const git = new Git();

package/dist/index.js

@@ -4453,7 +4453,7 @@ var Listr = (_a23 = class {
 // src/tasks/runner.ts
 import SemVer from "semver";
 import { isCI as isCI2 } from "std-env";
-import { exec as exec8 } from "tinyexec";
+import { exec as exec9 } from "tinyexec";
 
 // src/error.ts
 var AbstractError = class extends Error {
@@ -4785,6 +4785,7 @@ function link2(text, url) {
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path2 from "node:path";
 import { parse, stringify } from "smol-toml";
+import { exec as exec3 } from "tinyexec";
 
 // src/ecosystem/ecosystem.ts
 var Ecosystem = class {
@@ -4827,6 +4828,53 @@ var RustEcosystem = class extends Ecosystem {
     pkg.version = newVersion;
     await writeFile(filePath, stringify(cargo));
   }
+  /**
+   * Update the `version` field of dependencies that match sibling crate names.
+   * This ensures `cargo publish` works when crates depend on each other via path.
+   */
+  async updateSiblingDependencyVersions(siblingVersions) {
+    const filePath = path2.join(this.packagePath, "Cargo.toml");
+    const raw = await readFile(filePath, "utf-8");
+    const cargo = parse(raw);
+    let modified = false;
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (!sectionData) continue;
+      for (const [depName, depValue] of Object.entries(sectionData)) {
+        if (typeof depValue === "object" && depValue !== null && "path" in depValue && siblingVersions.has(depName)) {
+          const dep = depValue;
+          dep.version = siblingVersions.get(depName);
+          modified = true;
+        }
+      }
+    }
+    if (modified) {
+      await writeFile(filePath, stringify(cargo));
+    }
+    return modified;
+  }
+  async syncLockfile() {
+    const lockfilePath = await this.findLockfile();
+    if (!lockfilePath) return void 0;
+    const name = await this.packageName();
+    await exec3("cargo", ["update", "--package", name], {
+      nodeOptions: { cwd: path2.dirname(lockfilePath) }
+    });
+    return lockfilePath;
+  }
+  async findLockfile() {
+    let dir = this.packagePath;
+    const { root } = path2.parse(dir);
+    while (dir !== root) {
+      const candidate = path2.join(dir, "Cargo.lock");
+      try {
+        if ((await stat2(candidate)).isFile()) return candidate;
+      } catch {
+      }
+      dir = path2.dirname(dir);
+    }
+    return void 0;
+  }
   async dependencies() {
     const cargo = await this.readCargoToml();
     const deps = [];
@@ -5123,8 +5171,15 @@ async function replaceVersion(version2, packages) {
         );
       }
       return "jsr.json";
-    })(),
-    ...(packages ?? []).filter((pkg) => pkg.registries.includes("crates")).map(async (pkg) => {
+    })()
+  ]);
+  const cratePackages = (packages ?? []).filter(
+    (pkg) => pkg.registries.includes("crates")
+  );
+  const crateFiles = [];
+  if (cratePackages.length > 0) {
+    const ecosystems = [];
+    for (const pkg of cratePackages) {
       const eco = new RustEcosystem(path3.resolve(pkg.path));
       try {
         await eco.writeVersion(version2);
@@ -5134,10 +5189,38 @@ async function replaceVersion(version2, packages) {
           { cause: error }
         );
       }
-      return path3.join(pkg.path, "Cargo.toml");
-    })
-  ]);
-  return results.filter((v) => v);
+      ecosystems.push({ eco, pkg });
+    }
+    if (ecosystems.length > 1) {
+      const siblingVersions = /* @__PURE__ */ new Map();
+      for (const { eco } of ecosystems) {
+        siblingVersions.set(await eco.packageName(), version2);
+      }
+      await Promise.all(
+        ecosystems.map(
+          ({ eco }) => eco.updateSiblingDependencyVersions(siblingVersions)
+        )
+      );
+    }
+    for (const { eco, pkg } of ecosystems) {
+      crateFiles.push(path3.join(pkg.path, "Cargo.toml"));
+      try {
+        const lockfilePath = await eco.syncLockfile();
+        if (lockfilePath) crateFiles.push(lockfilePath);
+      } catch (error) {
+        throw new AbstractError(
+          `Failed to sync Cargo.lock at ${pkg.path}: ${error instanceof Error ? error.message : error}`,
+          { cause: error }
+        );
+      }
+    }
+  }
+  const allFiles = [];
+  for (const r of results) {
+    if (r) allFiles.push(r);
+  }
+  allFiles.push(...crateFiles);
+  return [...new Set(allFiles)];
 }
 
 // src/utils/package-manager.ts
@@ -5298,7 +5381,7 @@ function injectTokensToEnv(tokens) {
 
 // src/registry/crates.ts
 import path5 from "node:path";
-import { exec as exec3, NonZeroExitError } from "tinyexec";
+import { exec as exec4, NonZeroExitError } from "tinyexec";
 
 // src/registry/registry.ts
 var Registry = class {
@@ -5338,7 +5421,7 @@ var CratesRegistry = class extends Registry {
   }
   async isInstalled() {
     try {
-      await exec3("cargo", ["--version"]);
+      await exec4("cargo", ["--version"]);
       return true;
     } catch {
       return false;
@@ -5379,7 +5462,7 @@ var CratesRegistry = class extends Registry {
       if (manifestDir) {
         args.push("--manifest-path", path5.join(manifestDir, "Cargo.toml"));
       }
-      await exec3("cargo", args, { throwOnError: true });
+      await exec4("cargo", args, { throwOnError: true });
       return true;
     } catch (error) {
       const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
@@ -5394,7 +5477,7 @@ ${stderr}` : "Failed to run `cargo publish`";
       if (manifestDir) {
         args.push("--manifest-path", path5.join(manifestDir, "Cargo.toml"));
       }
-      await exec3("cargo", args, { throwOnError: true });
+      await exec4("cargo", args, { throwOnError: true });
     } catch (error) {
       const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
       const message = stderr ? `Failed to run \`cargo publish --dry-run\`:
@@ -5492,7 +5575,7 @@ var cratesPublishTasks = createCratesPublishTask();
 import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/jsr.ts
-import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
 // src/utils/package-name.ts
 import { builtinModules } from "node:module";
@@ -5559,7 +5642,7 @@ var JsrRegisry = class extends Registry {
     this.client = new JsrClient(getApiEndpoint(this.registry));
   }
   async jsr(args) {
-    const { stdout } = await exec4("jsr", args, { throwOnError: true });
+    const { stdout } = await exec5("jsr", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -5575,7 +5658,7 @@ var JsrRegisry = class extends Registry {
   }
   async ping() {
     try {
-      const { stdout } = await exec4(
+      const { stdout } = await exec5(
         "ping",
         [new URL(this.registry).hostname, "-c", "1"],
         { throwOnError: true }
@@ -5590,7 +5673,7 @@ var JsrRegisry = class extends Registry {
   }
   async publish() {
     try {
-      await exec4(
+      await exec5(
         "jsr",
         ["publish", "--allow-dirty", "--token", `${JsrClient.token}`],
         {
@@ -5621,7 +5704,7 @@ ${stderr}` : ""}`,
   }
   async dryRunPublish() {
     try {
-      await exec4(
+      await exec5(
         "jsr",
         [
           "publish",
@@ -5881,7 +5964,7 @@ async function jsrRegistry() {
 // src/registry/npm.ts
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { exec as exec5, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
+import { exec as exec6, NonZeroExitError as NonZeroExitError3 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -5894,7 +5977,7 @@ var NpmRegistry = class extends Registry {
     __publicField(this, "registry", "https://registry.npmjs.org");
   }
   async npm(args) {
-    const { stdout } = await exec5("npm", args, { throwOnError: true });
+    const { stdout } = await exec6("npm", args, { throwOnError: true });
     return stdout;
   }
   async isInstalled() {
@@ -6005,7 +6088,7 @@ var NpmRegistry = class extends Registry {
   }
   async ping() {
     try {
-      await exec5("npm", ["ping"], { throwOnError: true });
+      await exec6("npm", ["ping"], { throwOnError: true });
       return true;
     } catch (error) {
       throw new NpmError("Failed to run `npm ping`", { cause: error });
@@ -6036,7 +6119,7 @@ var NpmRegistry = class extends Registry {
   }
   async dryRunPublish() {
     try {
-      await exec5("npm", ["publish", "--dry-run"], {
+      await exec6("npm", ["publish", "--dry-run"], {
         throwOnError: true,
         nodeOptions: {
           env: {
@@ -6527,7 +6610,7 @@ var npmPublishTasks = {
 // src/tasks/preflight.ts
 import { createHash as createHash2 } from "node:crypto";
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter4 } from "@listr2/prompt-adapter-enquirer";
-import { exec as exec6 } from "tinyexec";
+import { exec as exec7 } from "tinyexec";
 var PreflightError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -6554,7 +6637,7 @@ async function syncGhSecrets(tokens) {
   for (const [registry, token] of Object.entries(tokens)) {
     const config = TOKEN_CONFIG[registry];
     if (!config) continue;
-    const result = exec6("gh", ["secret", "set", config.ghSecretName], {
+    const result = exec7("gh", ["secret", "set", config.ghSecretName], {
       throwOnError: true
     });
     const proc = result.process;
@@ -6748,10 +6831,10 @@ var prerequisitesCheckTask = (options) => {
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter6 } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/custom-registry.ts
-import { exec as exec7 } from "tinyexec";
+import { exec as exec8 } from "tinyexec";
 var CustomRegistry = class extends NpmRegistry {
   async npm(args) {
-    const { stdout } = await exec7(
+    const { stdout } = await exec8(
       "npm",
       args.concat("--registry", this.registry),
       { throwOnError: true }
@@ -7067,7 +7150,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await exec8(packageManager, ["run", ctx2.testScript], {
+              await exec9(packageManager, ["run", ctx2.testScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7084,7 +7167,7 @@ async function run(options) {
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
             try {
-              await exec8(packageManager, ["run", ctx2.buildScript], {
+              await exec9(packageManager, ["run", ctx2.buildScript], {
                 throwOnError: true
               });
             } catch (error) {
@@ -7144,7 +7227,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipPublish || !!ctx2.preview || options.preflight,
+          skip: (ctx2) => !!options.skipPublish || !!ctx2.preview || !!options.preflight,
           title: "Publishing",
           task: async (ctx2, parentTask) => parentTask.newListr(await collectPublishTasks(ctx2), {
             concurrent: true
@@ -7170,7 +7253,7 @@ async function run(options) {
           }
         },
         {
-          skip: (ctx2) => options.skipReleaseDraft || !!ctx2.preview,
+          skip: (ctx2) => !!options.skipReleaseDraft || !!ctx2.preview,
           title: "Creating release draft on GitHub",
           task: async (ctx2, task) => {
             const git = new Git();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubm",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "engines": {
     "node": ">=18",
     "git": ">=2.11.0"