Merge pull request 'Add NPM_TOKEN support to node and test/npm actions' (#2 ) from STAT-133 into main

Reviewed-on: #2
STAT-133: Add NPM_TOKEN support to node and test/npm actions for private registry auth
2026-09-17 15:49:51 +00:00 · 2026-09-17 11:48:24 -04:00 · 2026-09-10 00:04:58 +00:00 · 2026-09-10 00:04:51 +00:00 · 2026-09-09 19:52:32 -04:00 · 2026-09-09 22:53:59 +00:00
5 changed files with 38 additions and 1 deletions
@@ -1 +1 @@
-1.19.0
+1.21.0
@@ -19,6 +19,7 @@ Install dependencies, build, and upload a build artifact
 | `COPY_PRISMA_ENGINE` | <p>Copy the Prisma query engine binaries into the build directory</p> | `false` | `false` |
 | `WORKING_DIRECTORY` | <p>Working directory for install, build, and artifact steps</p> | `false` | `.` |
 | `UPLOAD_ARTIFACT` | <p>Whether to upload the build artifact</p> | `false` | `true` |
+| `NPM_TOKEN` | <p>Auth token for the private Gitea npm registry (@stat-tackler scope). Leave empty if the repo installs no private packages.</p> | `false` | `""` |
 <!-- action-docs-inputs source="action.yml" -->

 <!-- action-docs-runs source="action.yml" -->
@@ -25,6 +25,9 @@ inputs:
  UPLOAD_ARTIFACT:
    description: "Whether to upload the build artifact"
    default: "true"
+  NPM_TOKEN:
+    description: "Auth token for the private Gitea npm registry (@stat-tackler scope). Leave empty if the repo installs no private packages."
+    default: ""

 runs:
  using: composite
@@ -36,6 +39,16 @@ runs:
      with:
        node-version-file: ${{ inputs.WORKING_DIRECTORY }}/package.json

+    - name: Configure private registry auth
+      if: inputs.NPM_TOKEN != ''
+      shell: sh
+      working-directory: ${{ inputs.WORKING_DIRECTORY }}
+      run: |
+        printf '%s\n%s\n' \
+          '@stat-tackler:registry=https://gitea.pixelparasol.com/api/packages/stat-tackler/npm/' \
+          '//gitea.pixelparasol.com/api/packages/stat-tackler/npm/:_authToken=${{ inputs.NPM_TOKEN }}' \
+          >> .npmrc
+
    - name: Install
      shell: sh
      working-directory: ${{ inputs.WORKING_DIRECTORY }}
@@ -10,6 +10,7 @@ Composite action: install dependencies and run an npm test script.
 | `TEST_SCRIPT` | npm script to run (must exist in `package.json`) | `test` |
 | `TEST_ARGS` | Additional arguments passed after `--` to the test script | `` |
 | `WORKING_DIRECTORY` | Directory to run commands in | `.` |
+| `NPM_TOKEN` | Auth token for the private Gitea npm registry (`@stat-tackler` scope). Leave empty if the repo installs no private packages. | `` |

 ## Usage

@@ -19,6 +20,15 @@ Composite action: install dependencies and run an npm test script.
    TEST_SCRIPT: test:unit
 ```

+With a private `@stat-tackler` package in `package.json`:
+
+```yaml
+- uses: stat-tackler/stat-tackler-infra/test/npm@main
+  with:
+    TEST_SCRIPT: test:unit
+    NPM_TOKEN: ${{ secrets.REGISTRY_READ_WRITE_AGENT }}
+```
+
 With extra args:

 ```yaml
@@ -14,6 +14,9 @@ inputs:
  WORKING_DIRECTORY:
    description: "Directory to run commands in"
    default: "."
+  NPM_TOKEN:
+    description: "Auth token for the private Gitea npm registry (@stat-tackler scope). Leave empty if the repo installs no private packages."
+    default: ""

 runs:
  using: composite
@@ -32,6 +35,16 @@ runs:
        key: node-modules-${{ hashFiles(format('{0}/package-lock.json', inputs.WORKING_DIRECTORY)) }}
        restore-keys: node-modules-

+    - name: Configure private registry auth
+      if: inputs.NPM_TOKEN != ''
+      shell: sh
+      working-directory: ${{ inputs.WORKING_DIRECTORY }}
+      run: |
+        printf '%s\n%s\n' \
+          '@stat-tackler:registry=https://gitea.pixelparasol.com/api/packages/stat-tackler/npm/' \
+          '//gitea.pixelparasol.com/api/packages/stat-tackler/npm/:_authToken=${{ inputs.NPM_TOKEN }}' \
+          >> .npmrc
+
    - name: Install
      shell: sh
      working-directory: ${{ inputs.WORKING_DIRECTORY }}
Author	SHA1	Message	Date
deac	53165c2d53	Merge pull request 'Add NPM_TOKEN support to node and test/npm actions' (#2 ) from STAT-133 into main publish.yaml / publish (push) Successful in 4s Details Reviewed-on: #2	2026-09-17 15:49:51 +00:00
deac	9df18983c3	STAT-133: Add NPM_TOKEN support to node and test/npm actions for private registry auth npm ci fails with E401 when a consuming repo's package-lock.json pins a package to the private Gitea npm registry, since these composite actions never write an .npmrc or set a registry auth token. Add an optional NPM_TOKEN input that writes .npmrc before install; existing consumers that don't pass it are unaffected.	2026-09-17 11:48:24 -04:00
gitea-actions	3f7c00f1e7	chore: bump version [skip ci]	2026-09-10 00:04:58 +00:00
deac	dcb3434b39	Merge pull request 'STAT-115-remove-check-shared-block: Remove claude/check-shared-block composite action' (#1 ) from STAT-115-remove-check-shared-block into main publish.yaml / publish (push) Successful in 5s Details Reviewed-on: #1	2026-09-10 00:04:51 +00:00
deac	b865cdd697	STAT-115-remove-check-shared-block: Remove claude/check-shared-block composite action Superseded by a live @../stat-tackler-claude/CLAUDE.md import, which means there is no per-repo copy left to drift and nothing left to check (part of STAT-115). Claude-Session: https://claude.ai/code/session_01FS9R1ZEc8Vu7hg2PmzqbpP	2026-09-09 19:52:32 -04:00
gitea-actions	4300baaa19	chore: bump version [skip ci]	2026-09-09 22:53:59 +00:00
deac	eef6d305dd	STAT-115: Add claude/check-shared-block composite action (STAT-115) publish.yaml / publish (push) Successful in 4s Details Claude-Session: https://claude.ai/code/session_01FS9R1ZEc8Vu7hg2PmzqbpP	2026-09-09 18:46:40 -04:00
@@ -1 +1 @@
 .19.0
 .21.0