Overview - Virtual

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
compass-ui/rig-2187-publish-authfix
8d46b177 fix(publish): authenticate pnpm publish via ~/.npmrc, not a URL-scoped env var (RIG-2187) The first tagged publish of @rigelbuild/solid-virtual@3.0.0-rc.0 failed with a 404 on the PUT: the publish went out unauthenticated. Root cause: the auth token was passed as a GitHub Actions step env var literally named `pnpm_config_//registry.npmjs.org/:_authToken`, but Actions env-var names may only contain [A-Za-z0-9_] — a name with `/`, `:` and `.` is never exported to the step, so pnpm never received the credential and npm answers a scoped unauthenticated write with 404 (not 401). The clean-named `pnpm_config_provenance` exported fine, which is why only auth broke. Fix (source-verified against pnpm 11.9.0): write the per-registry `//registry.npmjs.org/:_authToken` into the user-level `~/.npmrc` from the clean-named `NPM_TOKEN` secret before `pnpm publish`. pnpm's credential reader (getNetworkConfigs -> configByUri) consumes the user npmrc unconditionally, so the token reaches the publish request. The npmrc is written on the CI runner only, so the upstreamable package diff (DL-015) is untouched. Provenance stays off via the env key and job permissions stay `contents: read` (no OIDC). Nothing was published on the failed run (404 = create rejected), so 3.0.0-rc.0 is not burned; re-tag re-triggers the publish.
by mintaka
Succeeded
compass-ui/rig-2187-publish-authfix
21093747 fix(publish): authenticate pnpm publish via ~/.npmrc, not a URL-scoped env var (RIG-2187) The first tagged publish of @rigelbuild/solid-virtual@3.0.0-rc.0 failed with a 404 on the PUT: the publish went out unauthenticated. Root cause: the auth token was passed as a GitHub Actions step env var literally named `pnpm_config_//registry.npmjs.org/:_authToken`, but Actions env-var names may only contain [A-Za-z0-9_] — a name with `/`, `:` and `.` is never exported to the step, so pnpm never received the credential and npm answers a scoped unauthenticated write with 404 (not 401). The clean-named `pnpm_config_provenance` exported fine, which is why only auth broke. Fix (source-verified against pnpm 11.9.0): write the per-registry `//registry.npmjs.org/:_authToken` into the user-level `~/.npmrc` from the clean-named `NPM_TOKEN` secret before `pnpm publish`. pnpm's credential reader (getNetworkConfigs -> configByUri) consumes the user npmrc unconditionally, so the token reaches the publish request. The npmrc is written on the CI runner only, so the upstreamable package diff (DL-015) is untouched. Provenance stays off via the env key and job permissions stay `contents: read` (no OIDC). Nothing was published on the failed run (404 = create rejected), so 3.0.0-rc.0 is not burned; re-tag re-triggers the publish.
by mintaka
Succeeded
compass-ui/rig-2187-publish-authfix
7bf2b847 fix(publish): authenticate pnpm publish via ~/.npmrc, not a URL-scoped env var (RIG-2187) The first tagged publish of @rigelbuild/solid-virtual@3.0.0-rc.0 failed with a 404 on the PUT: the publish went out unauthenticated. Root cause: the auth token was passed as a GitHub Actions step env var literally named `pnpm_config_//registry.npmjs.org/:_authToken`, but Actions env-var names may only contain [A-Za-z0-9_] — a name with `/`, `:` and `.` is never exported to the step, so pnpm never received the credential and npm answers a scoped unauthenticated write with 404 (not 401). The clean-named `pnpm_config_provenance` exported fine, which is why only auth broke. Fix (source-verified against pnpm 11.9.0): write the per-registry `//registry.npmjs.org/:_authToken` into the user-level `~/.npmrc` from the clean-named `NPM_TOKEN` secret before `pnpm publish`. pnpm's credential reader (getNetworkConfigs -> configByUri) consumes the user npmrc unconditionally, so the token reaches the publish request. The npmrc is written on the CI runner only, so the upstreamable package diff (DL-015) is untouched. Provenance stays off via the env key and job permissions stay `contents: read` (no OIDC). Nothing was published on the failed run (404 = create rejected), so 3.0.0-rc.0 is not burned; re-tag re-triggers the publish.
by mintaka