release-it 19.0.2 → 19.0.4

package/README.md

@@ -162,7 +162,7 @@ GitLab projects can have releases attached to Git tags, containing release notes
 releases][32]:
 
 - Configure `gitlab.release: true`
-- Obtain a [personal access token][33] (release-it only needs the "api" scope).
+- Obtain a [personal access token][33] (release-it needs the `api` and `self_rotate` scopes).
 - Make sure the token is [available as an environment variable][34].
 
 → See [GitLab Releases][35] for more details.

package/config/release-it.json

@@ -63,7 +63,7 @@
     "tokenRef": "GITLAB_TOKEN",
     "tokenHeader": "Private-Token",
     "certificateAuthorityFile": null,
-    "secure": null,
+    "secure": false,
     "assets": null,
     "useIdsForUrls": false,
     "useGenericPackageRepositoryForAssets": false,

package/lib/config.js

@@ -4,9 +4,8 @@ import { isCI } from 'ci-info';
 import defaultsDeep from '@nodeutils/defaults-deep';
 import { isObjectStrict } from '@phun-ky/typeof';
 import merge from 'lodash.merge';
-import get from 'lodash.get';
 import { loadConfig as loadC12 } from 'c12';
-import { getSystemInfo, readJSON } from './util.js';
+import { get, getSystemInfo, readJSON } from './util.js';
 
 const debug = util.debug('release-it:config');
 const defaultConfig = readJSON(new URL('../config/release-it.json', import.meta.url));

package/lib/plugin/Plugin.js

@@ -1,6 +1,6 @@
 import { debug } from 'node:util';
 import merge from 'lodash.merge';
-import get from 'lodash.get';
+import { get } from '../util.js';
 
 class Plugin {
   static isEnabled() {

package/lib/plugin/git/Git.js

@@ -1,5 +1,5 @@
 import { EOL } from 'node:os';
-import { x } from 'tinyexec';
+import { spawn } from 'node:child_process';
 import matcher from 'wildcard-match';
 import { format, e, fixArgs, once, castArray } from '../../util.js';
 import GitBase from '../GitBase.js';
@@ -11,11 +11,13 @@ const options = { write: false };
 
 const docs = 'https://git.io/release-it-git';
 
-const isGitRepo = () =>
-  x('git', ['rev-parse', '--git-dir'], { throwOnError: true }).then(
-    () => true,
-    () => false
-  );
+async function isGitRepo() {
+  return await new Promise(resolve => {
+    const process = spawn('git', ['rev-parse', '--git-dir']);
+    process.on('close', code => resolve(code === 0));
+    process.on('error', () => resolve(false));
+  });
+}
 
 class Git extends GitBase {
   constructor(...args) {

package/lib/plugin/github/GitHub.js

@@ -178,7 +178,7 @@ class GitHub extends Release {
       baseUrl,
       auth: `token ${this.token}`,
       userAgent: `release-it/${pkg.version}`,
-      log: this.config.isDebug ? console : null,
+      log: this.config.isDebug ? console : {},
       request: {
         timeout
       }

package/lib/plugin/npm/npm.js

@@ -14,6 +14,7 @@ const DEFAULT_TAG = 'latest';
 const DEFAULT_TAG_PRERELEASE = 'next';
 const NPM_BASE_URL = 'https://www.npmjs.com';
 const NPM_PUBLIC_PATH = '/package';
+const DEFAULT_TIMEOUT = 10;
 
 class npm extends Plugin {
   static isEnabled(options) {
@@ -32,7 +33,7 @@ class npm extends Plugin {
 
     const { publish, skipChecks } = this.options;
 
-    const timeout = Number(this.options.timeout) * 1000;
+    const timeout = Number(this.options.timeout ?? DEFAULT_TIMEOUT) * 1000;
 
     if (publish === false || isPrivate) return;
 

package/lib/shell.js

@@ -1,6 +1,5 @@
 import util from 'node:util';
-import childProcess from 'node:child_process';
-import { x } from 'tinyexec';
+import { spawn, exec } from 'node:child_process';
 import { format } from './util.js';
 
 const debug = util.debug('release-it:shell');
@@ -53,7 +52,7 @@ class Shell {
 
   execStringCommand(command, options, { isExternal }) {
     return new Promise((resolve, reject) => {
-      const proc = childProcess.exec(command, (err, stdout, stderr) => {
+      const proc = exec(command, (err, stdout, stderr) => {
         stdout = stdout.toString().trimEnd();
         const code = !err ? 0 : err === 'undefined' ? 1 : err.code;
         debug({ command, options, code, stdout, stderr });
@@ -68,21 +67,52 @@ class Shell {
     });
   }
 
-  async execWithArguments(command, options, { isExternal }) {
+  async execWithArguments(command, options = {}, { isExternal } = {}) {
     const [program, ...programArgs] = command;
 
     try {
-      const { stdout: out, stderr } = await x(program, programArgs, { throwOnError: true });
-      const stdout = out === '""' ? '' : out;
-      this.log.verbose(stdout, { isExternal });
-      debug({ command, options, stdout, stderr });
-      return Promise.resolve((stdout || stderr).trim());
+      return await new Promise((resolve, reject) => {
+        const proc = spawn(program, programArgs, {
+          // we want to capture all output from the process so the extra 2 pipe
+          stdio: ['inherit', 'pipe', 'pipe'],
+          ...options
+        });
+
+        let stdout = '';
+        let stderr = '';
+
+        proc.stdout.on('data', data => {
+          stdout += data.toString();
+        });
+
+        proc.stderr.on('data', data => {
+          stderr += data.toString();
+        });
+
+        proc.on('close', code => {
+          stdout = stdout === '""' ? '' : stdout;
+          this.log.verbose(stdout, { isExternal });
+          debug({ command, options, stdout, stderr });
+
+          if (code === 0) {
+            resolve((stdout || stderr).trim());
+          } else {
+            if (stdout) {
+              this.log.log(`\n${stdout}`);
+            }
+            debug({ code, command, options, stdout, stderr });
+            reject(new Error(stderr || stdout || `Process exited with code ${code}`));
+          }
+        });
+
+        proc.on('error', err => {
+          debug(err);
+          reject(new Error(err.message));
+        });
+      });
     } catch (err) {
-      if (err.output.stdout) {
-        this.log.log(`\n${err.output.stdout}`);
-      }
       debug(err);
-      return Promise.reject(new Error(err.output.stderr || err.output.stdout || err.message));
+      return Promise.reject(err);
     }
   }
 }

package/lib/util.js

@@ -179,3 +179,28 @@ export const pick = (object, keys) => {
     return obj;
   }, {});
 };
+
+const  parsePath = (path)=> {
+  const result = [];
+  const regex = /[^.[\]]+|\[(?:(\d+)|["'](.+?)["'])\]/g;
+  let match;
+
+  while ((match = regex.exec(path)) !== null) {
+    result.push(match[1] ?? match[2] ?? match[0]);
+  }
+
+  return result;
+}
+
+export const get = (obj, path, defaultValue = undefined) =>{
+  if (!path || typeof path !== 'string') {
+    return defaultValue;
+  }
+  
+  try {
+    const keys = parsePath(path);
+    return keys.reduce((acc, key) => acc?.[key], obj) ?? defaultValue;
+  } catch {
+    return defaultValue;
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "release-it",
-  "version": "19.0.2",
+  "version": "19.0.4",
   "description": "Generic CLI tool to automate versioning and package publishing-related tasks.",
   "keywords": [
     "build",
@@ -82,42 +82,40 @@
     "@octokit/rest": "21.1.1",
     "@phun-ky/typeof": "1.2.8",
     "async-retry": "1.3.3",
-    "c12": "3.0.3",
-    "ci-info": "^4.2.0",
+    "c12": "3.1.0",
+    "ci-info": "^4.3.0",
     "eta": "3.5.0",
     "git-url-parse": "16.1.0",
-    "inquirer": "12.6.0",
+    "inquirer": "12.7.0",
     "issue-parser": "7.0.1",
-    "lodash.get": "4.4.2",
     "lodash.merge": "4.6.2",
     "mime-types": "3.0.1",
     "new-github-release-url": "2.0.0",
-    "open": "10.1.2",
+    "open": "10.2.0",
     "ora": "8.2.0",
-    "os-name": "6.0.0",
+    "os-name": "6.1.0",
     "proxy-agent": "6.5.0",
-    "semver": "7.7.1",
-    "tinyexec": "1.0.1",
-    "tinyglobby": "0.2.13",
-    "undici": "6.21.2",
+    "semver": "7.7.2",
+    "tinyglobby": "0.2.14",
+    "undici": "6.21.3",
     "url-join": "5.0.0",
     "wildcard-match": "5.1.4",
     "yargs-parser": "21.1.1"
   },
   "devDependencies": {
-    "@eslint/compat": "1.2.9",
+    "@eslint/compat": "1.3.1",
     "@eslint/eslintrc": "3.3.1",
-    "@eslint/js": "9.26.0",
+    "@eslint/js": "9.31.0",
     "@octokit/request-error": "6.1.8",
     "@types/node": "20.17.32",
-    "eslint": "9.26.0",
-    "eslint-plugin-import-x": "4.11.0",
-    "globals": "16.0.0",
+    "eslint": "9.31.0",
+    "eslint-plugin-import-x": "4.16.1",
+    "globals": "16.3.0",
     "installed-check": "9.3.0",
-    "knip": "5.53.0",
+    "knip": "5.61.3",
     "mentoss": "0.11.0",
     "mock-stdio": "1.0.3",
-    "prettier": "3.5.3",
+    "prettier": "3.6.2",
     "remark-cli": "12.0.1",
     "remark-preset-webpro": "1.1.1",
     "tar": "7.4.3",

package/schema/gitlab.json

@@ -51,7 +51,7 @@
       "default": "CI_SERVER_TLS_CA_FILE"
     },
     "secure": {
-      "default": null
+      "default": false
     },
     "assets": {
       "default": null

package/test/utils.js

@@ -3,7 +3,7 @@ import test from 'node:test';
 import assert from 'node:assert/strict';
 import { stripVTControlCharacters } from 'node:util';
 import mockStdIo from 'mock-stdio';
-import { format, truncateLines, parseGitUrl, parseVersion } from '../lib/util.js';
+import { format, truncateLines, parseGitUrl, parseVersion, get } from '../lib/util.js';
 
 test('format', () => {
   assert.equal(format('release v${version}', { version: '1.0.0' }), 'release v1.0.0');
@@ -96,3 +96,53 @@ test('parseVersion', () => {
   assert.deepEqual(parseVersion('1.0.0-next.1'), { version: '1.0.0-next.1', isPreRelease: true, preReleaseId: 'next' });
   assert.deepEqual(parseVersion('21.04.1'), { version: '21.04.1', isPreRelease: false, preReleaseId: null });
 });
+
+const sample = {
+  root: {
+    level1: {
+      level2: {
+        value: 'nested'
+      },
+      array: [
+        { id: 1, data: 'first' },
+        { id: 2, data: 'second' }
+      ],
+      'key.with.dot': {
+        special: true
+      }
+    },
+    mixed: [
+      { deep: { value: 100 } },
+      { deep: { value: 200 } }
+    ],
+  }
+};
+
+test('get: accesses a simple nested property', () => {
+  assert.equal(get(sample, 'root.level1.level2.value'), 'nested');
+});
+
+test('get: accesses array elements by index', () => {
+  assert.equal(get(sample, 'root.level1.array[0].data'), 'first');
+  assert.equal(get(sample, 'root.level1.array[1].id'), 2);
+});
+
+test('get: accesses keys with dots using bracket notation', () => {
+  assert.equal(get(sample, 'root.level1["key.with.dot"].special'), true);
+});
+
+test('get: navigates mixed objects and arrays', () => {
+  assert.equal(get(sample, 'root.mixed[0].deep.value'), 100);
+  assert.equal(get(sample, 'root.mixed[1].deep.value'), 200);
+});
+
+test('get: returns default value for non-existent properties', () => {
+  assert.equal(get(sample, 'root.level1.unknown', 'default'), 'default');
+  assert.equal(get(sample, 'root.level1.array[10].id', null), null);
+});
+
+test('get: handles empty path and null/undefined objects', () => {
+  assert.equal(get(sample, '', 'default'), 'default');
+  assert.equal(get(null, 'any.path', 'default'), 'default');
+  assert.equal(get(undefined, 'any.path', 'default'), 'default');
+});

package/types/config.d.ts

@@ -181,7 +181,7 @@ export interface Config {
     /** @default null */
     certificateAuthorityFile?: any;
 
-    /** @default null */
+    /** @default false */
     secure?: boolean;
 
     /** @default null */