Skip to content

fix: Retry npm tlog publish failures#12959

Merged
anthonyshew merged 1 commit into
mainfrom
shew/retry-npm-tlog-publish
May 27, 2026
Merged

fix: Retry npm tlog publish failures#12959
anthonyshew merged 1 commit into
mainfrom
shew/retry-npm-tlog-publish

Conversation

@anthonyshew

@anthonyshew anthonyshew commented May 27, 2026

Copy link
Copy Markdown
Contributor

Why

npm provenance publishing can fail transiently while creating Sigstore/Rekor transparency log entries. When that happens mid-release, npm packages published earlier remain published and the release needs manual recovery.

What

Adds targeted retries around JS package npm publish calls when npm reports the tlog creation failure seen in release jobs.

How

Each publish captures npm output, retries up to three attempts only for TLOG_CREATE_ENTRY_ERROR or error creating tlog entry, and preserves fail-fast behavior for other npm errors.

Verified with make -n publish-turbo.

@anthonyshew anthonyshew requested a review from a team as a code owner May 27, 2026 16:45
@anthonyshew anthonyshew requested review from tknickman and removed request for a team May 27, 2026 16:45
@vercel

vercel Bot commented May 27, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
examples-basic-web Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-designsystem-docs Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-gatsby-web Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-kitchensink-blog Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-nonmonorepo Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-svelte-web Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-tailwind-web Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
examples-vite-web Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm
turbo-site Ready Ready Preview, Comment, Open in v0 May 27, 2026 4:46pm

@anthonyshew anthonyshew merged commit 5317f65 into main May 27, 2026
32 of 33 checks passed
@anthonyshew anthonyshew deleted the shew/retry-npm-tlog-publish branch May 27, 2026 16:46
anthonyshew pushed a commit that referenced this pull request May 27, 2026
## Release v2.9.16-canary.2

> [!CAUTION]
> Versioned docs aliasing FAILED. [View
logs](https://github.com/vercel/turborepo/actions/runs/26525563543)

### Changes

- release(turborepo): 2.9.15-canary.7 (#12935) (`0e56cdc`)
- fix: Restore a few internal invariant checks (#12933) (`767a9d4`)
- fix: Improve profile tracing coverage (#12936) (`3063672`)
- fix: Use build-scale OTel duration buckets (#12939) (`6ed6fb0`)
- fix: Preserve pnpm injected peer package entries (#12940) (`31123f4`)
- feat: Add heap allocation profiling (#12943) (`c7ad6f2`)
- release(turborepo): 2.9.15-canary.8 (#12945) (`06e81ea`)
- docs: Correct attribute presence claims in turborepo-otel (#12932)
(`8fc94f3`)
- chore(turbo-codemod): remove duplicate "in" in transforms path comment
(#12948) (`5fa3039`)
- chore: Switch Geist font imports to npm geist package (#12952)
(`ebebf41`)
- fix: Respect root gitignore during prune (#12953) (`f96ccc4`)
- fix: Harden OTEL endpoint validation (#12954) (`076ff97`)
- release(turborepo): 2.9.15 (#12955) (`c85d410`)
- fix: Avoid hanging PTY shutdown (#12958) (`52e81bd`)
- fix: Retry npm tlog publish failures (#12959) (`5317f65`)
- release(turborepo): 2.9.16-canary.1 (#12960) (`2284fa9`)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
anthonyshew pushed a commit that referenced this pull request May 28, 2026
## Release v2.9.16

> [!CAUTION]
> Versioned docs aliasing FAILED. [View
logs](https://github.com/vercel/turborepo/actions/runs/26579906777)

### Changes

- release(turborepo): 2.9.15 (#12955) (`c85d410`)
- fix: Avoid hanging PTY shutdown (#12958) (`52e81bd`)
- fix: Retry npm tlog publish failures (#12959) (`5317f65`)
- release(turborepo): 2.9.16-canary.1 (#12960) (`2284fa9`)
- fix: Preserve nested Bun dependency versions (#12963) (`8d4eaf8`)
- Revert "fix: Preserve nested Bun dependency versions" (#12964)
(`3b1b6e9`)
- release(turborepo): 2.9.16-canary.2 (#12961) (`5e5b248`)
- fix: Preserve nested Bun dependency versions (#12965) (`7952b46`)
- fix: Don't delete existing `.git` when using `--no-git` flag (#12968)
(`b4aa626`)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant