Skip to content

feat(root): add npm-shrinkwrap json #9281

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mohammadalfaiyazbitgo wants to merge 2 commits into from
+4 −4
Closed

feat(root): add npm-shrinkwrap json #9281

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fa93533
feat(root): add npm-shrinkwrap json
mohammadalfaiyazbitgo Jul 16, 2026
a840a72
fix: update npmjs-release.yml to use _hasShrinkwrap
danielpeng1 Jul 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/npmjs-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ jobs:

# bitgo's `prepack` script generates npm-shrinkwrap.json at pack time (see
# scripts/generate-bitgo-shrinkwrap.ts). npm only honors a shipped shrinkwrap
# for installers when the registry's own metadata says hasShrinkwrap: true —
# for installers when the registry's version metadata says _hasShrinkwrap: true —
# confirm that here so a silent registry-side omission fails the release
# instead of shipping a package whose shrinkwrap consumers won't get.
- name: Verify bitgo package has shrinkwrap metadata
Expand All @@ -343,13 +343,13 @@ jobs:
# Registry metadata can lag briefly right after publish, so retry before
# failing the release on what might just be propagation delay.
if ! retry --up-to 5x --every 5s -- bash -c "
has_shrinkwrap=\$(curl -sL 'https://registry.npmjs.org/bitgo/${version}' | jq -r '.dist.hasShrinkwrap // false')
has_shrinkwrap=\$(curl -sL 'https://registry.npmjs.org/bitgo/${version}' | jq -r '._hasShrinkwrap // false')
[ \"\$has_shrinkwrap\" = 'true' ]
"; then
echo "::error::Published bitgo@${version} is missing hasShrinkwrap metadata on the npm registry."
echo "::error::Published bitgo@${version} is missing _hasShrinkwrap metadata on the npm registry."
exit 1
fi
echo "✅ bitgo@${version} published with hasShrinkwrap: true."
echo "✅ bitgo@${version} published with _hasShrinkwrap: true."

- name: Generate version bump summary
id: version-bump-summary
Expand Down