Skip to content

ci(e2e): pin Verdaccio to 6, since 7 rejects the e2e publish token - #959

Merged
frontegg-david merged 1 commit into
release/1.10.xfrom
fix/1.10.x-pin-verdaccio-6
Oct 25, 2026
Merged

frontegg-david merged 1 commit into
release/1.10.xfrom
fix/1.10.x-pin-verdaccio-6

Conversation

@frontegg-david

Copy link
Copy Markdown
Contributor

What and why

Problem

Package E2E (Verdaccio) now fails on every PR: each npm publish to the local registry gets npm error code E401 … your authentication token seems to be invalid. Nothing is published, so the first scenario, npx frontmcp create … --yes, exits 1. See #958's run (28 × E401).

Cause

The job installs Verdaccio unpinned (npm install -g verdaccio), and Verdaccio 7.0.0 was published on 2026-10-25 (7.0.1 the same day). libs/cli/e2e/run-e2e.sh publishes with a placeholder token, //localhost:14873/:_authToken=fake-token-for-e2e, which verdaccio.config.yaml's publish: $anonymous let through on 6.x. Verdaccio 7 answers 401 to it.

The last passing runs installed 6.10.6 with no E401 (e.g. #953's). A local reproduction with the repo's verdaccio.config.yaml and the same token:

Verdaccio npm publish --registry … --tag next
6.11.1 published
7.0.1 E401

Fix

Install verdaccio@6 in the workflow and in run-e2e.sh's fallback install, with a one-line reason in the workflow.

Deliberately unchanged

  • pr-testing-registry.yml also installs Verdaccio unpinned, but it publishes as a real htpasswd user (ci-publisher), not a placeholder token, so it isn't affected the same way.
  • Moving the package e2e to Verdaccio 7 means publishing as a real user, as pr-testing-registry.yml does. That's a separate change.

Once this is merged, re-running #958's Package E2E job should pass.

@coderabbitai

coderabbitai Bot commented Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Caution

Review failed

The pull request is closed.

Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@frontegg-david
frontegg-david marked this pull request as ready for review October 25, 2026 23:16
@frontegg-david
frontegg-david merged commit a17f633 into release/1.10.x Oct 25, 2026
18 of 19 checks passed
@frontegg-david
frontegg-david deleted the fix/1.10.x-pin-verdaccio-6 branch October 25, 2026 23:16
@github-actions

Copy link
Copy Markdown
Contributor

Cherry-pick Created

A cherry-pick PR to main has been automatically created.

Please review and merge if this change should also be in main.

If the cherry-pick is not needed, close the PR.

frontegg-david added a commit that referenced this pull request Oct 25, 2026
…lish token (#960)

Cherry-picked from #959 (merged to release/1.10.x)
Original commit: a17f633

Co-authored-by: agentfront[bot] <agentfront[bot]@users.noreply.github.com>
Co-authored-by: frontegg-david <69419539+frontegg-david@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Performance Test Results

Status: ✅ All tests passed

Summary

Project Tests Passed Warnings Failed Leaks
✅ demo-e2e-agents 4 4 0 0 0
✅ demo-e2e-cache 11 11 0 0 0
✅ demo-e2e-codecall 4 4 0 0 0
✅ demo-e2e-config 4 4 0 0 0
✅ demo-e2e-direct 3 3 0 0 0
✅ demo-e2e-elicitation 1 1 0 0 0
✅ demo-e2e-errors 4 4 0 0 0
✅ demo-e2e-hooks 3 3 0 0 0
✅ demo-e2e-multiapp 4 4 0 0 0
✅ demo-e2e-notifications 3 3 0 0 0
✅ demo-e2e-openapi 2 2 0 0 0
✅ demo-e2e-providers 4 4 0 0 0
✅ demo-e2e-public 4 4 0 0 0
✅ demo-e2e-redis 15 15 0 0 0
✅ demo-e2e-remember 4 4 0 0 0
✅ demo-e2e-remote 5 5 0 0 0
✅ demo-e2e-serverless 2 2 0 0 0
✅ demo-e2e-skills 15 15 0 0 0
✅ demo-e2e-standalone 2 2 0 0 0
✅ demo-e2e-transport-recreation 3 3 0 0 0
✅ demo-e2e-ui 4 4 0 0 0

Total: 101 tests across 21 projects

📊 View full report in workflow run


Generated at: 2026-10-25T23:28:19.152Z
Commit: e0706d7a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant