zx-bulk-release 3.1.12 → 3.2.0

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [3.2.0](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.13...v3.2.0) (2026-04-21)
+
+### Features
+* feat: provide configurable packer ([df527f2](https://github.com/semrel-extra/zx-bulk-release/commit/df527f2bf2ae93dc56039fa8abf0ec7be9e9a8c0))
+
+## [3.1.13](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.12...v3.1.13) (2026-04-20)
+
+### Fixes & improvements
+* fix(config): force using file urls for dynamic import (win issue) ([78d32e6](https://github.com/semrel-extra/zx-bulk-release/commit/78d32e6b5ac8b8dbbe359e829e1b498ef193c2e6))
+
 ## [3.1.12](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.11...v3.1.12) (2026-04-13)
 
 ### Fixes & improvements

package/README.md

@@ -219,6 +219,7 @@ await run({
   "buildCmd": "yarn && yarn build",
   "testCmd": "yarn test",
   "npmFetch": true,
+  "npmPacker": "npm",
   "changelog": "changelog",
   "ghPages": "gh-pages",
   "diffTagUrl": "${repoPublicUrl}/compare/${prevTag}...${newTag}",
@@ -237,6 +238,18 @@ await run({
 ```
 Available variables include: `name`, `version`, `absPath`, `relPath`, and anything from `pkg.ctx` (e.g. `git.sha`, `git.root`, `flags.*`).
 
+#### npm packer
+
+Controls the tool used to build the npm tarball. Defaults to `npm`, which covers bin/man normalization, `.npmignore` handling, and `prepack`/`prepare` lifecycle hooks. Override when the repo is yarn- or pnpm-native:
+
+```json
+{ "npmPacker": "yarn" }   // yarn berry: `yarn pack -o <...>.tgz`
+{ "npmPacker": "pnpm" }   // pnpm: `pnpm pack --pack-destination <dir>`
+{ "npmPacker": "npm" }    // default: `npm pack --pack-destination <dir>`
+```
+
+zbr invokes the packer with a clean env (strips inherited `npm_*` / `npm_config_*` vars) to avoid npm 11's "Exit prior to config file resolving" when zbr itself runs under `npx`/`npm run`.
+
 #### Changelog diff URLs
 By default, changelog entries link to GitHub compare/commit pages. Override `diffTagUrl` and `diffCommitUrl` to customize for other platforms (e.g. Gerrit):
 ```json

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "zx-bulk-release",
   "alias": "bulk-release",
-  "version": "3.1.12",
+  "version": "3.2.0",
   "description": "zx-based alternative for multi-semantic-release",
   "type": "module",
   "exports": {
@@ -21,6 +21,7 @@
     "test": "npm run test:unit",
     "test:unit": "vitest run --dir src/test/js --exclude '**/integration*' --exclude '**/fixtures/**' --exclude '**/utils/**'",
     "test:it": "node ./src/test/js/integration.test.js",
+    "test:smoke": "node src/test/smoke/api.test.js && node src/test/smoke/cli.test.js",
     "test:cov": "vitest run --coverage --dir src/test/js --exclude '**/fixtures/**' --exclude '**/utils/**'",
     "docs": "mkdir -p docs && cp ./README.md ./docs/README.md",
     "publish:beta": "npm publish --tag beta --no-git-tag-version",
@@ -34,7 +35,7 @@
   "devDependencies": {
     "@vitest/coverage-v8": "^4.1.4",
     "esbuild": "^0.28.0",
-    "verdaccio": "6.5.0",
+    "verdaccio": "6.5.2",
     "vitest": "^4.1.4"
   },
   "publishConfig": {

package/src/main/js/config.js

@@ -1,3 +1,4 @@
+import { pathToFileURL } from 'node:url'
 import { fs, path, YAML } from 'zx'
 import { asArray, camelize, memoizeBy } from './util.js'
 import { GH_URL, resolveGhApiUrl } from './post/api/gh.js'
@@ -32,7 +33,7 @@ export const getPkgConfig = async (cwd, env) =>
 export const cosmiconfig = (name, {searchPlaces}) => {
   const load = async (filePath) => {
     if (filePath.endsWith('.js') || filePath.endsWith('.cjs'))
-      return (await import(filePath)).default
+      return (await import(pathToFileURL(filePath).href)).default
     const raw = await fs.readFile(filePath, 'utf8')
     if (filePath.endsWith('.yaml') || filePath.endsWith('.yml'))
       return YAML.parse(raw)
@@ -72,6 +73,7 @@ export const normalizePkgConfig = (config, env) => {
     ...config,
     releaseRules: config.releaseRules || config.semanticRules,
     npmFetch:     config.npmFetch || config.fetch || config.fetchPkg,
+    npmPacker:    normalizeNpmPacker(config.npmPacker),
     buildCmd:     config.buildCmd || config.cmd,
     get ghBasicAuth() {
       return this.ghUser && this.ghToken ? `${this.ghUser}:${this.ghToken}` : false
@@ -80,6 +82,13 @@ export const normalizePkgConfig = (config, env) => {
   }
 }
 
+const NPM_PACKERS = new Set(['npm', 'yarn', 'pnpm'])
+export const normalizeNpmPacker = (v) => {
+  if (!v) return 'npm'
+  if (!NPM_PACKERS.has(v)) throw new Error(`unknown npmPacker: ${v} (expected one of: ${[...NPM_PACKERS].join(', ')})`)
+  return v
+}
+
 export const normalizeMetaConfig = (meta) =>
   meta === false || meta === 'none'
     ? { type: null }

package/src/main/js/post/depot/steps/pack.js

@@ -7,6 +7,39 @@ import {sanitizePkgName} from '../../parcel/build.js'
 import {formatReleaseNotes} from '../generators/notes.js'
 import {packTar, hashFile} from '../../tar.js'
 
+// Strip inherited `npm_*` / `npm_config_*` env vars. When zbr is invoked via `npx`
+// or `npm run`, the parent npm pollutes the env and the child packer (npm/yarn/pnpm)
+// can misinterpret it — on npm 11+ this surfaces as "Exit prior to config file resolving".
+const cleanPackerEnv = () => Object.fromEntries(
+  Object.entries(process.env).filter(([k]) => !/^npm_/i.test(k))
+)
+
+// pack via selected package manager. All three produce an npm-compatible tarball,
+// honoring `files`/`.npmignore`, bin/man normalization, and prepack hooks.
+const packers = {
+  async npm(pkg, destDir) {
+    const out = await $({cwd: pkg.absPath, env: cleanPackerEnv()})`npm pack --pack-destination ${destDir}`
+    return path.join(destDir, out.toString().trim().split('\n').pop())
+  },
+  async pnpm(pkg, destDir) {
+    const out = await $({cwd: pkg.absPath, env: cleanPackerEnv()})`pnpm pack --pack-destination ${destDir}`
+    return path.join(destDir, out.toString().trim().split('\n').pop())
+  },
+  async yarn(pkg, destDir) {
+    // yarn berry: `yarn pack -o <path>`. Name is under our control — no stdout parsing.
+    const target = path.join(destDir, `${sanitizePkgName(pkg.name)}-${pkg.version}.tgz`)
+    await $({cwd: pkg.absPath, env: cleanPackerEnv()})`yarn pack -o ${target}`
+    return target
+  },
+}
+
+const packNpmTarball = async (pkg, destDir) => {
+  const packer = pkg.config.npmPacker || 'npm'
+  const fn = packers[packer]
+  if (!fn) throw new Error(`unknown npmPacker: ${packer}`)
+  return fn(pkg, destDir)
+}
+
 export const pack = memoizeBy(async (pkg, ctx = pkg.ctx) => {
   const {channels: channelNames = [], flags} = ctx
   const snapshot = !!flags.snapshot
@@ -23,8 +56,7 @@ export const pack = memoizeBy(async (pkg, ctx = pkg.ctx) => {
   const artifacts = {repoName, repoHost, originUrl}
 
   if (active.includes('npm')) {
-    const out = await $({cwd: pkg.absPath})`npm pack --pack-destination ${stageDir}`
-    artifacts.npmTarball = path.join(stageDir, out.toString().trim())
+    artifacts.npmTarball = await packNpmTarball(pkg, stageDir)
   }
   if (active.includes('gh-release') || active.includes('changelog'))
     artifacts.releaseNotes = await formatReleaseNotes(pkg)