semantic-release-pub 0.10.0 → 0.10.2

package/README.md

@@ -54,28 +54,9 @@ The plugin can be configured in the [semantic-release configuration file](https:
 
 ### `pub.dev` authentication
 
-You can publish to `pub.dev` using either GitHub Actions OIDC or Google Service Account.
+You can publish to `pub.dev` using either Google Service Account or GitHub Actions OIDC. 
 
-#### GitHub Actions OIDC
-
-The following instructions are referenced from the [documentation](https://dart.dev/tools/pub/automated-publishing#configuring-automated-publishing-from-github-actions-on-pub-dev) of Dart. Below are the key steps to allow authentication to `pub.dev` via GitHub Actions OIDC.
-
-1. Enable automated publishing.
-
-    > To complete this step, you must have uploader permission on the package or be an admin of the publisher that owns the package.
-
-    1. Navigate to the package Admin tab (pub.dev/packages/<package>/admin).
-    2. Click Enable publishing from GitHub Actions.
-    3. Then fill in the necessary information.
-   
- 2. In your workflow, add the `id-token` permission.
-
-    ```yaml
-    jobs:
-      publish:
-        permissions:
-          id-token: write
-    ```
+Note that when using GitHub Actions OIDC, `pub.dev` only allows authentication when the workflow is triggered by a `tag` event. See [here](https://github.com/dart-lang/pub-dev/issues/8507) for more details.
 
 #### Google Service Account
 
@@ -109,6 +90,28 @@ The following instructions are referenced from the [documentation](https://dart.
 
 5. Copy the content of the JSON key file and set it as an environment variable under `GOOGLE_SERVICE_ACCOUNT_KEY`.
 
+
+#### GitHub Actions OIDC
+
+The following instructions are referenced from the [documentation](https://dart.dev/tools/pub/automated-publishing#configuring-automated-publishing-from-github-actions-on-pub-dev) of Dart. Below are the key steps to allow authentication to `pub.dev` via GitHub Actions OIDC.
+
+1. Enable automated publishing.
+
+    > To complete this step, you must have uploader permission on the package or be an admin of the publisher that owns the package.
+
+    1. Navigate to the package Admin tab (pub.dev/packages/<package>/admin).
+    2. Click Enable publishing from GitHub Actions.
+    3. Then fill in the necessary information.
+   
+ 2. In your workflow, add the `id-token` permission.
+
+    ```yaml
+    jobs:
+      publish:
+        permissions:
+          id-token: write
+    ```
+
 ### Environment variables
 
 | Variable                     | Description                                                                                             |

package/dist/publish.js

@@ -1,6 +1,5 @@
-import core from "@actions/core";
 import { execa } from "execa";
-import { getConfig, getGoogleIdentityToken, getPubspec } from "./utils.js";
+import { getConfig, getGithubIdentityToken, getGoogleIdentityToken, getPubspec, } from "./utils.js";
 const SEMANTIC_RELEASE_PUB_TOKEN = "SEMANTIC_RELEASE_PUB_TOKEN";
 export const publish = async (pluginConfig, { nextRelease: { version }, logger }) => {
     const { cli, publishPub, useGithubOidc } = getConfig(pluginConfig);
@@ -9,7 +8,7 @@ export const publish = async (pluginConfig, { nextRelease: { version }, logger }
         return;
     }
     const pubspec = getPubspec();
-    const pubToken = await getPubToken(useGithubOidc);
+    const pubToken = await getPubToken(useGithubOidc, logger);
     await setPubToken(cli, pubToken);
     logger.log(`Publishing version ${version} to pub.dev`);
     await execa(cli, ["pub", "publish", "--force"]);
@@ -19,10 +18,12 @@ export const publish = async (pluginConfig, { nextRelease: { version }, logger }
         url: `https://pub.dev/packages/${pubspec.name}/versions/${version}`,
     };
 };
-const getPubToken = async (useGithubOidc) => {
+const getPubToken = async (useGithubOidc, logger) => {
     if (useGithubOidc) {
-        return await core.getIDToken();
+        logger.log("Using GitHub OIDC token to publish to pub.dev");
+        return await getGithubIdentityToken();
     }
+    logger.log("Using Google identity token to publish to pub.dev");
     const { GOOGLE_SERVICE_ACCOUNT_KEY } = process.env;
     return await getGoogleIdentityToken(GOOGLE_SERVICE_ACCOUNT_KEY);
 };

package/dist/utils.d.ts

@@ -2,6 +2,7 @@ import { PluginConfig } from "./types.js";
 export declare const PUBSPEC_PATH = "pubspec.yaml";
 export declare const getConfig: (config: PluginConfig) => PluginConfig;
 export declare const getGoogleIdentityToken: (serviceAccountStr: string) => Promise<string>;
+export declare const getGithubIdentityToken: () => Promise<string>;
 export declare const getPubspecString: () => string;
 export declare const getPubspecFromString: (data: string) => {
     name?: string;

package/dist/utils.js

@@ -1,3 +1,4 @@
+import core from "@actions/core";
 import SemanticReleaseError from "@semantic-release/error";
 import { readFileSync } from "fs";
 import { JWT } from "google-auth-library";
@@ -23,6 +24,9 @@ export const getGoogleIdentityToken = async (serviceAccountStr) => {
     }
     return creds.id_token;
 };
+export const getGithubIdentityToken = async () => {
+    return core.getIDToken(PUB_DEV_AUDIENCE);
+};
 export const getPubspecString = () => {
     return readFileSync(PUBSPEC_PATH, "utf-8");
 };

package/dist/verifyConditions.js

@@ -1,7 +1,6 @@
-import core from "@actions/core";
 import SemanticReleaseError from "@semantic-release/error";
 import { execa } from "execa";
-import { getConfig, getGoogleIdentityToken } from "./utils.js";
+import { getConfig, getGithubIdentityToken, getGoogleIdentityToken, } from "./utils.js";
 export const verifyConditions = async (pluginConfig, { logger }) => {
     const { cli, publishPub, useGithubOidc } = getConfig(pluginConfig);
     if (publishPub) {
@@ -15,7 +14,7 @@ export const verifyConditions = async (pluginConfig, { logger }) => {
 const verifyPublishToken = async (useGithubOidc) => {
     if (useGithubOidc) {
         try {
-            await core.getIDToken();
+            await getGithubIdentityToken();
         }
         catch (error) {
             throw new SemanticReleaseError(`Failed to get GitHub OIDC token: ${error}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "semantic-release-pub",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "semantic-release plugin to publish a Dart or Flutter package",
   "main": "dist/index.js",
   "author": "zeshuaro@gmail.com",
@@ -29,7 +29,7 @@
     "format": "ESLINT_USE_FLAT_CONFIG=false eslint --ext .ts --fix src tests && prettier --write src/**/*.ts tests/**/*.ts"
   },
   "engines": {
-    "node": ">=22.13.1"
+    "node": ">=22.14.0"
   },
   "dependencies": {
     "@actions/core": "^1.11.1",
@@ -37,7 +37,7 @@
     "execa": "^9.5.2",
     "google-auth-library": "^9.15.1",
     "yaml": "^2.7.0",
-    "zod": "^3.24.1"
+    "zod": "^3.24.2"
   },
   "devDependencies": {
     "@semantic-release/changelog": "6.0.3",
@@ -46,22 +46,22 @@
     "@types/semantic-release": "20.0.6",
     "@types/semantic-release__error": "3.0.3",
     "@types/signale": "1.4.7",
-    "@typescript-eslint/eslint-plugin": "8.21.0",
-    "@typescript-eslint/parser": "8.21.0",
-    "@vitest/coverage-v8": "3.0.4",
+    "@typescript-eslint/eslint-plugin": "8.24.0",
+    "@typescript-eslint/parser": "8.24.0",
+    "@vitest/coverage-v8": "3.0.5",
     "common-tags": "1.8.2",
     "conventional-changelog-conventionalcommits": "8.0.0",
-    "eslint": "9.19.0",
+    "eslint": "9.20.1",
     "eslint-config-prettier": "^10.0.1",
     "eslint-config-semistandard": "17.0.0",
     "eslint-config-standard": "17.1.0",
     "eslint-plugin-import": "2.31.0",
     "eslint-plugin-n": "17.15.1",
     "eslint-plugin-promise": "7.2.1",
-    "prettier": "3.4.2",
-    "semantic-release": "24.2.1",
+    "prettier": "3.5.0",
+    "semantic-release": "24.2.2",
     "typescript": "5.7.3",
-    "vitest": "3.0.4",
+    "vitest": "3.0.5",
     "vitest-mock-extended": "2.0.2"
   }
 }