From 844dc4af55a6ae531a0b45272fd064b8f50ef068 Mon Sep 17 00:00:00 2001 From: Falk Wolsky Date: Sun, 11 Oct 2026 12:41:34 +0200 Subject: [PATCH 1/3] Fix SonarCloud reactor build --- .github/workflows/sonarcloud.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 64b8252843..6259b3777d 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -24,7 +24,9 @@ jobs: ref: ${{ github.event.pull_request.head.sha }} - name: Build Java run: | - mvn clean compile -DskipTests -f ./server/api-service/pom.xml + # Downstream modules need the SDK's shared test-helper JAR, which is + # attached during package. Keep test compilation enabled for that JAR. + mvn --batch-mode --no-transfer-progress clean package -DskipTests -f ./server/api-service/pom.xml - name: SonarCloud Scan uses: SonarSource/sonarcloud-github-action@master env: From 50bc167a2a7ebd8f4e6167c42ea63c0d68936eb8 Mon Sep 17 00:00:00 2001 From: Falk Wolsky Date: Sun, 11 Oct 2026 12:42:49 +0200 Subject: [PATCH 2/3] Expose npm OIDC failures in Comps publishing --- .github/workflows/publish-lowcoder-comps.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-lowcoder-comps.yml b/.github/workflows/publish-lowcoder-comps.yml index f151f878f6..cc803dfc49 100644 --- a/.github/workflows/publish-lowcoder-comps.yml +++ b/.github/workflows/publish-lowcoder-comps.yml @@ -64,11 +64,15 @@ jobs: - name: Set up npm for trusted publishing if: steps.check.outputs.changed == 'true' # OIDC requires npm >=11.5.1. Pin npm 11 to avoid npm 12 install-policy changes. - run: npm install --global npm@11.21.0 --registry=https://registry.npmjs.org/ + run: | + npm install --global npm@11.21.0 --registry=https://registry.npmjs.org/ + npm --version - name: Publish package to npm with OIDC if: steps.check.outputs.changed == 'true' - run: npm publish --access public --registry=https://registry.npmjs.org/ + # npm hides OIDC token-exchange failures behind ENEEDAUTH at its default + # log level. Show the registry's reason so publisher settings can be fixed. + run: npm publish --access public --registry=https://registry.npmjs.org/ --loglevel=verbose # lowcoder-cli writes the compiled package here; publishing the source # workspace would omit the generated component entry point. working-directory: client/packages/lowcoder-cli/.out From 3bf5db6f72fccb2924ca4a3790e13842d0e599f1 Mon Sep 17 00:00:00 2001 From: Falk Wolsky Date: Sun, 11 Oct 2026 12:47:26 +0200 Subject: [PATCH 3/3] Expose npm OIDC failures in SDK publishing --- .github/workflows/publish-lowcoder-sdk.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-lowcoder-sdk.yml b/.github/workflows/publish-lowcoder-sdk.yml index 3bbd890b65..7e796a65c0 100644 --- a/.github/workflows/publish-lowcoder-sdk.yml +++ b/.github/workflows/publish-lowcoder-sdk.yml @@ -64,9 +64,13 @@ jobs: - name: Set up npm for trusted publishing if: steps.check.outputs.changed == 'true' # OIDC requires npm >=11.5.1. Pin npm 11 to avoid npm 12 install-policy changes. - run: npm install --global npm@11.21.0 --registry=https://registry.npmjs.org/ + run: | + npm install --global npm@11.21.0 --registry=https://registry.npmjs.org/ + npm --version - name: Publish package to npm with OIDC if: steps.check.outputs.changed == 'true' - run: npm publish --access public --registry=https://registry.npmjs.org/ + # npm hides OIDC token-exchange failures behind ENEEDAUTH at its default + # log level. Show the registry's reason so publisher settings can be fixed. + run: npm publish --access public --registry=https://registry.npmjs.org/ --loglevel=verbose working-directory: client/packages/lowcoder-sdk