Fix npm release version selection

[findolor]

The next changed SQLite Web package can publish even when npm is ahead of the repository. This restores the release blocked after #35 and completes the publication work in RAI-2650.

Live effect: next changed SDK package publishes to npm · Risk: medium (automated package publication) · Ships: on merge

Decisions

• Keep the existing package-hash change check. Select the next stable patch above both the repository version and all published stable versions, including versions outside the latest dist-tag.
• Serialize release jobs so two runs cannot select and publish the same version concurrently. npm and Cargo version updates still get committed after a successful publish.

Proof

• The July release published 0.0.3 but failed its version commit; the current release then tried to reuse 0.0.3.
• Eight regression tests passed under Nix; the selector against live npm metadata returns 0.0.4. Two local Codex reviews found no actionable issues. Release workflow actionlint passed; the existing Wasm workflow checkout@v2 deprecation was excluded from its lint check.
• Not verified: live npm publication before merge.

Rollout

Merge, then verify the release publishes the selected version and pushes aligned npm/Cargo manifests and the release tag. Use the published SDK for RAI-2651. If a published artifact needs correction, publish a subsequent patch; an existing npm version cannot be overwritten.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 17 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: a4992018-6bca-4e15-9f14-3468ff172122

📥 Commits

Reviewing files that changed from the base of the PR and between 2f182dd and 2dad8bb.

📒 Files selected for processing (4)

• .github/workflows/npm-release.yaml
• .github/workflows/test-wasm.yaml
• scripts/next-release-version.mjs
• scripts/next-release-version.test.mjs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[findolor]

• Fix npm release version selection #36 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[linear]

RAI-2777