relizy 1.4.9 → 1.5.0-beta.1

package/README.md

@@ -54,7 +54,7 @@ Imagine you have multiple packages in your project (like a box with several toys
 - 🔗 Automatic dependency bumping for workspace dependencies
 - 🐙 GitHub, GitLab & Bitbucket support
 - 🔐 2FA/OTP support for npm publishing
-- 🎛️ Custom registry support (private registries, GitHub Packages, etc.)
+- 🎛️ Custom registry support (private registries, GitHub Packages, etc.), with optional mirroring/routing to multiple registries (Nexus, JFrog, etc.)
 - ⚙️ Multiple configuration files support for different release workflows
 - 🔧 Support for npm, yarn, pnpm, and bun (auto-detected)
 - 📱 Social media integration (Twitter & Slack) for release announcements

package/dist/cli.mjs

@@ -5,13 +5,14 @@ import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 import { printBanner, logger } from '@maz-ui/node';
 import { Command } from 'commander';
-import { aA as isInCI, aB as getCIName, b as bump, c as changelog, g as publish, e as providerRelease, h as social, p as prComment, r as release } from './shared/relizy.C95AEGVa.mjs';
+import { aD as isInCI, aE as getCIName, b as bump, c as changelog, g as publish, e as providerRelease, h as social, p as prComment, r as release } from './shared/relizy.wrrRuBuo.mjs';
 import 'node:child_process';
 import '@maz-ui/utils/helpers/formatJson';
 import 'c12';
 import 'changelogen';
 import 'defu';
 import '@inquirer/prompts';
+import 'micromatch';
 import '@maz-ui/utils/helpers/getErrorMessage';
 import 'fast-glob';
 import 'semver';

package/dist/index.d.mts

@@ -340,10 +340,51 @@ declare function detectPackageManager(cwd?: string): PackageManager;
 declare function determinePublishTag(version: string, configTag?: string): string;
 declare function getPackagesToPublishInSelectiveMode(sortedPackages: PackageBase[], rootVersion: string | undefined): PackageBase[];
 declare function getPackagesToPublishInIndependentMode(sortedPackages: PackageBase[], config: ResolvedRelizyConfig): Promise<PackageBase[]>;
-declare function getAuthCommand({ packageManager, config, otp, }: {
+/**
+ * Resolve every distinct registry referenced by the config (legacy `registry`
+ * plus every `registries` entry, regardless of package scoping). Conservative
+ * fallback for the pre-publish authentication safety check when the package
+ * list to publish isn't known yet - prefer `resolveRegistryTargetsForPackages`
+ * once it is, so a registry scoped to packages outside this release doesn't
+ * needlessly block it.
+ *
+ * When no default `registry` is configured but explicit `registries` are, the
+ * legacy target degrades to an empty URL that would target the ambient
+ * `.npmrc` registry with no managed auth. It is a phantom in that case and is
+ * excluded, so a config that lists every registry explicitly does not
+ * authenticate against a bogus empty registry.
+ */
+declare function resolveAllConfiguredRegistryTargets(config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Resolve the registry targets a given package should be published to: the
+ * legacy registry (if any) plus every `registries` entry that either has no
+ * `packageFilter` (mirrored to all packages) or whose `packageFilter` glob
+ * patterns match the package name.
+ *
+ * The legacy/default registry is skipped for this package when either:
+ * - an applicable entry is marked `exclusive` - the package is published only
+ *   to the matching registries instead of mirroring on top of the default one;
+ * - no default `registry` is configured yet the package already has at least
+ *   one applicable explicit registry. Without a default, the legacy target
+ *   degrades to an empty URL that would publish to the ambient `.npmrc`
+ *   registry with no managed auth, so it is a phantom once real targets exist.
+ *   When nothing else covers the package, the empty legacy target is kept as
+ *   the historical `.npmrc` fallback.
+ */
+declare function resolveRegistryTargetsForPackage(pkg: PackageBase, config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Resolve every distinct registry actually needed to publish the given set of
+ * packages - the union of `resolveRegistryTargetsForPackage` across all of
+ * them, deduped by registry URL. Used for the pre-publish authentication
+ * safety check once the package list to publish is known, so a registry
+ * scoped to packages that are not part of this release does not block it.
+ */
+declare function resolveRegistryTargetsForPackages(packages: PackageBase[], config: ResolvedRelizyConfig): RegistryTarget[];
+declare function getAuthCommand({ packageManager, config, otp, registryTarget, }: {
     packageManager: PackageManager;
     config: ResolvedRelizyConfig;
     otp?: string;
+    registryTarget?: RegistryTarget;
 }): string;
 declare function publishPackage({ pkg, config, packageManager, dryRun, }: {
     pkg: PackageBase;
@@ -1198,6 +1239,57 @@ interface SocialOptions {
      * true = force-enable AI, false = force-disable AI, undefined = use config
      */
     ai?: boolean;
+    /**
+     * Prerelease suffix, forwarded to package discovery in independent mode
+     * when no bump result is available (standalone `social` runs).
+     */
+    suffix?: string;
+    /**
+     * Force package discovery to include all packages (independent standalone runs).
+     * @default false
+     */
+    force?: boolean;
+}
+interface RegistryTarget {
+    /**
+     * Optional label used in logs to identify this registry (e.g. `nexus-internal`)
+     */
+    name?: string;
+    /**
+     * Registry URL (e.g. `https://registry.npmjs.org/`, a Nexus or JFrog URL)
+     */
+    registry: string;
+    /**
+     * Registry token - only supported for pnpm and npm
+     */
+    token?: string;
+    /**
+     * Publish tag (e.g. `latest`)
+     */
+    tag?: string;
+    /**
+     * Publish access level (e.g. `public` or `restricted`)
+     */
+    access?: 'public' | 'restricted';
+    /**
+     * OTP for this registry (e.g. `123456`)
+     */
+    otp?: string;
+    /**
+     * Glob pattern matching package names this registry applies to. Distinct
+     * from `PublishConfig.packages` (which packages get published at all) -
+     * this only routes already-publishable packages to this registry.
+     * Omitted or empty = applies to every publishable package (mirroring).
+     */
+    packageFilter?: string[];
+    /**
+     * When true, packages matched by this target are published ONLY to this
+     * (and any other matching) registry - the default `publish.registry` is
+     * skipped for them. Without this flag, `registries` is purely additive:
+     * matched packages are published to this registry ON TOP OF the default one.
+     * @default false
+     */
+    exclusive?: boolean;
 }
 type PublishConfig = ChangelogConfig$1['publish'] & {
     /**
@@ -1244,6 +1336,14 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * @default 15000
      */
     safetyCheckTimeout?: number;
+    /**
+     * Additional registries to publish to, on top of `registry` (if set).
+     * Entries without `packageFilter` apply to every package (mirroring);
+     * entries with `packageFilter` only apply to packages matching one of the
+     * glob patterns. Fully additive: leaving this unset preserves the
+     * single-registry behavior.
+     */
+    registries?: RegistryTarget[];
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -1988,8 +2088,9 @@ declare function providerReleaseSafetyCheck({ config, provider }: {
 }): Promise<void>;
 declare function providerRelease(options?: Partial<ProviderReleaseOptions>): Promise<ProviderReleaseResult>;
 
-declare function publishSafetyCheck({ config }: {
+declare function publishSafetyCheck({ config, packages }: {
     config: ResolvedRelizyConfig;
+    packages?: PackageBase[];
 }): Promise<void>;
 declare function publish(options?: Partial<PublishOptions>): Promise<{
     publishedPackages: PackageBase[];
@@ -2002,5 +2103,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
-export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, RegistryTarget, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.d.ts

@@ -340,10 +340,51 @@ declare function detectPackageManager(cwd?: string): PackageManager;
 declare function determinePublishTag(version: string, configTag?: string): string;
 declare function getPackagesToPublishInSelectiveMode(sortedPackages: PackageBase[], rootVersion: string | undefined): PackageBase[];
 declare function getPackagesToPublishInIndependentMode(sortedPackages: PackageBase[], config: ResolvedRelizyConfig): Promise<PackageBase[]>;
-declare function getAuthCommand({ packageManager, config, otp, }: {
+/**
+ * Resolve every distinct registry referenced by the config (legacy `registry`
+ * plus every `registries` entry, regardless of package scoping). Conservative
+ * fallback for the pre-publish authentication safety check when the package
+ * list to publish isn't known yet - prefer `resolveRegistryTargetsForPackages`
+ * once it is, so a registry scoped to packages outside this release doesn't
+ * needlessly block it.
+ *
+ * When no default `registry` is configured but explicit `registries` are, the
+ * legacy target degrades to an empty URL that would target the ambient
+ * `.npmrc` registry with no managed auth. It is a phantom in that case and is
+ * excluded, so a config that lists every registry explicitly does not
+ * authenticate against a bogus empty registry.
+ */
+declare function resolveAllConfiguredRegistryTargets(config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Resolve the registry targets a given package should be published to: the
+ * legacy registry (if any) plus every `registries` entry that either has no
+ * `packageFilter` (mirrored to all packages) or whose `packageFilter` glob
+ * patterns match the package name.
+ *
+ * The legacy/default registry is skipped for this package when either:
+ * - an applicable entry is marked `exclusive` - the package is published only
+ *   to the matching registries instead of mirroring on top of the default one;
+ * - no default `registry` is configured yet the package already has at least
+ *   one applicable explicit registry. Without a default, the legacy target
+ *   degrades to an empty URL that would publish to the ambient `.npmrc`
+ *   registry with no managed auth, so it is a phantom once real targets exist.
+ *   When nothing else covers the package, the empty legacy target is kept as
+ *   the historical `.npmrc` fallback.
+ */
+declare function resolveRegistryTargetsForPackage(pkg: PackageBase, config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Resolve every distinct registry actually needed to publish the given set of
+ * packages - the union of `resolveRegistryTargetsForPackage` across all of
+ * them, deduped by registry URL. Used for the pre-publish authentication
+ * safety check once the package list to publish is known, so a registry
+ * scoped to packages that are not part of this release does not block it.
+ */
+declare function resolveRegistryTargetsForPackages(packages: PackageBase[], config: ResolvedRelizyConfig): RegistryTarget[];
+declare function getAuthCommand({ packageManager, config, otp, registryTarget, }: {
     packageManager: PackageManager;
     config: ResolvedRelizyConfig;
     otp?: string;
+    registryTarget?: RegistryTarget;
 }): string;
 declare function publishPackage({ pkg, config, packageManager, dryRun, }: {
     pkg: PackageBase;
@@ -1198,6 +1239,57 @@ interface SocialOptions {
      * true = force-enable AI, false = force-disable AI, undefined = use config
      */
     ai?: boolean;
+    /**
+     * Prerelease suffix, forwarded to package discovery in independent mode
+     * when no bump result is available (standalone `social` runs).
+     */
+    suffix?: string;
+    /**
+     * Force package discovery to include all packages (independent standalone runs).
+     * @default false
+     */
+    force?: boolean;
+}
+interface RegistryTarget {
+    /**
+     * Optional label used in logs to identify this registry (e.g. `nexus-internal`)
+     */
+    name?: string;
+    /**
+     * Registry URL (e.g. `https://registry.npmjs.org/`, a Nexus or JFrog URL)
+     */
+    registry: string;
+    /**
+     * Registry token - only supported for pnpm and npm
+     */
+    token?: string;
+    /**
+     * Publish tag (e.g. `latest`)
+     */
+    tag?: string;
+    /**
+     * Publish access level (e.g. `public` or `restricted`)
+     */
+    access?: 'public' | 'restricted';
+    /**
+     * OTP for this registry (e.g. `123456`)
+     */
+    otp?: string;
+    /**
+     * Glob pattern matching package names this registry applies to. Distinct
+     * from `PublishConfig.packages` (which packages get published at all) -
+     * this only routes already-publishable packages to this registry.
+     * Omitted or empty = applies to every publishable package (mirroring).
+     */
+    packageFilter?: string[];
+    /**
+     * When true, packages matched by this target are published ONLY to this
+     * (and any other matching) registry - the default `publish.registry` is
+     * skipped for them. Without this flag, `registries` is purely additive:
+     * matched packages are published to this registry ON TOP OF the default one.
+     * @default false
+     */
+    exclusive?: boolean;
 }
 type PublishConfig = ChangelogConfig$1['publish'] & {
     /**
@@ -1244,6 +1336,14 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * @default 15000
      */
     safetyCheckTimeout?: number;
+    /**
+     * Additional registries to publish to, on top of `registry` (if set).
+     * Entries without `packageFilter` apply to every package (mirroring);
+     * entries with `packageFilter` only apply to packages matching one of the
+     * glob patterns. Fully additive: leaving this unset preserves the
+     * single-registry behavior.
+     */
+    registries?: RegistryTarget[];
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -1988,8 +2088,9 @@ declare function providerReleaseSafetyCheck({ config, provider }: {
 }): Promise<void>;
 declare function providerRelease(options?: Partial<ProviderReleaseOptions>): Promise<ProviderReleaseResult>;
 
-declare function publishSafetyCheck({ config }: {
+declare function publishSafetyCheck({ config, packages }: {
     config: ResolvedRelizyConfig;
+    packages?: PackageBase[];
 }): Promise<void>;
 declare function publish(options?: Partial<PublishOptions>): Promise<{
     publishedPackages: PackageBase[];
@@ -2002,5 +2103,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
-export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, RegistryTarget, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { au as NEW_PACKAGE_MARKER, a6 as PR_COMMENT_MARKER, S as buildChangelogBody, a as buildCommentBody, R as buildCompareLink, U as buildContributors, b as bump, aI as capReleaseTypeForZeroMajor, c as changelog, v as checkGitStatusIfDirty, T as collectContributorNames, a2 as collectPackageBumps, aW as confirmBump, B as createCommitAndTags, P as createGitlabRelease, k as defineConfig, y as detectGitProvider, Y as detectPackageManager, a5 as detectPullRequest, Z as determinePublishTag, aK as determineReleaseType, aJ as determineSemverChange, aD as executeBuildCmd, aC as executeFormatCmd, az as executeHook, q as expandPackagesToBumpWithDependents, an as extractChangelogSummary, aO as extractVersionFromPackageTag, aZ as extractVersionFromTag, x as fetchGitTags, aF as filterOutPrivatePackages, a3 as findGitHubPR, a4 as findGitLabMR, K as findReachableCommitBySubject, aj as formatChangelogForSlack, ak as formatPackagesForSlack, al as formatSlackMessage, ax as formatTweetMessage, i as generateChangelog, V as generateMarkDown, a0 as getAuthCommand, aX as getBumpedIndependentPackages, aV as getBumpedPackageIndependently, aB as getCIName, a_ as getCanaryVersion, J as getCommitSubject, F as getCurrentGitBranch, G as getCurrentGitRef, j as getDefaultConfig, o as getDependentsOf, E as getFirstCommit, u as getGitStatus, ap as getIndependentTag, at as getLastPackageTag, as as getLastRepoTag, aq as getLastStableTag, ar as getLastTag, A as getModifiedReleaseFilePatterns, X as getNpmRegistry, ad as getPackageCommits, n as getPackageDependencies, aM as getPackageNewVersion, ac as getPackages, aG as getPackagesOrBumpedPackages, $ as getPackagesToPublishInIndependentMode, _ as getPackagesToPublishInSelectiveMode, aT as getPreid, ao as getReleaseUrl, aa as getRootPackage, H as getShortCommitSha, ah as getSlackToken, ai as getSlackWebhookUrl, aw as getTwitterCredentials, O as github, Q as gitlab, ae as hasLernaJson, I as isAncestor, aE as isBumpedPackage, aU as isChangedPreid, aS as isGraduating, aH as isGraduatingToStableBetweenVersion, aA as isInCI, aP as isPrerelease, aR as isPrereleaseReleaseType, aQ as isStableReleaseType, a$ as isTagVersionCompatibleWithCurrent, l as loadRelizyConfig, m as mergeTypes, W as parseChangelogMarkdown, z as parseGitRemoteUrl, a7 as postPrComment, am as postReleaseToSlack, ay as postReleaseToTwitter, p as prComment, e as providerRelease, d as providerReleaseSafetyCheck, g as publish, a1 as publishPackage, f as publishSafetyCheck, C as pushCommitAndTags, N as pushTagForce, a9 as readPackageJson, ab as readPackages, ag as reconcileFromTag, a8 as redactSecrets, r as release, af as resetRewrittenTagCache, av as resolveTags, M as retagAnnotatedLocal, D as rollbackModifiedFiles, aY as shouldFilterPrereleaseTags, h as social, s as socialSafetyCheck, L as tagExists, t as topologicalSort, aN as updateLernaVersion, w as writeChangelogToFile, aL as writeVersion } from './shared/relizy.C95AEGVa.mjs';
+export { ax as NEW_PACKAGE_MARKER, a9 as PR_COMMENT_MARKER, S as buildChangelogBody, a as buildCommentBody, R as buildCompareLink, U as buildContributors, b as bump, aL as capReleaseTypeForZeroMajor, c as changelog, v as checkGitStatusIfDirty, T as collectContributorNames, a5 as collectPackageBumps, aZ as confirmBump, B as createCommitAndTags, P as createGitlabRelease, k as defineConfig, y as detectGitProvider, Y as detectPackageManager, a8 as detectPullRequest, Z as determinePublishTag, aN as determineReleaseType, aM as determineSemverChange, aG as executeBuildCmd, aF as executeFormatCmd, aC as executeHook, q as expandPackagesToBumpWithDependents, aq as extractChangelogSummary, aR as extractVersionFromPackageTag, b0 as extractVersionFromTag, x as fetchGitTags, aI as filterOutPrivatePackages, a6 as findGitHubPR, a7 as findGitLabMR, K as findReachableCommitBySubject, am as formatChangelogForSlack, an as formatPackagesForSlack, ao as formatSlackMessage, aA as formatTweetMessage, i as generateChangelog, V as generateMarkDown, a3 as getAuthCommand, a_ as getBumpedIndependentPackages, aY as getBumpedPackageIndependently, aE as getCIName, b1 as getCanaryVersion, J as getCommitSubject, F as getCurrentGitBranch, G as getCurrentGitRef, j as getDefaultConfig, o as getDependentsOf, E as getFirstCommit, u as getGitStatus, as as getIndependentTag, aw as getLastPackageTag, av as getLastRepoTag, at as getLastStableTag, au as getLastTag, A as getModifiedReleaseFilePatterns, X as getNpmRegistry, ag as getPackageCommits, n as getPackageDependencies, aP as getPackageNewVersion, af as getPackages, aJ as getPackagesOrBumpedPackages, $ as getPackagesToPublishInIndependentMode, _ as getPackagesToPublishInSelectiveMode, aW as getPreid, ar as getReleaseUrl, ad as getRootPackage, H as getShortCommitSha, ak as getSlackToken, al as getSlackWebhookUrl, az as getTwitterCredentials, O as github, Q as gitlab, ah as hasLernaJson, I as isAncestor, aH as isBumpedPackage, aX as isChangedPreid, aV as isGraduating, aK as isGraduatingToStableBetweenVersion, aD as isInCI, aS as isPrerelease, aU as isPrereleaseReleaseType, aT as isStableReleaseType, b2 as isTagVersionCompatibleWithCurrent, l as loadRelizyConfig, m as mergeTypes, W as parseChangelogMarkdown, z as parseGitRemoteUrl, aa as postPrComment, ap as postReleaseToSlack, aB as postReleaseToTwitter, p as prComment, e as providerRelease, d as providerReleaseSafetyCheck, g as publish, a4 as publishPackage, f as publishSafetyCheck, C as pushCommitAndTags, N as pushTagForce, ac as readPackageJson, ae as readPackages, aj as reconcileFromTag, ab as redactSecrets, r as release, ai as resetRewrittenTagCache, a0 as resolveAllConfiguredRegistryTargets, a1 as resolveRegistryTargetsForPackage, a2 as resolveRegistryTargetsForPackages, ay as resolveTags, M as retagAnnotatedLocal, D as rollbackModifiedFiles, a$ as shouldFilterPrereleaseTags, h as social, s as socialSafetyCheck, L as tagExists, t as topologicalSort, aQ as updateLernaVersion, w as writeChangelogToFile, aO as writeVersion } from './shared/relizy.wrrRuBuo.mjs';
 import '@maz-ui/node';
 import 'node:child_process';
 import 'node:process';
@@ -9,6 +9,7 @@ import 'defu';
 import 'node:fs';
 import 'node:path';
 import '@inquirer/prompts';
+import 'micromatch';
 import '@maz-ui/utils/helpers/getErrorMessage';
 import 'fast-glob';
 import 'semver';

package/dist/shared/{relizy.C95AEGVa.mjs → relizy.wrrRuBuo.mjs}

@@ -8,6 +8,7 @@ import { defu } from 'defu';
 import { existsSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import path, { join, relative, sep } from 'node:path';
 import { select, confirm, input } from '@inquirer/prompts';
+import micromatch from 'micromatch';
 import { getErrorMessage } from '@maz-ui/utils/helpers/getErrorMessage';
 import fastGlob from 'fast-glob';
 import * as semver from 'semver';
@@ -1803,7 +1804,7 @@ async function getPackagesOrBumpedPackages({
 }
 
 const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
-let sessionOtp;
+const sessionOtpByRegistry = /* @__PURE__ */ new Map();
 function getNpmRegistry(cwd = process.cwd()) {
   try {
     const output = execSync("npm config get registry", {
@@ -1906,21 +1907,74 @@ async function getPackagesToPublishInIndependentMode(sortedPackages, config) {
 function isYarnBerry() {
   return existsSync(path.join(process.cwd(), ".yarnrc.yml"));
 }
+function buildLegacyRegistryTarget(config) {
+  return {
+    name: "default",
+    registry: config.publish.registry ?? "",
+    token: config.publish.token || config.tokens.registry,
+    tag: config.publish.tag,
+    access: config.publish.access,
+    otp: config.publish.otp
+  };
+}
+function normalizeRegistryKey(registry) {
+  return registry.endsWith("/") ? registry.slice(0, -1) : registry;
+}
+function dedupRegistryTargets(targets) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const target of targets) {
+    const key = normalizeRegistryKey(target.registry || "");
+    if (seen.has(key)) {
+      logger.debug(`Skipping duplicate registry target "${target.name ?? target.registry}"`);
+      continue;
+    }
+    seen.add(key);
+    result.push(target);
+  }
+  return result;
+}
+function resolveAllConfiguredRegistryTargets(config) {
+  const legacyTarget = buildLegacyRegistryTarget(config);
+  const explicitTargets = config.publish.registries ?? [];
+  const skipEmptyDefault = !config.publish.registry && explicitTargets.length > 0;
+  return dedupRegistryTargets([
+    ...skipEmptyDefault ? [] : [legacyTarget],
+    ...explicitTargets
+  ]);
+}
+function resolveRegistryTargetsForPackage(pkg, config) {
+  const legacyTarget = buildLegacyRegistryTarget(config);
+  const explicitTargets = config.publish.registries ?? [];
+  const applicableTargets = explicitTargets.filter(
+    (target) => !target.packageFilter?.length || micromatch.isMatch(pkg.name, target.packageFilter)
+  );
+  const skipForExclusive = applicableTargets.some((target) => target.exclusive);
+  const skipEmptyDefault = !config.publish.registry && applicableTargets.length > 0;
+  return dedupRegistryTargets([
+    ...skipForExclusive || skipEmptyDefault ? [] : [legacyTarget],
+    ...applicableTargets
+  ]);
+}
+function resolveRegistryTargetsForPackages(packages, config) {
+  const allTargets = packages.flatMap((pkg) => resolveRegistryTargetsForPackage(pkg, config));
+  return dedupRegistryTargets(allTargets);
+}
 function getCommandArgs({
   packageManager,
   tag,
-  config,
+  registryTarget,
   otp,
   type,
   dryRun
 }) {
   const args = type === "publish" ? ["publish", "--tag", tag] : ["whoami"];
-  const registry = config.publish.registry;
+  const registry = registryTarget.registry;
   if (registry) {
     args.push("--registry", registry);
   }
   const isPnpmOrNpm = packageManager === "pnpm" || packageManager === "npm";
-  const publishToken = config.publish.token || config.tokens.registry;
+  const publishToken = registryTarget.token;
   if (publishToken) {
     if (!registry) {
       logger.warn("Publish token provided but no registry specified");
@@ -1932,14 +1986,14 @@ function getCommandArgs({
       args.push(authTokenKey);
     }
   }
-  const finalOtp = otp ?? sessionOtp ?? config.publish.otp;
+  const finalOtp = otp ?? sessionOtpByRegistry.get(normalizeRegistryKey(registry)) ?? registryTarget.otp;
   if (finalOtp) {
     args.push("--otp", finalOtp);
   }
   if (type === "auth") {
     return args;
   }
-  const access = config.publish.access;
+  const access = registryTarget.access;
   if (access) {
     args.push("--access", access);
   }
@@ -2011,9 +2065,10 @@ async function executePublishCommand({
   config,
   tag,
   dryRun,
-  packageManager
+  packageManager,
+  registryLabel
 }) {
-  logger.info(`${dryRun ? "[dry-run] " : ""}Publishing ${packageNameAndVersion} with tag "${tag}"`);
+  logger.info(`${dryRun ? "[dry-run] " : ""}Publishing ${packageNameAndVersion} with tag "${tag}"${registryLabel}`);
   const dryRunPublish = dryRun && packageManager !== "npm" && packageManager !== "pnpm";
   if (dryRunPublish) {
     logger.info(`${dryRun ? "[dry-run] " : ""}Skipping actual publish for ${packageNameAndVersion}`);
@@ -2031,12 +2086,13 @@ async function executePublishCommand({
 function getAuthCommand({
   packageManager,
   config,
-  otp
+  otp,
+  registryTarget
 }) {
   const args = getCommandArgs({
     packageManager,
     tag: void 0,
-    config,
+    registryTarget: registryTarget ?? buildLegacyRegistryTarget(config),
     otp,
     type: "auth"
   });
@@ -2045,14 +2101,14 @@ function getAuthCommand({
 function getPublishCommand({
   packageManager,
   tag,
-  config,
+  registryTarget,
   otp,
   dryRun
 }) {
   const args = getCommandArgs({
