From 7ec1140b103fc2e740bd68960eb1d7f5d9cf15d6 Mon Sep 17 00:00:00 2001 From: Ruslan Konviser Date: Fri, 21 Aug 2026 18:32:21 +0200 Subject: [PATCH 1/3] ci: route the SDK release install through the internal Verdaccio cache Adds the shared pinned ever-co/ever-gauzy configure-registry action before yarn install in release.sdk.prod.yml, paired with a restore step right after the install: this workflow later runs git add . + push (changeset version bumps) and publishes to npmjs, so the rewritten yarn.lock and the appended registry lines in the tracked .npmrc/.yarnrc must never survive past the install. Restore puts tracked files back and removes untracked leftovers. Co-Authored-By: Claude Fable 5 --- .github/workflows/release.sdk.prod.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/.github/workflows/release.sdk.prod.yml b/.github/workflows/release.sdk.prod.yml index a7edae4a6..b273bf0fe 100644 --- a/.github/workflows/release.sdk.prod.yml +++ b/.github/workflows/release.sdk.prod.yml @@ -64,9 +64,35 @@ jobs: echo "@ever-teams:registry=https://registry.npmjs.org/" >> ~/.npmrc echo "✅ NPM authentication configured" + - name: Configure Registry + uses: ever-co/ever-gauzy/.github/actions/configure-registry@9459d29e9a3859740348bb445dfe885cae83fc88 + with: + verdaccio-registry: ${{ vars.VERDACCIO_REGISTRY }} + verdaccio-token: ${{ secrets.VERDACCIO_TOKEN }} + force-public: ${{ vars.VERDACCIO_FORCE_PUBLIC }} + expect-vip: ${{ vars.RUNNER_LINUX_X64_4 != '' }} + - name: Install dependencies (Yarn) run: yarn install --frozen-lockfile + - name: Restore registry config (keep the checkout npmjs-clean) + # Configure Registry above may rewrite yarn.lock and append registry lines + # to the tracked .npmrc/.yarnrc so the install resolves through the internal + # Verdaccio cache. Later steps run `git add .` + push version bumps and then + # publish to npmjs - a committed rewritten lockfile or a leftover project-level + # registry= line pointing at a LAN VIP must never survive past the install. + # Tracked files are restored; untracked leftovers are removed. + if: always() + run: | + for f in yarn.lock .npmrc .yarnrc; do + if git ls-files --error-unmatch "$f" >/dev/null 2>&1; then + git checkout -- "$f" + else + rm -f "$f" + fi + done + rm -f yarn.lock.rewritten package-lock.json.rewritten + - name: Build SDK packages run: | # Build the publishable packages (the private @ever-teams/types is bundled From ec32f32fbc100f494e0191af2aec2973953ebec5 Mon Sep 17 00:00:00 2001 From: Ruslan Konviser Date: Fri, 21 Aug 2026 18:44:57 +0200 Subject: [PATCH 2/3] chore: add yarnrc + USERCONFIG to the cspell dictionary (flagged on the workflow edit) --- .cspell.json | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.cspell.json b/.cspell.json index 4818e5761..fa830d2c2 100644 --- a/.cspell.json +++ b/.cspell.json @@ -4,6 +4,8 @@ "caseSensitive": false, "$schema": "https://raw.githubusercontent.com/streetsidesoftware/cspell/main/cspell.schema.json", "words": [ + "yarnrc", + "USERCONFIG", "cicd", "creds", "easignore", From eee7f23a9bbd1e28d2290a90616112c4ea8ea0d1 Mon Sep 17 00:00:00 2001 From: Ruslan Konviser Date: Fri, 21 Aug 2026 18:58:03 +0200 Subject: [PATCH 3/3] ci: bump configure-registry pin to aa4ee199 (errexit-guarded tracked-file probe) The previous pin died silently (exit 1, no output) on repos where .npmrc/ yarn.lock/package-lock.json are untracked - composite bash -e killed the bare 'git ls-files; tracked=$?' probe. Fixed upstream in ever-co/ever-gauzy#10029. --- .github/workflows/release.sdk.prod.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.sdk.prod.yml b/.github/workflows/release.sdk.prod.yml index b273bf0fe..1a91e5077 100644 --- a/.github/workflows/release.sdk.prod.yml +++ b/.github/workflows/release.sdk.prod.yml @@ -65,7 +65,7 @@ jobs: echo "✅ NPM authentication configured" - name: Configure Registry - uses: ever-co/ever-gauzy/.github/actions/configure-registry@9459d29e9a3859740348bb445dfe885cae83fc88 + uses: ever-co/ever-gauzy/.github/actions/configure-registry@aa4ee19926fabcf820aa1294385a76aec6bdb548 with: verdaccio-registry: ${{ vars.VERDACCIO_REGISTRY }} verdaccio-token: ${{ secrets.VERDACCIO_TOKEN }}