From 1d75951dc238ba07d74230cd0c5ee231552036da Mon Sep 17 00:00:00 2001 From: Jason Karns Date: Thu, 28 Nov 2019 20:32:26 -0500 Subject: [PATCH] Fix npm publishing Npm's CLI is broken because it doesn't respect the auth token being provided via the environment when publishing despite https://github.com/npm/cli/pull/8 GitHub's node action is broken because it doesn't respect the scope and registry config as provided via package.json. And npmjs.org registry is broken because it doesn't support named tokens, nor tokens that skip OTP. Ergo, in order to publish via github actions, my user profile 2fa must be downgraded to auth-only and the package 2fa must be disabled. OMFG --- .github/workflows/release.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7ed6f703f..79f7ee46f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,6 +33,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v1 + - uses: actions/setup-node@v1 + with: + scope: '@nodenv' + registry-url: 'https://registry.npmjs.org' - run: npm publish env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}