The automated release is failing 🚨 about r2

[gr2m]

@mikeal can you re-run semantic-release-cli setup? That’ll fix the tokens. npm invalided all tokens recently

[mikeal]

@gr2m I got this error:

(master)⚡ % semantic-release-cli setup                                                                                                                             ~/git/r2
? What is your npm registry? https://registry.npmjs.org/
? What is your npm username? mikeal
ERR! semantic-release Error: Could not login to npm.
ERR! semantic-release     at getNpmToken (/usr/local/lib/node_modules/semantic-release-cli/src/lib/npm.js:55:21)
ERR! semantic-release     at process._tickCallback (internal/process/next_tick.js:68:7)
ERR! semantic-release  { Error: Could not login to npm.
ERR! semantic-release     at getNpmToken (/usr/local/lib/node_modules/semantic-release-cli/src/lib/npm.js:55:21)
ERR! semantic-release     at process._tickCallback (internal/process/next_tick.js:68:7)
ERR! semantic-release   stack:
ERR! semantic-release    'Error: Could not login to npm.\n    at getNpmToken (/usr/local/lib/node_modules/semantic-release-cli/src/lib/npm.js:55:21)\n    at process._tickCallback (internal/process/next_tick.js:68:7)' }
(master)⚡ [1] % semantic-release-cli setup

[gr2m]

would you mind if I created a dedicated npm account only for r2 releases? It’s what I usually do for my bigger repositories, it’s also more secure because npm tokens cannot be scoped by package and if someone were to get access to your token they could do some damage to all npm packages you have write access to

[mikeal]

Go for it :)

…

On Tue, Aug 21, 2018, 12:25 PM Gregor Martynus ***@***.***> wrote: would you mind if I created a dedicated npm account only for r2 releases? It’s what I usually do for my bigger repositories, it’s also more secure because npm tokens cannot be scoped by package and if someone were to get access to your token they could do some damage to all npm packages you have write access to — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#74 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAACQ6RSzmSDBztxB98aQh5x9XdaUo4Dks5uTF6jgaJpZM4WE6yx> .

[gr2m]

can you invite https://www.npmjs.com/~r2bot as collaborator to the r2 package?