Add NPM Token expiry alert to nightly workflow

.github/actions/bundle_size_test/action.yml

@@ -1,4 +1,5 @@
 name: bundlesize
+description: Check bundle size against maximum file size limits
 runs:
   using: composite
   steps:

.github/actions/check_clean/action.yml

@@ -1,4 +1,5 @@
 name: check_clean
+description: Check if repository has uncommitted changes
 runs:
   using: composite
   steps:

.github/actions/check_if_latest_release/action.yml

@@ -1,4 +1,5 @@
 name: check_if_latest_release
+description: Check if the current release is the latest release
 inputs:
   token:
     description: "Github API token"

.github/actions/count_deps/action.yml

@@ -1,4 +1,5 @@
 name: count_deps
+description: Count and validate project dependencies
 inputs:
   project_dir:
     description: 'Path to the project directory'

.github/actions/create_mrt/action.yml

@@ -1,4 +1,5 @@
 name: create_mrt
+description: Create MRT credentials file
 inputs:
   mobify_user:
     description: "Mobify user email"

.github/actions/datadog/action.yml

@@ -1,4 +1,5 @@
 name: datadog
+description: Send metrics to Datadog
 inputs:
   datadog_api_key:
     description: "Datadog API key"

.github/actions/e2e_generate_app/action.yml

@@ -1,4 +1,5 @@
 name: e2e_generate_app
+description: Generate a new project for E2E testing
 inputs:
   PROJECT_KEY:
     description: Project key to specify project to generate ("retail-app-demo", "retail-app-ext" or "retail-app-no-ext")

.github/actions/e2e_validate_generated_app/action.yml

@@ -1,4 +1,5 @@
 name: e2e_validate_generated_app
+description: Validate generated project for E2E testing
 inputs:
   PROJECT_KEY:
     description: Project key to specify project to validate ("retail-app-demo", "retail-app-ext" or "retail-app-no-ext")

.github/actions/lighthouse_ci/action.yml

@@ -1,4 +1,5 @@
 name: lighthouse_ci
+description: Run Lighthouse CI performance tests
 runs:
   using: composite
   steps:

.github/actions/linting/action.yml

@@ -1,4 +1,5 @@
 name: linting
+description: Run linting checks on the codebase
 inputs:
   cwd:
     required: false

.github/actions/publish_to_npm/action.yml

@@ -1,4 +1,5 @@
 name: publish_to_npm
+description: Publish packages to NPM registry
 inputs:
   NODE_AUTH_TOKEN:
     description: "Node auth token"

.github/actions/push_to_mrt/action.yml

@@ -1,4 +1,5 @@
 name: push_to_mrt
+description: Push bundle to MRT (Managed Runtime)
 inputs:
     CWD:
         description: Project directory

.github/actions/smoke_tests/action.yml

@@ -1,4 +1,5 @@
 name: smoke_tests
+description: Run smoke tests on npm scripts
 inputs:
   dir:
     required: false

.github/actions/snyk/action.yml

@@ -1,4 +1,5 @@
 name: snyk
+description: Run Snyk security audit on the project
 inputs:
   snyk_token:
     description: "Snyk token"

.github/workflows/nightly_release.yml

@@ -26,7 +26,6 @@ jobs:
           echo "monorepo_version_base=$version" >> "$GITHUB_ENV"
           version_major=`echo "$version" | cut -d "." -f 1`
           echo "monorepo_version_major=$version_major" >> "$GITHUB_ENV"
-          echo "nightly_version=${{ env.monorepo_version_base }}-nightly-${{ env.release_timestamp }}" ?? "$GITHUB_ENV"
 
       - name: Get nightly version
         run:  echo "nightly_version=${{ env.monorepo_version_base }}-nightly-${{ env.release_timestamp }}" >> "$GITHUB_ENV"
@@ -116,7 +115,7 @@ jobs:
         with:
           payload: |
             {
-              "message": "Successfully released PWA Kit v${{ env.nightly_version }}"
+              "message": "✅ Successfully released PWA Kit v${{ env.nightly_version }}"
             }
         env:
           SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
@@ -128,7 +127,37 @@ jobs:
         with:
           payload: |
             {
-              "message": "Failed to release PWA Kit v${{ env.monorepo_version_base }}-nightly-${{ env.release_timestamp }} (${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
+              "message": "❌ Failed to release PWA Kit v${{ env.monorepo_version_base }}-nightly-${{ env.release_timestamp }} (${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
+            }
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+
+      - name: Check NPM Token Expiry
+        if: always()
+        run: |
+          LAST_ROTATION="${{ secrets.NPM_TOKEN_LAST_ROTATION_DATE }}"
+
+          if [ -z "$LAST_ROTATION" ]; then
+            echo "NPM_TOKEN_LAST_ROTATION_DATE secret not set, skipping expiry check"
+            exit 0
+          fi
+
+          CURRENT_DATE=$(date +%s)
+          EXPIRY_DATE=$(( $LAST_ROTATION + 7776000 ))  # 90 days in seconds (90 * 24 * 60 * 60)
+          DAYS_LEFT=$(( ($EXPIRY_DATE - $CURRENT_DATE) / 86400 ))
+
+          echo "NPM Token last rotated: $(date -d @$LAST_ROTATION +'%Y-%m-%d')"
+          echo "Days until expiry: $DAYS_LEFT"
+          echo "days_left=$DAYS_LEFT" >> "$GITHUB_ENV"
+          echo "should_notify=$( [ $DAYS_LEFT -le 10 ] && echo 'true' || echo 'false' )" >> "$GITHUB_ENV"
+
+      - name: Send Token Expiry Warning to Slack
+        if: always() && env.should_notify == 'true'
+        uses: slackapi/slack-github-action@v1.23.0
+        with:
+          payload: |
+            {
+              "message": "⚠️ NPM Token expiring soon! Only ${{ env.days_left }} days remaining. Please rotate the token using the instructions in this doc: ${{ secrets.PWA_KIT_RELEASE_DOC_LINK }}"
             }
         env:
           SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}