semantic-release-pub 0.11.18 → 0.13.0

package/README.md

@@ -126,6 +126,8 @@ The following instructions are referenced from the [documentation](https://dart.
 | `publishPub`        | Whether to publish the package to the registry. If set to `false`, the `pubspec.yaml` version will still be updated.                                                                                                                                    | `true`  |
 | `updateBuildNumber` | Whether to write build number for every newly bumped version in `pubspec.yaml`. Note that the build number will always be increased by one. Learn more on [Flutter docs](https://docs.flutter.dev/deployment/android#updating-the-apps-version-number). | `false` |
 | `useGithubOidc`     | Whether to use GitHub OIDC. If set to `true`, authentication to `pub.dev` will be done using GitHub OIDC. Otherwise, the `GOOGLE_SERVICE_ACCOUNT_KEY` will be used.                                                                                     | `false` |
+| `pkgRoot`           | The path to the package root directory. Useful for monorepos where the package is not at the repository root.                                                                                                                                           | `.`     |
+| `registryUrl`       | The URL of the pub registry to publish to. Useful for private registries such as [unpub](https://pub.dev/packages/unpub). The URL is used as the token audience for OIDC authentication and as the target for `dart pub token add`.                     | `https://pub.dev` |
 
 ### Examples
 

package/dist/prepare.js

@@ -1,9 +1,10 @@
 import { writeFileSync } from "node:fs";
 import SemanticReleaseError from "@semantic-release/error";
-import { getConfig, getPubspecFromString, getPubspecString, PUBSPEC_PATH, } from "./utils.js";
+import { getConfig, getPubspecFromString, getPubspecPath, getPubspecString, } from "./utils.js";
 export const prepare = async (pluginConfig, { nextRelease: { version }, logger }) => {
-    const { updateBuildNumber } = getConfig(pluginConfig);
-    const data = getPubspecString();
+    const { updateBuildNumber, pkgRoot } = getConfig(pluginConfig);
+    const pubspecPath = getPubspecPath(pkgRoot);
+    const data = getPubspecString(pkgRoot);
     const pubspec = getPubspecFromString(data);
     const pubspecVersionEscaped = pubspec.version.replace(/[/\-\\^$*+?.()|[\]{}]/g, "\\$&");
     let nextVersion = version;
@@ -16,6 +17,6 @@ export const prepare = async (pluginConfig, { nextRelease: { version }, logger }
         nextVersion = `${version}+${buildNumber + 1}`;
     }
     const newData = data.replace(new RegExp(`version:[ \t]+['"]?${pubspecVersionEscaped}['"]?`), `version: ${nextVersion}`);
-    logger.log(`Writing version ${nextVersion} to ${PUBSPEC_PATH}`);
-    writeFileSync(PUBSPEC_PATH, newData);
+    logger.log(`Writing version ${nextVersion} to ${pubspecPath}`);
+    writeFileSync(pubspecPath, newData);
 };

package/dist/publish.js

@@ -3,41 +3,41 @@ import { execa } from "execa";
 import { getConfig, getGithubIdentityToken, getGoogleIdentityToken, getPubspec, } from "./utils.js";
 const SEMANTIC_RELEASE_PUB_TOKEN = "SEMANTIC_RELEASE_PUB_TOKEN";
 export const publish = async (pluginConfig, { nextRelease: { version }, logger }) => {
-    const { cli, publishPub, useGithubOidc } = getConfig(pluginConfig);
+    const { cli, publishPub, useGithubOidc, pkgRoot, registryUrl } = getConfig(pluginConfig);
     if (!publishPub) {
         logger.log(`Skipping publishing to pub.dev as publishPub is ${publishPub}`);
         return;
     }
-    const pubspec = getPubspec();
-    const pubToken = await getPubToken(useGithubOidc, logger);
-    await setPubToken(cli, pubToken);
-    logger.log(`Publishing version ${version} to pub.dev`);
-    await execa(cli, ["pub", "publish", "--force"]);
-    logger.log(`Published ${pubspec.name}@${version} on pub.dev`);
+    const pubspec = getPubspec(pkgRoot);
+    const pubToken = await getPubToken(useGithubOidc, registryUrl, logger);
+    await setPubToken(cli, pubToken, registryUrl);
+    logger.log(`Publishing version ${version} to ${registryUrl}`);
+    await execa(cli, ["pub", "publish", "--force"], { cwd: pkgRoot });
+    logger.log(`Published ${pubspec.name}@${version} on ${registryUrl}`);
     return {
         name: "pub.dev package",
-        url: `https://pub.dev/packages/${pubspec.name}/versions/${version}`,
+        url: `${registryUrl}/packages/${pubspec.name}/versions/${version}`,
     };
 };
-const getPubToken = async (useGithubOidc, logger) => {
+const getPubToken = async (useGithubOidc, registryUrl, logger) => {
     if (useGithubOidc) {
-        logger.log("Using GitHub OIDC token to publish to pub.dev");
-        return await getGithubIdentityToken();
+        logger.log(`Using GitHub OIDC token to publish to ${registryUrl}`);
+        return await getGithubIdentityToken(registryUrl);
     }
-    logger.log("Using Google identity token to publish to pub.dev");
+    logger.log(`Using Google identity token to publish to ${registryUrl}`);
     const { GOOGLE_SERVICE_ACCOUNT_KEY } = process.env;
     if (!GOOGLE_SERVICE_ACCOUNT_KEY) {
         throw new SemanticReleaseError("Environment variable not found: GOOGLE_SERVICE_ACCOUNT_KEY");
     }
-    return await getGoogleIdentityToken(GOOGLE_SERVICE_ACCOUNT_KEY);
+    return await getGoogleIdentityToken(GOOGLE_SERVICE_ACCOUNT_KEY, registryUrl);
 };
-const setPubToken = async (cli, idToken) => {
+const setPubToken = async (cli, idToken, registryUrl) => {
     process.env[SEMANTIC_RELEASE_PUB_TOKEN] = idToken;
     await execa(cli, [
         "pub",
         "token",
         "add",
-        "https://pub.dev",
+        registryUrl,
         `--env-var=${SEMANTIC_RELEASE_PUB_TOKEN}`,
     ]);
 };

package/dist/utils.js

@@ -1,26 +1,34 @@
 import { readFileSync } from "node:fs";
+import { join } from "node:path";
 import { getIDToken } from "@actions/core";
 import SemanticReleaseError from "@semantic-release/error";
 import { JWT } from "google-auth-library";
 import { parse } from "yaml";
 import { Pubspec, ServiceAccount } from "./schemas.js";
-export const PUBSPEC_PATH = "pubspec.yaml";
+const PUBSPEC_PATH = "pubspec.yaml";
+export const PUB_DEV_URL = "https://pub.dev";
 const DEFAULT_CONFIG = {
     cli: "dart",
     publishPub: true,
     updateBuildNumber: false,
     useGithubOidc: false,
+    pkgRoot: ".",
+    registryUrl: PUB_DEV_URL,
 };
-const PUB_DEV_AUDIENCE = "https://pub.dev";
 export const getConfig = (config) => {
-    return { ...DEFAULT_CONFIG, ...config };
-};
-export const getGoogleIdentityToken = async (serviceAccountStr) => {
+    const merged = { ...DEFAULT_CONFIG, ...config };
+    return {
+        ...merged,
+        registryUrl: merged.registryUrl.replace(/\/$/, ""),
+    };
+};
+export const getPubspecPath = (pkgRoot) => join(pkgRoot, PUBSPEC_PATH);
+export const getGoogleIdentityToken = async (serviceAccountStr, registryUrl) => {
     const serviceAccountJson = getServiceAccount(serviceAccountStr);
     const jwtClient = new JWT({
         email: serviceAccountJson.client_email,
         key: serviceAccountJson.private_key,
-        scopes: PUB_DEV_AUDIENCE,
+        scopes: registryUrl,
     });
     const creds = await jwtClient.authorize();
     if (!creds.id_token) {
@@ -28,17 +36,17 @@ export const getGoogleIdentityToken = async (serviceAccountStr) => {
     }
     return creds.id_token;
 };
-export const getGithubIdentityToken = async () => {
-    return getIDToken(PUB_DEV_AUDIENCE);
+export const getGithubIdentityToken = async (registryUrl) => {
+    return getIDToken(registryUrl);
 };
-export const getPubspecString = () => {
-    return readFileSync(PUBSPEC_PATH, "utf-8");
+export const getPubspecString = (pkgRoot) => {
+    return readFileSync(getPubspecPath(pkgRoot), "utf-8");
 };
 export const getPubspecFromString = (data) => {
     return Pubspec.parse(parse(data));
 };
-export const getPubspec = () => {
-    const data = getPubspecString();
+export const getPubspec = (pkgRoot) => {
+    const data = getPubspecString(pkgRoot);
     return getPubspecFromString(data);
 };
 const getServiceAccount = (serviceAccountStr) => {

