Skip to content

ci: centralize GitHub Packages npm auth setup #34326

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mpreyskurantov merged 3 commits into from
Jul 17, 2026
+8 −28
Merged

ci: centralize GitHub Packages npm auth setup #34326

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8df0acc
ci: centralize GitHub Packages npm auth setup
mpreyskurantov Jul 15, 2026
78e2ef7
build_all.yml / consistent guard
mpreyskurantov Jul 16, 2026
c7b7ab5
remove SBOM steps from build_all.yml
mpreyskurantov Jul 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 0 additions & 23 deletions .github/workflows/build_all.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,6 @@ on:
push:
branches: [26_1]
workflow_dispatch:
inputs:
SBOM:
description: 'Build SBOM'
required: false
default: false
type: boolean

concurrency:
group: wf-${{github.event.pull_request.number || github.ref || github.sha}}-${{github.workflow}}
Expand Down Expand Up @@ -111,23 +105,6 @@ jobs:
artifacts/npm/*.tgz
retention-days: 1

- name: Build SBOMs
if: ${{ github.event_name == 'push' || github.event.inputs.SBOM == 'true' }}
env:
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
pnpm set //npm.pkg.github.com/:_authToken="$NODE_AUTH_TOKEN";
pnpm nx build sbom;

- name: Upload SBOM artifacts
if: ${{ github.event_name == 'push' || github.event.inputs.SBOM == 'true' }}
uses: actions/upload-artifact@v7
with:
name: sbom
path: |
packages/sbom/dist/**/*
retention-days: 1

custom_bundles:
runs-on: devextreme-shr2
needs: build
Expand Down
13 changes: 8 additions & 5 deletions .github/workflows/packages_publishing.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,12 +52,13 @@ jobs:
BUILD_INTERNAL_PACKAGE: true
run: pnpm run all:build

- name: Set GitHub Packages auth
run: pnpm set //npm.pkg.github.com/:_authToken='${NODE_AUTH_TOKEN}'
Comment thread
mpreyskurantov marked this conversation as resolved.

- name: Build SBOMs
env:
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
pnpm set //npm.pkg.github.com/:_authToken="$NODE_AUTH_TOKEN";
pnpm nx build sbom;
run: pnpm nx build sbom

- name: Build artifacts package
run: pnpm run make-artifacts-package
Expand Down Expand Up @@ -124,18 +125,20 @@ jobs:
pnpm pkg get version | tr -d '"' | sed -r 's/(.*)/version=\1/' >> "$GITHUB_OUTPUT";
pnpm pkg get version | tr -d '"' | sed -r 's/([0-9]+\.[0-9]+).*/majorVersion=\1/' >> "$GITHUB_OUTPUT";

- name: Set GitHub Packages auth
run: pnpm set //npm.pkg.github.com/:_authToken='${NODE_AUTH_TOKEN}'
Comment thread
mpreyskurantov marked this conversation as resolved.

# --ignore-scripts is required for publishing devextreme-angular which fails with error:
# 'Trying to publish a package that has been compiled by Ivy in full compilation mode.'
# Should be removed.
- name: Publish to npm.pkg.github.com
- name: Publish to GitHub Packages
working-directory: ${{ steps.scopedPackage.outputs.packageDir }}
env:
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PACKAGE_NAME: ${{ steps.scopedPackage.outputs.name }}
PACKAGE_VERSION: ${{ steps.scopedPackage.outputs.version }}
PACKAGE_VERSION_MAJOR: ${{ steps.scopedPackage.outputs.majorVersion }}
run: |
pnpm set //npm.pkg.github.com/:_authToken="$NODE_AUTH_TOKEN";
pnpm publish --no-git-checks --quiet --ignore-scripts --tag $PACKAGE_VERSION_MAJOR-${{ inputs.tag }} --registry https://npm.pkg.github.com;
pnpm dist-tag add $PACKAGE_NAME@$PACKAGE_VERSION latest --registry=https://npm.pkg.github.com;

Expand Down
Loading