fix: dynamically increment prerelease versions in publish.sh

[inlined]

Description

Fixes an issue in scripts/publish.sh where prerelease publishing (e.g. running with --prerelease) would fail if rc.0 was already published on npm for that target version series, since it always bumped from the stable version. It now dynamically checks npm for any existing prerelease versions of the target version series, and performs a prerelease increment (e.g., to rc.1) if one exists.

Newly assumes the jq command exists to avoid silly node scripts (will need to test in prod or build a new container). Now handles gh not existing since it didn't in the past.

Release Notes

relnote: chore: improve release script

[gemini-code-assist]

Code Review

This pull request updates the prerelease versioning logic in scripts/publish.sh to check npm for existing prerelease versions in the target range and increment them if found, rather than always starting from the stable version. The reviewer noted that parsing the raw output of npm view with tail and grep is fragile and prone to errors due to output formatting variations, sorting assumptions, and a hardcoded regex. They suggested a more robust approach using Node.js and the semver package to parse the JSON output safely.

[wiz-9635d3485b]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	1  3  1  2
SAST Findings	-
Software Management Findings	-
Total	1  3  1  2

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[inlined]

Running the script as if it were the builder locally using BUILD_ID=test ./scripts/publish.sh (and not using --no-dry-run) now shows the correct prerelease incrementing