package/dist/verifyConditions.js

@@ -2,19 +2,19 @@ import SemanticReleaseError from "@semantic-release/error";
 import { execa } from "execa";
 import { getConfig, getGithubIdentityToken, getGoogleIdentityToken, } from "./utils.js";
 export const verifyConditions = async (pluginConfig, { logger }) => {
-    const { cli, publishPub, useGithubOidc } = getConfig(pluginConfig);
+    const { cli, publishPub, useGithubOidc, registryUrl } = getConfig(pluginConfig);
     if (publishPub) {
-        await verifyPublishToken(useGithubOidc);
+        await verifyPublishToken(useGithubOidc, registryUrl);
         await verifyCommand(cli);
     }
     else {
         logger.log(`Skipping publish token and ${cli} CLI verification as publishPub is ${publishPub}`);
     }
 };
-const verifyPublishToken = async (useGithubOidc) => {
+const verifyPublishToken = async (useGithubOidc, registryUrl) => {
     if (useGithubOidc) {
         try {
-            await getGithubIdentityToken();
+            await getGithubIdentityToken(registryUrl);
         }
         catch (error) {
             throw new SemanticReleaseError(`Failed to get GitHub OIDC token: ${error}`);
@@ -25,7 +25,7 @@ const verifyPublishToken = async (useGithubOidc) => {
         if (!GOOGLE_SERVICE_ACCOUNT_KEY) {
             throw new SemanticReleaseError("Environment variable not found: GOOGLE_SERVICE_ACCOUNT_KEY");
         }
-        await getGoogleIdentityToken(GOOGLE_SERVICE_ACCOUNT_KEY);
+        await getGoogleIdentityToken(GOOGLE_SERVICE_ACCOUNT_KEY, registryUrl);
     }
 };
 const verifyCommand = async (command) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "semantic-release-pub",
-  "version": "0.11.18",
+  "version": "0.13.0",
   "description": "semantic-release plugin to publish a Dart or Flutter package",
   "main": "dist/index.js",
   "author": "zeshuaro@gmail.com",
@@ -29,18 +29,18 @@
     "lint:write": "biome check src tests --write"
   },
   "engines": {
-    "node": ">=24.15.0"
+    "node": ">=24.16.0"
   },
   "dependencies": {
     "@actions/core": "^3.0.1",
     "@semantic-release/error": "^4.0.0",
     "execa": "^9.6.1",
-    "google-auth-library": "^10.6.2",
+    "google-auth-library": "^10.7.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.4.15",
+    "@biomejs/biome": "2.4.16",
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/git": "10.0.1",
     "@tsconfig/node-ts": "^23.6.4",
@@ -50,12 +50,12 @@
     "@types/common-tags": "1.8.4",
     "@types/semantic-release__error": "3.0.3",
     "@types/signale": "1.4.7",
-    "@vitest/coverage-v8": "4.1.6",
+    "@vitest/coverage-v8": "4.1.8",
     "common-tags": "1.8.2",
     "conventional-changelog-conventionalcommits": "9.3.1",
-    "semantic-release": "25.0.3",
+    "semantic-release": "25.0.5",
     "typescript": "6.0.3",
-    "vitest": "4.1.6",
+    "vitest": "4.1.8",
     "vitest-mock-extended": "4.0.0"
   }
 }