- Home
- Monorepo Management Tools
- Beachball
Beachball
What it is
Beachball automates semantic version updates, changelog generation, and npm publishing for JavaScript packages. It supports single-package repositories and monorepos, and its default setup requires no extra configuration to get started. The workflow uses `beachball change` to create change files, `beachball check` to validate them in pull requests, and `beachball publish` to release packages. Change files record the update type and a description for reviewers to inspect in the pull request diff. Publishing generates changelog files unless that function is disabled, can send packages to public or private npm registries, and can push version and changelog updates to the Git remote. Beachball checks the repository and npm registry before publishing and keeps versions synchronized during releases. CI guidance covers GitHub Actions and Azure Pipelines, with general advice for other CI platforms. For token-based authentication, it recommends limited permissions and secrets restricted to release builds or branches. An included helper creates and revokes repository-scoped GitHub App installation tokens; that helper requires Node 22.18 or later. Beachball is MIT licensed and free at no cost. It can be installed with npm or Yarn, or run with npx.
For and against
For
- Works with single-package repositories and monorepos.
- Creates change files for pull-request review.
- Publishes to public or private npm registries.
- Supports GitHub Actions and Azure Pipelines.
- Free and MIT licensed.
Against
- The authentication helper requires Node 22.18 or later.
- Azure DevOps is not supported for npm trusted publishing.
- Partial publishing failures require running `beachball sync`.
The verdict
Beachball provides a command-based workflow for validating package changes and publishing updated versions. Teams using Azure DevOps for npm trusted publishing need token-based authentication instead.
Who it suits
Beachball suits JavaScript teams that want a defined process for version changes, pull-request checks, changelogs, and npm releases. It supports both single-package projects and monorepos.
Plans and prices
Beachball
MIT licensed · install as a devDependency or run via npx
Read 4 Oct 2026 · microsoft.github.io
On the record
- AI support
- Beachball provides a change-file skill that can be installed for compatible AI agents, including GitHub Copilot and Claude Code.microsoft.github.io · read 11 Oct 2026
- Authentication
- The CI guidance recommends limiting token permissions and restricting release secrets to release builds or branches.microsoft.github.io · read 11 Oct 2026
- Authentication utility
- The package includes an auth helper that can create and revoke repository scoped GitHub App installation tokens.microsoft.github.io · read 4 Oct 2026
- Changelogs
- Beachball generates changelogs when it bumps package versions.microsoft.github.io · read 11 Oct 2026
- Change tracking
- Change files record the change type and description for package updates, and reviewers can inspect them in the pull request diff.microsoft.github.io · read 4 Oct 2026
- Configuration
- Beachball can be used without extra configuration by default, and supports repository and package configuration.microsoft.github.io · read 11 Oct 2026
- Installation
- The installation guide shows npm and Yarn commands and says Beachball can also be run with npx.microsoft.github.io · read 4 Oct 2026
- Integrations
- The CI documentation describes using Beachball with GitHub Actions and Azure Pipelines.microsoft.github.io · read 11 Oct 2026
- License
- Beachball is MIT licensed.microsoft.github.io · read 11 Oct 2026
- Maker
- The official site identifies Microsoft as the copyright holder; it does not state headquarters or founding year on the pages reviewed.microsoft.github.io · read 11 Oct 2026
- Notable limitation
- The documentation says Azure DevOps is not supported for npm trusted publishing, so token-based authentication is needed in that case.microsoft.github.io · read 11 Oct 2026
- Publishing
- Beachball can publish packages to public or private npm registries and push version and changelog updates to the Git remote.microsoft.github.io · read 4 Oct 2026
- Publishing limitation
- If a publish fails after some package versions have reached the registry, the documentation says to run `beachball sync` and commit the changes.microsoft.github.io · read 4 Oct 2026
- Purpose
- Beachball automates semantic version bumps, changelog generation, and npm publishing for JavaScript packages.microsoft.github.io · read 11 Oct 2026
- Registries
- Beachball can publish packages to public or private npm registries.microsoft.github.io · read 11 Oct 2026
- Repository support
- Beachball works with single-package repositories and monorepos.microsoft.github.io · read 11 Oct 2026
- Runtime requirement
- The auth helper requires Node 22.18 or later.microsoft.github.io · read 4 Oct 2026
- Security guidance
- For token based authentication, the CI guidance recommends minimum necessary permissions and storing tokens as secrets available only to release builds.microsoft.github.io · read 4 Oct 2026
