Updated NPM publish to publish packages as pipeline artifact

common/changes/@microsoft/rush/ating-update-publish-pipeline-to-publish-packages-as-artifacts_2025-08-12-23-03.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@microsoft/rush",
+      "comment": "Updated descriptions for rush publish for packages published as tarballs. ",
+      "type": "none"
+    }
+  ],
+  "packageName": "@microsoft/rush"
+}

common/changes/@rushstack/heft-isolated-typescript-transpile-plugin/main_2025-08-04-19-18.json → common/changes/@rushstack/heft-isolated-typescript-transpile-plugin/ating-update-publish-pipeline-to-publish-packages-as-artifacts_2025-08-12-23-03.json

@@ -2,8 +2,8 @@
   "changes": [
     {
       "packageName": "@rushstack/heft-isolated-typescript-transpile-plugin",
-      "comment": "Manually process wildcard directories for watching instead of watching all read directories.",
-      "type": "patch"
+      "comment": "",
+      "type": "none"
     }
   ],
   "packageName": "@rushstack/heft-isolated-typescript-transpile-plugin"

common/config/azure-pipelines/npm-publish-rush.yaml

@@ -4,6 +4,12 @@ variables:
   - name: SourceBranch
     value: $[ replace(replace(resources.repositories.self.ref, 'refs/heads/', ''), 'refs/pull/', 'refs/remotes/pull/') ]
 
+parameters:
+  - name: PublishVersionTag
+    displayName: 'Publish Version (Default is latest)'
+    type: string
+    default: 'latest'
+
 resources:
   repositories:
     - repository: 1esPipelines
@@ -29,6 +35,10 @@ extends:
                 - output: pipelineArtifact
                   targetPath: $(Build.ArtifactStagingDirectory)/published-versions
                   artifactName: published-versions
+                - output: pipelineArtifact
+                  targetPath: $(Build.ArtifactStagingDirectory)/packages
+                  displayName: 'Publish Rushstack Artifacts: rushstack-packages'
+                  artifactName: rushstack-packages
             steps:
               - checkout: self
                 persistCredentials: true
@@ -37,11 +47,6 @@ extends:
 
               - template: /common/config/azure-pipelines/templates/build.yaml@self
 
-              - template: /common/config/azure-pipelines/templates/bump-versions.yaml@self
-                parameters:
-                  VersionPolicyName: noRush
-                  BranchName: $(SourceBranch)
-
               - template: /common/config/azure-pipelines/templates/bump-versions.yaml@self
                 parameters:
                   VersionPolicyName: rush
@@ -50,14 +55,10 @@ extends:
               - script: 'node libraries/rush-lib/scripts/plugins-prepublish.js'
                 displayName: 'Prepublish workaround for rush-lib'
 
-              - template: /common/config/azure-pipelines/templates/publish.yaml@self
-                parameters:
-                  VersionPolicyName: noRush
-                  BranchName: $(SourceBranch)
-
               - template: /common/config/azure-pipelines/templates/publish.yaml@self
                 parameters:
                   VersionPolicyName: rush
                   BranchName: $(SourceBranch)
+                  PublishVersionTag: ${{ parameters.PublishVersionTag }}
 
               - template: /common/config/azure-pipelines/templates/record-published-versions.yaml@self

common/config/azure-pipelines/npm-publish.yaml

@@ -4,6 +4,13 @@ variables:
   - name: SourceBranch
     value: $[ replace(replace(resources.repositories.self.ref, 'refs/heads/', ''), 'refs/pull/', 'refs/remotes/pull/') ]
 
+parameters:
+
+  - name: PublishVersionTag
+    displayName: 'Publish Version (Default is latest)'
+    type: string
+    default: 'latest'
+
 resources:
   repositories:
     - repository: 1esPipelines
@@ -29,6 +36,10 @@ extends:
                 - output: pipelineArtifact
                   targetPath: $(Build.ArtifactStagingDirectory)/published-versions
                   artifactName: published-versions
+                - output: pipelineArtifact
+                  targetPath: $(Build.ArtifactStagingDirectory)/packages
+                  displayName: 'Publish Rushstack Artifacts: rushstack-packages'
+                  artifactName: rushstack-packages
             steps:
               - checkout: self
                 persistCredentials: true
@@ -49,5 +60,6 @@ extends:
                 parameters:
                   VersionPolicyName: noRush
                   BranchName: $(SourceBranch)
+                  PublishVersionTag: ${{ parameters.PublishVersionTag }}
 
               - template: /common/config/azure-pipelines/templates/record-published-versions.yaml@self

common/config/azure-pipelines/templates/publish.yaml

@@ -4,9 +4,15 @@ parameters:
   - name: BranchName
     type: string
     default: $(Build.SourceBranchName)
+  - name: PublishVersionTag
+    type: string
+    default: latest
 
 steps:
-  - script: 'node common/scripts/install-run-rush.js publish --apply --publish --include-all --target-branch ${{ parameters.BranchName }} --add-commit-details --set-access-level public'
+  - script: 'node common/scripts/install-run-rush.js publish --publish --apply --pack --release-folder $(Build.ArtifactStagingDirectory)/packages --include-all --target-branch ${{ parameters.BranchName }} --add-commit-details'
     displayName: 'Rush Publish (Policy: ${{ parameters.VersionPolicyName }})'
-    env:
-      NPM_AUTH_TOKEN: $(npmToken)
+
+  - script: |
+      echo "${{ parameters.PublishVersionTag }}" > "$(Build.ArtifactStagingDirectory)/npm-tag"
+
+    displayName: 'Create version.txt with publish tag'

heft-plugins/heft-isolated-typescript-transpile-plugin/CHANGELOG.json

@@ -1,6 +1,18 @@
 {
   "name": "@rushstack/heft-isolated-typescript-transpile-plugin",
   "entries": [
+    {
+      "version": "0.2.2",
+      "tag": "@rushstack/heft-isolated-typescript-transpile-plugin_v0.2.2",
+      "date": "Tue, 12 Aug 2025 21:05:42 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Manually process wildcard directories for watching instead of watching all read directories."
+          }
+        ]
+      }
+    },
     {
       "version": "0.2.1",
       "tag": "@rushstack/heft-isolated-typescript-transpile-plugin_v0.2.1",

heft-plugins/heft-isolated-typescript-transpile-plugin/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Change Log - @rushstack/heft-isolated-typescript-transpile-plugin
 
-This log was last generated on Fri, 01 Aug 2025 00:12:49 GMT and should not be manually modified.
+This log was last generated on Tue, 12 Aug 2025 21:05:42 GMT and should not be manually modified.
+
+## 0.2.2
+Tue, 12 Aug 2025 21:05:42 GMT
+
+### Patches
+
+- Manually process wildcard directories for watching instead of watching all read directories.
 
 ## 0.2.1
 Fri, 01 Aug 2025 00:12:49 GMT

heft-plugins/heft-isolated-typescript-transpile-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/heft-isolated-typescript-transpile-plugin",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Heft plugin for transpiling TypeScript with SWC",
   "repository": {
     "type": "git",

libraries/rush-lib/src/cli/actions/PublishAction.ts

@@ -82,7 +82,9 @@ export class PublishAction extends BaseRushAction {
     this._publish = this.defineFlagParameter({
       parameterLongName: '--publish',
       parameterShortName: '-p',
-      description: 'If this flag is specified, applied changes will be published to the NPM registry.'
+      description:
+        'If this flag is specified, applied changes will be published to the NPM registry. ' +
+        'This flag must be specified with --pack to publish packages as tarballs, or else the run will only be a dry run.'
     });
     this._addCommitDetails = this.defineFlagParameter({
       parameterLongName: '--add-commit-details',
@@ -140,7 +142,8 @@ export class PublishAction extends BaseRushAction {
       parameterLongName: '--pack',
       description:
         `Packs projects into tarballs instead of publishing to npm repository. It can only be used when ` +
-        `--include-all is specified. If this flag is specified, NPM registry related parameters will be ignored.`
+        `--include-all is specified. If this flag is specified, NPM registry related parameters will be ignored.` +
+        `--publish must be specified to publish as tarballs, or else the run will only be a dry run. `
     });
     this._releaseFolder = this.defineStringParameter({
       parameterLongName: '--release-folder',