Release with changesets and the shared toolchain, not np

[stefanoverna]

This repo released with np, via a two-line SDKs/RELEASE.md that
prescribed a bare np patch — literally always patch, decided on release day.
There is no CHANGELOG.md here at all.

Changesets moves the bump level into the PR that makes the change, and writes
the changelog from it. The release script is
@datocms/release-toolchain —
the same one the four DatoCMS monorepos now run, installed from its repository
by git tag and never published to npm.

The tags do not change. In a repo that is one package, changesets tags
vX.Y.Z, which is exactly what np tagged, so git describe and the existing
tag history carry on unbroken. The release branch, which this repo spells
master, is read from .changeset/config.json → baseBranch rather than
hard-coded — verified against this branch:

==> Preflight (release-toolchain v1.2.0)
Aborted: you are not on master. Use --tag to publish a prerelease from a branch.

What changed

• .changeset/ added: config.json (baseBranch: master, access: public) and
  the standard README.md explaining the bump levels.
• @changesets/cli and @datocms/release-toolchain added; np removed — it
  was pinned at five different versions across these seven repos, with zero
  configuration anywhere, so nothing is lost.
• changeset, release and release:next scripts. The release script must not
  be called publish: this repo's root is the published package, so
  changeset publish → npm publish would run a publish script and the
  release would re-enter itself.
• CHANGELOG.md added to files, so the changelog changesets is about to start
  writing ships with the package.
• A Releasing section in the README, and its entry in the hand-maintained table
  of contents.

How to try it

The first release should be a prerelease, which is real in every way except the
dist-tag:

npx changeset pre enter next
npm run release:next        # publishes X.Y.Z-next.0 under `next`, tags, GitHub release
npx changeset pre exit

latest is untouched and the GitHub release is marked as a prerelease.

https://claude.ai/code/session_01XaYAhzmiJwysZeq1XC5xrQ

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vue-datocms-example	Ready	Preview	Aug 31, 2026 10:35am

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/vue-datocms@7ee6402

commit: 7ee6402

[stefanoverna]

One more commit: npm publish typed by hand is now refused

Renaming the script to release means npm run publish fails with npm's
Missing script error. Safe, though npm's suggestion is npm unpublish and it
does not mention release.

npm publish without run is the one that reaches the registry. It skips the
tests, the changelog, the tag and the GitHub release, and npm takes it whenever
the working tree carries a version the registry has not seen. Today a clean
checkout carries the version already published, so the registry answers 403.
That is a side effect of how the toolchain bumps versions, not a decision, and
it stops holding the moment somebody bumps by hand.

So prepublishOnly now runs release-toolchain --assert-release, which passes
only while the release script is the one publishing:

$ npm publish --dry-run
> prepublishOnly
> release-toolchain --assert-release

Aborted: this package is published by 'npm run release'.
  A bare `npm publish` skips the tests, the changelog, the tag and the
  GitHub release, so it is refused here.
  To inspect the tarball without publishing, run 'npm pack'.

npm pack runs prepack rather than prepublishOnly, so reading a tarball
still works, and the pkg-pr-new previews are untouched: it shells out to
npm pack --json, not to npm publish.

The four workspace repos do not get this. Their root package.json is private,
so the same slip at the repo root publishes nothing.