@gowri48/npmpublish 1.3.9 → 1.4.1

package/.github/workflows/testing1440.yml

@@ -1,34 +1,62 @@
 name: testing_1477_oidc
+
 on:
   workflow_dispatch:
 
-
 permissions:
-  id-token: write # Required for OIDC
   contents: read
+  id-token: write  # Required to trigger OIDC token exchange
 
 jobs:
-  publish:
+  detect-oidc-precedence:
     runs-on: ubuntu-latest
-    environment: release
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-    
-    - uses: pnpm/action-setup@26f6d4f2c533a43e6b5da0b4a5dd983f98f7b49a # v6.0.4
-      with:
-         version: 10.25.0
-    
-    - name: Use Node.js 24
-      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
-      with:
-        node-version: "24"
-        registry-url: "https://registry.npmjs.org"
-        cache: pnpm
-        package-manager-cache: true
-    
-    - run: pnpm install
-    - run: pnpm build
-    - run: pnpm test
-    
-    - name: Publish
-      run: pnpm publish --recursive --no-git-checks --verbose
+      - name: Checkout package to publish
+        uses: actions/checkout@v4
+        with:
+          path: package   # ← your repro-setup-node-oidc package lives here
+
+      - name: Checkout custom npm-cli fork (for logging)
+        uses: actions/checkout@v4
+        with:
+          repository: chiranjib-swain/npm-cli
+          ref: envReplace
+          path: npm-cli   # ← forked npm CLI lives here
+
+      - name: Set up Node.js 24 with registry-url
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://npm.pkg.github.com'
+
+      - name: Install & link custom npm CLI
+        run: |
+          cd npm-cli
+          npm install
+          npm install -g .  # Link the custom npm CLI globally
+      - name: Show environment state before publish
+        run: |
+          echo "=== Token State ==="
+          echo "NODE_AUTH_TOKEN=${NODE_AUTH_TOKEN}"
+          echo "NPM_CONFIG_USERCONFIG=${NPM_CONFIG_USERCONFIG}"
+          echo ""
+          echo "=== .npmrc Contents ==="
+          cat "${NPM_CONFIG_USERCONFIG}"
+          echo ""
+          echo "=== OIDC Env Vars ==="
+          echo "ACTIONS_ID_TOKEN_REQUEST_URL=${ACTIONS_ID_TOKEN_REQUEST_URL:-(not set)}"
+          echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN=${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-(not set)}"
+      - name: Run npm publish with verbose logging        # ← key fix here
+        working-directory: package
+        run: |
+          npm publish --access public --provenance --loglevel verbose 2>&1 | tee /tmp/publish.log || true
+      - name: Extract DETECT log lines only
+        run: |
+          echo "=== DETECTION LOG LINES ==="
+          grep "\[DETECT\]" /tmp/publish.log || echo "No [DETECT] lines found"
+          echo ""
+          echo "=== OIDC-related lines ==="
+          grep -i "oidc" /tmp/publish.log || echo "No OIDC lines found"
+          echo ""
+          echo "=== Auth error lines ==="
+          grep -E "E401|ENEEDAUTH|401 Unauthorized" /tmp/publish.log || echo "No auth errors found"

package/package.json

@@ -1,22 +1,22 @@
 {
   "name": "@gowri48/npmpublish",
-  "version": "1.3.9",
+  "version": "1.4.1",
   "description": "Your package description",
   "main": "index.js",
   "repository": "github:gowridurgad/npm-publish",
   "author": "gowridurgad",
   "license": "ISC",
+  "scripts": {
+    "build": "node -e \"console.log('build ok')\"",
+     "test": "node -e \"console.log('ok')\""
+  },
   "publishConfig": {
-    "access": "public"
+    "access": "public" 
   },
   "dependencies": {
     "axios": "^1.7.0"
   },
   "engines": {
     "node": ">=12"
-  },
-  "scripts": {
-    "build": "node -e \"console.log('build ok')\"",
-    "test": "node -e \"console.log('ok')\""
   }
-}
+}