Publish packages on the @latest npm dist-tag

.changelog/20251215103912_ck_19492.md

@@ -0,0 +1,8 @@
+---
+type: Other
+see:
+  - https://github.com/ckeditor/ckeditor5/issues/19492
+
+---
+
+The `@latest` versions of `@ckeditor/ckeditor5-dev-*` packages (e.g., [@ckeditor/ckeditor5-dev-utils](https://www.npmjs.com/package/@ckeditor/ckeditor5-dev-utils)) now point to the most recent stable packages published under the `latest` npm [dist-tag](https://docs.npmjs.com/cli/v8/commands/npm-dist-tag), ensuring they no longer depend on outdated libraries with known vulnerabilities.

.circleci/template.yml

@@ -205,7 +205,7 @@ jobs:
           command: npm run release:prepare-packages -- --verbose
       - run:
           name: Publish the packages
-          command: npm run release:publish-packages -- --verbose --npm-tag next
+          command: npm run release:publish-packages -- --verbose
       - run:
           name: Enable the redundant workflows option
           command: pnpm ckeditor5-dev-ci-circle-enable-auto-cancel-builds --organization ckeditor --repository ckeditor5-dev

package.json

@@ -17,7 +17,6 @@
   "devDependencies": {
     "@inquirer/prompts": "^7.5.0",
     "@listr2/prompt-adapter-inquirer": "^2.0.21",
-    "@octokit/rest": "^22.0.0",
     "@vitest/coverage-v8": "^3.2.4",
     "eslint": "^9.34.0",
     "eslint-config-ckeditor5": "^13.0.0",

scripts/ci/is-project-ready-to-release.js

@@ -10,11 +10,7 @@ import * as releaseTools from '@ckeditor/ckeditor5-dev-release-tools';
 const changelogVersion = releaseTools.getLastFromChangelog();
 const npmTag = releaseTools.getNpmTagFromVersion( changelogVersion );
 
-// As long as CKEditor 5 supports the old installation methods, to avoid breaking the existing configurations,
-// packages from `ckeditor5-dev` are released as `@next`.
-const temporaryTagToCheck = npmTag === 'latest' ? 'next' : npmTag;
-
-releaseTools.isVersionPublishableForTag( '@ckeditor/ckeditor5-dev-release-tools', changelogVersion, temporaryTagToCheck )
+releaseTools.isVersionPublishableForTag( '@ckeditor/ckeditor5-dev-release-tools', changelogVersion, npmTag )
 	.then( result => {
 		if ( !result ) {
 			console.error( `The proposed changelog (${ changelogVersion }) version is not higher than the already published one.` );
@@ -23,4 +19,3 @@ releaseTools.isVersionPublishableForTag( '@ckeditor/ckeditor5-dev-release-tools'
 			console.log( 'The project is ready to release.' );
 		}
 	} );
-

scripts/publishpackages.js

@@ -8,7 +8,6 @@
 import { Listr } from 'listr2';
 import { ListrInquirerPromptAdapter } from '@listr2/prompt-adapter-inquirer';
 import { confirm } from '@inquirer/prompts';
-import { Octokit } from '@octokit/rest';
 import * as releaseTools from '@ckeditor/ckeditor5-dev-release-tools';
 import parseArguments from './utils/parsearguments.js';
 import getListrOptions from './utils/getlistroptions.js';
@@ -67,22 +66,6 @@ const tasks = new Listr( [
 		options: {
 			persistentOutput: true
 		}
-	},
-	{
-		title: 'Mark v43 as "latest" (GitHub)',
-		task: async () => {
-			const github = new Octokit( {
-				version: '3.0.0',
-				auth: `token ${ githubToken }`
-			} );
-
-			return github.request( 'PATCH /repos/{owner}/{repo}/releases/{release_id}', {
-				owner: 'ckeditor',
-				repo: 'ckeditor5-dev',
-				release_id: 227938481, // v43.1.0
-				make_latest: true
-			} );
-		}
 	}
 ], getListrOptions( cliArguments ) );