@nosto/nosto-cli 1.2.2 → 1.2.4

package/.github/dependabot.yml

@@ -17,4 +17,8 @@ updates:
       vitest:
         patterns:
           - "@vitest/*"
-          - "vitest"
+          - "vitest"
+      commitlint:
+        patterns:
+          - "@commitlint/*"
+          - "commitlint"

package/.github/workflows/ci.yml

@@ -18,6 +18,9 @@ jobs:
     - name: Install dependencies
       run: npm ci
 
+    - name: Audit dependencies
+      run: npm audit --audit-level=high
+
     - name: Run linting
       run: npm run lint
 
@@ -35,6 +38,9 @@ jobs:
     - name: Install dependencies
       run: npm ci
 
+    - name: Audit dependencies
+      run: npm audit --audit-level=high
+
     - name: Run TypeScript type checking
       run: npm run type-check
 
@@ -52,5 +58,8 @@ jobs:
     - name: Install dependencies
       run: npm ci
 
+    - name: Audit dependencies
+      run: npm audit --audit-level=high
+
     - name: Run tests
       run: npm run test

package/.github/workflows/release.yml

@@ -18,12 +18,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout current branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           persist-credentials: false
 
       - name: Setup NodeJS
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4.0.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444
         with:
           node-version: 24
           cache: "npm"
@@ -31,11 +31,21 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Audit dependencies
+        run: npm audit --audit-level=high
+
       - name: Run tests
         run: npm test
 
+      - name: Create GitHub App Token
+        id: app-token
+        uses: actions/create-github-app-token@b96fde71c0080358ed6e2d162f11c612c92a97d1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Publish project
-        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90
         id: semantic
         with:
           semantic_version: 25.0.2
@@ -47,4 +57,4 @@ jobs:
               "main"
             ]
         env:
-          GITHUB_TOKEN: ${{ secrets.RELEASE_PAT_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nosto/nosto-cli",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "main": "./src/index.ts",
   "bin": {
     "nosto": "./src/bootstrap.mjs"
@@ -45,7 +45,7 @@
     "@commitlint/cli": "^20.1.0",
     "@commitlint/config-conventional": "^20.0.0",
     "@eslint/js": "^9.37.0",
-    "@types/node": "^24.7.2",
+    "@types/node": "^25.0.2",
     "@vitest/coverage-v8": "^4.0.6",
     "@vitest/ui": "^4.0.6",
     "eslint": "^9.37.0",

package/src/config/config.ts

@@ -4,7 +4,7 @@ import { cleanUrl } from "#api/utils.ts"
 import { Logger } from "#console/logger.ts"
 import { MissingConfigurationError } from "#errors/MissingConfigurationError.ts"
 
-import { authFileExists, getAuthFileMissingError, parseAuthFile } from "./authConfig.ts"
+import { parseAuthFile } from "./authConfig.ts"
 import { getEnvConfig } from "./envConfig.ts"
 import { parseConfigFile } from "./fileConfig.ts"
 import {
@@ -48,10 +48,7 @@ export async function loadConfig({ projectPath, options, allowIncomplete }: Load
 
   const fullPath = resolve(projectPath)
   Logger.debug(`Loading configuration from folder: ${fullPath}`)
-  if (!allowIncomplete && !authFileExists()) {
-    throw getAuthFileMissingError()
-  }
-  const authConfig = parseAuthFile({ allowIncomplete })
+
   const searchTemplatesConfig = await parseSearchTemplatesConfigFile({ projectPath })
   const fileConfig = parseConfigFile({ projectPath, allowIncomplete })
   const envConfig = getEnvConfig()
@@ -63,6 +60,9 @@ export async function loadConfig({ projectPath, options, allowIncomplete }: Load
     ...fileConfig,
     ...envConfig
   }
+
+  const authConfig = parseAuthFile({ allowIncomplete: allowIncomplete || !!combinedConfig.apiKey })
+
   if (!combinedConfig.merchant && !allowIncomplete) {
     throw new MissingConfigurationError("Invalid configuration: Missing merchant ID")
   }

package/test/config/config.test.ts

@@ -68,4 +68,9 @@ describe("Config", () => {
       /not implemented/
     )
   })
+
+  it("does not throw if auth file is missing while an api key is provided", async () => {
+    fs.mockConfigFile({ apiKey: "test-api-key" })
+    await expect(loadConfig({ projectPath: ".", options: {} })).resolves.not.toThrow()
+  })
 })

package/test/utils/mockFileSystem.ts

@@ -48,7 +48,6 @@ export function setupMockFileSystem() {
       const content = {
         ...getDefaultConfig(),
         merchant: "test-merchant",
-        apiKey: "test-api-key",
         ...overrides
       }
       writeFileContent(".nosto.json", JSON.stringify(content))