Skip to content

Fix registry extraction form .npmrc. #125

Merged
dannyvv merged 3 commits intomicrosoft:mainfrom
dannyvv:pr/FixRegistryFiltering
Feb 4, 2026
Merged

Fix registry extraction form .npmrc. #125
dannyvv merged 3 commits intomicrosoft:mainfrom
dannyvv:pr/FixRegistryFiltering

Conversation

@dannyvv
Copy link
Member

@dannyvv dannyvv commented Feb 3, 2026

We had false positives for authentication comments like :
//pkgs.dev.azure.com/xyz/abc/npm/registry/=SECRET
This changes makes the key filter stricter. it must be exactly registry for:
registry=https://xyz or ends with :registry for the @myscope:registry=https://xyz.

This change also updates the .npmrc parser for auth tokens and passwords from the current .npmrc file.

This will allow users to use the Azure DevOps task: npmAuthenticate which writes to the file in the source tree.

@dannyvv dannyvv force-pushed the pr/FixRegistryFiltering branch from 48ecf01 to 4e87f28 Compare February 3, 2026 21:00
@dannyvv dannyvv requested a review from Saadnajmi February 3, 2026 21:00
@dannyvv dannyvv force-pushed the pr/FixRegistryFiltering branch from d47eca2 to 5dccd50 Compare February 3, 2026 21:12
@dannyvv dannyvv merged commit be875df into microsoft:main Feb 4, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants