Consume Github Package private registry with yarn

Code to Cloud GitHub Packages
#1

Hi all,

I can’t succeed to get a private package repository successfuly pushed on Github registry and I don’t succeed to find the reason. It seems to be link to authentication and the use of yarn but not sure why.
The package is build and published using Github Actions with the following config:

name: Build new version package

on:
  release:
    types: [created]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1
      - uses: actions/setup-node@v1
        with:
          node-version: '11.9.0'
          scope: '@jonlev'
      - name: 'Install dependecies'
        uses: Borales/actions-yarn@v2.1.0
        with:
          cmd: install
      - name: 'Build package'
        uses: Borales/actions-yarn@v2.1.0
        with:
          cmd: build
      - name: 'Publish package'
        uses: Borales/actions-yarn@v2.1.0
        with:
          cmd: publish
          registry-url: https://npm.pkg.github.com/
          auth-token: ${{secrets.GITHUB_TOKEN}}

In the repo that need to use it I set a .npmrc like said in the official documentation 
{repo}/.npmrc

registry=https://npm.pkg.github.com/

~/.npmrc

//npm.pkg.github.com/:_authToken={PERSONAL_TOKEN}

then yarn add @organisation/package --verbose log

yarn add @destygo/components-library --verbose
yarn add v1.21.1
verbose 0.361 Checking for configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.362 Found configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.362 Checking for configuration file "/Users/jonas/.npmrc".
verbose 0.362 Found configuration file "/Users/jonas/.npmrc".
verbose 0.363 Checking for configuration file "/usr/local/etc/npmrc".
verbose 0.364 Checking for configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.365 Found configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.365 Checking for configuration file "/Users/jonas/destygo/.npmrc".
verbose 0.366 Checking for configuration file "/Users/jonas/.npmrc".
verbose 0.366 Found configuration file "/Users/jonas/.npmrc".
verbose 0.366 Checking for configuration file "/Users/.npmrc".
verbose 0.369 Checking for configuration file "/Users/jonas/destygo/IRIS/.yarnrc".
verbose 0.369 Checking for configuration file "/Users/jonas/.yarnrc".
verbose 0.369 Found configuration file "/Users/jonas/.yarnrc".
verbose 0.369 Checking for configuration file "/usr/local/etc/yarnrc".
verbose 0.369 Checking for configuration file "/Users/jonas/destygo/IRIS/.yarnrc".
verbose 0.37 Checking for configuration file "/Users/jonas/destygo/.yarnrc".
verbose 0.37 Checking for configuration file "/Users/jonas/.yarnrc".
verbose 0.37 Found configuration file "/Users/jonas/.yarnrc".
verbose 0.37 Checking for configuration file "/Users/.yarnrc".
verbose 0.375 current time: 2020-01-15T14:04:39.653Z
[1/5] 🔍 Validating package.json...
[2/5] 🔍 Resolving packages...
verbose 1.688 Performing "GET" request to "https://npm.pkg.github.com/@destygo%2fcomponents-library".
verbose 2.516 Request "https://npm.pkg.github.com/@destygo%2fcomponents-library" finished with status code 200.
======= resolving dependencies packages ====
[3/5] 🚚 Fetching packages...
======= fetching dependencies packages =====
verbose 25.15 Performing "GET" request to "https://npm.pkg.github.com/download/@destygo/components-library/1.18.6/f6e1454093e83088aaf2e48fc11a81f23f45b05fd7dfc9857861683be3d02a66".
verbose 25.405 Error: https://npm.pkg.github.com/download/@destygo/components-library/1.18.6/f6e1454093e83088aaf2e48fc11a81f23f45b05fd7dfc9857861683be3d02a66: Request failed "401 Unauthorized"
    at ResponseError.ExtendableBuiltin (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:696:66)
    at new ResponseError (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:802:124)
    at Request.<anonymous> (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:67017:16)
    at Request.emit (events.js:197:13)
    at Request.module.exports.Request.onRequestResponse (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:141542:10)
    at ClientRequest.emit (events.js:202:15)
    at HTTPParser.parserOnIncomingClient [as onIncoming] (_http_client.js:560:21)
    at HTTPParser.parserOnHeadersComplete (_http_common.js:113:17)
    at TLSSocket.socketOnData (_http_client.js:447:20)
    at TLSSocket.emit (events.js:197:13)
error An unexpected error occurred: "https://npm.pkg.github.com/download/@destygo/components-library/1.18.6/f6e1454093e83088aaf2e48fc11a81f23f45b05fd7dfc9857861683be3d02a66: Request failed \"401 Unauthorized\"".
info If you think this is a bug, please open a bug report with the information provided in "/Users/jonas/destygo/IRIS/yarn-error.log".
info Visit https://yarnpkg.com/en/docs/cli/add for documentation about this command.

If I use the owner in repo url, it just stop at resolution

{repo}/.npmrc

registry=https://npm.pkg.github.com/Organisation

then yarn add&nbsp;@organisation/package --verbose log

yarn add @destygo/components-library --verbose
yarn add v1.21.1
verbose 0.981 Checking for configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.982 Found configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.982 Checking for configuration file "/Users/jonas/.npmrc".
verbose 0.982 Found configuration file "/Users/jonas/.npmrc".
verbose 0.982 Checking for configuration file "/usr/local/etc/npmrc".
verbose 0.983 Checking for configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.983 Found configuration file "/Users/jonas/destygo/IRIS/.npmrc".
verbose 0.983 Checking for configuration file "/Users/jonas/destygo/.npmrc".
verbose 0.983 Checking for configuration file "/Users/jonas/.npmrc".
verbose 0.983 Found configuration file "/Users/jonas/.npmrc".
verbose 0.983 Checking for configuration file "/Users/.npmrc".
verbose 0.986 Checking for configuration file "/Users/jonas/destygo/IRIS/.yarnrc".
verbose 0.987 Checking for configuration file "/Users/jonas/.yarnrc".
verbose 0.987 Found configuration file "/Users/jonas/.yarnrc".
verbose 0.987 Checking for configuration file "/usr/local/etc/yarnrc".
verbose 0.987 Checking for configuration file "/Users/jonas/destygo/IRIS/.yarnrc".
verbose 0.987 Checking for configuration file "/Users/jonas/destygo/.yarnrc".
verbose 0.987 Checking for configuration file "/Users/jonas/.yarnrc".
verbose 0.987 Found configuration file "/Users/jonas/.yarnrc".
verbose 0.988 Checking for configuration file "/Users/.yarnrc".
verbose 0.992 current time: 2020-01-15T14:36:30.943Z
[1/5] 🔍 Validating package.json...
[2/5] 🔍 Resolving packages...
verbose 1.892 Performing "GET" request to "https://npm.pkg.github.com/Destygo/@destygo%2fcomponents-library".
verbose 2.331 Request "https://npm.pkg.github.com/Destygo/@destygo%2fcomponents-library" finished with status code 401.
verbose 2.342 Error: Couldn't find package "@destygo/components-library" on the "npm" registry.
    at MessageError.ExtendableBuiltin (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:721:66)
    at new MessageError (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:750:123)
    at NpmResolver.<anonymous> (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:50683:15)
    at Generator.next (<anonymous>)
    at step (/usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:310:30)
    at /usr/local/Cellar/yarn/1.21.1/libexec/lib/cli.js:321:13
    at processTicksAndRejections (internal/process/next_tick.js:81:5)
error Couldn't find package "@destygo/components-library" on the "npm" registry.
info Visit https://yarnpkg.com/en/docs/cli/add for documentation about this command.

Though publish seems good

Capture d’écran 2020-01-15 à 15.38.30.png
Capture d’écran 2020-01-15 à 15.38.30.png2050×968 114 KB

I look in yarn issues and github community thread and solutions there did not worked for me.

last information, it works with npm install but my company want to stick to yarn for now.

Any idea how to solve this ?

1 Like
#2

@jonlevAny luck with that issue?

#3

Hey @dabku ,

To make this work for now, I set a .yarnrc in repo specifying the registry only for private package using its prefix:

"@destygo:registry" "https://npm.pkg.github.com/Destygo"

same in .npmrc

@destygo:_authToken=TOKEN

that allow to make this work with yarn because it avoid github registry for other packages.

3 Likes
#4

Thank you for the tip, it did not work for me. I noticed that we have different request urls in fetch section. Mine was trying to access:

[2/4] Fetching packages...
error An unexpected error occurred: "https://npm.pkg.github.com/download/@dabku/SOME_PACKAGE/SOME_VERSION/xxxxxxxxxxxxxxxxxxxxx: Request failed \"401 Unauthorized\"".

I had to add to the .npmrc:

//npm.pkg.github.com/dabku/:_authToken=TOKEN
//npm.pkg.github.com/download/:_authToken=TOKEN

Doesn’t look right to me though, I’ll try to take a second look at this at some point

3 Likes
#5

For me it works with the following using .npmrc:

@scope:registry=https://npm.pkg.github.com
13 Likes
#6

I had asked support regarding this, and they don’t officially support yarn yet. It’s on their roadmap, would love an update from them. This seems like a pretty big gap in the package registry.

1 Like
#7

Any update on this? We’re evaluating GitHub Packages but we use Yarn and the official docs do not mention any support for Yarn and this thread seems to confirm no support.

That would be ironic and disappointing since the GitHub Packages homepage has a testimonial from a Yarn maintainer. :confused:

#8

I don’t know if this is the same thing, but I can’t seem to avoid

error Couldn't find package "@scope/package" on the "npm" registry.

when running yarn install locally referring to a private package hosted on GitHub packages… I feel like I’ve tried everything (every setting in .npmrc and .yarnrc) to no avail…

1 Like
#9

Facing the same problem here.

Updating .npmrc and has gotten my npm to install the private package correctly, but yarn still throws a 401 Unauthorized.

#10

Found a fix here https://stackoverflow.com/questions/58316109/yarn-cant-find-private-github-npm-registry

Basically use .yarnrc in the repo and in it
"@myorg:registry" "https://npm.pkg.github.com"

Hope it helps

2 Likes
#11

None of the solutions presented in this topic worked for me. Can someone help me?

1 Like
#13

Hi @ThallyssonKlein,

Here’s an example workflow that publishes and adds a package using Yarn:

Does that help at all?

1 Like
#14

I just forgot to update this topic. I asked a question on Reddit some time ago and a user introduced me to a structure for .npmrc that until now is allowing me to use yarn with the github registry. This is the structure:

registry=https://registry.yarnpkg.com/

@<username>:registry=https://npm.pkg.github.com
//npm.pkg.github.com/:_authToken=<your auth token>
always-auth=true
9 Likes
#15

This solution too did not work for me for some reason.

Still errors out with a 401 Unauthorized.

#16

Tried to run a npm login before? Is your token marked for access to packages?

#17

@jcansdale Does GitHub packages automatically supports Yarn (of course we might need to change the registry url, except that) or its still needs to be implemented from GitHub Packages/Yarn team?

#18

This really is a mess! I had to do a combination of @ThallyssonKlein’s .npmrc and the .yarnrc described here

#19

What worked for me was github’s setup-node action:

      - name: Set up Node/npm/yarn
        uses: actions/setup-node@v1
        with:
          registry-url: https://npm.pkg.github.com
          scope: ${{ github.repository-owner }}
          always-auth: true
      - run: yarn install --frozen-lockfile
        env:
          NODE_AUTH_TOKEN: "${{ github.token }}"

See setup-node/action.yml at 25316bbc1f10ac9d8798711f44914b1cf3c4e954 · actions/setup-node · GitHub for more info about setup-node's inputs.

That NODE_AUTH_TOKEN may not be needed, I just added it there for good measure.

#20

For some reasons my token got revoked by github and I created a new one which works perfect in my local but it won’t work with NODE_AUTH_TOKEN.