network isolation

Author: Pavel Glac

.azure-devops/release.yaml

@@ -7,6 +7,8 @@ variables:
     value: production,externalfacing
   - name: serviceTreeID
     value: 21f0b890-e3a8-4c0b-b9e7-2f764f8b799c
+  - name: adoMirrorNpmFeedBaseUrl
+    value: https://pkgs.dev.azure.com/DomoreexpGithub/Github_Pipelines/_packaging/github-npm-mirror/npm/registry/
 
 resources:
   repositories:
@@ -54,11 +56,34 @@ extends:
               - task: NodeTool@0
                 displayName: "Installing node"
                 inputs:
-                  versionSpec: "16"
-              - script: yarn --frozen-lockfile
+                  versionSpec: "18"
+              - script: |
+                  cat <<'EOF' > "$(Agent.TempDirectory)/npm-mirror.npmrc"
+                  always-auth=true
+                  registry=$(adoMirrorNpmFeedBaseUrl)
+                  EOF
+                displayName: Create temporary .npmrc for mirror feed
+              - task: npmAuthenticate@0
+                inputs:
+                  workingFile: "$(Agent.TempDirectory)/npm-mirror.npmrc"
+              - script: |
+                  TOKEN=$(grep '_authToken' "$(Agent.TempDirectory)/npm-mirror.npmrc" | head -1 | cut -d'=' -f2)
+                  echo "##vso[task.setvariable variable=NPM_TOKEN;issecret=true]$TOKEN"
+                displayName: Extract token from .npmrc
+              - script: |
+                  yarn config set npmAlwaysAuth true
+                  yarn config set npmRegistryServer $(adoMirrorNpmFeedBaseUrl)
+                displayName: Configure yarn for ADO npm feed
+              - script: yarn install --immutable
                 displayName: yarn
+                env:
+                  YARN_NPM_AUTH_TOKEN: $(NPM_TOKEN)
+                  NPM_CONFIG_USERCONFIG: $(Agent.TempDirectory)/npm-mirror.npmrc
               - script: yarn build && yarn test:ci
                 displayName: build and test [test]
+                env:
+                  YARN_NPM_AUTH_TOKEN: $(NPM_TOKEN)
+                  NPM_CONFIG_USERCONFIG: $(Agent.TempDirectory)/npm-mirror.npmrc
 
               - script: |
                   mkdir -p $(System.DefaultWorkingDirectory)/packages

.github/workflows/pr.yml

@@ -26,13 +26,13 @@ jobs:
       # Sets up Node and an .npmrc file. This is the official Github supported way to set up node.
       - uses: actions/setup-node@v4
         with:
-          node-version: "16"
+          node-version: "18"
           registry-url: "https://registry.npmjs.org"
           cache: "yarn"
           always-auth: "true"
 
       - name: Install packages
-        run: yarn --frozen-lockfile
+        run: yarn install --immutable
 
       - name: Set Firefox Env Variable
         run: export FIREFOX_BIN=$(which firefox)

.gitignore

@@ -5,3 +5,6 @@
 *.user
 /ObjectStoreProviderTestsPack.js
 /dist
+
+# Yarn Berry install state cache
+.yarn/install-state.gz

.prettierignore

@@ -6,3 +6,4 @@
 /ObjectStoreProviderTestsPack.js
 /dist
 /.config
+/.yarn

.yarn/releases/yarn-4.17.0.cjs

@@ -0,0 +1,10 @@
+approvedGitRepositories:
+  - "**"
+
+enableScripts: true
+
+nodeLinker: node-modules
+
+npmMinimalAgeGate: 0
+
+yarnPath: .yarn/releases/yarn-4.17.0.cjs

.yarnrc.yml

@@ -66,7 +66,7 @@
     "ts-loader": "^9.2.3",
     "ts-node": "^10.0.0",
     "typescript": "^4.3.4",
-    "webpack": "^5.39.1",
+    "webpack": "^5.108.4",
     "webpack-cli": "^4.7.2"
   },
   "repository": {
@@ -89,5 +89,6 @@
     "react native"
   ],
   "license": "MIT",
-  "homepage": "https://github.com/microsoft/objectstoreprovider#readme"
+  "homepage": "https://github.com/microsoft/objectstoreprovider#readme",
+  "packageManager": "yarn@4.17.0"
 }