Use Microsoft public npm proxy when NPM_TOKEN is not set

Dev machines can no longer reach registry.npmjs.org (forbidden), so npm-based image builds failed on the no-token fallback path. Add an explicit else branch to every Dockerfile that configures npm so that, when NPM_TOKEN is not provided, the registry is set to the Microsoft public npm proxy (https://packagefeedproxy.microsoft.io/npm/) instead of leaving npm's default (npmjs.org). The internal-token path is unchanged.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 7658094a-28a3-439f-bee4-b2f9b15e4a68

Author: premun

src/azurelinux/3.0/net10.0/webassembly/amd64/Dockerfile

@@ -16,10 +16,12 @@ RUN tdnf update -y \
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi
 
 # WebAssembly build needs typescript

src/azurelinux/3.0/net8.0/webassembly/amd64/Dockerfile

@@ -17,10 +17,12 @@ RUN tdnf update -y \
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi
 
 # WebAssembly build needs typescript

src/azurelinux/3.0/net9.0/webassembly/amd64/Dockerfile

@@ -16,10 +16,12 @@ RUN tdnf update -y \
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi
 
 # WebAssembly build needs typescript

src/azurelinux/3.0/renovate/amd64/Dockerfile

@@ -21,9 +21,11 @@ RUN tdnf update -y && \
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g renovate@${RENOVATE_VERSION}

src/ubuntu/22.04/amd64/Dockerfile

@@ -101,7 +101,7 @@ ARG NPM_TOKEN
 
 # Install Node 20 from NodeSource and use the patched npm ip module.
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN cd /etc/apt/sources.list.d && \
     rm -f nodesource.list && \
     cd ~ && \
@@ -113,6 +113,8 @@ RUN cd /etc/apt/sources.list.d && \
     if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g ip@latest
 

src/ubuntu/22.04/coredeps/amd64/Dockerfile

@@ -40,7 +40,7 @@ ARG NPM_TOKEN
 
 # Install Node 20 from NodeSource and use the patched npm ip module.
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN cd /etc/apt/sources.list.d && \
     rm -f nodesource.list && \
     cd ~ && \
@@ -52,5 +52,7 @@ RUN cd /etc/apt/sources.list.d && \
     if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g ip@latest

src/ubuntu/22.04/helix/webassembly/amd64/Dockerfile

@@ -44,10 +44,12 @@ RUN /tmp/setup-node-23.x.sh && apt-get -y install nodejs
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g npm
 

src/ubuntu/24.04/Dockerfile

@@ -100,7 +100,7 @@ ARG NPM_TOKEN
 
 # Install node 20 and use its bundled npm so we don't pull in distro npm dependencies unnecessarily.
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN rm -f /etc/apt/sources.list.d/nodesource.list && \
     cd ~ && \
     curl -sL https://deb.nodesource.com/setup_20.x -o nodesource_setup.sh && \
@@ -111,6 +111,8 @@ RUN rm -f /etc/apt/sources.list.d/nodesource.list && \
     if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g ip@latest
 

src/ubuntu/24.04/helix/webassembly/amd64/Dockerfile

@@ -49,10 +49,12 @@ RUN chmod +x /tmp/setup-node-23.x.sh \
 ARG NPM_TOKEN
 
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g npm
 

src/ubuntu/26.04/Dockerfile

@@ -101,7 +101,7 @@ ARG NPM_TOKEN
 
 # Install node 20 and use its bundled npm so we don't pull in distro npm dependencies unnecessarily.
 # When NPM_TOKEN is provided (internal builds) use the dotnet-public-npm Azure Artifacts feed;
-# otherwise fall back to the default public registry (public builds have no token).
+# otherwise fall back to the Microsoft public npm proxy (public builds have no token).
 RUN rm -f /etc/apt/sources.list.d/nodesource.list && \
     cd ~ && \
     curl -sL https://deb.nodesource.com/setup_20.x -o nodesource_setup.sh && \
@@ -112,6 +112,8 @@ RUN rm -f /etc/apt/sources.list.d/nodesource.list && \
     if [ -n "$NPM_TOKEN" ]; then \
         npm config set registry https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ && \
         npm config set "//pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/:_authToken" "$NPM_TOKEN"; \
+    else \
+        npm config set registry https://packagefeedproxy.microsoft.io/npm/; \
     fi && \
     npm install -g ip@latest