[release] Avoid accidentally releasing the mcp package (#3729)

* Restore MCP package to latest published npm version during SDK release

During `--package sdk` bumps, lerna version bumps all packages including
`@salesforce/pwa-kit-mcp`. The independent packages are then restored to
their pre-bump versions, but MCP carries a dev version in the repo that
should never appear in a released SDK.

This change restores MCP to its latest published npm version (via
`npm info @latest`) instead of the repo dev version, and moves
`getLatestVersion` to shared utils so it can be reused.

* Fix linting

Author: vmarta

scripts/bump-version/index.js

@@ -10,7 +10,7 @@
 const sh = require('shelljs')
 const path = require('path')
 const program = require('commander')
-const {saveJSONToFile, setPackageVersion} = require('../utils')
+const {saveJSONToFile, setPackageVersion, getLatestVersion} = require('../utils')
 
 // Exit upon error
 sh.set('-e')
@@ -68,11 +68,20 @@ const main = (program) => {
     // update versions for root package and root package lock
     setPackageVersion(newMonorepoVersion, {cwd: rootPath})
 
+    const notices = []
     independentPackages.forEach((pkg) => {
-        const {location, version: oldVersion} = pkg
+        const {name, location, version: repoVersion} = pkg
+        let restoreVersion = repoVersion
+        if (name === '@salesforce/pwa-kit-mcp') {
+            restoreVersion = getLatestVersion(name)
+            notices.push(
+                `⚠️  Restoring ${name} to its latest published npm version (${restoreVersion}) instead of the repo's dev version (${repoVersion}).\n` +
+                    `   This package is released independently and excluded from the monorepo SDK version bump to avoid publishing an unreleased dev version to npm.`
+            )
+        }
         // Restore to the original version
         // TODO: is it possible to _not_ trigger the lifecycle scripts? See commerce-sdk-react/CHANGELOG.md
-        setPackageVersion(oldVersion, {cwd: location})
+        setPackageVersion(restoreVersion, {cwd: location})
     })
 
     // Now that all of the package version updates are done,
@@ -91,6 +100,8 @@ const main = (program) => {
     sh.exec('npm install')
 
     listAllVersions()
+
+    notices.forEach((msg) => console.log(`\n${msg}`))
 }
 
 const updatePeerDeps = (pkgJson, newMonorepoVersion) => {

scripts/bump-version/pwa-kit-deps-version.js

@@ -8,7 +8,7 @@
 /* eslint-disable @typescript-eslint/no-var-requires */
 const sh = require('shelljs')
 const path = require('path')
-const {saveJSONToFile} = require('../utils')
+const {saveJSONToFile, getLatestVersion} = require('../utils')
 
 // Exit upon error
 sh.set('-e')
@@ -51,8 +51,4 @@ const main = () => {
     saveJSONToFile(pkgJson, pathToPackageJson)
 }
 
-const getLatestVersion = (pkgName) => {
-    return sh.exec(`npm info ${pkgName}@latest version`, {silent: true}).trim()
-}
-
 main()

scripts/utils.js

@@ -16,7 +16,12 @@ const setPackageVersion = (version, shellOptions = {}) => {
     sh.exec(`npm version --no-git-tag ${version}`, {silent: true, ...shellOptions})
 }
 
+const getLatestVersion = (pkgName) => {
+    return sh.exec(`npm info ${pkgName}@latest version`, {silent: true}).trim()
+}
+
 module.exports = {
     saveJSONToFile,
-    setPackageVersion
+    setPackageVersion,
+    getLatestVersion
 }