Skip to content

fix: require explicit registry input for generated auth - #191

Merged
fengmk2 merged 1 commit into
mainfrom
fix/explicit-registry-auth
Oct 8, 2026
Merged

fengmk2 merged 1 commit into
mainfrom
fix/explicit-registry-auth

Conversation

@fengmk2

@fengmk2 fengmk2 commented Oct 8, 2026

Copy link
Copy Markdown
Member

A project .npmrc could make the runtime send NODE_AUTH_TOKEN to an arbitrary registry when the workflow omitted the registry input.

Require registry-url (registryUrl in Azure) before the runtime generates token entries. Apply this behavior to GitHub Actions, GitLab, and Azure Pipelines. Preserve existing .npmrc auth entries and their environment references.

Document how jobs that relied on automatic token entries must configure authentication.

@fengmk2
fengmk2 force-pushed the fix/explicit-registry-auth branch from d1feb8c to b01cbc1 Compare October 8, 2026 05:57
@fengmk2
fengmk2 merged commit 2fb3264 into main Oct 8, 2026
82 checks passed
@fengmk2
fengmk2 deleted the fix/explicit-registry-auth branch October 8, 2026 06:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant