Skill Recorder Files

Source-only release

Skill Recorder 0.4.2 is published from commit 93b3ccf887a46d3e3b91ed856d888d399b02c6e4.

This release is source-only. No installers or portable binaries are attached; GitHub's generated archives contain the tagged repository source only.

Highlights

This is a hotfix for installation failures on networks that block registry.npmjs.org.

• Fixes source installs failing with ERR_SSL_SSL/TLS_ALERT_HANDSHAKE_FAILURE on machines whose npm registry is configured globally, such as corporate-managed devices behind a proxy. The installers download a portable Node.js runtime, and portable Node archives do not ship the builtin npmrc that the Windows MSI uses to locate the machine's global npm configuration. The bundled npm therefore never saw the configured registry and fell back to the public one, which those networks block.
• Both installers now point the portable runtime at the machine's existing npm configuration, so a configured mirror is discovered automatically.
• npm ci failures now report which registry was actually contacted and how to configure a mirror.
• INSTALL.md documents the behaviour in a new "Networks that block registry.npmjs.org" section.

Users with no npm configuration are unaffected: the installers only apply the machine's configuration when a config file actually exists on disk.

Security, compatibility, and licensing

• The installers discover the registry configured on the machine; they never pin, override, or dictate one. A regression test enforces this.
• The lockfile's resolved URLs remain canonical registry.npmjs.org URLs, and its integrity hashes are verified whichever registry serves the packages, so a mirror cannot substitute different content.
• Dependency install-script policy is unchanged and still passed on the command line, which outranks any configuration file.
• No dependencies, bundled assets, or compliance-policy entries changed from v0.4.1.
• Local release validation produced a 227-package license inventory and passed the lockfile portability, license, build, typecheck, and test gates. The release commit passed the Windows and Non-Windows workflows.
• No data migration is required. Re-run the commit-pinned source installer below to update an existing source installation.

Installer script SHA-256

:::text
dfe8800cad133175e63b2671acef76923f2e9389dd3c05d3e7fb937c7378fcc3  install.ps1
1a7d35c54a6c7f11b12aad1021e0758045544b082e38d986337aecfd2c247e2b  install.sh

Commit-pinned installation

Windows 11 x64 or ARM64

:::powershell
$commit="93b3ccf887a46d3e3b91ed856d888d399b02c6e4"; $env:SKILL_RECORDER_COMMIT=$commit; irm "https://raw.githubusercontent.com/microsoft/skill-recorder/$commit/install.ps1" | iex

macOS or Ubuntu

:::sh
commit="93b3ccf887a46d3e3b91ed856d888d399b02c6e4"; curl -fsSL "https://raw.githubusercontent.com/microsoft/skill-recorder/$commit/install.sh" | SKILL_RECORDER_COMMIT="$commit" bash

What's changed

• Make the portable runtime honour the machine's npm configuration (#57)
• Release 0.4.2 (#58)

Full changelog: https://github.com/microsoft/skill-recorder/compare/v0.4.1...v0.4.2