fix: add timeout to registry URL validation to prevent indefinite hang

[Islam0953]

Description

Fixes #2027

The registryValidation() function calls fetch(registryUrl) with no timeout. When the URL points to an unreachable host (e.g., a black-holed IP like 10.255.255.1), the CLI hangs indefinitely waiting for the OS-level TCP timeout.

Changes

• Added AbortController with 10-second timeout to the fetch call in registryValidation()
• Switched HTTP method from GET to HEAD (only need to check reachability, not download body)
• Added distinct error messages: timeout-specific vs generic network error
• Added finally block to clean up the timer

How it works

const controller = new AbortController();
const timer = setTimeout(() => controller.abort(), 10000);
try {
  const response = await fetch(registryUrl, {
    method: 'HEAD',
    signal: controller.signal,
  });
  // ... existing auth check
} catch (error) {
  if (error.name === 'AbortError') {
    throw new Error(`Connection to registryURL timed out after 10s: ${registryUrl}`);
  }
  throw new Error(`Can't fetch registryURL: ${registryUrl}`);
} finally {
  clearTimeout(timer);
}

Testing

Tested with unreachable host — CLI now fails after 10 seconds with a clear error message instead of hanging indefinitely.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1b45ce1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Welcome to AsyncAPI. Thanks a lot for creating your first pull request. Please check out our contributors guide useful for opening a pull request.
Keep in mind there are also other channels you can use to interact with AsyncAPI community. For more details check out this issue.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud