lukaszraczylo/shared-actions
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/shared-actions.git synced 2026-10-14 05:23:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(autoupdate): give pnpm workspace lockfile updates the registry token

Browse Source
This commit is contained in:
lukaszraczylo
2026-10-03 23:08:39 +01:00
parent b23191de71
commit 459d448941
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/renovate-autoupdate.yaml
+11 -1
View File
@@ -186,6 +186,12 @@ jobs:
echo "::add-mask::$NPM_TOKEN" echo "::add-mask::$NPM_TOKEN"
url="${NPM_URL%/}/" url="${NPM_URL%/}/"
NPMRC=$(printf '%s:registry=%s\n//%s:_authToken=%s\n' "$NPM_SCOPE" "$url" "${url#*://}" "$NPM_TOKEN") NPMRC=$(printf '%s:registry=%s\n//%s:_authToken=%s\n' "$NPM_SCOPE" "$url" "${url#*://}" "$NPM_TOKEN")
# Renovate writes its npmrc option into the package directory, but a pnpm workspace install reads
# only the root, so the lockfile update gets a 404. The Renovate container shares /tmp with the host.
RENOVATE_NPMRC_FILE="/tmp/renovate-npmrc-$GITHUB_RUN_ID"
(umask 022 && printf '%s\n' "$NPMRC" > "$RENOVATE_NPMRC_FILE")
echo "RENOVATE_NPMRC_FILE=$RENOVATE_NPMRC_FILE" >> "$GITHUB_ENV"
export RENOVATE_NPMRC_FILE
fi fi
jq -n \ jq -n \
--arg repo "$GITHUB_REPOSITORY" \ --arg repo "$GITHUB_REPOSITORY" \
@@ -258,7 +264,7 @@ jobs:
+ (if $majors == "ignore" then [{matchManagers: ["gomod", "npm"], allowedVersions: "<{{add major 1}}.0.0"}] else [] end) + (if $majors == "ignore" then [{matchManagers: ["gomod", "npm"], allowedVersions: "<{{add major 1}}.0.0"}] else [] end)
) )
} }
| if $ENV.NPMRC != "" then .npmrc = $ENV.NPMRC else . end' > "$CONFIG_FILE" | if $ENV.NPMRC != "" then .npmrc = $ENV.NPMRC | .customEnvVariables = {NPM_CONFIG_USERCONFIG: $ENV.RENOVATE_NPMRC_FILE} else . end' > "$CONFIG_FILE"
jq 'if has("npmrc") then .npmrc = "<redacted>" else . end' "$CONFIG_FILE" jq 'if has("npmrc") then .npmrc = "<redacted>" else . end' "$CONFIG_FILE"
- name: Run Renovate - name: Run Renovate
@@ -270,6 +276,10 @@ jobs:
env: env:
LOG_LEVEL: ${{ inputs.log-level }} LOG_LEVEL: ${{ inputs.log-level }}
- name: Remove the registry token file
if: always() && env.RENOVATE_NPMRC_FILE != ''
run: rm -f "$RENOVATE_NPMRC_FILE"
- name: List the update branches - name: List the update branches
id: list id: list
env: env: