Skip to content

Create authenticated npmrc in another job#2911

Open
chidozieononiwu wants to merge 4 commits into
mainfrom
net-iso
Open

Create authenticated npmrc in another job#2911
chidozieononiwu wants to merge 4 commits into
mainfrom
net-iso

Conversation

@chidozieononiwu

@chidozieononiwu chidozieononiwu commented Jun 18, 2026

Copy link
Copy Markdown
Member

This pull request updates the VSIX release pipeline to improve how the @vscode/vsce tool is installed during deployment. The main change is the introduction of a new job that creates and publishes an authenticated .npmrc file, allowing deployment jobs to install @vscode/vsce from an internal feed without needing direct service connection access. This enhances security and simplifies the deployment process.

Pipeline authentication and artifact handling:

  • Added a new job, AuthenticateNpmrc, to create an authenticated .npmrc file and publish it as a pipeline artifact for use by deployment jobs.
  • Updated deployment jobs to depend on the new AuthenticateNpmrc job and to download the vsix_npmrc artifact for authenticated npm installs. [1] [2]

VSCE installation update:

  • Modified the VSIX deployment script to install @vscode/vsce using the authenticated .npmrc, ensuring installation from the internal feed.

mcp - Template.Mcp.Server

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the VSIX release pipeline to install @vscode/vsce using an authenticated .npmrc produced in a separate job, so the production deployment jobs don’t need direct feed/service-connection access.

Changes:

  • Added an AuthenticateNpmrc job to create an authenticated .npmrc and publish it as a pipeline artifact.
  • Updated VSIX deployment jobs to depend on AuthenticateNpmrc and download the published npmrc artifact.
  • Updated the deployment script step to install @vscode/vsce using npm --userconfig pointing at the downloaded .npmrc.

Invoking Livetests

Copilot submitted PRs are not trustworthy by default. Users with write access to the repo need to validate the contents of this PR before leaving a comment with the text /azp run mcp - pullrequest - live. This will trigger the necessary livetest workflows to complete required validation.

Comment thread eng/pipelines/templates/jobs/vsix/release-vsix.yml
Comment thread eng/pipelines/templates/jobs/vsix/release-vsix.yml Outdated
chidozieononiwu and others added 3 commits June 17, 2026 18:45
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Untriaged

Development

Successfully merging this pull request may close these issues.

2 participants