pubm 0.2.7 → 0.2.8

package/dist/index.cjs

@@ -4488,6 +4488,125 @@ var import_semver3 = __toESM(require("semver"), 1);
 var import_std_env = require("std-env");
 var import_tinyexec8 = require("tinyexec");
 
+// src/ecosystem/rust.ts
+var import_promises2 = require("fs/promises");
+var import_node_path2 = __toESM(require("path"), 1);
+var import_smol_toml = require("smol-toml");
+var import_tinyexec = require("tinyexec");
+
+// src/ecosystem/ecosystem.ts
+var Ecosystem = class {
+  constructor(packagePath) {
+    this.packagePath = packagePath;
+  }
+};
+
+// src/ecosystem/rust.ts
+var RustEcosystem = class extends Ecosystem {
+  static async detect(packagePath) {
+    try {
+      return (await (0, import_promises2.stat)(import_node_path2.default.join(packagePath, "Cargo.toml"))).isFile();
+    } catch {
+      return false;
+    }
+  }
+  async readCargoToml() {
+    const raw = await (0, import_promises2.readFile)(
+      import_node_path2.default.join(this.packagePath, "Cargo.toml"),
+      "utf-8"
+    );
+    return (0, import_smol_toml.parse)(raw);
+  }
+  async packageName() {
+    const cargo = await this.readCargoToml();
+    const pkg = cargo.package;
+    return pkg.name;
+  }
+  async readVersion() {
+    const cargo = await this.readCargoToml();
+    const pkg = cargo.package;
+    return pkg.version;
+  }
+  async writeVersion(newVersion) {
+    const filePath = import_node_path2.default.join(this.packagePath, "Cargo.toml");
+    const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
+    const cargo = (0, import_smol_toml.parse)(raw);
+    const pkg = cargo.package;
+    pkg.version = newVersion;
+    await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
+  }
+  /**
+   * Update the `version` field of dependencies that match sibling crate names.
+   * This ensures `cargo publish` works when crates depend on each other via path.
+   */
+  async updateSiblingDependencyVersions(siblingVersions) {
+    const filePath = import_node_path2.default.join(this.packagePath, "Cargo.toml");
+    const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
+    const cargo = (0, import_smol_toml.parse)(raw);
+    let modified = false;
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (!sectionData) continue;
+      for (const [depName, depValue] of Object.entries(sectionData)) {
+        if (typeof depValue === "object" && depValue !== null && "path" in depValue && siblingVersions.has(depName)) {
+          const dep = depValue;
+          dep.version = siblingVersions.get(depName);
+          modified = true;
+        }
+      }
+    }
+    if (modified) {
+      await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
+    }
+    return modified;
+  }
+  async syncLockfile() {
+    const lockfilePath = await this.findLockfile();
+    if (!lockfilePath) return void 0;
+    const name = await this.packageName();
+    await (0, import_tinyexec.exec)("cargo", ["update", "--package", name], {
+      nodeOptions: { cwd: import_node_path2.default.dirname(lockfilePath) }
+    });
+    return lockfilePath;
+  }
+  async findLockfile() {
+    let dir = this.packagePath;
+    const { root } = import_node_path2.default.parse(dir);
+    while (dir !== root) {
+      const candidate = import_node_path2.default.join(dir, "Cargo.lock");
+      try {
+        if ((await (0, import_promises2.stat)(candidate)).isFile()) return candidate;
+      } catch {
+      }
+      dir = import_node_path2.default.dirname(dir);
+    }
+    return void 0;
+  }
+  async dependencies() {
+    const cargo = await this.readCargoToml();
+    const deps = [];
+    for (const section of ["dependencies", "build-dependencies"]) {
+      const sectionData = cargo[section];
+      if (sectionData) {
+        deps.push(...Object.keys(sectionData));
+      }
+    }
+    return deps;
+  }
+  manifestFiles() {
+    return ["Cargo.toml"];
+  }
+  defaultTestCommand() {
+    return "cargo test";
+  }
+  defaultBuildCommand() {
+    return "cargo build --release";
+  }
+  supportedRegistries() {
+    return ["crates"];
+  }
+};
+
 // src/error.ts
 var AbstractError = class extends Error {
   constructor(message, { cause } = {}) {
@@ -4529,7 +4648,7 @@ function consoleError(error) {
 
 // src/git.ts
 var import_semver = __toESM(require("semver"), 1);
-var import_tinyexec = require("tinyexec");
+var import_tinyexec2 = require("tinyexec");
 var GitError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -4538,7 +4657,7 @@ var GitError = class extends AbstractError {
 };
 var Git = class {
   async git(args) {
-    const { stdout } = await (0, import_tinyexec.exec)("git", args, { throwOnError: true });
+    const { stdout } = await (0, import_tinyexec2.exec)("git", args, { throwOnError: true });
     return stdout;
   }
   async userName() {
@@ -4792,7 +4911,7 @@ var Git = class {
   async push(options) {
     const args = ["push", options].filter((v) => v);
     try {
-      const { stderr } = await (0, import_tinyexec.exec)("git", args, { throwOnError: true });
+      const { stderr } = await (0, import_tinyexec2.exec)("git", args, { throwOnError: true });
       if (`${stderr}`.includes("GH006")) {
         return false;
       }
@@ -4814,125 +4933,6 @@ function link2(text, url) {
   return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
 }
 
-// src/ecosystem/rust.ts
-var import_promises2 = require("fs/promises");
-var import_node_path2 = __toESM(require("path"), 1);
-var import_smol_toml = require("smol-toml");
-var import_tinyexec2 = require("tinyexec");
-
-// src/ecosystem/ecosystem.ts
-var Ecosystem = class {
-  constructor(packagePath) {
-    this.packagePath = packagePath;
-  }
-};
-
-// src/ecosystem/rust.ts
-var RustEcosystem = class extends Ecosystem {
-  static async detect(packagePath) {
-    try {
-      return (await (0, import_promises2.stat)(import_node_path2.default.join(packagePath, "Cargo.toml"))).isFile();
-    } catch {
-      return false;
-    }
-  }
-  async readCargoToml() {
-    const raw = await (0, import_promises2.readFile)(
-      import_node_path2.default.join(this.packagePath, "Cargo.toml"),
-      "utf-8"
-    );
-    return (0, import_smol_toml.parse)(raw);
-  }
-  async packageName() {
-    const cargo = await this.readCargoToml();
-    const pkg = cargo.package;
-    return pkg.name;
-  }
-  async readVersion() {
-    const cargo = await this.readCargoToml();
-    const pkg = cargo.package;
-    return pkg.version;
-  }
-  async writeVersion(newVersion) {
-    const filePath = import_node_path2.default.join(this.packagePath, "Cargo.toml");
-    const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
-    const cargo = (0, import_smol_toml.parse)(raw);
-    const pkg = cargo.package;
-    pkg.version = newVersion;
-    await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
-  }
-  /**
-   * Update the `version` field of dependencies that match sibling crate names.
-   * This ensures `cargo publish` works when crates depend on each other via path.
-   */
-  async updateSiblingDependencyVersions(siblingVersions) {
-    const filePath = import_node_path2.default.join(this.packagePath, "Cargo.toml");
-    const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
-    const cargo = (0, import_smol_toml.parse)(raw);
-    let modified = false;
-    for (const section of ["dependencies", "build-dependencies"]) {
-      const sectionData = cargo[section];
-      if (!sectionData) continue;
-      for (const [depName, depValue] of Object.entries(sectionData)) {
-        if (typeof depValue === "object" && depValue !== null && "path" in depValue && siblingVersions.has(depName)) {
-          const dep = depValue;
-          dep.version = siblingVersions.get(depName);
-          modified = true;
-        }
-      }
-    }
-    if (modified) {
-      await (0, import_promises2.writeFile)(filePath, (0, import_smol_toml.stringify)(cargo));
-    }
-    return modified;
-  }
-  async syncLockfile() {
-    const lockfilePath = await this.findLockfile();
-    if (!lockfilePath) return void 0;
-    const name = await this.packageName();
-    await (0, import_tinyexec2.exec)("cargo", ["update", "--package", name], {
-      nodeOptions: { cwd: import_node_path2.default.dirname(lockfilePath) }
-    });
-    return lockfilePath;
-  }
-  async findLockfile() {
-    let dir = this.packagePath;
-    const { root } = import_node_path2.default.parse(dir);
-    while (dir !== root) {
-      const candidate = import_node_path2.default.join(dir, "Cargo.lock");
-      try {
-        if ((await (0, import_promises2.stat)(candidate)).isFile()) return candidate;
-      } catch {
-      }
-      dir = import_node_path2.default.dirname(dir);
-    }
-    return void 0;
-  }
-  async dependencies() {
-    const cargo = await this.readCargoToml();
-    const deps = [];
-    for (const section of ["dependencies", "build-dependencies"]) {
-      const sectionData = cargo[section];
-      if (sectionData) {
-        deps.push(...Object.keys(sectionData));
-      }
-    }
-    return deps;
-  }
-  manifestFiles() {
-    return ["Cargo.toml"];
-  }
-  defaultTestCommand() {
-    return "cargo test";
-  }
-  defaultBuildCommand() {
-    return "cargo build --release";
-  }
-  supportedRegistries() {
-    return ["crates"];
-  }
-};
-
 // src/utils/crate-graph.ts
 async function sortCratesByDependencyOrder(cratePaths) {
   if (cratePaths.length <= 1) return cratePaths;
@@ -5507,7 +5507,7 @@ ${stderr}` : "Failed to run `cargo publish`";
   }
   async dryRunPublish(manifestDir) {
     try {
-      const args = ["publish", "--dry-run", "--no-verify"];
+      const args = ["publish", "--dry-run"];
       if (manifestDir) {
         args.push("--manifest-path", import_node_path5.default.join(manifestDir, "Cargo.toml"));
       }
@@ -5519,6 +5519,20 @@ ${stderr}` : "Failed to run `cargo publish --dry-run`";
       throw new CratesError(message, { cause: error });
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const response = await fetch(
+        `${this.registry}/api/v1/crates/${this.packageName}/${version2}`,
+        { headers: this.headers }
+      );
+      return response.ok;
+    } catch (error) {
+      throw new CratesError(
+        `Failed to check version ${version2} for '${this.packageName}' on crates.io`,
+        { cause: error }
+      );
+    }
+  }
   async isPublished() {
     try {
       const response = await fetch(
@@ -5595,10 +5609,24 @@ function createCratesPublishTask(packagePath) {
   const label = packagePath ? ` (${packagePath})` : "";
   return {
     title: `Publishing to crates.io${label}`,
-    task: async () => {
+    task: async (ctx, task) => {
       const packageName = await getCrateName(packagePath);
       const registry = new CratesRegistry(packageName);
-      await registry.publish(packagePath);
+      if (await registry.isVersionPublished(ctx.version)) {
+        task.title = `[SKIPPED] crates.io${label}: v${ctx.version} already published`;
+        task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+        return task.skip();
+      }
+      try {
+        await registry.publish(packagePath);
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("is already uploaded")) {
+          task.title = `[SKIPPED] crates.io${label}: v${ctx.version} already published`;
+          task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+          return task.skip();
+        }
+        throw error;
+      }
     }
   };
 }
@@ -5770,6 +5798,20 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const [scope, name] = getScopeAndName(this.packageName);
+      const response = await fetch(
+        `${this.registry}/@${scope}/${name}/${version2}`
+      );
+      return response.status === 200;
+    } catch (error) {
+      throw new JsrError(
+        `Failed to fetch \`${this.registry}/${this.packageName}/${version2}\``,
+        { cause: error }
+      );
+    }
+  }
   async hasPermission() {
     return this.client.scopePermission(`${getScope(this.packageName)}`) !== null;
   }
@@ -6044,6 +6086,19 @@ var NpmRegistry = class extends Registry {
       );
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const response = await fetch(
+        `${this.registry}/${this.packageName}/${version2}`
+      );
+      return response.status === 200;
+    } catch (error) {
+      throw new NpmError(
+        `Failed to fetch \`${this.registry}/${this.packageName}/${version2}\``,
+        { cause: error }
+      );
+    }
+  }
   async userName() {
     try {
       return (await this.npm(["whoami"])).trim();
@@ -6249,20 +6304,30 @@ async function withTokenRetry(registryKey, task, action) {
 }
 var npmDryRunPublishTask = {
   title: "Dry-run npm publish",
-  task: async (_, task) => {
+  task: async (ctx, task) => {
+    const npm = await npmRegistry();
+    if (await npm.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] Dry-run npm publish: v${ctx.version} already published`;
+      task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+      return task.skip();
+    }
     task.output = "Running npm publish --dry-run...";
     await withTokenRetry("npm", task, async () => {
-      const npm = await npmRegistry();
       await npm.dryRunPublish();
     });
   }
 };
 var jsrDryRunPublishTask = {
   title: "Dry-run jsr publish",
-  task: async (_, task) => {
+  task: async (ctx, task) => {
+    const jsr = await jsrRegistry();
+    if (await jsr.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] Dry-run jsr publish: v${ctx.version} already published`;
+      task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+      return task.skip();
+    }
     task.output = "Running jsr publish --dry-run...";
     await withTokenRetry("jsr", task, async () => {
-      const jsr = await jsrRegistry();
       await jsr.dryRunPublish();
     });
   }
@@ -6271,17 +6336,58 @@ async function getCrateName2(packagePath) {
   const eco = new RustEcosystem(packagePath ?? process.cwd());
   return await eco.packageName();
 }
-function createCratesDryRunPublishTask(packagePath) {
+var MISSING_CRATE_PATTERN = /no matching package named `([^`]+)` found/;
+async function findUnpublishedSiblingDeps(packagePath, siblingCrateNames) {
+  const eco = new RustEcosystem(packagePath ?? process.cwd());
+  const deps = await eco.dependencies();
+  const siblingDeps = deps.filter((d2) => siblingCrateNames.includes(d2));
+  const results = await Promise.all(
+    siblingDeps.map(async (name) => {
+      const registry = new CratesRegistry(name);
+      const published = await registry.isPublished();
+      return published ? null : name;
+    })
+  );
+  return results.filter((name) => name !== null);
+}
+function createCratesDryRunPublishTask(packagePath, siblingCrateNames) {
   const label = packagePath ? ` (${packagePath})` : "";
   return {
     title: `Dry-run crates.io publish${label}`,
-    task: async (_, task) => {
+    task: async (ctx, task) => {
+      const packageName = await getCrateName2(packagePath);
+      const registry = new CratesRegistry(packageName);
+      if (await registry.isVersionPublished(ctx.version)) {
+        task.title = `[SKIPPED] Dry-run crates.io publish${label}: v${ctx.version} already published`;
+        task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+        return task.skip();
+      }
+      if (siblingCrateNames?.length) {
+        const unpublished = await findUnpublishedSiblingDeps(
+          packagePath,
+          siblingCrateNames
+        );
+        if (unpublished.length > 0) {
+          task.title = `Dry-run crates.io publish${label} [skipped: sibling crate \`${unpublished.join("`, `")}\` not yet published]`;
+          return;
+        }
+      }
       task.output = "Running cargo publish --dry-run...";
-      await withTokenRetry("crates", task, async () => {
-        const packageName = await getCrateName2(packagePath);
-        const registry = new CratesRegistry(packageName);
-        await registry.dryRunPublish(packagePath);
-      });
+      try {
+        await withTokenRetry("crates", task, async () => {
+          const packageName2 = await getCrateName2(packagePath);
+          const registry2 = new CratesRegistry(packageName2);
+          await registry2.dryRunPublish(packagePath);
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const match = message.match(MISSING_CRATE_PATTERN);
+        if (match && siblingCrateNames?.includes(match[1])) {
+          task.title = `Dry-run crates.io publish${label} [skipped: sibling crate \`${match[1]}\` not yet published]`;
+          return;
+        }
+        throw error;
+      }
     }
   };
 }
@@ -6462,48 +6568,62 @@ var jsrPublishTasks = {
   title: "Running jsr publish",
   task: async (ctx, task) => {
     const jsr = await jsrRegistry();
+    if (await jsr.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] jsr: v${ctx.version} already published`;
+      task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+      return task.skip();
+    }
     task.output = "Publishing on jsr...";
-    if (!JsrClient.token && !ctx.promptEnabled) {
-      const jsrTokenEnv = import_node_process6.default.env.JSR_TOKEN;
-      if (!jsrTokenEnv) {
-        throw new JsrAvailableError(
-          "JSR_TOKEN not found in the environment variables. Please set the token and try again."
-        );
+    try {
+      if (!JsrClient.token && !ctx.promptEnabled) {
+        const jsrTokenEnv = import_node_process6.default.env.JSR_TOKEN;
+        if (!jsrTokenEnv) {
+          throw new JsrAvailableError(
+            "JSR_TOKEN not found in the environment variables. Please set the token and try again."
+          );
+        }
+        JsrClient.token = jsrTokenEnv;
       }
-      JsrClient.token = jsrTokenEnv;
-    }
-    let result = await jsr.publish();
-    if (!result && jsr.packageCreationUrls) {
-      if (ctx.promptEnabled) {
-        task.title = "Running jsr publish (package creation needed)";
-        const urls = jsr.packageCreationUrls;
-        const maxAttempts = 3;
-        task.output = `Package doesn't exist on jsr. Create it at:
+      let result = await jsr.publish();
+      if (!result && jsr.packageCreationUrls) {
+        if (ctx.promptEnabled) {
+          task.title = "Running jsr publish (package creation needed)";
+          const urls = jsr.packageCreationUrls;
+          const maxAttempts = 3;
+          task.output = `Package doesn't exist on jsr. Create it at:
 ${urls.map((url) => `  ${color.cyan(url)}`).join("\n")}`;
-        open(urls[0]);
-        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-          await task.prompt(import_prompt_adapter_enquirer2.ListrEnquirerPromptAdapter).run({
-            type: "input",
-            message: `Press ${color.bold("enter")} after creating the package on jsr.io${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
-          });
-          result = await jsr.publish();
-          if (result) break;
-          if (attempt < maxAttempts) {
-            task.output = "Package still doesn't exist. Please create it and try again.";
+          open(urls[0]);
+          for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+            await task.prompt(import_prompt_adapter_enquirer2.ListrEnquirerPromptAdapter).run({
+              type: "input",
+              message: `Press ${color.bold("enter")} after creating the package on jsr.io${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
+            });
+            result = await jsr.publish();
+            if (result) break;
+            if (attempt < maxAttempts) {
+              task.output = "Package still doesn't exist. Please create it and try again.";
+            }
           }
-        }
-        if (!result) {
+          if (!result) {
+            throw new JsrAvailableError(
+              "Package creation not completed after 3 attempts."
+            );
+          }
+          task.title = "Running jsr publish (package created)";
+        } else {
           throw new JsrAvailableError(
-            "Package creation not completed after 3 attempts."
+            `Package doesn't exist on jsr. Create it at:
+${jsr.packageCreationUrls.join("\n")}`
           );
         }
-        task.title = "Running jsr publish (package created)";
-      } else {
-        throw new JsrAvailableError(
-          `Package doesn't exist on jsr. Create it at:
-${jsr.packageCreationUrls.join("\n")}`
-        );
       }
+    } catch (error) {
+      if (error instanceof Error && error.message.includes("already published")) {
+        task.title = `[SKIPPED] jsr: v${ctx.version} already published`;
+        task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+        return task.skip();
+      }
+      throw error;
     }
   }
 };
@@ -6600,44 +6720,62 @@ var npmPublishTasks = {
   skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
+    if (await npm.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] npm: v${ctx.version} already published`;
+      task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+      return task.skip();
+    }
     task.output = "Publishing on npm...";
-    if (ctx.promptEnabled) {
-      let result = await npm.publish();
-      if (!result) {
-        task.title = "Running npm publish (OTP code needed)";
-        const maxAttempts = 3;
-        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-          result = await npm.publish(
-            await task.prompt(import_prompt_adapter_enquirer3.ListrEnquirerPromptAdapter).run({
-              type: "password",
-              message: `npm OTP code${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
-            })
-          );
-          if (result) break;
-          if (attempt < maxAttempts) {
-            task.output = "2FA failed. Please try again.";
+    try {
+      if (ctx.promptEnabled) {
+        let result = await npm.publish();
+        if (!result) {
+          task.title = "Running npm publish (OTP code needed)";
+          const maxAttempts = 3;
+          for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+            result = await npm.publish(
+              await task.prompt(import_prompt_adapter_enquirer3.ListrEnquirerPromptAdapter).run({
+                type: "password",
+                message: `npm OTP code${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
+              })
+            );
+            if (result) break;
+            if (attempt < maxAttempts) {
+              task.output = "2FA failed. Please try again.";
+            }
+          }
+          if (!result) {
+            throw new NpmAvailableError(
+              "OTP verification failed after 3 attempts."
+            );
           }
+          task.title = "Running npm publish (2FA passed)";
+        }
+      } else {
+        const npmTokenEnv = import_node_process7.default.env.NODE_AUTH_TOKEN;
+        if (!npmTokenEnv) {
+          throw new NpmAvailableError(
+            "NODE_AUTH_TOKEN not found in environment variables. Set it in your CI configuration:\n  GitHub Actions: Add NODE_AUTH_TOKEN as a repository secret\n  Other CI: Export NODE_AUTH_TOKEN with your npm access token"
+          );
         }
+        const result = await npm.publishProvenance();
         if (!result) {
           throw new NpmAvailableError(
-            "OTP verification failed after 3 attempts."
+            `In CI environment, publishing with 2FA is not allowed. Please disable 2FA when accessing with a token from https://www.npmjs.com/package/${npm.packageName}/access `
           );
         }
-        task.title = "Running npm publish (2FA passed)";
-      }
-    } else {
-      const npmTokenEnv = import_node_process7.default.env.NODE_AUTH_TOKEN;
-      if (!npmTokenEnv) {
-        throw new NpmAvailableError(
-          "NODE_AUTH_TOKEN not found in environment variables. Set it in your CI configuration:\n  GitHub Actions: Add NODE_AUTH_TOKEN as a repository secret\n  Other CI: Export NODE_AUTH_TOKEN with your npm access token"
-        );
       }
-      const result = await npm.publishProvenance();
-      if (!result) {
-        throw new NpmAvailableError(
-          `In CI environment, publishing with 2FA is not allowed. Please disable 2FA when accessing with a token from https://www.npmjs.com/package/${npm.packageName}/access `
-        );
+    } catch (error) {
+      if (error instanceof Error && (error.message.includes(
+        "cannot publish over the previously published"
+      ) || error.message.includes(
+        "You cannot publish over the previously published"
+      ))) {
+        task.title = `[SKIPPED] npm: v${ctx.version} already published`;
+        task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+        return task.skip();
       }
+      throw error;
     }
   }
 };
@@ -7128,10 +7266,15 @@ async function collectDryRunPublishTasks(ctx) {
       return nonCratesTasks;
     }
     const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const siblingCrateNames = await Promise.all(
+      cratesPaths.map((p) => new RustEcosystem(p).packageName())
+    );
     const sequentialCratesTask = {
       title: "Dry-run crates.io publish (sequential)",
       task: (_ctx, task) => task.newListr(
-        sortedPaths.map((p) => createCratesDryRunPublishTask(p)),
+        sortedPaths.map(
+          (p) => createCratesDryRunPublishTask(p, siblingCrateNames)
+        ),
         { concurrent: false }
       )
     };