     packageManager,
     tag,
-    config,
+    registryTarget,
     otp,
     dryRun,
     type: "publish"
@@ -2060,14 +2116,64 @@ function getPublishCommand({
   const baseCommand = packageManager === "yarn" && isYarnBerry() ? "yarn npm" : packageManager;
   return `${baseCommand} ${args.join(" ")}`;
 }
+async function publishToRegistryTarget({
+  pkg,
+  config,
+  packageManager,
+  dryRun,
+  registryTarget,
+  packageNameAndVersion,
+  registryLabel
+}) {
+  const tag = determinePublishTag(pkg.newVersion || pkg.version, registryTarget.tag);
+  let dynamicOtp;
+  const maxAttempts = 2;
+  for (let attempt = 0; attempt < maxAttempts; attempt++) {
+    try {
+      const command = getPublishCommand({
+        packageManager,
+        tag,
+        registryTarget,
+        otp: dynamicOtp,
+        dryRun
+      });
+      process.chdir(pkg.path);
+      await executePublishCommand({
+        command,
+        packageNameAndVersion,
+        packageManager,
+        pkg,
+        config,
+        dryRun,
+        tag,
+        registryLabel
+      });
+      const registryKey = normalizeRegistryKey(registryTarget.registry);
+      if (dynamicOtp && !sessionOtpByRegistry.has(registryKey)) {
+        sessionOtpByRegistry.set(registryKey, dynamicOtp);
+        logger.debug("OTP stored for session");
+      }
+      return;
+    } catch (error) {
+      if (isOtpError(error) && attempt < maxAttempts - 1) {
+        dynamicOtp = await handleOtpError();
+      } else {
+        logger.error(`Failed to publish ${packageNameAndVersion}:`, error);
+        throw error;
+      }
+    } finally {
+      process.chdir(config.cwd);
+    }
+  }
+}
 async function publishPackage({
   pkg,
   config,
   packageManager,
   dryRun
 }) {
-  const tag = determinePublishTag(pkg.newVersion || pkg.version, config.publish.tag);
   const packageNameAndVersion = getIndependentTag({ name: pkg.name, version: pkg.newVersion || pkg.version });
+  const registryTargets = resolveRegistryTargetsForPackage(pkg, config);
   logger.debug(`Building publish command for ${pkg.name}`);
   const needsTempVersionWrite = dryRun && (packageManager === "npm" || packageManager === "pnpm") && !!pkg.newVersion && pkg.newVersion !== pkg.version;
   let originalVersion;
@@ -2079,42 +2185,18 @@ async function publishPackage({
     writeVersion(pkg.path, pkg.newVersion, false);
   }
   try {
-    let dynamicOtp;
-    const maxAttempts = 2;
-    for (let attempt = 0; attempt < maxAttempts; attempt++) {
-      try {
-        const command = getPublishCommand({
-          packageManager,
-          tag,
-          config,
-          otp: dynamicOtp,
-          dryRun
-        });
-        process.chdir(pkg.path);
-        await executePublishCommand({
-          command,
-          packageNameAndVersion,
-          packageManager,
-          pkg,
-          config,
-          dryRun,
-          tag
-        });
-        if (dynamicOtp && !sessionOtp) {
-          sessionOtp = dynamicOtp;
-          logger.debug("OTP stored for session");
-        }
-        return;
-      } catch (error) {
-        if (isOtpError(error) && attempt < maxAttempts - 1) {
-          dynamicOtp = await handleOtpError();
-        } else {
-          logger.error(`Failed to publish ${packageNameAndVersion}:`, error);
-          throw error;
-        }
-      } finally {
-        process.chdir(config.cwd);
-      }
+    const showRegistryLabel = registryTargets.length > 1;
+    for (const registryTarget of registryTargets) {
+      const registryLabel = showRegistryLabel ? ` [${registryTarget.name ?? registryTarget.registry ?? "default"}]` : "";
+      await publishToRegistryTarget({
+        pkg,
+        config,
+        packageManager,
+        dryRun,
+        registryTarget,
+        packageNameAndVersion,
+        registryLabel
+      });
     }
   } finally {
     if (needsTempVersionWrite && originalVersion) {
@@ -5586,21 +5668,16 @@ async function providerRelease(options = {}) {
   }
 }
 
-async function publishSafetyCheck({ config }) {
-  if (!config.safetyCheck || !config.release.publish || !config.publish.safetyCheck) {
-    logger.debug("Safety check disabled or publish disabled");
-    return;
-  }
-  logger.debug("Start checking auth config to package registry");
-  const isPnpmOrNpm = config.publish.packageManager === "pnpm" || config.publish.packageManager === "npm";
-  if (!isPnpmOrNpm) {
-    logger.debug(`Skipping authentication to package registry because "${config.publish.packageManager}" is not supported`);
-    return;
-  }
+async function checkRegistryAuth({
+  config,
+  registryTarget,
+  registryLabel
+}) {
   const authCommand = getAuthCommand({
     packageManager: config.publish.packageManager,
     config,
-    otp: config.publish.otp
+    registryTarget,
+    otp: registryTarget.otp
   });
   const timeoutMs = config.publish.safetyCheckTimeout ?? 15e3;
   const patienceDelay = Math.min(5e3, Math.floor(timeoutMs / 2));
@@ -5608,7 +5685,7 @@ async function publishSafetyCheck({ config }) {
     logger.info(`The package registry is taking longer than expected to respond (will time out at ${Math.round(timeoutMs / 1e3)}s)...`);
   }, patienceDelay);
   try {
-    logger.info("Authenticating to package registry...");
+    logger.info(`Authenticating to package registry${registryLabel}...`);
     await execPromise(authCommand, {
       cwd: config.cwd,
       timeout: timeoutMs,
@@ -5618,19 +5695,37 @@ async function publishSafetyCheck({ config }) {
       noError: true,
       logLevel: config.logLevel
     });
-    logger.info("Successfully authenticated to package registry");
+    logger.info(`Successfully authenticated to package registry${registryLabel}`);
   } catch (error) {
     if (error?.killed) {
       throw new Error(
-        `Authentication to package registry timed out after ${timeoutMs}ms. The registry did not respond - check your network or registry access, increase publish.safetyCheckTimeout, or skip this check with --no-safety-check.`,
+        `Authentication to package registry${registryLabel} timed out after ${timeoutMs}ms. The registry did not respond - check your network or registry access, increase publish.safetyCheckTimeout, or skip this check with --no-safety-check.`,
         { cause: error }
       );
     }
-    throw new Error("Failed to authenticate to package registry", { cause: error });
+    throw new Error(`Failed to authenticate to package registry${registryLabel}`, { cause: error });
   } finally {
     clearTimeout(patienceTimer);
   }
 }
+async function publishSafetyCheck({ config, packages }) {
+  if (!config.safetyCheck || !config.release.publish || !config.publish.safetyCheck) {
+    logger.debug("Safety check disabled or publish disabled");
+    return;
+  }
+  logger.debug("Start checking auth config to package registry");
+  const isPnpmOrNpm = config.publish.packageManager === "pnpm" || config.publish.packageManager === "npm";
+  if (!isPnpmOrNpm) {
+    logger.debug(`Skipping authentication to package registry because "${config.publish.packageManager}" is not supported`);
+    return;
+  }
+  const registryTargets = packages ? resolveRegistryTargetsForPackages(packages, config) : resolveAllConfiguredRegistryTargets(config);
+  const showRegistryLabel = registryTargets.length > 1;
+  for (const registryTarget of registryTargets) {
+    const registryLabel = showRegistryLabel ? ` [${registryTarget.name ?? registryTarget.registry ?? "default"}]` : "";
+    await checkRegistryAuth({ config, registryTarget, registryLabel });
+  }
+}
 async function publish(options = {}) {
   const config = await loadRelizyConfig({
     configFile: options.configName,
@@ -5640,6 +5735,7 @@ async function publish(options = {}) {
         access: options.access,
         otp: options.otp,
         registry: options.registry,
+        registries: options.registries,
         tag: options.tag,
         buildCmd: options.buildCmd,
         token: options.token
@@ -5660,7 +5756,6 @@ async function publish(options = {}) {
   }
   try {
     await executeHook("before:publish", config, dryRun);
-    await publishSafetyCheck({ config });
     const rootPackage = readPackageJson(config.cwd);
     if (!rootPackage) {
       throw new Error("Failed to read root package.json");
@@ -5699,6 +5794,7 @@ async function publish(options = {}) {
       logger.fail("No packages need to be published");
       return;
     }
+    await publishSafetyCheck({ config, packages: publishedPackages });
     await executeBuildCmd({
       config,
       dryRun
@@ -5815,7 +5911,8 @@ async function handleTwitterPost({
   changelog,
   dryRun,
   newVersion,
-  tag
+  tag,
+  prerelease
 }) {
   const twitterConfig = config.social?.twitter;
   if (!twitterConfig?.enabled) {
@@ -5834,7 +5931,8 @@ async function handleTwitterPost({
     logger.debug("Credentials found \u2713");
     logger.debug("Preparing tweet for release");
     const onlyStable = twitterConfig.onlyStable;
-    if (onlyStable && isPrerelease(newVersion)) {
+    const isPre = prerelease ?? isPrerelease(newVersion);
+    if (onlyStable && isPre) {
       logger.info(`Skipping Twitter post for prerelease version ${newVersion} (social.twitter.onlyStable is enabled)`);
       return { success: true, response: void 0 };
     }
@@ -5882,7 +5980,8 @@ async function handleSlackPost({
   newVersion,
   tag,
   commits,
-  bumpedPackages
+  bumpedPackages,
+  prerelease
 }) {
   const slackConfig = config.social?.slack;
   if (!slackConfig?.enabled) {
@@ -5910,7 +6009,8 @@ async function handleSlackPost({
     logger.debug(`Slack: ${slackMode}`);
     logger.debug(`Preparing Slack message for release: ${tag} (${newVersion})`);
     const onlyStable = slackConfig.onlyStable ?? true;
-    if (onlyStable && isPrerelease(newVersion)) {
+    const isPre = prerelease ?? isPrerelease(newVersion);
+    if (onlyStable && isPre) {
       logger.info(`Skipping Slack post for prerelease version ${newVersion} (social.slack.onlyStable is enabled)`);
       return { success: true, response: void 0 };
     }
@@ -5987,43 +6087,126 @@ async function social(options = {}) {
     if (!rootPackageRead) {
       throw new Error("Failed to read root package.json");
     }
-    const newVersion = options.bumpResult?.newVersion || rootPackageRead.version;
-    const { from, to } = await resolveTags({
-      config,
-      step: "social",
-      newVersion,
-      pkg: rootPackageRead
-    });
-    const fromTag = options.bumpResult?.fromTag || from;
-    const rootPackage = options.bumpResult?.rootPackage || await getRootPackage({
-      config,
-      force: false,
-      suffix: void 0,
-      changelog: true,
-      from: fromTag,
-      to,
-      dryRun
-    });
-    const minifiedBody = await generateChangelog({
-      pkg: { ...rootPackage, fromTag },
-      config,
-      dryRun,
-      newVersion,
-      include: { title: false, compareLink: false, body: true, contributors: false },
-      minify: true
-    });
-    const richBody = await generateChangelog({
-      pkg: { ...rootPackage, fromTag },
-      config,
-      dryRun,
-      newVersion,
-      include: { title: false, compareLink: false, body: true, contributors: false },
-      minify: false
-    });
+    const isIndependent = config.monorepo?.versionMode === "independent";
+    let minifiedBody;
+    let richBody;
+    let newVersion;
+    let tag;
+    let changelogCommits;
+    let prerelease;
+    if (isIndependent) {
+      const packages = filterOutPrivatePackages(await getPackagesOrBumpedPackages({
+        config,
+        bumpResult: options.bumpResult,
+        suffix: options.suffix,
+        force: options.force ?? false,
+        dryRun
+      }));
+      const minifiedSections = [];
+      const richSections = [];
+      const commitsByHash = /* @__PURE__ */ new Map();
+      for (const pkg of packages) {
+        const pkgVersion = isBumpedPackage(pkg) && pkg.newVersion || pkg.version;
+        const from = config.from || pkg.fromTag;
+        if (!from) {
+          logger.warn(`No from tag found for ${pkg.name}, skipping its changelog section`);
+          continue;
+        }
+        const minSection = await generateChangelog({
+          pkg: { ...pkg, fromTag: from },
+          config,
+          dryRun,
+          newVersion: pkgVersion,
+          include: { title: true, compareLink: false, body: true, contributors: false },
+          minify: true
+        });
