Change of registry is being ignored

[piranna]

Description:

I'm publishing a package to both GPR and npm, in that order. Execution of setup-node works well, but publishing to npm fails because it's still trying to do it to GPR.

Action version:
v3

Platform:

• Ubuntu
• macOS
• Windows

Runner type:

• Hosted
• Self-hosted

Tools version:
Default ones.

node: v18.16.0
npm: 9.5.1

Repro steps:
Workflow available at https://github.com/Mafalda-SFU/mediasoup/actions/runs/5129548473/jobs/9227484918

Use setup-node with default registry-url, and npm ci works ok.
Use again setup-node with GPR registry-url, publish works ok.
Use again setup-node with npm registry-url, publish fails because it's still using GPR registry. I've reviewed the code, and by

setup-node/src/authutil.ts

Lines 39 to 44 in 869f4dd

	curContents.split(os.EOL).forEach((line: string) => {
	// Add current contents unless they are setting the registry
	if (!line.toLowerCase().startsWith(`${scope}registry`)) {
	newContents += line + os.EOL;
	}
	});

previous one should have been ignored, or at least it should have been overwritten later at

setup-node/src/authutil.ts

Line 51 in 869f4dd

newContents += `${authString}${os.EOL}${registryString}${os.EOL}${alwaysAuthString}`;

.

Expected behavior:
Second call to setup-node defining registry-url should update it for all the next commands.

Actual behavior:
Once registry-url is set, it's being preserved for all the next commands.

[dusan-trickovic]

Hello, @piranna ! Thanks for filing the issue, we will take a look at it :)

[piranna]

Hello, @piranna ! Thanks for filing the issue, we will take a look at it :)

Welcome :-)

[dusan-trickovic]

Hello again, @piranna ! I've looked into this issue and I think I may have a potential solution to suggest. Have you tried setting scope to your GH and NPM registry username (respectively) as input for setup-node when you're trying to set / change registries? It could be an important setting to make, as I see that, for one reason or the other, it is failing to authenticate you once you try to publish it to NPM.

In addition to that, another step that seemed to have worked for me was to append to .npmrc directly in the workflow, like:

echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_TOKEN}}" >> .npmrc

However, I would like to add that the latter step might not be necessary at all, so you can try just setting the scope for both GHR and NPM first, and then try combining it with the other suggestion.

Edit: I forgot to add this in my previous version of this reply, but please also make sure that your NPM token is properly configured (for automation primarily) and that it has been added as a repository secret in your Settings.

If this doesn't solve your problem, please feel free to reach out again and we will try to investigate further. Alternatively, if this proves to be successful, you can, of course, also ping me and let me know :)

Thank you very much for your patience and cooperation!

[brachkow]

Having same issue

[piranna]

In addition to that, another step that seemed to have worked for me was to append to .npmrc directly in the workflow, like:

echo "//registry.npmjs.org/:_authToken=${{secrets.NPM_TOKEN}}" >> .npmrc

I think this can confirm something odds is happening. I believe correct solution should be to fully overrewrite the .npmrc file, but another good option would be to append the entries and have defined several entries, or also parse and update the file.

make sure that your NPM token is properly configured (for automation primarily) and that it has been added as a repository secret in your Settings

Yes, it is, because if I comment the first publish step pointing to GPR, it correctly publish it to NPM.

OTOH, what I have seen in the several examples and templates is that publishing is being done in an independent job using a published artifact, so that can be the reason why my use case (change the registry multiple times) has been overlooked.

[dusan-trickovic]

@piranna understood, thank you for the follow-up! Just to confirm, have you tried setting the appropriate scope in any case (for both GHR and NPM registry, but primarily for NPM since it seems to be the problematic one here)? I'm only asking because it has been failing for me as well when I was performing the repro steps (and with the same error) until I set the scope properly, so I thought mentioning that could possibly help solve this problem.

In any case, we will also consider the first part of your reply (about working with .npmrc) and see what can be done on that front. We appreciate the suggestion :)

Thank you for your timely feedback, patience and cooperation!

[piranna]

@piranna understood, thank you for the follow-up! Just to confirm, have you tried setting the appropriate scope in any case (for both GHR and NPM registry, but primarily for NPM since it seems to be the problematic one here)? I'm only asking because it has been failing for me as well when I was performing the repro steps (and with the same error) until I set the scope properly, so I thought mentioning that could possibly help solve this problem.

No, I have not tested it yet, I've been all the day out of computer, I'll try to find some time but anyway I think that's not the problem, and setting the scope would be a by-pass of the problem, or at most a showcase that the problem is exactly on that part of the code.

In any case, we will also consider the first part of your reply (about working with .npmrc) and see what can be done on that front. We appreciate the suggestion :)

Great, you are welcome :-) I would have already provided a PR myself but don't fully understand how that part of the code works, but definitelly I'm pretty sure the problem is in that lines. Maybe it's an obscure bug that's easy to overlook.

[dusan-trickovic]

@piranna we will look into the code and see what can be done :)

In any case, I thought that trying to set the scope here, at least in the meantime and if effective, could be an immediate solution for this issue. I will consult with the team further and see if anything should be done with this functionality either way.

Thank you again! If you're experiencing any further issues related to this one or any other (or if my suggestions solve this one for you, once you get the chance to try them out), please feel free to reach out and let us know :)

[brachkow]

Somehow manually creating .npmrc on every workflow step doesn't help

[dusan-trickovic]

Hello, @piranna and @brachkow ! Just wanted to ask for a bit of a follow-up to see if anything has changed for you in regards to this? I will try to investigate it further, but I just wanted to make sure that the scope wasn't the issue to begin with (and also if there are any newer updates that occurred in the meantime)? I also let my team know about your suggestion, so we will also look into that a bit further as well :) Thank you for your patience and the valuable input!

[brachkow]

I ended up publishing everything manually:(