ci: write the npm token at release time - #27
Conversation
Drop ${NPM_TOKEN} from the project .npmrc so pnpm stops warning.
Write it to both pnpm and npm user config so lerna can publish
without dirtying the tree.
|
Warning Review limit reachedNext included review available in 13 minutes. View limit detailsLimit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Review configuration: ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (2)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
lerna publishes via npm; pnpm config set is unused.
Coverage Report for CI Build 32821994186Warning Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes. Warning No base build found for commit Coverage: 76.449%Details
Uncovered ChangesNo uncovered changes found. Coverage RegressionsRequires a base build to compare against. How to fix this → Coverage Stats
💛 - Coveralls |
2 participants
Summary
${NPM_TOKEN}from the committed.npmrcso pnpm 11 stops warning on every install.pnpm config set+npm config set). lerna publishes via npm; pnpm's store alone is what caused the@microlink/googleE404. Neither write touches the repo.Test plan
lerna publish from-package --yesNote
Low Risk
CI and release credential wiring only; no application runtime or auth logic changes.
Overview
Stops committing npm registry auth in
.npmrcso pnpm 11 no longer warns about ignored project-level//registry.npmjs.org/:_authTokenon every install.The release job now writes
NPM_TOKENinto the usernpmconfig right beforepnpm run release(lerna publish), instead of relying on repo.npmrcorpnpm config set, so publishes authenticate without touching tracked files.Reviewed by Cursor Bugbot for commit a54e2bd. Bugbot is set up for automated code reviews on this repo. Configure here.