ci: require explicit --latest flag for stable release

scripts/versions/ci-publish.ts

@@ -1,5 +1,5 @@
 import mri from 'mri'
-import { publishVersion } from './src/publishVersion'
+import { publishVersion, VALID_TAGS } from './src/publishVersion'
 
 main()
 
@@ -25,17 +25,24 @@ function parseArgs() {
 
   const argv = mri(process.argv.slice(2), {
     boolean: ['no-push'],
-    string: ['tag'],
+    string: ['tag', 'latest'],
   })
 
-  if (argv.tag && argv.tag !== 'beta' && argv.tag !== 'next') {
-    console.error('Error: --tag must be beta or next')
+  if (argv.latest && argv.tag) {
+    console.error('Error: --latest and --tag cannot be specified together')
+    process.exit(1)
+  }
+
+  if (!argv.latest && !VALID_TAGS.includes(argv.tag)) {
+    console.error(
+      `Error: --tag must be one of [${VALID_TAGS.join(', ')}] or --latest must be specified instead`,
+    )
     process.exit(1)
   }
 
   return {
     push: !argv['no-push'],
-    tag: argv.tag as 'beta' | 'next',
+    tag: argv.tag as (typeof VALID_TAGS)[number],
     gitCliffToken,
     npmToken,
     radashiBotToken,

scripts/versions/src/publishVersion.ts

@@ -13,12 +13,14 @@ import { trackVersion } from './trackVersion'
 // This is the commit that Radashi's changelog is based on.
 const changelogBaseSha = '2be4acf455ebec86e846854dbab57bd0bfbbceb7'
 
+export const VALID_TAGS = ['beta', 'next'] as const
+
 export async function publishVersion(args: {
   /**
    * Use "beta" for pre-release minor/patch versions and "next" for
    * pre-release major versions.
    */
-  tag?: 'beta' | 'next'
+  tag?: (typeof VALID_TAGS)[number]
   push: boolean
   gitCliffToken?: string
   npmToken?: string