Skip to content

fix: add npm auth verification step before publish - #21

Merged
Atharva0506 merged 1 commit into
AOSSIE-Org:mainfrom
Atharva0506:fix/npm-auth-check
Aug 3, 2026
Merged

fix: add npm auth verification step before publish#21
Atharva0506 merged 1 commit into
AOSSIE-Org:mainfrom
Atharva0506:fix/npm-auth-check

Conversation

@Atharva0506

@Atharva0506 Atharva0506 commented Aug 3, 2026

Copy link
Copy Markdown
Member

Addressed Issues:

Fixes #(issue number)

Screenshots/Recordings:

Additional Notes:

Adds a pre-publish check that verifies the NPMJS_TOKEN secret exists and can authenticate with npm. This surfaces auth issues as clear errors instead of misleading 404s from the registry.

Checklist

  • My code follows the project's code style and conventions
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings or errors
  • I have joined the Discord server and I will share a link to this PR with the project maintainers there
  • I have read the Contributing Guidelines

⚠️ AI Notice - Important!

We encourage contributors to use AI tools responsibly when creating Pull Requests. While AI can be a valuable aid, it is essential to ensure that your contributions meet the task requirements, build successfully, include relevant tests, and pass all linters. Submissions that do not meet these standards may be closed without warning to maintain the quality and integrity of the project. Please take the time to understand the changes you are proposing and their impact.

Summary by CodeRabbit

  • Chores
    • Improved npm publishing checks to verify credentials before release.
    • Added clearer error reporting when credentials are missing or authentication fails.
    • Confirmed and logged the authenticated npm account when validation succeeds.

Adds a pre-publish check that verifies the NPMJS_TOKEN secret exists and can authenticate with npm. This surfaces auth issues as clear errors instead of misleading 404s from the registry.
@github-actions github-actions Bot added no-issue-linked PR is not linked to any issue ci-cd CI/CD pipeline changes configuration Configuration file changes github-actions GitHub Actions workflow changes size/S Small PR (11-50 lines changed) repeat-contributor PR from an external contributor who already had PRs merged needs-review labels Aug 3, 2026
@Atharva0506
Atharva0506 merged commit dd6c923 into AOSSIE-Org:main Aug 3, 2026
7 of 8 checks passed
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor
Messages
📖

⚠️ PR Template Check

These are non-blocking, but please fix:

  • Please replace the placeholder Fixes #(issue number) with the actual issue number (e.g. Fixes #42).

  • Some required checklist items are not completed:

  • My PR addresses a single issue

Generated by 🚫 dangerJS against 65c836f

@coderabbitai

coderabbitai Bot commented Aug 3, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 6b723430-1836-48d8-972b-6c75121c7545

📥 Commits

Reviewing files that changed from the base of the PR and between 6bb4eaf and 65c836f.

📒 Files selected for processing (1)
  • .github/workflows/version-release.yml

Walkthrough

The npm release workflow now verifies that NPMJS_TOKEN exists and authenticates with npm whoami before publication. It reports the authenticated npm user and fails with errors for missing or invalid credentials.

Changes

npm release authentication

Layer / File(s) Summary
Verify npm credentials
.github/workflows/version-release.yml
The workflow checks NPMJS_TOKEN, validates credentials with npm whoami, reports the authenticated user, and blocks publication when authentication fails.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested labels: Bash Lang

Poem

A rabbit checks the token bright,
Then asks npm, “Are credentials right?”
The user name hops into view,
Bad keys stop the publish queue.
Safe releases spring anew.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci-cd CI/CD pipeline changes configuration Configuration file changes github-actions GitHub Actions workflow changes needs-review no-issue-linked PR is not linked to any issue repeat-contributor PR from an external contributor who already had PRs merged size/S Small PR (11-50 lines changed)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant