Skip to content

Conversation

@pavera
Copy link
Contributor

@pavera pavera commented Aug 14, 2025

NPM in dependabot-core uses the registry key for certain operations, but expects the host+path to be configured.

@pavera pavera requested a review from a team as a code owner August 14, 2025 18:08
Copilot AI review requested due to automatic review settings August 14, 2025 18:08
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Adds path component to npm registry URLs in dependabot-core configuration. The change ensures that npm registry credentials include both hostname and pathname when constructing the registry value, which dependabot-core requires for proper npm operations.

  • Conditionally appends pathname to npm registry URLs when type is 'npm_registry'

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.

@pavera pavera merged commit eaefd57 into main Aug 14, 2025
8 checks passed
@pavera pavera deleted the pavera/fix-malformed-npm-registry branch August 14, 2025 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants