relizy 1.4.7 → 1.4.8-beta.1

package/dist/cli.mjs

@@ -5,7 +5,7 @@ import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 import { printBanner, logger } from '@maz-ui/node';
 import { Command } from 'commander';
-import { ay as isInCI, az as getCIName, b as bump, c as changelog, g as publish, e as providerRelease, h as social, p as prComment, r as release } from './shared/relizy.d-S4lcvu.mjs';
+import { aA as isInCI, aB as getCIName, b as bump, c as changelog, g as publish, e as providerRelease, h as social, p as prComment, r as release } from './shared/relizy.BdF1zFG_.mjs';
 import 'node:child_process';
 import '@maz-ui/utils';
 import 'c12';

package/dist/index.d.mts

@@ -27,8 +27,8 @@ declare function getDefaultConfig(): {
         private: false;
         args: never[];
         token: string | undefined;
-        registry: string;
         safetyCheck: true;
+        safetyCheckTimeout: number;
         packageManager: PackageManager;
     };
     tokens: {
@@ -326,6 +326,16 @@ declare function parseChangelogMarkdown(contents: string): {
     }[];
 };
 
+/**
+ * Resolve the effective npm registry from the environment (`.npmrc` files, env
+ * variables, npm/pnpm defaults) via `npm config get registry`. Falls back to the
+ * public registry when npm is unavailable or returns nothing.
+ *
+ * Used when the user did not set `publish.registry`, so Relizy honors a custom
+ * registry (e.g. a corporate proxy) configured in the user's `.npmrc` instead of
+ * forcing the public registry.
+ */
+declare function getNpmRegistry(cwd?: string): string;
 declare function detectPackageManager(cwd?: string): PackageManager;
 declare function determinePublishTag(version: string, configTag?: string): string;
 declare function getPackagesToPublishInSelectiveMode(sortedPackages: PackageBase[], rootVersion: string | undefined): PackageBase[];
@@ -410,6 +420,13 @@ declare function postPrComment({ config, pr, body, }: {
     body: string;
 }): Promise<boolean>;
 
+/**
+ * Return a deep clone of `value` with every secret masked, without mutating the
+ * original. Secrets are detected by sensitive key name and by living under a
+ * secret container (e.g. `tokens.*`).
+ */
+declare function redactSecrets<T>(value: T): T;
+
 declare function readPackageJson(packagePath: string): ReadPackage | undefined;
 interface RootPackage extends ReadPackage {
     fromTag: string;
@@ -1220,6 +1237,13 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * @default true
      */
     safetyCheck?: boolean;
+    /**
+     * Maximum time in milliseconds for the registry authentication safety check
+     * before it is aborted. Prevents the release from hanging indefinitely when
+     * the registry (or a proxy) never answers.
+     * @default 15000
+     */
+    safetyCheckTimeout?: number;
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -1978,5 +2002,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
 export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.d.ts

@@ -27,8 +27,8 @@ declare function getDefaultConfig(): {
         private: false;
         args: never[];
         token: string | undefined;
-        registry: string;
         safetyCheck: true;
+        safetyCheckTimeout: number;
         packageManager: PackageManager;
     };
     tokens: {
@@ -326,6 +326,16 @@ declare function parseChangelogMarkdown(contents: string): {
     }[];
 };
 
+/**
+ * Resolve the effective npm registry from the environment (`.npmrc` files, env
+ * variables, npm/pnpm defaults) via `npm config get registry`. Falls back to the
+ * public registry when npm is unavailable or returns nothing.
+ *
+ * Used when the user did not set `publish.registry`, so Relizy honors a custom
+ * registry (e.g. a corporate proxy) configured in the user's `.npmrc` instead of
+ * forcing the public registry.
+ */
+declare function getNpmRegistry(cwd?: string): string;
 declare function detectPackageManager(cwd?: string): PackageManager;
 declare function determinePublishTag(version: string, configTag?: string): string;
 declare function getPackagesToPublishInSelectiveMode(sortedPackages: PackageBase[], rootVersion: string | undefined): PackageBase[];
@@ -410,6 +420,13 @@ declare function postPrComment({ config, pr, body, }: {
     body: string;
 }): Promise<boolean>;
 
+/**
+ * Return a deep clone of `value` with every secret masked, without mutating the
+ * original. Secrets are detected by sensitive key name and by living under a
+ * secret container (e.g. `tokens.*`).
+ */
+declare function redactSecrets<T>(value: T): T;
+
 declare function readPackageJson(packagePath: string): ReadPackage | undefined;
 interface RootPackage extends ReadPackage {
     fromTag: string;
@@ -1220,6 +1237,13 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * @default true
      */
     safetyCheck?: boolean;
+    /**
+     * Maximum time in milliseconds for the registry authentication safety check
+     * before it is aborted. Prevents the release from hanging indefinitely when
+     * the registry (or a proxy) never answers.
+     * @default 15000
+     */
+    safetyCheckTimeout?: number;
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -1978,5 +2002,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
 export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { as as NEW_PACKAGE_MARKER, a5 as PR_COMMENT_MARKER, S as buildChangelogBody, a as buildCommentBody, R as buildCompareLink, U as buildContributors, b as bump, aG as capReleaseTypeForZeroMajor, c as changelog, v as checkGitStatusIfDirty, T as collectContributorNames, a1 as collectPackageBumps, aU as confirmBump, B as createCommitAndTags, P as createGitlabRelease, k as defineConfig, y as detectGitProvider, X as detectPackageManager, a4 as detectPullRequest, Y as determinePublishTag, aI as determineReleaseType, aH as determineSemverChange, aB as executeBuildCmd, aA as executeFormatCmd, ax as executeHook, q as expandPackagesToBumpWithDependents, al as extractChangelogSummary, aM as extractVersionFromPackageTag, aX as extractVersionFromTag, x as fetchGitTags, aD as filterOutPrivatePackages, a2 as findGitHubPR, a3 as findGitLabMR, K as findReachableCommitBySubject, ah as formatChangelogForSlack, ai as formatPackagesForSlack, aj as formatSlackMessage, av as formatTweetMessage, i as generateChangelog, V as generateMarkDown, $ as getAuthCommand, aV as getBumpedIndependentPackages, aT as getBumpedPackageIndependently, az as getCIName, aY as getCanaryVersion, J as getCommitSubject, F as getCurrentGitBranch, G as getCurrentGitRef, j as getDefaultConfig, o as getDependentsOf, E as getFirstCommit, u as getGitStatus, an as getIndependentTag, ar as getLastPackageTag, aq as getLastRepoTag, ao as getLastStableTag, ap as getLastTag, A as getModifiedReleaseFilePatterns, ab as getPackageCommits, n as getPackageDependencies, aK as getPackageNewVersion, aa as getPackages, aE as getPackagesOrBumpedPackages, _ as getPackagesToPublishInIndependentMode, Z as getPackagesToPublishInSelectiveMode, aR as getPreid, am as getReleaseUrl, a8 as getRootPackage, H as getShortCommitSha, af as getSlackToken, ag as getSlackWebhookUrl, au as getTwitterCredentials, O as github, Q as gitlab, ac as hasLernaJson, I as isAncestor, aC as isBumpedPackage, aS as isChangedPreid, aQ as isGraduating, aF as isGraduatingToStableBetweenVersion, ay as isInCI, aN as isPrerelease, aP as isPrereleaseReleaseType, aO as isStableReleaseType, aZ as isTagVersionCompatibleWithCurrent, l as loadRelizyConfig, m as mergeTypes, W as parseChangelogMarkdown, z as parseGitRemoteUrl, a6 as postPrComment, ak as postReleaseToSlack, aw as postReleaseToTwitter, p as prComment, e as providerRelease, d as providerReleaseSafetyCheck, g as publish, a0 as publishPackage, f as publishSafetyCheck, C as pushCommitAndTags, N as pushTagForce, a7 as readPackageJson, a9 as readPackages, ae as reconcileFromTag, r as release, ad as resetRewrittenTagCache, at as resolveTags, M as retagAnnotatedLocal, D as rollbackModifiedFiles, aW as shouldFilterPrereleaseTags, h as social, s as socialSafetyCheck, L as tagExists, t as topologicalSort, aL as updateLernaVersion, w as writeChangelogToFile, aJ as writeVersion } from './shared/relizy.d-S4lcvu.mjs';
+export { au as NEW_PACKAGE_MARKER, a6 as PR_COMMENT_MARKER, S as buildChangelogBody, a as buildCommentBody, R as buildCompareLink, U as buildContributors, b as bump, aI as capReleaseTypeForZeroMajor, c as changelog, v as checkGitStatusIfDirty, T as collectContributorNames, a2 as collectPackageBumps, aW as confirmBump, B as createCommitAndTags, P as createGitlabRelease, k as defineConfig, y as detectGitProvider, Y as detectPackageManager, a5 as detectPullRequest, Z as determinePublishTag, aK as determineReleaseType, aJ as determineSemverChange, aD as executeBuildCmd, aC as executeFormatCmd, az as executeHook, q as expandPackagesToBumpWithDependents, an as extractChangelogSummary, aO as extractVersionFromPackageTag, aZ as extractVersionFromTag, x as fetchGitTags, aF as filterOutPrivatePackages, a3 as findGitHubPR, a4 as findGitLabMR, K as findReachableCommitBySubject, aj as formatChangelogForSlack, ak as formatPackagesForSlack, al as formatSlackMessage, ax as formatTweetMessage, i as generateChangelog, V as generateMarkDown, a0 as getAuthCommand, aX as getBumpedIndependentPackages, aV as getBumpedPackageIndependently, aB as getCIName, a_ as getCanaryVersion, J as getCommitSubject, F as getCurrentGitBranch, G as getCurrentGitRef, j as getDefaultConfig, o as getDependentsOf, E as getFirstCommit, u as getGitStatus, ap as getIndependentTag, at as getLastPackageTag, as as getLastRepoTag, aq as getLastStableTag, ar as getLastTag, A as getModifiedReleaseFilePatterns, X as getNpmRegistry, ad as getPackageCommits, n as getPackageDependencies, aM as getPackageNewVersion, ac as getPackages, aG as getPackagesOrBumpedPackages, $ as getPackagesToPublishInIndependentMode, _ as getPackagesToPublishInSelectiveMode, aT as getPreid, ao as getReleaseUrl, aa as getRootPackage, H as getShortCommitSha, ah as getSlackToken, ai as getSlackWebhookUrl, aw as getTwitterCredentials, O as github, Q as gitlab, ae as hasLernaJson, I as isAncestor, aE as isBumpedPackage, aU as isChangedPreid, aS as isGraduating, aH as isGraduatingToStableBetweenVersion, aA as isInCI, aP as isPrerelease, aR as isPrereleaseReleaseType, aQ as isStableReleaseType, a$ as isTagVersionCompatibleWithCurrent, l as loadRelizyConfig, m as mergeTypes, W as parseChangelogMarkdown, z as parseGitRemoteUrl, a7 as postPrComment, am as postReleaseToSlack, ay as postReleaseToTwitter, p as prComment, e as providerRelease, d as providerReleaseSafetyCheck, g as publish, a1 as publishPackage, f as publishSafetyCheck, C as pushCommitAndTags, N as pushTagForce, a9 as readPackageJson, ab as readPackages, ag as reconcileFromTag, a8 as redactSecrets, r as release, af as resetRewrittenTagCache, av as resolveTags, M as retagAnnotatedLocal, D as rollbackModifiedFiles, aY as shouldFilterPrereleaseTags, h as social, s as socialSafetyCheck, L as tagExists, t as topologicalSort, aN as updateLernaVersion, w as writeChangelogToFile, aL as writeVersion } from './shared/relizy.BdF1zFG_.mjs';
 import '@maz-ui/node';
 import 'node:child_process';
 import 'node:process';

package/dist/shared/{relizy.d-S4lcvu.mjs → relizy.BdF1zFG_.mjs}

@@ -1800,7 +1800,20 @@ async function getPackagesOrBumpedPackages({
   });
 }
 
+const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
 let sessionOtp;
+function getNpmRegistry(cwd = process.cwd()) {
+  try {
+    const output = execSync("npm config get registry", {
+      cwd,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    return output && output !== "undefined" ? output : DEFAULT_REGISTRY;
+  } catch {
+    return DEFAULT_REGISTRY;
+  }
+}
 function detectPackageManager(cwd = process.cwd()) {
   try {
     const packageJsonPath = join(cwd, "package.json");
@@ -2004,7 +2017,7 @@ async function executePublishCommand({
     logger.info(`${dryRun ? "[dry-run] " : ""}Skipping actual publish for ${packageNameAndVersion}`);
     return;
   }
-  const { stdout, stderr } = await execPromise(command, {
+  await execPromise(command, {
     noStderr: true,
     noStdout: true,
     noSuccess: true,
@@ -2012,8 +2025,6 @@ async function executePublishCommand({
     logLevel: config.logLevel,
     cwd: pkg.path
   });
-  logger.debug("Publish stdout:", stdout);
-  logger.debug("Publish stderr:", stderr);
 }
 function getAuthCommand({
   packageManager,
@@ -2111,6 +2122,61 @@ async function publishPackage({
   }
 }
 
+const MASK = "***";
+const VISIBLE_PREFIX = 4;
+const MIN_LENGTH_TO_REVEAL = 16;
+function maskSecretValue(value) {
+  if (value.length < MIN_LENGTH_TO_REVEAL) {
+    return MASK;
+  }
+  return `${value.slice(0, VISIBLE_PREFIX)}${MASK}${value.slice(-4)}`;
+}
+const SENSITIVE_KEYS = /* @__PURE__ */ new Set([
+  "token",
+  "publishtoken",
+  "oauthtoken",
+  "apikey",
+  "apikeysecret",
+  "accesstoken",
+  "accesstokensecret",
+  "password",
+  "secret",
+  "webhookurl",
+  "_authtoken"
+]);
+const SECRET_CONTAINER_KEYS = /* @__PURE__ */ new Set(["tokens"]);
+function redactValue(value, inSecretContainer, keyIsSensitive) {
+  if (typeof value === "string") {
+    if (value === "") {
+      return value;
+    }
+    if (inSecretContainer || keyIsSensitive) {
+      return maskSecretValue(value);
+    }
+    return value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => redactValue(item, inSecretContainer, false));
+  }
+  if (value && typeof value === "object") {
+    return redactObject(value, inSecretContainer);
+  }
+  return value;
+}
+function redactObject(obj, inSecretContainer) {
+  const result = {};
+  for (const [key, value] of Object.entries(obj)) {
+    const lowerKey = key.toLowerCase();
+    const childInContainer = inSecretContainer || SECRET_CONTAINER_KEYS.has(lowerKey);
+    const keyIsSensitive = SENSITIVE_KEYS.has(lowerKey);
+    result[key] = redactValue(value, childInContainer, keyIsSensitive);
+  }
+  return result;
+}
+function redactSecrets(value) {
+  return redactValue(value, false, false);
+}
+
 function getDefaultConfig() {
   return {
     cwd: process$1.cwd(),
@@ -2159,8 +2225,11 @@ function getDefaultConfig() {
       private: false,
       args: [],
       token: process$1.env.RELIZY_NPM_TOKEN || process$1.env.NPM_TOKEN || process$1.env.NODE_AUTH_TOKEN,
-      registry: "https://registry.npmjs.org/",
+      // registry is intentionally left undefined: it is resolved later from the
+      // user's npm config / .npmrc (see resolveConfig) so a custom registry
+      // (e.g. a corporate proxy) is honored instead of forcing the public one.
       safetyCheck: true,
+      safetyCheckTimeout: 15e3,
       packageManager: detectPackageManager(process$1.cwd())
     },
     tokens: {
@@ -2262,6 +2331,9 @@ async function resolveConfig(config, cwd) {
       provider: resolvedRepoConfig.provider
     };
   }
+  if (config.publish && !config.publish.registry) {
+    config.publish.registry = getNpmRegistry(cwd);
+  }
   return config;
 }
 function mergeTypes(userTypes, defaultTypes) {
@@ -2303,7 +2375,7 @@ async function loadRelizyConfig(options) {
   logger.verbose("User config:", formatJson(results.config.changelog));
   resolveTemplateDefaults(results.config);
   const resolvedConfig = await resolveConfig(results.config, cwd);
-  logger.debug("Resolved config:", formatJson(resolvedConfig));
+  logger.debug("Resolved config:", formatJson(redactSecrets(resolvedConfig)));
   return resolvedConfig;
 }
 function defineConfig(config) {
@@ -5519,27 +5591,42 @@ async function publishSafetyCheck({ config }) {
   }
   logger.debug("Start checking auth config to package registry");
   const isPnpmOrNpm = config.publish.packageManager === "pnpm" || config.publish.packageManager === "npm";
-  if (isPnpmOrNpm) {
-    const authCommand = getAuthCommand({
-      packageManager: config.publish.packageManager,
-      config,
-      otp: config.publish.otp
+  if (!isPnpmOrNpm) {
+    logger.debug(`Skipping authentication to package registry because "${config.publish.packageManager}" is not supported`);
+    return;
+  }
+  const authCommand = getAuthCommand({
+    packageManager: config.publish.packageManager,
+    config,
+    otp: config.publish.otp
+  });
+  const timeoutMs = config.publish.safetyCheckTimeout ?? 15e3;
+  const patienceDelay = Math.min(5e3, Math.floor(timeoutMs / 2));
+  const patienceTimer = setTimeout(() => {
+    logger.info(`The package registry is taking longer than expected to respond (will time out at ${Math.round(timeoutMs / 1e3)}s)...`);
+  }, patienceDelay);
+  try {
+    logger.info("Authenticating to package registry...");
+    await execPromise(authCommand, {
+      cwd: config.cwd,
+      timeout: timeoutMs,
+      noStdout: true,
+      noStderr: true,
+      noSuccess: true,
+      noError: true,
+      logLevel: config.logLevel
     });
-    try {
-      logger.debug("Authenticating to package registry...");
-      await execPromise(authCommand, {
-        cwd: config.cwd,
-        noStderr: true,
-        noStdout: true,
-        logLevel: config.logLevel,
-        noSuccess: true
-      });
-      logger.info("Successfully authenticated to package registry");
-    } catch (error) {
-      throw new Error("Failed to authenticate to package registry", { cause: error });
+    logger.info("Successfully authenticated to package registry");
+  } catch (error) {
+    if (error?.killed) {
+      throw new Error(
+        `Authentication to package registry timed out after ${timeoutMs}ms. The registry did not respond - check your network or registry access, increase publish.safetyCheckTimeout, or skip this check with --no-safety-check.`,
+        { cause: error }
+      );
     }
-  } else {
-    logger.debug(`Skipping authentication to package registry because "${config.publish.packageManager}" is not supported`);
+    throw new Error("Failed to authenticate to package registry", { cause: error });
+  } finally {
+    clearTimeout(patienceTimer);
   }
 }
 async function publish(options = {}) {
@@ -6365,4 +6452,4 @@ Git provider: ${provider}`);
   }
 }
 
-export { getAuthCommand as $, getModifiedReleaseFilePatterns as A, createCommitAndTags as B, pushCommitAndTags as C, rollbackModifiedFiles as D, getFirstCommit as E, getCurrentGitBranch as F, getCurrentGitRef as G, getShortCommitSha as H, isAncestor as I, getCommitSubject as J, findReachableCommitBySubject as K, tagExists as L, retagAnnotatedLocal as M, pushTagForce as N, github as O, createGitlabRelease as P, gitlab as Q, buildCompareLink as R, buildChangelogBody as S, collectContributorNames as T, buildContributors as U, generateMarkDown as V, parseChangelogMarkdown as W, detectPackageManager as X, determinePublishTag as Y, getPackagesToPublishInSelectiveMode as Z, getPackagesToPublishInIndependentMode as _, buildCommentBody as a, publishPackage as a0, collectPackageBumps as a1, findGitHubPR as a2, findGitLabMR as a3, detectPullRequest as a4, PR_COMMENT_MARKER as a5, postPrComment as a6, readPackageJson as a7, getRootPackage as a8, readPackages as a9, executeFormatCmd as aA, executeBuildCmd as aB, isBumpedPackage as aC, filterOutPrivatePackages as aD, getPackagesOrBumpedPackages as aE, isGraduatingToStableBetweenVersion as aF, capReleaseTypeForZeroMajor as aG, determineSemverChange as aH, determineReleaseType as aI, writeVersion as aJ, getPackageNewVersion as aK, updateLernaVersion as aL, extractVersionFromPackageTag as aM, isPrerelease as aN, isStableReleaseType as aO, isPrereleaseReleaseType as aP, isGraduating as aQ, getPreid as aR, isChangedPreid as aS, getBumpedPackageIndependently as aT, confirmBump as aU, getBumpedIndependentPackages as aV, shouldFilterPrereleaseTags as aW, extractVersionFromTag as aX, getCanaryVersion as aY, isTagVersionCompatibleWithCurrent as aZ, getPackages as aa, getPackageCommits as ab, hasLernaJson as ac, resetRewrittenTagCache as ad, reconcileFromTag as ae, getSlackToken as af, getSlackWebhookUrl as ag, formatChangelogForSlack as ah, formatPackagesForSlack as ai, formatSlackMessage as aj, postReleaseToSlack as ak, extractChangelogSummary as al, getReleaseUrl as am, getIndependentTag as an, getLastStableTag as ao, getLastTag as ap, getLastRepoTag as aq, getLastPackageTag as ar, NEW_PACKAGE_MARKER as as, resolveTags as at, getTwitterCredentials as au, formatTweetMessage as av, postReleaseToTwitter as aw, executeHook as ax, isInCI as ay, getCIName as az, bump as b, changelog as c, providerReleaseSafetyCheck as d, providerRelease as e, publishSafetyCheck as f, publish as g, social as h, generateChangelog as i, getDefaultConfig as j, defineConfig as k, loadRelizyConfig as l, mergeTypes as m, getPackageDependencies as n, getDependentsOf as o, prComment as p, expandPackagesToBumpWithDependents as q, release as r, socialSafetyCheck as s, topologicalSort as t, getGitStatus as u, checkGitStatusIfDirty as v, writeChangelogToFile as w, fetchGitTags as x, detectGitProvider as y, parseGitRemoteUrl as z };
