chore(root): add allowScripts config#4550
Open
evenstensberg wants to merge 1 commit into
Open
Conversation
evenstensberg
force-pushed
the
chore/allow-scripts
branch
from
June 25, 2026 15:55
169ef20 to
e7f434e
Compare
Contributor
|
Hi @evenstensberg, where is the warning being outputted? I can't see it currently so when I added this change in locally I didn't notice a difference. Is there anything else we need to add into the config to make this change work? |
GCHQ-Developer-112
force-pushed
the
develop
branch
2 times, most recently
from
July 3, 2026 14:11
bc8e8f9 to
a01c50b
Compare
Contributor
Author
|
Did the following on the develop branch at the top level:
followed up by added the missing `allowScripts´ packages based on the terminal output. Later I suspect we need to add the same at each monorepo package.json. |
evenstensberg
force-pushed
the
chore/allow-scripts
branch
from
July 9, 2026 21:33
e7f434e to
cf7044f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary of the changes
As npm (npm/cli#9172) is updated they're introducing new configuration around disallowing post-install scripts from executing. At the moment, these dis-allowed scripts are outputting a warning if the dependencies aren't specified in
packageJson.allowScriptsand in the future, npm release it will emit an error.Because of this, we can later add
cypressandhuskyto theallowScriptsconfiguration and go back to blocking all other dependencies via theignore-scriptsflag.Related issue
See above.
Checklist
General
Testing
Accessibility
Resize/zoom behaviour
System modes
Testing content extremes