{"push_id":1412133516,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"99916d4c519fd210923f5fe2dcbb1341725903ba","before":"bacf1fbe76cf2dd038efbfe210012905448f1bd2","commits":[{"sha":"99916d4c519fd210923f5fe2dcbb1341725903ba","author":{"name":"Karolis Narkevicius","email":"98a59098b971a9d9e5041a47a2c10594c4c6791d@gmail.com"},"message":"Fix request authentication for scoped private registry tarballs (#1666)\n\n* Fix request authentication for scoped private registry tarballs\r\n\r\nYarn correctly sends authorization headers when resolving metadata, but\r\nwhen it's time to download the tarballs, it calls registry.request\r\nwith a full tarball url. This causes the getRegistry() function to\r\nincorrectly return the DEFAULT_REGISTRY url which means the authorization\r\nheaders are no longer sent. The response in this case is a JSON error\r\nobject instead of a tarball file. Untaring fails with \"invalid tar file\"\r\n\r\n* Don't assume anything about the registry URL, read registries from config\r\n\r\n* Add a test for installing private packages requiring authentication\r\n\r\n* Change the authed package testing strategy to be more local\r\n\r\n* Include non scoped registries in available registries list\r\n\r\n* Unnest the authed pkg test, use FlowFixMe for afterEach","distinct":true,"url":"https://api.github.com/repos/yarnpkg/yarn/commits/99916d4c519fd210923f5fe2dcbb1341725903ba"}]}
{"actor":{"display_login":"bestander"}}