node-opcua / node-opcua / 39381170887

91%

push

github

ci(publish): retry lerna publish when a provenance upload is replayed

Run 39320764178 failed twice on node-opcua-json 2.187.10 with
TLOG_CREATE_ENTRY_ERROR (409, an equivalent entry already exists).
Rekor stored the provenance entry, answered after the 5 s timeout of
npm's sigstore client, and the client's own retry hit the conflict: it
does not fetch the existing entry on 409.

Both publish steps now retry up to three times, 60 s apart. That is
safe because from-package only publishes versions missing from the
registry, and each attempt signs anew. The dist-tag goes through an
environment variable instead of being expanded inside the script.

34406 of 42201 branches covered (81.53%)

229477 of 251273 relevant lines covered (91.33%)

219653.2 hits per line