Skip to content

release: npm verify waits up to 10 minutes for propagation - #110

Merged
dshakes merged 1 commit into
mainfrom
release/npm-propagation
Nov 2, 2026
Merged

dshakes merged 1 commit into
mainfrom
release/npm-propagation

Conversation

@dshakes

@dshakes dshakes commented Nov 2, 2026

Copy link
Copy Markdown
Owner

v0.5.2's npm job published all seven packages with provenance, then its verify step failed: npm view @dshakesnotbot/halo@0.5.2 was still 404 after the 60 s retry window (the first version of a new package took longer to appear). The packages were live minutes later (npx @dshakesnotbot/halo@0.5.2 version -> 0.5.2). Wait up to 10 minutes (60 x 10 s). actionlint clean.

@github-actions github-actions Bot added agent:reviewed-clean Reviewer found no Blocking issues this round domain:infra Touches infra / CI / deploy / migrations labels Nov 2, 2026
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

🔎 Codex cross-audit (agent:audit)

Blocking: none.

Findings: none. The PR only extends the npm registry visibility wait in .github/workflows/release.yml from 6 attempts to 60 attempts, and the subsequent npx @dshakesnotbot/halo@$VERSION version still provides the real failure signal if the package never becomes usable.

Checks: git diff --check origin/main...HEAD passed. actionlint is not installed, so workflow linting is UNVERIFIED.

@dshakes
dshakes merged commit e6569c7 into main Nov 2, 2026
35 checks passed
@dshakes dshakes mentioned this pull request Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent:reviewed-clean Reviewer found no Blocking issues this round domain:infra Touches infra / CI / deploy / migrations

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant