From 8267e77a6459eb167ed77271bf84c624ade0d150 Mon Sep 17 00:00:00 2001
From: Michael Kriese <michael.kriese@visualon.de>
Date: Thu, 21 Apr 2022 16:25:44 +0200
Subject: [PATCH] fix(manager:npm): wrong lockfile token replacement (#15229)

---
 lib/modules/manager/npm/post-update/index.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lib/modules/manager/npm/post-update/index.ts b/lib/modules/manager/npm/post-update/index.ts
index 869c48df4f..52e8b1f8a8 100644
--- a/lib/modules/manager/npm/post-update/index.ts
+++ b/lib/modules/manager/npm/post-update/index.ts
@@ -526,17 +526,17 @@ export async function getAdditionalFiles(
     NODE_ENV: 'dev',
   };
 
-  let token = '';
+  let token: string | undefined;
   try {
-    ({ token = '' } = hostRules.find({
+    ({ token } = hostRules.find({
       hostType: config.platform,
       url: 'https://api.github.com/',
     }));
-    token += '@';
+    token = token ? `${token}@` : token;
   } catch (err) {
     logger.warn({ err }, 'Error getting token for packageFile');
   }
-  const tokenRe = regEx(`${token}`, 'g', false);
+  const tokenRe = regEx(`${token ?? ''}`, 'g', false);
   const localDir = GlobalConfig.get('localDir')!;
   for (const npmLock of dirs.npmLockDirs) {
     const lockFileDir = upath.dirname(npmLock);
-- 
GitLab