+        const richSection = await generateChangelog({
+          pkg: { ...pkg, fromTag: from },
+          config,
+          dryRun,
+          newVersion: pkgVersion,
+          include: { title: true, compareLink: false, body: true, contributors: false },
+          minify: false
+        });
+        if (minSection.trim()) {
+          minifiedSections.push(minSection);
+        }
+        if (richSection.trim()) {
+          richSections.push(richSection);
+        }
+        const pkgCommits = await getPackageCommits({
+          pkg,
+          from,
+          to: "HEAD",
+          config,
+          changelog: true,
+          dryRun
+        });
+        for (const commit of pkgCommits) {
+          commitsByHash.set(commit.shortHash || commit.message, commit);
+        }
+      }
+      minifiedBody = minifiedSections.join("\n\n");
+      richBody = richSections.join("\n\n");
+      changelogCommits = [...commitsByHash.values()];
+      prerelease = packages.length > 0 && packages.every((pkg) => isPrerelease(isBumpedPackage(pkg) && pkg.newVersion || pkg.version));
+      if (packages.length === 1) {
+        const only = packages[0];
+        newVersion = isBumpedPackage(only) && only.newVersion || only.version;
+        tag = getIndependentTag({ version: newVersion, name: only.name });
+      } else {
+        newVersion = `${packages.length} packages`;
+        tag = "";
+      }
+    } else {
+      const resolvedNewVersion = options.bumpResult?.newVersion || rootPackageRead.version;
+      const { from, to } = await resolveTags({
+        config,
+        step: "social",
+        newVersion: resolvedNewVersion,
+        pkg: rootPackageRead
+      });
+      const fromTag = options.bumpResult?.fromTag || from;
+      const rootPackage = options.bumpResult?.rootPackage || await getRootPackage({
+        config,
+        force: false,
+        suffix: void 0,
+        changelog: true,
+        from: fromTag,
+        to,
+        dryRun
+      });
+      minifiedBody = await generateChangelog({
+        pkg: { ...rootPackage, fromTag },
+        config,
+        dryRun,
+        newVersion: resolvedNewVersion,
+        include: { title: false, compareLink: false, body: true, contributors: false },
+        minify: true
+      });
+      richBody = await generateChangelog({
+        pkg: { ...rootPackage, fromTag },
+        config,
+        dryRun,
+        newVersion: resolvedNewVersion,
+        include: { title: false, compareLink: false, body: true, contributors: false },
+        minify: false
+      });
+      newVersion = resolvedNewVersion;
+      tag = to;
+      changelogCommits = await getPackageCommits({
+        pkg: rootPackage,
+        from: fromTag,
+        to: "HEAD",
+        config,
+        changelog: true,
+        dryRun
+      });
+      prerelease = isPrerelease(newVersion);
+    }
     const hasContent = !!minifiedBody.trim();
-    const twitterReleaseUrl = getReleaseUrl(config, to);
+    const twitterReleaseUrl = getReleaseUrl(config, tag);
     const twitterChangelogUrl = config.social?.changelogUrl;
-    const prerelease = isPrerelease(newVersion);
     const twitterWillPost = !!config.social?.twitter?.enabled && !(config.social.twitter.onlyStable && prerelease);
     const slackWillPost = !!config.social?.slack?.enabled && !((config.social.slack.onlyStable ?? true) && prerelease);
     let twitterChangelog = minifiedBody;
@@ -6067,24 +6250,18 @@ ${twitterChangelog}`);
       changelog: twitterChangelog,
       dryRun,
       newVersion,
-      tag: to
-    });
-    const changelogCommits = await getPackageCommits({
-      pkg: rootPackage,
-      from: fromTag,
-      to: "HEAD",
-      config,
-      changelog: true,
-      dryRun
+      tag,
+      prerelease
     });
     const slackResponse = await handleSlackPost({
       config,
       changelog: slackChangelog,
       dryRun,
       newVersion,
-      tag: to,
+      tag,
       commits: changelogCommits,
-      bumpedPackages: options.bumpResult?.bumpedPackages
+      bumpedPackages: options.bumpResult?.bumpedPackages,
+      prerelease
     });
     const results = [];
     if (config.social?.twitter?.enabled) {
@@ -6145,6 +6322,7 @@ function getReleaseConfig(options = {}) {
         access: options.access,
         otp: options.otp,
         registry: options.registry,
+        registries: options.registries,
         tag: options.tag,
         buildCmd: options.buildCmd,
         token: options.publishToken
@@ -6454,4 +6632,4 @@ Git provider: ${provider}`);
   }
 }
 
-export { getPackagesToPublishInIndependentMode as $, getModifiedReleaseFilePatterns as A, createCommitAndTags as B, pushCommitAndTags as C, rollbackModifiedFiles as D, getFirstCommit as E, getCurrentGitBranch as F, getCurrentGitRef as G, getShortCommitSha as H, isAncestor as I, getCommitSubject as J, findReachableCommitBySubject as K, tagExists as L, retagAnnotatedLocal as M, pushTagForce as N, github as O, createGitlabRelease as P, gitlab as Q, buildCompareLink as R, buildChangelogBody as S, collectContributorNames as T, buildContributors as U, generateMarkDown as V, parseChangelogMarkdown as W, getNpmRegistry as X, detectPackageManager as Y, determinePublishTag as Z, getPackagesToPublishInSelectiveMode as _, buildCommentBody as a, isTagVersionCompatibleWithCurrent as a$, getAuthCommand as a0, publishPackage as a1, collectPackageBumps as a2, findGitHubPR as a3, findGitLabMR as a4, detectPullRequest as a5, PR_COMMENT_MARKER as a6, postPrComment as a7, redactSecrets as a8, readPackageJson as a9, isInCI as aA, getCIName as aB, executeFormatCmd as aC, executeBuildCmd as aD, isBumpedPackage as aE, filterOutPrivatePackages as aF, getPackagesOrBumpedPackages as aG, isGraduatingToStableBetweenVersion as aH, capReleaseTypeForZeroMajor as aI, determineSemverChange as aJ, determineReleaseType as aK, writeVersion as aL, getPackageNewVersion as aM, updateLernaVersion as aN, extractVersionFromPackageTag as aO, isPrerelease as aP, isStableReleaseType as aQ, isPrereleaseReleaseType as aR, isGraduating as aS, getPreid as aT, isChangedPreid as aU, getBumpedPackageIndependently as aV, confirmBump as aW, getBumpedIndependentPackages as aX, shouldFilterPrereleaseTags as aY, extractVersionFromTag