From 1219f5e7fa4785a59212a4046c8dc3ca0a7ceec5 Mon Sep 17 00:00:00 2001 From: vigubikReply Date: Thu, 23 Jul 2026 17:00:41 -0400 Subject: [PATCH] ci: instrument public publish to diagnose OIDC exchange Print node/npm versions, id-token env presence, registry, and .npmrc; publish at verbose loglevel and dump npm debug log on failure. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/publish-public.yml | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/.github/workflows/publish-public.yml b/.github/workflows/publish-public.yml index 0f66776..45c5d12 100644 --- a/.github/workflows/publish-public.yml +++ b/.github/workflows/publish-public.yml @@ -51,6 +51,17 @@ jobs: npm install -g npm@latest npm --version + - name: Diagnose OIDC prerequisites + run: | + echo "node: $(node --version) (need >= 22.14.0)" + echo "npm: $(npm --version) (need >= 11.5.1)" + echo "ACTIONS_ID_TOKEN_REQUEST_URL: ${ACTIONS_ID_TOKEN_REQUEST_URL:+SET}${ACTIONS_ID_TOKEN_REQUEST_URL:-UNSET}" + echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN: ${ACTIONS_ID_TOKEN_REQUEST_TOKEN:+SET}${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-UNSET}" + echo "npm registry: $(npm config get registry)" + echo "--- .npmrc (${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}) ---" + sed 's/\(_authToken=\).*/\1/' "${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}" 2>/dev/null || echo "(no .npmrc)" + echo "--- end ---" + - run: npm ci - run: npm run build @@ -70,7 +81,13 @@ jobs: npm version "${VERSION}" --no-git-tag-version --allow-same-version - name: Publish to public npm with provenance - run: npm publish --provenance --access public + run: npm publish --provenance --access public --loglevel verbose + + - name: Dump npm debug log on failure + if: failure() + run: | + echo "=== npm debug log (tail) ===" + tail -n 80 /home/runner/.npm/_logs/*-debug-0.log 2>/dev/null || echo "(no debug log)" - name: Promote the GitHub Release to full/latest env: