Test

npm/npm-push/action.yaml

@@ -26,10 +26,7 @@ runs:
     uses: https://github.com/actions/setup-node@v4
     with:
       node-version: ${{ inputs.nodeVersion }}
-      registry-url: ${{ inputs.registry }}
   - name: "Publish package"
-    env:
-      NODE_AUTH_TOKEN: ${{ inputs.apiKey }}
     run: |
       # Ensure path starts with ./ so npm recognizes it as a file path
       TGZ_PATH="${{ inputs.tgz }}"
@@ -37,8 +34,19 @@ runs:
         TGZ_PATH="./$TGZ_PATH"
       fi
 
+      # Configure npm authentication for the registry (scoped to project)
+      REGISTRY_HOST=$(echo "${{ inputs.registry }}" | sed -E 's|https?://([^/]+).*|\1|')
+      npm config set --location=project "//${REGISTRY_HOST}/:_authToken" "${{ inputs.apiKey }}"
+      npm config set --location=project registry "${{ inputs.registry }}"
+
       echo "Publishing $TGZ_PATH to ${{ inputs.registry }}"
       npm publish "$TGZ_PATH" --access ${{ inputs.access }}
 
       echo "Package published successfully"
     shell: bash
+  - name: "Clean up npm authentication"
+    if: always()
+    run: |
+      # Clean up project .npmrc in case of early exit
+      rm -f .npmrc
+    shell: bash