cargo-publish-all

Warning: This tool is completely untested and may not behave correctly. Use at your own risk.

This tool scans the current workspace, builds every package as if it was published and publishes the ones that do not exist yet on crates.io. If at any point the validation fails it will stop.

Validation consists of two phases:

1. Package & normalize all packages; replace version dependencies for crates that will be published with paths and try building every package.
2. If the first pass succeeds, publish all packages in the correct order. This will verify a second time, and should ideally never fail. However, it's better to be safe.

If an error is only detected in phase 2 (which should not happen), half of the workspace will be published (and build successfully), the other half won't be on crates.io. This is definitely better than having broken packages on crates.io.

Usage

sh cargo install cargo-publish-all cargo-publish-all

Note that you need to confirm the "publishing plan" by entering "y". If you don't want this, specify --yes:

sh cargo-publish-all --yes

Since this tool is still in its early phase, it may not always work as expected. Thus, you can use --dry-run to make sure it behaves as expected, without pushing to crates.io:

sh cargo-publish-all --dry-run

Note: This will always fail for the second crate, which is a known issue. You can still see what it would do, though. This should be improved in the future.

Showing more output

By default, cargo-publish-all will hide all output except errors and high-level status messages since the output will become quite big. You can change that using the --verbose flag.

Docker

There is a docker image for using cargo-publish-all. It can be accessed using

registry.gitlab.com/torkleyy/cargo-publish-all

GitLab CI

Note that you should have an environment variable CRATES_IO_TOKEN defined (and protected!).

yaml crates.io: image: registry.gitlab.com/torkleyy/cargo-publish-all:latest stage: deploy script: - cargo-publish-all --token $CRATES_IO_TOKEN --yes only: refs: - master

This will allow everybody with write access to trigger a push to crates.io. Also note that secret varibles are not masked and can be revealed by merging a changed script.

Behavior

The high-level behavior can be described as follows:

Publishes every unpublished crate of the current workspace, provided all members of the workspace will build when pulled from crates.io.

This means you can simply run this on CI and it will publish crates as soon as the version number is bumped.

Example cases

Note: the following properties should be tested in the future

• Executing cargo-publish-all a second time should have no effect
• cargo-publish-all for a single-crate workspace is equivalent to cargo publish

TODO:

• Proper logging, no use of println!
• show how versions are bumped (0.1.2 -> 0.1.3)
  • bumping older versions (how to display this?)
• better errors
• better validation
  • can we use package names as they are used?
  • correct versions referenced
• try merging this into Cargo
  • maybe too opinionated?
  • cargo-publish-all is idompotent, cargo publish not