as aZ, getCanaryVersion as a_, getRootPackage as aa, readPackages as ab, getPackages as ac, getPackageCommits as ad, hasLernaJson as ae, resetRewrittenTagCache as af, reconcileFromTag as ag, getSlackToken as ah, getSlackWebhookUrl as ai, formatChangelogForSlack as aj, formatPackagesForSlack as ak, formatSlackMessage as al, postReleaseToSlack as am, extractChangelogSummary as an, getReleaseUrl as ao, getIndependentTag as ap, getLastStableTag as aq, getLastTag as ar, getLastRepoTag as as, getLastPackageTag as at, NEW_PACKAGE_MARKER as au, resolveTags as av, getTwitterCredentials as aw, formatTweetMessage as ax, postReleaseToTwitter as ay, executeHook as az, bump as b, changelog as c, providerReleaseSafetyCheck as d, providerRelease as e, publishSafetyCheck as f, publish as g, social as h, generateChangelog as i, getDefaultConfig as j, defineConfig as k, loadRelizyConfig as l, mergeTypes as m, getPackageDependencies as n, getDependentsOf as o, prComment as p, expandPackagesToBumpWithDependents as q, release as r, socialSafetyCheck as s, topologicalSort as t, getGitStatus as u, checkGitStatusIfDirty as v, writeChangelogToFile as w, fetchGitTags as x, detectGitProvider as y, parseGitRemoteUrl as z };
+export { getPackagesToPublishInIndependentMode as $, getModifiedReleaseFilePatterns as A, createCommitAndTags as B, pushCommitAndTags as C, rollbackModifiedFiles as D, getFirstCommit as E, getCurrentGitBranch as F, getCurrentGitRef as G, getShortCommitSha as H, isAncestor as I, getCommitSubject as J, findReachableCommitBySubject as K, tagExists as L, retagAnnotatedLocal as M, pushTagForce as N, github as O, createGitlabRelease as P, gitlab as Q, buildCompareLink as R, buildChangelogBody as S, collectContributorNames as T, buildContributors as U, generateMarkDown as V, parseChangelogMarkdown as W, getNpmRegistry as X, detectPackageManager as Y, determinePublishTag as Z, getPackagesToPublishInSelectiveMode as _, buildCommentBody as a, shouldFilterPrereleaseTags as a$, resolveAllConfiguredRegistryTargets as a0, resolveRegistryTargetsForPackage as a1, resolveRegistryTargetsForPackages as a2, getAuthCommand as a3, publishPackage as a4, collectPackageBumps as a5, findGitHubPR as a6, findGitLabMR as a7, detectPullRequest as a8, PR_COMMENT_MARKER as a9, formatTweetMessage as aA, postReleaseToTwitter as aB, executeHook as aC, isInCI as aD, getCIName as aE, executeFormatCmd as aF, executeBuildCmd as aG, isBumpedPackage as aH, filterOutPrivatePackages as aI, getPackagesOrBumpedPackages as aJ, isGraduatingToStableBetweenVersion as aK, capReleaseTypeForZeroMajor as aL, determineSemverChange as aM, determineReleaseType as aN, writeVersion as aO, getPackageNewVersion as aP, updateLernaVersion as aQ, extractVersionFromPackageTag as aR, isPrerelease as aS, isStableReleaseType as aT, isPrereleaseReleaseType as aU, isGraduating as aV, getPreid as aW, isChangedPreid as aX, getBumpedPackageIndependently as aY, confirmBump as aZ, getBumpedIndependentPackages as a_, postPrComment as aa, redactSecrets as ab, readPackageJson as ac, getRootPackage as ad, readPackages as ae, getPackages as af, getPackageCommits as ag, hasLernaJson as ah, resetRewrittenTagCache as ai, reconcileFromTag as aj, getSlackToken as ak, getSlackWebhookUrl as al, formatChangelogForSlack as am, formatPackagesForSlack as an, formatSlackMessage as ao, postReleaseToSlack as ap, extractChangelogSummary as aq, getReleaseUrl as ar, getIndependentTag as as, getLastStableTag as at, getLastTag as au, getLastRepoTag as av, getLastPackageTag as aw, NEW_PACKAGE_MARKER as ax, resolveTags as ay, getTwitterCredentials as az, bump as b, extractVersionFromTag as b0, getCanaryVersion as b1, isTagVersionCompatibleWithCurrent as b2, changelog as c, providerReleaseSafetyCheck as d, providerRelease as e, publishSafetyCheck as f, publish as g, social as h, generateChangelog as i, getDefaultConfig as j, defineConfig as k, loadRelizyConfig as l, mergeTypes as m, getPackageDependencies as n, getDependentsOf as o, prComment as p, expandPackagesToBumpWithDependents as q, release as r, socialSafetyCheck as s, topologicalSort as t, getGitStatus as u, checkGitStatusIfDirty as v, writeChangelogToFile as w, fetchGitTags as x, detectGitProvider as y, parseGitRemoteUrl as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "relizy",
   "type": "module",
-  "version": "1.4.9",
+  "version": "1.5.0-beta.1",
   "description": "Changelogen adapter for monorepo management with unified and independent versioning",
   "author": "Louis Mazel <me@loicmazuel.com>",
   "license": "MIT",
@@ -71,7 +71,7 @@
     }
   },
   "dependencies": {
-    "@inquirer/prompts": "^8.5.2",
+    "@inquirer/prompts": "^8.7.2",
     "@maz-ui/node": "5.0.0-beta.26",
     "@maz-ui/utils": "5.0.0-beta.25",
     "c12": "^3.3.3",
@@ -80,31 +80,33 @@
     "convert-gitmoji": "^0.1.5",
     "defu": "6.1.7",
     "fast-glob": "^3.3.2",
+    "micromatch": "^4.0.8",
     "node-fetch-native": "^1.6.7",
-    "semver": "^7.8.3"
+    "semver": "^7.8.5"
   },
   "devDependencies": {
-    "@commitlint/cli": "^21.0.2",
-    "@commitlint/config-conventional": "21.0.2",
-    "@commitlint/cz-commitlint": "^21.0.2",
-    "@commitlint/types": "^21.0.1",
+    "@commitlint/cli": "^21.2.2",
+    "@commitlint/config-conventional": "21.2.2",
+    "@commitlint/cz-commitlint": "^21.2.2",
+    "@commitlint/types": "^21.2.0",
     "@maz-ui/eslint-config": "5.0.0-beta.25",
     "@slack/web-api": "7.16.0",
+    "@types/micromatch": "^4.0.10",
     "@types/node": "^25.9.2",
-    "@types/semver": "^7.7.1",
-    "@vitest/coverage-v8": "^4.1.8",
+    "@types/semver": "^7.8.0",
+    "@vitest/coverage-v8": "^5.0.0",
     "@yoloship/claude-sdk": "0.2.0-beta.6",
     "cross-env": "10.1.0",
-    "eslint": "^10.4.1",
+    "eslint": "^10.10.0",
     "husky": "9.1.7",
     "jiti": "2.7.0",
-    "lint-staged": "^17.0.7",
-    "memfs": "^4.57.6",
-    "tsx": "^4.22.4",
-    "twitter-api-v2": "^1.29.0",
+    "lint-staged": "^17.5.1",
+    "memfs": "^4.78.0",
+    "tsx": "^4.23.13",
+    "twitter-api-v2": "^1.29.1",
     "typescript": "^6.0.3",
     "unbuild": "^3.6.1",
-    "vitest": "^4.1.8"
+    "vitest": "^5.0.0"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,mjs,mts,cjs,md,yml,json}": [