ci: also rewrite npm-proxy.dev URLs to JFrog in setup-jfrog

Diagnostic run revealed the package-lock.json contains 415 URLs
pointing to `npm-proxy.dev.databricks.com` (in addition to 774
pointing to `registry.npmjs.org`). The internal dev-proxy URLs are
written by `npm install` when the lockfile is regenerated on a dev
workstation whose .npmrc points to that proxy.

Protected runners cannot reach npm-proxy.dev.databricks.com — every
fetch fails with ECONNRESET, npm retries (default 2 attempts), then
gives up with "Exit handler never called", skipping bin-linking and
breaking downstream `prettier`/`nyc` calls.

Extend the sed rewrite to cover both registry hosts so all `resolved:`
URLs route through JFrog regardless of where the lockfile was
generated. Also print the post-rewrite URL distribution so future
debugging is one log scroll away.

Co-authored-by: Isaac
Signed-off-by: Vikrant Puppala <vikrant.puppala@databricks.com>

Author: vikrantpuppala

.github/actions/setup-jfrog/action.yml

@@ -37,18 +37,28 @@ runs:
 
     # Rewrite lockfile `resolved:` URLs to JFrog. `npm ci` honors the
     # lockfile's `resolved:` URL over the `.npmrc` registry; protected
-    # runners cannot reach `registry.npmjs.org` directly, so without
-    # this rewrite npm hangs ~8 minutes on any package not already in
-    # the `~/.npm` cache, then dies with "Exit handler never called".
-    # The committed lockfile is kept in standard form (public-npm URLs)
-    # so contributors can `npm ci` locally; this step adapts it for CI.
+    # runners cannot reach `registry.npmjs.org` or the internal
+    # `npm-proxy.dev.databricks.com` directly, so without this rewrite
+    # npm hangs ~8 minutes on any package whose `resolved:` points
+    # elsewhere, then dies with "Exit handler never called".
+    # The committed lockfile is kept as-generated locally (mixed
+    # public-npm + dev-proxy URLs) so contributors can `npm ci`
+    # locally; this step adapts it for CI.
     - name: Rewrite lockfile to JFrog registry
       shell: bash
       run: |
         set -euo pipefail
         if [ -f package-lock.json ]; then
-          sed -i 's|https://registry.npmjs.org|https://databricks.jfrog.io/artifactory/api/npm/db-npm|g' package-lock.json
+          # Rewrite both public npm and the internal dev-proxy (the
+          # latter is written by `npm install` when run on a dev
+          # workstation whose .npmrc points at npm-proxy.dev).
+          sed -i \
+            -e 's|https://registry.npmjs.org|https://databricks.jfrog.io/artifactory/api/npm/db-npm|g' \
+            -e 's|https://npm-proxy.dev.databricks.com|https://databricks.jfrog.io/artifactory/api/npm/db-npm|g' \
+            package-lock.json
           echo "package-lock.json resolved: URLs rewritten to JFrog"
+          echo "Resolved URL distribution after rewrite:"
+          grep -oE '"resolved": "https://[^/]+' package-lock.json | sort | uniq -c
         else
           echo "no package-lock.json found; skipping rewrite"
         fi