Skip to content

Commit 3aaf2eb

Browse files
author
iexitdev
committed
docs(release): record npm auth publish blocker
1 parent 2122e48 commit 3aaf2eb

5 files changed

Lines changed: 30 additions & 6 deletions

File tree

docs/internal/completion-audit.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ Concrete success criteria:
5454
| Skia renderer | `packages/skia-renderer` exposes an injected primitive adapter. Baseline free chart surfaces can accept it: LineChart, BarChart, PieChart/DonutChart, ProgressChart/ProgressRing, and ContributionGraph/CalendarHeatmap. CombinedChart and CandlestickChart also accept it for Pro-preview workflows. `npm run skia:parity` covers local primitive and renderer-contract parity; `docs/release/evidence/skia-renderer-evidence.json` and `docs/release/evidence/skia-renderer-matrix.json` record the remaining gaps | Native install, native renderer parity, and native Skia performance evidence are not complete |
5555
| Native performance benchmark | Protocol exists, `docs/release/evidence/native-performance-benchmark.json` records partial status, `docs/release/native-qa-checklists.md` provides row-by-row execution guidance, and one Android release-emulator line-animation timing/memory sample is captured. `docs/release/evidence/native-performance-matrix.json` now links to dedicated 100/1,000/10,000-point, 500-bar, and 1,000-candle QA stories and validates expected metrics against showcase fixture metadata, but still has 18 pending platform/scenario rows | Full release-device matrix is still missing |
5656
| Screen-reader QA | Protocol exists, `docs/release/native-qa-checklists.md` provides row-by-row execution guidance, and `docs/release/evidence/native-accessibility-qa.json` records missing status. `docs/release/evidence/native-accessibility-matrix.json` has 16 pending assistive-tech/page rows | Accessibility helpers exist, but native assistive-tech behavior is not verified |
57-
| Developer Preview publish | `react-native-chart-kit@7.0.0-next.0` is published under `next`, but `@chart-kit/core`, `@chart-kit/svg-renderer`, and `@chart-kit/react-native` are not published because the publish workflow currently receives no usable npm auth token. `@chart-kit/pro` and `@chart-kit/skia-renderer` remain unpublished as intended. | The modern package path for new adopters is not installable until GitHub Actions npm auth and `@chart-kit` scope access are fixed |
57+
| Developer Preview publish | `react-native-chart-kit@7.0.0-next.0` is published under `next`, but `@chart-kit/core`, `@chart-kit/svg-renderer`, and `@chart-kit/react-native` are not published because the publish workflow currently receives no usable npm auth token. The latest recorded publish rerun is `25423381765`; repository secret inspection returned no configured Actions secrets, and local npm auth returned `E401 Unauthorized`. `@chart-kit/pro` and `@chart-kit/skia-renderer` remain unpublished as intended. | The modern package path for new adopters is not installable until GitHub Actions npm auth and `@chart-kit` scope access are fixed |
5858
| H6 approval | No RC approval, final semver, final release notes, final visual freeze | Release candidate cannot be claimed |
5959

6060
## Current Gate Position
@@ -67,6 +67,6 @@ Concrete success criteria:
6767

6868
## Recommended Next Decisions
6969

70-
1. Add or repair the GitHub Actions `NPM_TOKEN` secret, make sure it can create and publish public packages under the npm `@chart-kit` scope, then rerun the publish workflow with npm dist-tag `next`; it should skip the already-published root package and publish the remaining scoped free packages.
70+
1. Add the GitHub Actions `NPM_TOKEN` secret, make sure it can create and publish public packages under the npm `@chart-kit` scope, then rerun the publish workflow with npm dist-tag `next`; it should skip the already-published root package and publish the remaining scoped free packages.
7171
2. Run the native runtime, accessibility, performance, and Skia evidence matrices.
7272
3. If production beta is the target, prioritize native device QA and accessibility QA before adding more chart features.
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"schemaVersion": 1,
3+
"lastUpdated": "2026-05-06",
4+
"status": "blocked",
5+
"checks": [
6+
{
7+
"command": "gh secret list --repo indiespirit/react-native-chart-kit --json name,updatedAt",
8+
"result": "pass",
9+
"outputSummary": "Returned an empty list, so no repository Actions secrets are configured."
10+
},
11+
{
12+
"command": "npm whoami --registry https://registry.npmjs.org/",
13+
"result": "blocked",
14+
"outputSummary": "Returned E401 Unauthorized, so this shell does not have npm publish credentials."
15+
}
16+
],
17+
"nextRequiredAction": "Add a repository Actions secret named NPM_TOKEN with npm publish rights for the @chart-kit scope, or complete local npm login with an account that can publish the scoped packages."
18+
}

docs/release/evidence/npm-publish-evidence.json

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,13 @@
2626
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25415346511",
2727
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25416750710",
2828
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25417506026",
29-
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25417790177"
29+
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25417790177",
30+
"https://github.com/indiespirit/react-native-chart-kit/actions/runs/25423381765"
3031
]
32+
},
33+
{
34+
"result": "May 6, 2026 repository Actions secret inspection returned no configured secrets, and local npm auth preflight returned E401 Unauthorized.",
35+
"artifacts": ["docs/release/evidence/npm-auth-preflight.json"]
3136
}
3237
],
3338
"missingEvidence": [

docs/release/known-issues.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,9 +12,9 @@ Impact: native release-build workflow evidence is no longer the blocker, but pro
1212

1313
## Developer Preview Package Publish
1414

15-
`react-native-chart-kit@7.0.0-next.0` is published under the `next` npm dist-tag, while `latest` remains `6.12.2`. The scoped modern packages are not published yet. A May 6, 2026 publish rerun failed before package installation because GitHub Actions received an empty npm auth token (`NODE_AUTH_TOKEN`), so npm returned `ENEEDAUTH`.
15+
`react-native-chart-kit@7.0.0-next.0` is published under the `next` npm dist-tag, while `latest` remains `6.12.2`. The scoped modern packages are not published yet. May 6, 2026 publish reruns failed before package installation because GitHub Actions received an empty npm auth token (`NODE_AUTH_TOKEN`), so npm returned `ENEEDAUTH`. The latest recorded run is [25423381765](https://github.com/indiespirit/react-native-chart-kit/actions/runs/25423381765), and repository secret inspection returned no configured Actions secrets.
1616

17-
The structured status lives in [npm-publish-evidence.json](evidence/npm-publish-evidence.json), and the exact rerun procedure is documented in [npm-publish-runbook.md](npm-publish-runbook.md). The publish workflow now verifies npm auth/scope access before expensive checks, skips already-published package versions, and publishes the scoped dependency packages before the root compatibility package on the next rerun. The next unblock is to add or repair the GitHub Actions `NPM_TOKEN` secret and ensure that token can create and publish public packages under the `@chart-kit` scope.
17+
The structured status lives in [npm-publish-evidence.json](evidence/npm-publish-evidence.json), and the exact rerun procedure is documented in [npm-publish-runbook.md](npm-publish-runbook.md). The publish workflow now verifies npm auth/scope access before expensive checks, skips already-published package versions, and publishes the scoped dependency packages before the root compatibility package on the next rerun. The next unblock is to add the GitHub Actions `NPM_TOKEN` secret and ensure that token can create and publish public packages under the `@chart-kit` scope.
1818

1919
Impact: existing users can install the root preview package with the `next` dist-tag, but new adopters cannot install the modern `@chart-kit/react-native` package until the npm `@chart-kit` scope access is fixed and the publish workflow is rerun.
2020

docs/release/npm-publish-runbook.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,10 @@ The latest publish rerun failed before install/build because GitHub Actions rece
2525
- [Publish rerun 25416750710](https://github.com/indiespirit/react-native-chart-kit/actions/runs/25416750710)
2626
- [Publish rerun 25417506026](https://github.com/indiespirit/react-native-chart-kit/actions/runs/25417506026)
2727
- [Publish rerun 25417790177](https://github.com/indiespirit/react-native-chart-kit/actions/runs/25417790177)
28+
- [Publish rerun 25423381765](https://github.com/indiespirit/react-native-chart-kit/actions/runs/25423381765)
2829
- Evidence: [npm-publish-evidence.json](evidence/npm-publish-evidence.json)
2930

30-
The workflow expects a repository Actions secret named `NPM_TOKEN`.
31+
The workflow expects a repository Actions secret named `NPM_TOKEN`. On May 6, 2026, `gh secret list --repo indiespirit/react-native-chart-kit --json name,updatedAt` returned an empty list, and local `npm whoami --registry https://registry.npmjs.org/` returned `E401 Unauthorized`. The local auth preflight is recorded in [npm-auth-preflight.json](evidence/npm-auth-preflight.json).
3132

3233
## Required Token Properties
3334

0 commit comments

Comments
 (0)