release-it 19.0.1 → 19.0.3

package/README.md

@@ -162,7 +162,7 @@ GitLab projects can have releases attached to Git tags, containing release notes
 releases][32]:
 
 - Configure `gitlab.release: true`
-- Obtain a [personal access token][33] (release-it only needs the "api" scope).
+- Obtain a [personal access token][33] (release-it needs the `api` and `self_rotate` scopes).
 - Make sure the token is [available as an environment variable][34].
 
 → See [GitLab Releases][35] for more details.

package/config/release-it.json

@@ -63,7 +63,7 @@
     "tokenRef": "GITLAB_TOKEN",
     "tokenHeader": "Private-Token",
     "certificateAuthorityFile": null,
-    "secure": null,
+    "secure": false,
     "assets": null,
     "useIdsForUrls": false,
     "useGenericPackageRepositoryForAssets": false,

package/lib/plugin/git/Git.js

@@ -1,5 +1,5 @@
 import { EOL } from 'node:os';
-import { x } from 'tinyexec';
+import { spawn } from 'node:child_process';
 import matcher from 'wildcard-match';
 import { format, e, fixArgs, once, castArray } from '../../util.js';
 import GitBase from '../GitBase.js';
@@ -11,11 +11,13 @@ const options = { write: false };
 
 const docs = 'https://git.io/release-it-git';
 
-const isGitRepo = () =>
-  x('git', ['rev-parse', '--git-dir'], { throwOnError: true }).then(
-    () => true,
-    () => false
-  );
+async function isGitRepo() {
+  return await new Promise(resolve => {
+    const process = spawn('git', ['rev-parse', '--git-dir']);
+    process.on('close', code => resolve(code === 0));
+    process.on('error', () => resolve(false));
+  });
+}
 
 class Git extends GitBase {
   constructor(...args) {

package/lib/plugin/npm/npm.js

@@ -14,6 +14,7 @@ const DEFAULT_TAG = 'latest';
 const DEFAULT_TAG_PRERELEASE = 'next';
 const NPM_BASE_URL = 'https://www.npmjs.com';
 const NPM_PUBLIC_PATH = '/package';
+const DEFAULT_TIMEOUT = 10;
 
 class npm extends Plugin {
   static isEnabled(options) {
@@ -32,7 +33,7 @@ class npm extends Plugin {
 
     const { publish, skipChecks } = this.options;
 
-    const timeout = Number(this.options.timeout) * 1000;
+    const timeout = Number(this.options.timeout ?? DEFAULT_TIMEOUT) * 1000;
 
     if (publish === false || isPrivate) return;
 

package/lib/shell.js

@@ -1,6 +1,5 @@
 import util from 'node:util';
-import childProcess from 'node:child_process';
-import { x } from 'tinyexec';
+import { spawn, exec } from 'node:child_process';
 import { format } from './util.js';
 
 const debug = util.debug('release-it:shell');
@@ -53,7 +52,7 @@ class Shell {
 
   execStringCommand(command, options, { isExternal }) {
     return new Promise((resolve, reject) => {
-      const proc = childProcess.exec(command, (err, stdout, stderr) => {
+      const proc = exec(command, (err, stdout, stderr) => {
         stdout = stdout.toString().trimEnd();
         const code = !err ? 0 : err === 'undefined' ? 1 : err.code;
         debug({ command, options, code, stdout, stderr });
@@ -68,21 +67,52 @@ class Shell {
     });
   }
 
-  async execWithArguments(command, options, { isExternal }) {
+  async execWithArguments(command, options = {}, { isExternal } = {}) {
     const [program, ...programArgs] = command;
 
     try {
-      const { stdout: out, stderr } = await x(program, programArgs, { throwOnError: true });
-      const stdout = out === '""' ? '' : out;
-      this.log.verbose(stdout, { isExternal });
-      debug({ command, options, stdout, stderr });
-      return Promise.resolve((stdout || stderr).trim());
+      return await new Promise((resolve, reject) => {
+        const proc = spawn(program, programArgs, {
+          // we want to capture all output from the process so the extra 2 pipe
+          stdio: ['inherit', 'pipe', 'pipe'],
+          ...options
+        });
+
+        let stdout = '';
+        let stderr = '';
+
+        proc.stdout.on('data', data => {
+          stdout += data.toString();
+        });
+
+        proc.stderr.on('data', data => {
+          stderr += data.toString();
+        });
+
+        proc.on('close', code => {
+          stdout = stdout === '""' ? '' : stdout;
+          this.log.verbose(stdout, { isExternal });
+          debug({ command, options, stdout, stderr });
+
+          if (code === 0) {
+            resolve((stdout || stderr).trim());
+          } else {
+            if (stdout) {
+              this.log.log(`\n${stdout}`);
+            }
+            debug({ code, command, options, stdout, stderr });
+            reject(new Error(stderr || stdout || `Process exited with code ${code}`));
+          }
+        });
+
+        proc.on('error', err => {
+          debug(err);
+          reject(new Error(err.message));
+        });
+      });
     } catch (err) {
-      if (err.output.stdout) {
-        this.log.log(`\n${err.output.stdout}`);
-      }
       debug(err);
-      return Promise.reject(new Error(err.output.stderr || err.output.stdout || err.message));
+      return Promise.reject(err);
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-it",
-  "version": "19.0.1",
+  "version": "19.0.3",
   "description": "Generic CLI tool to automate versioning and package publishing-related tasks.",
   "keywords": [
     "build",
@@ -80,42 +80,41 @@
   "dependencies": {
     "@nodeutils/defaults-deep": "1.1.0",
     "@octokit/rest": "21.1.1",
-    "@phun-ky/typeof": "1.2.5",
+    "@phun-ky/typeof": "1.2.8",
     "async-retry": "1.3.3",
-    "c12": "3.0.3",
+    "c12": "3.0.4",
     "ci-info": "^4.2.0",
     "eta": "3.5.0",
     "git-url-parse": "16.1.0",
-    "inquirer": "12.5.2",
+    "inquirer": "12.6.3",
     "issue-parser": "7.0.1",
     "lodash.get": "4.4.2",
     "lodash.merge": "4.6.2",
     "mime-types": "3.0.1",
     "new-github-release-url": "2.0.0",
-    "open": "10.1.1",
+    "open": "10.1.2",
     "ora": "8.2.0",
-    "os-name": "6.0.0",
+    "os-name": "6.1.0",
     "proxy-agent": "6.5.0",
-    "semver": "7.7.1",
-    "tinyexec": "1.0.1",
-    "tinyglobby": "0.2.12",
+    "semver": "7.7.2",
+    "tinyglobby": "0.2.14",
     "undici": "6.21.2",
     "url-join": "5.0.0",
     "wildcard-match": "5.1.4",
     "yargs-parser": "21.1.1"
   },
   "devDependencies": {
-    "@eslint/compat": "1.2.8",
+    "@eslint/compat": "1.2.9",
     "@eslint/eslintrc": "3.3.1",
-    "@eslint/js": "9.24.0",
+    "@eslint/js": "9.27.0",
     "@octokit/request-error": "6.1.8",
-    "@types/node": "20.17.30",
-    "eslint": "9.24.0",
-    "eslint-plugin-import-x": "4.10.5",
-    "globals": "16.0.0",
+    "@types/node": "20.17.32",
+    "eslint": "9.27.0",
+    "eslint-plugin-import-x": "4.13.3",
+    "globals": "16.2.0",
     "installed-check": "9.3.0",
-    "knip": "5.50.5",
-    "mentoss": "0.9.2",
+    "knip": "5.59.1",
+    "mentoss": "0.11.0",
     "mock-stdio": "1.0.3",
     "prettier": "3.5.3",
     "remark-cli": "12.0.1",
@@ -128,7 +127,7 @@
     "socks": "2.8.3"
   },
   "engines": {
-    "node": "^20.9.0 || >=22.0.0"
+    "node": "^20.12.0 || >=22.0.0"
   },
   "remarkConfig": {
     "plugins": [

package/schema/gitlab.json

@@ -51,7 +51,7 @@
       "default": "CI_SERVER_TLS_CA_FILE"
     },
     "secure": {
-      "default": null
+      "default": false
     },
     "assets": {
       "default": null

package/types/config.d.ts

@@ -181,7 +181,7 @@ export interface Config {
     /** @default null */
     certificateAuthorityFile?: any;
 
-    /** @default null */
+    /** @default false */
     secure?: boolean;
 
     /** @default null */