Skip to content

Remove registry URLs from npm lockfile - #856

Merged
Muiris Woulfe (muiriswoulfe) merged 3 commits into
microsoft:mainfrom
muiriswoulfe:fix/npm-lockfile-registry-urls-signed
Aug 28, 2026
Merged

Remove registry URLs from npm lockfile#856
Muiris Woulfe (muiriswoulfe) merged 3 commits into
microsoft:mainfrom
muiriswoulfe:fix/npm-lockfile-registry-urls-signed

Conversation

@muiriswoulfe

Copy link
Copy Markdown
Member

Replaces #845 with a GitHub-signed commit. Original change by Jamie Magee (@JamieMagee).

Summary

Add omit-lockfile-registry-resolved=true to the existing root .npmrc and regenerate the lockfile with npm 10.9.4. The lockfile no longer records registry tarball URLs.

Testing

Test Types

  • Unit tests
  • Manual tests

Unit Test Coverage

npx -y npm@10.9.4 run test:fast completed with 100% statement, branch, function, and line coverage.

Other Test Details

  • Confirmed npm reads omit-lockfile-registry-resolved as true
  • Confirmed package feed URLs are absent from package-lock.json
  • Confirmed the lockfile diff only removes 645 registry resolved fields
  • Repeated lockfile generation and confirmed there were no further changes
  • npx -y npm@10.9.4 ci --no-audit --no-fund

Screenshots

Not applicable.

Recreated from the deleted source fork for closed PR #854.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Configures npm to omit registry tarball URLs from generated lockfiles, improving registry portability.

Changes:

  • Enables omit-lockfile-registry-resolved in the root npm configuration.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@muiriswoulfe
Muiris Woulfe (muiriswoulfe) merged commit ca92297 into microsoft:main Aug 28, 2026
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants