.github/workflows/ci.yml

@@ -6,6 +6,7 @@ on:
   pull_request:
     branches:
       - main
+permissions: {}
 jobs:
   ci:
     runs-on: ubuntu-latest

.github/workflows/publish.yml

@@ -9,6 +9,9 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     environment: Release
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vitejs/release-scripts",
-  "version": "1.3.3",
+  "version": "1.4.0",
   "description": "@vitejs release scripts",
   "license": "MIT",
   "main": "dist/index.js",
@@ -35,12 +35,12 @@
   },
   "devDependencies": {
     "@arnaud-barre/tnode": "^0.24.0",
-    "@types/node": "^22.10.6",
+    "@types/node": "^22.10.9",
     "@types/prompts": "^2.4.9",
     "@types/semver": "^7.5.8",
     "esbuild": "^0.24.2",
     "prettier": "^3.4.2",
     "typescript": "^5.7.3"
   },
-  "packageManager": "pnpm@9.15.3"
+  "packageManager": "pnpm@9.15.4"
 }

scripts/release.ts

@@ -7,9 +7,9 @@ release({
   toTag: (_, version) => `v${version}`,
   logChangelog: () =>
     console.log(
-      execSync(
-        "git log $(git describe --tags --abbrev=0)..HEAD --oneline",
-      ).toString(),
+      // execSync(
+      //   "git log $(git describe --tags --abbrev=0)..HEAD --oneline",
+      // ).toString(),
     ),
   generateChangelog: () => {},
   getPkgDir: () => ".",

src/release.ts

@@ -106,7 +106,7 @@ export const release: typeof def = async ({
     step("\nCommitting changes...");
     await runIfNotDry("git", ["add", "-A"]);
     await runIfNotDry("git", ["commit", "-m", `release: ${tag}`]);
-    await runIfNotDry("git", ["tag", tag]);
+    await runIfNotDry("git", ["tag", "-a", "-m", tag, tag]);
   } else {
     console.log("No changes to commit.");
     return;