Skip to content

Conversation

@talissoncosta
Copy link
Contributor

@talissoncosta talissoncosta commented Feb 6, 2026

Summary

  • Fixes the v0.2.0 publish failure where backstage-cli was not found during the prepack lifecycle script
  • Adds yarn install --frozen-lockfile step to the publish job so dependencies are available
  • Adds --provenance flag for npm OIDC trusted publishing

Root Cause

The publish job downloads the pre-built dist/ artifact but doesn't install dependencies. When npm publish runs, it triggers the prepack script which requires backstage-cli.

Test Plan

  • Verified prepack and postpack scripts run successfully with the fix
  • Merge this PR
  • Delete and recreate the v0.2.0 tag to trigger the publish workflow
  • Verify the package is published to npm

@talissoncosta talissoncosta force-pushed the fix/publish-workflow-install-deps branch 2 times, most recently from d306573 to c3b74d5 Compare February 6, 2026 13:24
The publish job was failing because backstage-cli was not available
when npm publish triggered the prepack lifecycle script.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@talissoncosta talissoncosta force-pushed the fix/publish-workflow-install-deps branch 2 times, most recently from 2257218 to 31db38d Compare February 6, 2026 13:31
@talissoncosta talissoncosta merged commit b03c1bd into main Feb 6, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants