From 58eab148c8866d24ef31025964aebc4167c62008 Mon Sep 17 00:00:00 2001
From: James Troup <james@stacklet.io>
Date: Fri, 9 Oct 2026 14:39:36 +0100
Subject: [PATCH] fix: pass the e2e npmrc build secret from the environment

---
 .ci/compose.cypress.yaml | 2 +-
 justfile                 | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.ci/compose.cypress.yaml b/.ci/compose.cypress.yaml
index ea65a8cdf5..f2fb4ce676 100644
--- a/.ci/compose.cypress.yaml
+++ b/.ci/compose.cypress.yaml
@@ -78,4 +78,4 @@ services:
       POSTGRES_HOST_AUTH_METHOD: "trust"
 secrets:
   npmrc:
-    file: ${HOME}/.npmrc
+    environment: NPMRC
diff --git a/justfile b/justfile
index 56e4c40058..39d1bfc8ee 100644
--- a/justfile
+++ b/justfile
@@ -76,6 +76,10 @@ e2e-test: cleanup-e2e-test
 	export COMPOSE_PROJECT_NAME=cypress
 	export COMPOSE_DOCKER_CLI_BUILD=1
 	export DOCKER_BUILDKIT=1
+	# Passed as an environment secret: bake refuses file secrets outside the
+	# repo, and Compose does not grant it fs.read for them.
+	NPMRC=$(< ~/.npmrc)
+	export NPMRC
 
 	echo "Building Cypress environment..."
 	yarn cypress build