Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: npm/documentation
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: npm/documentation
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: kartykp/gat-bypass-2fa-docs
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 5 commits
  • 6 files changed
  • 1 contributor

Commits on Oct 28, 2025

  1. docs: document granular access token 2FA bypass feature

    Update registry documentation to reflect that Granular Access Tokens can now
    be configured to bypass 2FA requirements, making them the recommended modern
    alternative to legacy automation tokens for CI/CD workflows.
    
    Changes:
    - Updated about-access-tokens.mdx to emphasize GATs as superior alternative
      to automation tokens with enhanced security features
    - Added bypass 2FA configuration step to creating-and-viewing-access-tokens.mdx
    - Updated CI/CD workflow documentation to recommend GATs with bypass 2FA
    - Clarified package publishing 2FA requirements for tokens configured to bypass 2FA
    - Added comprehensive note in about-two-factor-authentication.mdx explaining
      GAT bypass capability and its advantages
    
    Note: CLI files (content/cli/**) are not modified as they are sourced from
    npm/cli repository and will be updated in a future npm release.
    kartykp committed Oct 28, 2025
    Configuration menu
    Copy the full SHA
    bebae10 View commit details
    Browse the repository at this point in the history

Commits on Oct 29, 2025

  1. docs: clarify 2FA bypass behavior without security warnings

    - Updated step 9 to use 'useful' instead of 'ideal' for CI/CD workflows
    - Clarified that unchecked means token respects account's normal 2FA settings
    - Removed security warning note per decision to keep documentation straightforward
    kartykp committed Oct 29, 2025
    Configuration menu
    Copy the full SHA
    f1ad235 View commit details
    Browse the repository at this point in the history
  2. docs: Add token viewing and revocation details for GAT bypass 2FA

    - Add description of bypass 2FA column in token list (shows checkmark for GATs with bypass enabled)
    - Add instructions for viewing full GAT details including bypass 2FA configuration
    - Add web interface method for token revocation (previously only documented CLI)
    - Clarify that all token types including GATs with bypass 2FA can be revoked
    kartykp committed Oct 29, 2025
    Configuration menu
    Copy the full SHA
    645bc9c View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    fdff44d View commit details
    Browse the repository at this point in the history

Commits on Oct 30, 2025

  1. Position GAT bypass 2FA as replacement for deprecated legacy automati…

    …on tokens
    
    - Update all GAT bypass 2FA mentions to emphasize it's the modern replacement for legacy automation tokens
    - Add deprecation notices where GAT bypass 2FA is discussed
    - Clarify that legacy automation tokens are being deprecated
    - Updated files:
      - about-two-factor-authentication.mdx
      - about-access-tokens.mdx
      - creating-and-viewing-access-tokens.mdx
      - using-private-packages-in-a-ci-cd-workflow.mdx
      - requiring-2fa-for-package-publishing-and-settings-modification.mdx
    kartykp committed Oct 30, 2025
    Configuration menu
    Copy the full SHA
    8511fb6 View commit details
    Browse the repository at this point in the history
Loading