Skip to content

release: v4.29.1 - pass --ignore-scripts on the default publish command - #322

Merged
cldmv-bot[bot] merged 3 commits into
masterfrom
next
Sep 28, 2026
Merged

cldmv-bot[bot] merged 3 commits into
masterfrom
next

Conversation

@cldmv-bot

@cldmv-bot cldmv-bot Bot commented Sep 28, 2026

Copy link
Copy Markdown
Contributor

🚀 What's Changed

💥 Breaking Changes

No breaking changes

✨ Features

No new features

🐛 Bug Fixes

📦 Dependencies

No dependency updates

🔧 Other Changes

No other changes

👥 Contributors

Co-authored-by: Shinrai Shinrai@users.noreply.github.com

Shinrai and others added 3 commits September 27, 2026 21:49
The publish jobs run the generated command inside the downloaded
package-contents/ artifact: npm-pack output with no node_modules and no
lockfile. npm/pnpm/yarn publish still fire prepack/prepublishOnly/postpack
there, so a repo whose prepack runs a real build (e.g. tsup behind
"prepack": "npm run build") re-runs it in a directory that can't supply
its devDependencies and the publish dies with `tsup: not found` (exit
127) — CLDMV/vitest-runner v1.4.0 failed both registries this way.

build_command already ran in the build job before packing, so no
lifecycle script has work left at publish time. Add --ignore-scripts to
the default command for both npm and GitHub Packages, for every package
manager. A caller-supplied publish_command / github_packages_publish_command
is still used verbatim.

The command was built in three places — repo-detection (the one the
reusable workflow actually uses, core and satellites) plus the
publish-npm / publish-github-packages fallbacks — kept in sync by comment.
Move it into one shared buildPublishCommand() in
npm/utilities/publish-command with unit tests, so the flag can't drift
between them. Document the artifact publish contract and the custom
command caveat in docs/conventions/package-manager.md.

Fixes #320
@cldmv-bot cldmv-bot Bot added ! release → master v4 flow: persistent next → master release PR (carries the next feature release) release Marks a pull request as a pending release — merge to publish a new version semver: patch This release contains only backwards-compatible bug fixes type: bug Something is broken or not behaving as expected area: core Touches core library / runtime source code type: config Changes to repository or project configuration files type: documentation Relates to docs, README updates, guides, or inline code comments labels Sep 28, 2026
@cldmv-bot
cldmv-bot Bot merged commit 6ae10b3 into master Sep 28, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: core Touches core library / runtime source code ! release → master v4 flow: persistent next → master release PR (carries the next feature release) release Marks a pull request as a pending release — merge to publish a new version semver: patch This release contains only backwards-compatible bug fixes type: bug Something is broken or not behaving as expected type: config Changes to repository or project configuration files type: documentation Relates to docs, README updates, guides, or inline code comments

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant