fix(post-publish): handle Rush version bump in npm-post-publish pipeline

.github/workflows/ci.yml

@@ -16,6 +16,7 @@ jobs:
           # - build-tests-samples/heft-storybook-v9-react-tutorial/build.js
           # - build-tests-samples/heft-storybook-v9-react-tutorial-app/build.js
           # - The "globalOverrides" entry for "@vscode/vsce>cheerio" in common/config/rush/pnpm-config.json
+          # - libraries/module-minifier/src/cryptoPolyfill.ts
           - NodeVersion: 18.20.x
             NodeVersionDisplayName: 18
             OS: ubuntu-latest
@@ -33,6 +34,8 @@ jobs:
             OS: windows-latest
     name: Node.js v${{ matrix.NodeVersionDisplayName }} (${{ matrix.OS }})
     runs-on: ${{ matrix.OS }}
+    env:
+      INSTALL_RUN_RUSH_LOCKFILE_PATH: ${{ github.workspace }}/repo-a/common/config/validation/rush-package-lock.json
     steps:
       - name: Create ~/.rush-user/settings.json
         shell: pwsh
@@ -88,7 +91,11 @@ jobs:
         working-directory: repo-a
 
       - name: Collect JSON schemas
-        run: node repo-scripts/repo-toolbox/lib-commonjs/start.js collect-json-schemas --output-path ${GITHUB_WORKSPACE}/artifacts/json-schemas
+        run: node repo-scripts/repo-toolbox/lib-commonjs/start.js collect-project-files --subfolder temp/json-schemas --output-path ${GITHUB_WORKSPACE}/artifacts/json-schemas
+        working-directory: repo-a
+
+      - name: Collect API review files
+        run: node repo-scripts/repo-toolbox/lib-commonjs/start.js collect-project-files --subfolder temp/api --output-path ${GITHUB_WORKSPACE}/artifacts/api
         working-directory: repo-a
 
       - name: Clone another copy of the repo to test the build cache

README.md

@@ -76,6 +76,7 @@ These GitHub repositories provide supplementary resources for Rush Stack:
 | [/heft-plugins/heft-sass-load-themed-styles-plugin](./heft-plugins/heft-sass-load-themed-styles-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-sass-load-themed-styles-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-sass-load-themed-styles-plugin) | [changelog](./heft-plugins/heft-sass-load-themed-styles-plugin/CHANGELOG.md) | [@rushstack/heft-sass-load-themed-styles-plugin](https://www.npmjs.com/package/@rushstack/heft-sass-load-themed-styles-plugin) |
 | [/heft-plugins/heft-sass-plugin](./heft-plugins/heft-sass-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-sass-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-sass-plugin) | [changelog](./heft-plugins/heft-sass-plugin/CHANGELOG.md) | [@rushstack/heft-sass-plugin](https://www.npmjs.com/package/@rushstack/heft-sass-plugin) |
 | [/heft-plugins/heft-serverless-stack-plugin](./heft-plugins/heft-serverless-stack-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-serverless-stack-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-serverless-stack-plugin) | [changelog](./heft-plugins/heft-serverless-stack-plugin/CHANGELOG.md) | [@rushstack/heft-serverless-stack-plugin](https://www.npmjs.com/package/@rushstack/heft-serverless-stack-plugin) |
+| [/heft-plugins/heft-static-asset-typings-plugin](./heft-plugins/heft-static-asset-typings-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-static-asset-typings-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-static-asset-typings-plugin) | [changelog](./heft-plugins/heft-static-asset-typings-plugin/CHANGELOG.md) | [@rushstack/heft-static-asset-typings-plugin](https://www.npmjs.com/package/@rushstack/heft-static-asset-typings-plugin) |
 | [/heft-plugins/heft-storybook-plugin](./heft-plugins/heft-storybook-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-storybook-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-storybook-plugin) | [changelog](./heft-plugins/heft-storybook-plugin/CHANGELOG.md) | [@rushstack/heft-storybook-plugin](https://www.npmjs.com/package/@rushstack/heft-storybook-plugin) |
 | [/heft-plugins/heft-typescript-plugin](./heft-plugins/heft-typescript-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-typescript-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-typescript-plugin) | [changelog](./heft-plugins/heft-typescript-plugin/CHANGELOG.md) | [@rushstack/heft-typescript-plugin](https://www.npmjs.com/package/@rushstack/heft-typescript-plugin) |
 | [/heft-plugins/heft-vscode-extension-plugin](./heft-plugins/heft-vscode-extension-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fheft-vscode-extension-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Fheft-vscode-extension-plugin) | [changelog](./heft-plugins/heft-vscode-extension-plugin/CHANGELOG.md) | [@rushstack/heft-vscode-extension-plugin](https://www.npmjs.com/package/@rushstack/heft-vscode-extension-plugin) |
@@ -116,6 +117,7 @@ These GitHub repositories provide supplementary resources for Rush Stack:
 | [/rush-plugins/rush-buildxl-graph-plugin](./rush-plugins/rush-buildxl-graph-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-buildxl-graph-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-buildxl-graph-plugin) | | [@rushstack/rush-buildxl-graph-plugin](https://www.npmjs.com/package/@rushstack/rush-buildxl-graph-plugin) |
 | [/rush-plugins/rush-http-build-cache-plugin](./rush-plugins/rush-http-build-cache-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-http-build-cache-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-http-build-cache-plugin) | | [@rushstack/rush-http-build-cache-plugin](https://www.npmjs.com/package/@rushstack/rush-http-build-cache-plugin) |
 | [/rush-plugins/rush-mcp-docs-plugin](./rush-plugins/rush-mcp-docs-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-mcp-docs-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-mcp-docs-plugin) | [changelog](./rush-plugins/rush-mcp-docs-plugin/CHANGELOG.md) | [@rushstack/rush-mcp-docs-plugin](https://www.npmjs.com/package/@rushstack/rush-mcp-docs-plugin) |
+| [/rush-plugins/rush-published-versions-json-plugin](./rush-plugins/rush-published-versions-json-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-published-versions-json-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-published-versions-json-plugin) | [changelog](./rush-plugins/rush-published-versions-json-plugin/CHANGELOG.md) | [@rushstack/rush-published-versions-json-plugin](https://www.npmjs.com/package/@rushstack/rush-published-versions-json-plugin) |
 | [/rush-plugins/rush-redis-cobuild-plugin](./rush-plugins/rush-redis-cobuild-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-redis-cobuild-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-redis-cobuild-plugin) | | [@rushstack/rush-redis-cobuild-plugin](https://www.npmjs.com/package/@rushstack/rush-redis-cobuild-plugin) |
 | [/rush-plugins/rush-resolver-cache-plugin](./rush-plugins/rush-resolver-cache-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-resolver-cache-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-resolver-cache-plugin) | | [@rushstack/rush-resolver-cache-plugin](https://www.npmjs.com/package/@rushstack/rush-resolver-cache-plugin) |
 | [/rush-plugins/rush-serve-plugin](./rush-plugins/rush-serve-plugin/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Frush-serve-plugin.svg)](https://badge.fury.io/js/%40rushstack%2Frush-serve-plugin) | | [@rushstack/rush-serve-plugin](https://www.npmjs.com/package/@rushstack/rush-serve-plugin) |
@@ -215,6 +217,7 @@ These GitHub repositories provide supplementary resources for Rush Stack:
 | [/build-tests/package-extractor-test-02](./build-tests/package-extractor-test-02/) | This project is used by tests in the @rushstack/package-extractor package. |
 | [/build-tests/package-extractor-test-03](./build-tests/package-extractor-test-03/) | This project is used by tests in the @rushstack/package-extractor package. |
 | [/build-tests/package-extractor-test-04](./build-tests/package-extractor-test-04/) | This project is used by tests in the @rushstack/package-extractor package. |
+| [/build-tests/package-extractor-test-05](./build-tests/package-extractor-test-05/) | This project is used by tests in the @rushstack/package-extractor package. |
 | [/build-tests/run-scenarios-helpers](./build-tests/run-scenarios-helpers/) | Helpers for the *-scenarios test projects. |
 | [/build-tests/rush-amazon-s3-build-cache-plugin-integration-test](./build-tests/rush-amazon-s3-build-cache-plugin-integration-test/) | Tests connecting to an amazon S3 endpoint |
 | [/build-tests/rush-lib-declaration-paths-test](./build-tests/rush-lib-declaration-paths-test/) | This project ensures all of the paths in rush-lib/lib/... have imports that resolve correctly. If this project builds, all `lib/**/*.d.ts` files in the `@microsoft/rush-lib` package are valid. |

apps/api-documenter/.npmignore

@@ -8,6 +8,7 @@
 !/lib/**
 !/lib-*/**
 !/dist/**
+!/includes/**
 
 !CHANGELOG.md
 !CHANGELOG.json
@@ -20,6 +21,9 @@
 /lib/**/test/
 /lib-*/**/test/
 *.test.js
+*.test.[cm]js
+*.test.d.ts
+*.test.d.[cm]ts
 
 # NOTE: These don't need to be specified, because NPM includes them automatically.
 #

apps/api-documenter/CHANGELOG.json

@@ -1,6 +1,93 @@
 {
   "name": "@microsoft/api-documenter",
   "entries": [
+    {
+      "version": "7.29.7",
+      "tag": "@microsoft/api-documenter_v7.29.7",
+      "date": "Mon, 09 Mar 2026 15:14:08 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `1.2.7`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.29.6",
+      "tag": "@microsoft/api-documenter_v7.29.6",
+      "date": "Wed, 25 Feb 2026 21:39:42 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.4`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `1.2.6`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.29.5",
+      "tag": "@microsoft/api-documenter_v7.29.5",
+      "date": "Wed, 25 Feb 2026 00:34:29 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/node-core-library\" to `5.20.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/terminal\" to `0.22.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/ts-command-line\" to `5.3.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `1.2.5`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.29.4",
+      "tag": "@microsoft/api-documenter_v7.29.4",
+      "date": "Tue, 24 Feb 2026 01:13:27 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/node-core-library\" to `5.20.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/terminal\" to `0.22.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/ts-command-line\" to `5.3.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `1.2.4`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.29.3",
+      "tag": "@microsoft/api-documenter_v7.29.3",
+      "date": "Mon, 23 Feb 2026 00:42:21 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@rushstack/heft\" to `1.2.3`"
+          }
+        ]
+      }
+    },
     {
       "version": "7.29.2",
       "tag": "@microsoft/api-documenter_v7.29.2",

apps/api-documenter/CHANGELOG.md

@@ -1,6 +1,31 @@
 # Change Log - @microsoft/api-documenter
 
-This log was last generated on Fri, 20 Feb 2026 16:14:49 GMT and should not be manually modified.
+This log was last generated on Mon, 09 Mar 2026 15:14:08 GMT and should not be manually modified.
+
+## 7.29.7
+Mon, 09 Mar 2026 15:14:08 GMT
+
+_Version update only_
+
+## 7.29.6
+Wed, 25 Feb 2026 21:39:42 GMT
+
+_Version update only_
+
+## 7.29.5
+Wed, 25 Feb 2026 00:34:29 GMT
+
+_Version update only_
+
+## 7.29.4
+Tue, 24 Feb 2026 01:13:27 GMT
+
+_Version update only_
+
+## 7.29.3
+Mon, 23 Feb 2026 00:42:21 GMT
+
+_Version update only_
 
 ## 7.29.2
 Fri, 20 Feb 2026 16:14:49 GMT

apps/api-documenter/config/api-extractor.json

@@ -1,17 +1,6 @@
 {
   "$schema": "https://developer.microsoft.com/json-schemas/api-extractor/v7/api-extractor.schema.json",
-
-  "mainEntryPointFilePath": "<projectFolder>/lib-dts/index.d.ts",
-
-  "apiReport": {
-    "enabled": true,
-    "reportFolder": "../../../common/reviews/api"
-  },
-
-  "docModel": {
-    "enabled": true,
-    "apiJsonFilePath": "../../../common/temp/api/<unscopedPackageName>.api.json"
-  },
+  "extends": "local-node-rig/profiles/default/config/api-extractor-base.json",
 
   "dtsRollup": {
     "enabled": true,

apps/api-documenter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/api-documenter",
-  "version": "7.29.2",
+  "version": "7.29.7",
   "description": "Read JSON files from api-extractor, generate documentation pages",
   "repository": {
     "type": "git",

apps/api-extractor/.npmignore

@@ -8,6 +8,7 @@
 !/lib/**
 !/lib-*/**
 !/dist/**
+!/includes/**
 
 !CHANGELOG.md
 !CHANGELOG.json
@@ -20,6 +21,9 @@
 /lib/**/test/
 /lib-*/**/test/
 *.test.js
+*.test.[cm]js
+*.test.d.ts
+*.test.d.[cm]ts
 
 # NOTE: These don't need to be specified, because NPM includes them automatically.
 #

apps/api-extractor/CHANGELOG.json

@@ -1,6 +1,92 @@
 {
   "name": "@microsoft/api-extractor",
   "entries": [
+    {
+      "version": "7.57.7",
+      "tag": "@microsoft/api-extractor_v7.57.7",
+      "date": "Mon, 09 Mar 2026 15:14:07 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Bump `minimatch` version from `10.2.1` to `10.2.3` to address CVE-2026-27903."
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.57.6",
+      "tag": "@microsoft/api-extractor_v7.57.6",
+      "date": "Wed, 25 Feb 2026 21:39:42 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Bump `@microsoft/tsdoc-config` to `~0.18.1` to mitigate CVE-2025-69873."
+          }
+        ],
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.4`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.57.5",
+      "tag": "@microsoft/api-extractor_v7.57.5",
+      "date": "Wed, 25 Feb 2026 00:34:29 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/node-core-library\" to `5.20.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/rig-package\" to `0.7.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/terminal\" to `0.22.3`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/ts-command-line\" to `5.3.3`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.57.4",
+      "tag": "@microsoft/api-extractor_v7.57.4",
+      "date": "Tue, 24 Feb 2026 01:13:27 GMT",
+      "comments": {
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@microsoft/api-extractor-model\" to `7.33.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/node-core-library\" to `5.20.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/terminal\" to `0.22.2`"
+          },
+          {
+            "comment": "Updating dependency \"@rushstack/ts-command-line\" to `5.3.2`"
+          }
+        ]
+      }
+    },
+    {
+      "version": "7.57.3",
+      "tag": "@microsoft/api-extractor_v7.57.3",
+      "date": "Mon, 23 Feb 2026 00:42:21 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Add missing \"./extends/*.json\" to the package.json \"exports\" field so that \"@microsoft/api-extractor/extends/tsdoc-base.json\" is importable."
+          }
+        ]
+      }
+    },
     {
       "version": "7.57.2",
       "tag": "@microsoft/api-extractor_v7.57.2",

apps/api-extractor/CHANGELOG.md

@@ -1,6 +1,37 @@
 # Change Log - @microsoft/api-extractor
 
-This log was last generated on Fri, 20 Feb 2026 16:14:49 GMT and should not be manually modified.
+This log was last generated on Mon, 09 Mar 2026 15:14:07 GMT and should not be manually modified.
+
+## 7.57.7
+Mon, 09 Mar 2026 15:14:07 GMT
+
+### Patches
+
+- Bump `minimatch` version from `10.2.1` to `10.2.3` to address CVE-2026-27903.
+
+## 7.57.6
+Wed, 25 Feb 2026 21:39:42 GMT
+
+### Patches
+
+- Bump `@microsoft/tsdoc-config` to `~0.18.1` to mitigate CVE-2025-69873.
+
+## 7.57.5
+Wed, 25 Feb 2026 00:34:29 GMT
+
+_Version update only_
+
+## 7.57.4
+Tue, 24 Feb 2026 01:13:27 GMT
+
+_Version update only_
+
+## 7.57.3
+Mon, 23 Feb 2026 00:42:21 GMT
+
+### Patches
+
+- Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.
 
 ## 7.57.2
 Fri, 20 Feb 2026 16:14:49 GMT

apps/api-extractor/config/api-extractor.json

@@ -1,17 +1,6 @@
 {
   "$schema": "https://developer.microsoft.com/json-schemas/api-extractor/v7/api-extractor.schema.json",
-
-  "mainEntryPointFilePath": "<projectFolder>/lib-dts/index.d.ts",
-
-  "apiReport": {
-    "enabled": true,
-    "reportFolder": "../../../common/reviews/api"
-  },
-
-  "docModel": {
-    "enabled": true,
-    "apiJsonFilePath": "../../../common/temp/api/<unscopedPackageName>.api.json"
-  },
+  "extends": "decoupled-local-node-rig/profiles/default/config/api-extractor-base.json",
 
   "dtsRollup": {
     "enabled": true,