+export { getPackagesToPublishInIndependentMode as $, getModifiedReleaseFilePatterns as A, createCommitAndTags as B, pushCommitAndTags as C, rollbackModifiedFiles as D, getFirstCommit as E, getCurrentGitBranch as F, getCurrentGitRef as G, getShortCommitSha as H, isAncestor as I, getCommitSubject as J, findReachableCommitBySubject as K, tagExists as L, retagAnnotatedLocal as M, pushTagForce as N, github as O, createGitlabRelease as P, gitlab as Q, buildCompareLink as R, buildChangelogBody as S, collectContributorNames as T, buildContributors as U, generateMarkDown as V, parseChangelogMarkdown as W, getNpmRegistry as X, detectPackageManager as Y, determinePublishTag as Z, getPackagesToPublishInSelectiveMode as _, buildCommentBody as a, isTagVersionCompatibleWithCurrent as a$, getAuthCommand as a0, publishPackage as a1, collectPackageBumps as a2, findGitHubPR as a3, findGitLabMR as a4, detectPullRequest as a5, PR_COMMENT_MARKER as a6, postPrComment as a7, redactSecrets as a8, readPackageJson as a9, isInCI as aA, getCIName as aB, executeFormatCmd as aC, executeBuildCmd as aD, isBumpedPackage as aE, filterOutPrivatePackages as aF, getPackagesOrBumpedPackages as aG, isGraduatingToStableBetweenVersion as aH, capReleaseTypeForZeroMajor as aI, determineSemverChange as aJ, determineReleaseType as aK, writeVersion as aL, getPackageNewVersion as aM, updateLernaVersion as aN, extractVersionFromPackageTag as aO, isPrerelease as aP, isStableReleaseType as aQ, isPrereleaseReleaseType as aR, isGraduating as aS, getPreid as aT, isChangedPreid as aU, getBumpedPackageIndependently as aV, confirmBump as aW, getBumpedIndependentPackages as aX, shouldFilterPrereleaseTags as aY, extractVersionFromTag as aZ, getCanaryVersion as a_, getRootPackage as aa, readPackages as ab, getPackages as ac, getPackageCommits as ad, hasLernaJson as ae, resetRewrittenTagCache as af, reconcileFromTag as ag, getSlackToken as ah, getSlackWebhookUrl as ai, formatChangelogForSlack as aj, formatPackagesForSlack as ak, formatSlackMessage as al, postReleaseToSlack as am, extractChangelogSummary as an, getReleaseUrl as ao, getIndependentTag as ap, getLastStableTag as aq, getLastTag as ar, getLastRepoTag as as, getLastPackageTag as at, NEW_PACKAGE_MARKER as au, resolveTags as av, getTwitterCredentials as aw, formatTweetMessage as ax, postReleaseToTwitter as ay, executeHook as az, bump as b, changelog as c, providerReleaseSafetyCheck as d, providerRelease as e, publishSafetyCheck as f, publish as g, social as h, generateChangelog as i, getDefaultConfig as j, defineConfig as k, loadRelizyConfig as l, mergeTypes as m, getPackageDependencies as n, getDependentsOf as o, prComment as p, expandPackagesToBumpWithDependents as q, release as r, socialSafetyCheck as s, topologicalSort as t, getGitStatus as u, checkGitStatusIfDirty as v, writeChangelogToFile as w, fetchGitTags as x, detectGitProvider as y, parseGitRemoteUrl as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "relizy",
   "type": "module",
-  "version": "1.4.7",
+  "version": "1.4.8-beta.1",
   "description": "Changelogen adapter for monorepo management with unified and independent versioning",
   "author": "Louis Mazel <me@loicmazuel.com>",
   "license": "MIT",
@@ -72,8 +72,8 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^8.5.2",
-    "@maz-ui/node": "4.6.1",
-    "@maz-ui/utils": "^4.7.6",
+    "@maz-ui/node": "5.0.0-beta.26",
+    "@maz-ui/utils": "5.0.0-beta.25",
     "c12": "^3.3.3",
     "changelogen": "^0.6.2",
     "commander": "^15.0.0",
@@ -88,7 +88,7 @@
     "@commitlint/config-conventional": "21.0.2",
     "@commitlint/cz-commitlint": "^21.0.2",
     "@commitlint/types": "^21.0.1",
-    "@maz-ui/eslint-config": "^4.9.1",
+    "@maz-ui/eslint-config": "5.0.0-beta.25",
     "@slack/web-api": "7.16.0",
     "@types/node": "^25.9.2",
     "@types/semver": "^7.7.1",