Skip to content

Commit 0877c5c

Browse files
cx-atish-jadhavclaude
cx-atish-jadhav
and
claude
authored
Update release version in package.json (#1029)
* change release version in package.json * Fix: Remove registry-url from setup-node to resolve NODE_AUTH_TOKEN conflicts - Removed registry-url parameter from setup-node action in ci.yml and release.yml - Registry configuration now handled exclusively by .npmrc file - Auth tokens configured via npm config commands with ECHO_LIBRARIES_ACCESS_KEY - Eliminates NODE_AUTH_TOKEN environment variable creation and logging - Fixes 403 Forbidden errors during npm ci with Echo registry - Maintains dual-registry support: Echo for dependencies, GitHub for publishing Changes: - .github/workflows/ci.yml: Removed registry-url from setup-node - .github/workflows/release.yml: Removed registry-url from setup-node This ensures proper authentication with Echo (npm.echohq.com) registry while avoiding conflicts with GitHub Actions' automatic NODE_AUTH_TOKEN creation. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com> * Fix echo registry auth via .npmrc env var interpolation, restore registry-url Root cause was npm config precedence: the project-level .npmrc (checked into the repo) always overrides user-level config, so its literal blank auth token lines were shadowing whatever the separate "npm config set" step wrote at the user level - regardless of registry-url on setup-node. - .npmrc now resolves tokens via ${ECHO_LIBRARIES_ACCESS_KEY} at read time instead of committing blank placeholders, so the project-level config itself carries valid auth. - Restored registry-url on setup-node in ci.yml/release.yml (safe now that .npmrc's interpolated values take precedence over it either way). - Removed the now-redundant "Configure echohq auth" npm config set steps. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * Temporarily increase npm ci verbosity to prove echo registry usage in logs Diagnostic-only change to show explicit HTTP fetch URLs in CI output. Will be reverted once confirmed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * Remove npm ci --loglevel flag and bump version --------- Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>
1 parent 86585f1 commit 0877c5c

6 files changed

Lines changed: 35 additions & 19 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -35,12 +35,6 @@ jobs:
3535
with:
3636
node-version: 22.11.0
3737
registry-url: https://npm.echohq.com/
38-
- name: Configure echohq auth (both hosts)
39-
env:
40-
ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
41-
run: |
42-
npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
43-
npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
4438
- run: npm ci
4539
env:
4640
ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}

‎.github/workflows/release.yml‎

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -101,14 +101,6 @@ jobs:
101101
node-version: 22.11.0
102102
registry-url: https://npm.echohq.com/
103103

104-
# CONFIGURE ECHOHQ AUTH
105-
- name: Configure echohq auth (both hosts)
106-
env:
107-
ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
108-
run: |
109-
npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
110-
npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
111-
112104
# CONFIGURE GITHUB PACKAGES AUTH FOR PUBLISH
113105
- name: Configure GitHub Packages auth
114106
env:

‎.github/workflows/scan-github-action.yml‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
name: Scan for GitHub Actions issues
2+
3+
on:
4+
pull_request:
5+
6+
concurrency:
7+
group: ${{ github.workflow }}-${{ github.repository }}-${{ github.ref }}
8+
9+
permissions: {}
10+
11+
jobs:
12+
zizmor:
13+
name: Scan repository contents
14+
runs-on: cx-private-ubuntu-x64
15+
permissions:
16+
contents: read
17+
steps:
18+
- name: Check out repository
19+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
20+
with:
21+
persist-credentials: false
22+
23+
- name: Run Zizmor linter
24+
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
25+
with:
26+
advanced-security: false
27+
annotations: false
28+
persona: pedantic
29+
fail-on-no-inputs: false
30+
online-audits: false

‎.npmrc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Default registry for most packages
22
registry=https://npm.echohq.com/
3-
//npm.echohq.com/:_authToken=
4-
//packages.echohq.com/:_authToken=
3+
//npm.echohq.com/:_authToken=${ECHO_LIBRARIES_ACCESS_KEY}
4+
//packages.echohq.com/:_authToken=${ECHO_LIBRARIES_ACCESS_KEY}
55
always-auth=true
66
ignore-scripts=true

‎package-lock.json‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@Checkmarx/ast-cli-javascript-wrapper",
3-
"version": "0.0.158",
3+
"version": "0.0.159",
44
"description": "AST CLI Javascript wrapper",
55
"main": "dist/main/wrapper/CxWrapper.js",
66
"typings": "dist/main/wrapper/CxWrapper.d.ts",

0 commit comments

Comments
 (0)