semantic-release 25.0.0-beta.1 → 25.0.0-beta.11

package/docs/extending/plugins-list.md

@@ -66,6 +66,9 @@
   - `publish`: Publish the package to the Visual Studio Code marketplace
 - [semantic-release-verify-deps](https://github.com/piercus/semantic-release-verify-deps)
   - `verifyConditions`: Check the dependencies format against a regexp before a release
+- [semantic-release-openapi](https://github.com/aensley/semantic-release-openapi)
+  - `verifyConditions`: Verify `apiSpecFiles` is specified with at least one file name and all matching files have a .json, .yaml, or .yml extension.
+  - `prepare`: Write the correct version to all OpenAPI / Swagger files specified in `apiSpecFiles`.
 - [semantic-release-chrome](https://github.com/GabrielDuarteM/semantic-release-chrome)
   - `verifyConditions`: Verify the presence of the authentication (set via environment variables)
   - `prepare`: Write the correct version to the `manifest.json` and creates a zip file of the whole dist folder
@@ -204,3 +207,9 @@
 - [semantic-release-kaniko](https://github.com/brendangeck/semantic-release-kaniko)
   - `verifyConditions`: Verify that all needed configuration is present and login to the Docker registry.
   - `publish`: Build a container image using [Kaniko](https://github.com/GoogleContainerTools/kaniko) and (optionally) push it to a Docker registry.
+- [semantic-release-skopeo](https://github.com/LukasWestholt/semantic-release-skopeo)
+  - `verifyConditions`: Verify that all needed configuration is present and check if destination is writeable (unless force=true).
+  - `publish`: Copy OCI images to a custom (Docker) registry using daemonless open-source tool [skopeo](https://github.com/containers/skopeo/).
+- [sr-uv-plugin](https://github.com/Artessan-Devs/sr-uv-plugin)
+  - `verifyConditions`: Ensures `pyproject.toml` exists and contains a `[project]` section.
+  - `prepare`: Updates the `[project].version` field in `pyproject.toml` to match the release version.

package/lib/branches/get-tags.js

@@ -2,7 +2,7 @@ import { escapeRegExp, template } from "lodash-es";
 import semver from "semver";
 import pReduce from "p-reduce";
 import debugTags from "debug";
-import { getNote, getTags } from "../../lib/git.js";
+import { getTags, getTagsNotes } from "../../lib/git.js";
 
 const debug = debugTags("semantic-release:get-tags");
 
@@ -13,6 +13,9 @@ export default async ({ cwd, env, options: { tagFormat } }, branches) => {
   // so it's guaranteed to no be present in the `tagFormat`.
   const tagRegexp = `^${escapeRegExp(template(tagFormat)({ version: " " })).replace(" ", "(.+)")}`;
 
+  // Get the tags notes for all the tags in the repository
+  const tagsNotesMap = await getTagsNotes({ cwd, env });
+
   return pReduce(
     branches,
     async (branches, branch) => {
@@ -20,8 +23,9 @@ export default async ({ cwd, env, options: { tagFormat } }, branches) => {
         await getTags(branch.name, { cwd, env }),
         async (branchTags, tag) => {
           const [, version] = tag.match(tagRegexp) || [];
+          const channels = tagsNotesMap.has(tag) ? tagsNotesMap.get(tag).channels : [null];
           return version && semver.valid(semver.clean(version))
-            ? [...branchTags, { gitTag: tag, version, channels: (await getNote(tag, { cwd, env })).channels || [null] }]
+            ? [...branchTags, { gitTag: tag, version, channels }]
             : branchTags;
         },
         []

package/lib/git.js

@@ -4,6 +4,7 @@ import { execa } from "execa";
 import debugGit from "debug";
 import { merge } from "lodash-es";
 import { GIT_NOTE_REF } from "./definitions/constants.js";
+import { extractGitLogTags } from "./utils.js";
 
 const debug = debugGit("semantic-release:git");
 
@@ -296,42 +297,62 @@ export async function isBranchUpToDate(repositoryUrl, branch, execaOptions) {
 }
 
 /**
- * Get and parse the JSON note of a given reference.
+ * Retrieves a map of Git tags to their associated notes from the repository.
  *
- * @param {String} ref The Git reference for which to retrieve the note.
- * @param {Object} [execaOpts] Options to pass to `execa`.
+ * Executes a `git log` command to list tags and their notes, then parses the output into a Map
+ * where each key is a tag name (e.g., "v24.2.3") and the value is the parsed JSON note object.
  *
- * @return {Object} the parsed JSON note if there is one, an empty object otherwise.
+ * @async
+ * @param {import('execa').Options} execaOptions - Options to pass to `execa`
+ * @returns {Promise<Map<string, Object>>} A promise that resolves to a Map of tag names to their notes.
  */
-export async function getNote(ref, execaOptions) {
-  const handleError = (error) => {
-    if (error.exitCode === 1) {
-      return { stdout: "{}" };
-    }
+export async function getTagsNotes(execaOptions) {
+  /**
+   * git log --tags="*" --decorate-refs="refs/tags/*" --no-walk --format="%d%x09%N" --notes="refs/notes/semantic-release*"
+   *
+   *  (tag: v1.2.3)
+   *  (tag: v2.0.0)  {"channels":[null]}
+   *  (tag: v3.0.0, tag: 5833/merge)	{"channels":[null]}
+   *  ...
+   */
+  const { stdout } = await execa(
+    "git",
+    [
+      "log",
+      "--tags=*",
+      "--decorate-refs=refs/tags/*", // This filters the refs shown in the %d format specifier to only include tags matching refs/tags/*.
+      "--no-walk", // This ensures that only the commits directly pointed to by the tags are shown, not their historical parents.
+      "--format=%d%x09%N", // <refName><tab><notes> eg. (tag: v24.2.3)  {"channels":[null]}
+      `--notes=refs/notes/${GIT_NOTE_REF}*`, // handles both patterns for notes - `semantic-release` (old) and `semantic-release-<version>` (current)
+    ],
+    execaOptions
+  );
 
-    debug(error);
-    throw error;
-  };
+  // drop empty lines
+  const lines = stdout.split("\n").filter((line) => line.trim() !== "");
 
-  try {
-    return merge(
-      JSON.parse(
-        // Used for retro-compatibility
-        (await execa("git", ["notes", "--ref", GIT_NOTE_REF, "show", ref], execaOptions).catch(handleError)).stdout
-      ),
-      JSON.parse(
-        (await execa("git", ["notes", "--ref", `${GIT_NOTE_REF}-${ref}`, "show", ref], execaOptions).catch(handleError))
-          .stdout
-      )
-    );
-  } catch (error) {
-    if (error.exitCode === 1) {
-      return {};
+  // parse and create a map of tags to notes
+  const tagNotesMap = new Map();
+
+  for (const line of lines) {
+    const [tagPart, notePart] = line.trim().split("\t"); // tab separator is defined in the git command above (%x09)
+    const tags = extractGitLogTags(tagPart);
+    if (tags.length === 0) {
+      debug(`Cannot parse tags from line: ${line}`);
+      continue;
     }
 
-    debug(error);
-    throw error;
+    try {
+      const parsed = JSON.parse(notePart);
+      tags.forEach((tag) => {
+        tagNotesMap.set(tag, parsed);
+      });
+    } catch (error) {
+      debug(error);
+    }
   }
+
+  return tagNotesMap;
 }
 
 /**

package/lib/utils.js

@@ -1,4 +1,4 @@
-import { isFunction, template, union } from "lodash-es";
+import { template, union } from "lodash-es";
 import semver from "semver";
 import hideSensitive from "./hide-sensitive.js";
 
@@ -81,3 +81,13 @@ export function makeTag(tagFormat, version) {
 export function isSameChannel(channel, otherChannel) {
   return channel === otherChannel || (!channel && !otherChannel);
 }
+
+export function extractGitLogTags(tagsString) {
+  const regex = /tag: ([^,)]+)/g;
+  let match;
+  const tags = [];
+  while ((match = regex.exec(tagsString)) !== null) {
+    tags.push(match[1]);
+  }
+  return tags;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "semantic-release",
   "description": "Automated semver compliant package publishing",
-  "version": "25.0.0-beta.1",
+  "version": "25.0.0-beta.11",
   "type": "module",
   "author": "Stephan Bönnemann <stephan@boennemann.me> (http://boennemann.me)",
   "ava": {
@@ -27,11 +27,11 @@
     "Matt Travi <npm@travi.org> (https://matt.travi.org/)"
   ],
   "dependencies": {
-    "@semantic-release/commit-analyzer": "^13.0.0-beta.1",
+    "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/error": "^4.0.0",
-    "@semantic-release/github": "^11.0.0",
-    "@semantic-release/npm": "^12.0.2",
-    "@semantic-release/release-notes-generator": "^14.0.0-beta.1",
+    "@semantic-release/github": "^12.0.0",
+    "@semantic-release/npm": "^13.0.0",
+    "@semantic-release/release-notes-generator": "^14.1.0",
     "aggregate-error": "^5.0.0",
     "cosmiconfig": "^9.0.0",
     "debug": "^4.0.0",
@@ -41,8 +41,8 @@
     "find-versions": "^6.0.0",
     "get-stream": "^6.0.0",
     "git-log-parser": "^1.2.0",
-    "hook-std": "^3.0.0",
-    "hosted-git-info": "^8.0.0",
+    "hook-std": "^4.0.0",
+    "hosted-git-info": "^9.0.0",
     "import-from-esm": "^2.0.0",
     "lodash-es": "^4.17.21",
     "marked": "^15.0.0",
@@ -53,37 +53,37 @@
     "read-package-up": "^11.0.0",
     "resolve-from": "^5.0.0",
     "semver": "^7.3.2",
-    "semver-diff": "^4.0.0",
+    "semver-diff": "^5.0.0",
     "signale": "^1.2.1",
-    "yargs": "^17.5.1"
+    "yargs": "^18.0.0"
   },
   "devDependencies": {
-    "@types/node": "22.16.0",
+    "@types/node": "22.18.10",
     "@types/signale": "1.4.7",
-    "ava": "6.4.0",
+    "ava": "6.4.1",
     "c8": "10.1.3",
     "clear-module": "4.1.2",
     "cz-conventional-changelog": "3.3.0",
-    "dockerode": "4.0.7",
+    "dockerode": "4.0.9",
     "file-url": "4.0.0",
-    "fs-extra": "11.3.0",
-    "got": "14.4.7",
+    "fs-extra": "11.3.2",
+    "got": "14.5.0",
     "js-yaml": "4.1.0",
     "lockfile-lint": "4.14.1",
     "ls-engines": "0.9.3",
     "mockserver-client": "5.15.0",
-    "nock": "14.0.5",
+    "nock": "14.0.10",
     "npm-run-all2": "8.0.4",
-    "p-retry": "6.2.1",
+    "p-retry": "7.1.0",
     "prettier": "3.6.2",
-    "publint": "0.3.12",
+    "publint": "0.3.14",
     "sinon": "21.0.0",
     "stream-buffers": "3.0.3",
     "tempy": "3.1.0",
     "testdouble": "3.20.2"
   },
   "engines": {
-    "node": "^22.14.0 || >= 24.3.0"
+    "node": "^22.14.0 || >= 24.10.0"
   },
   "files": [
     "bin",