ci: enforce ignore-scripts policy for Node package managers

2026-05-28 08:08:21 +01:00 · 2026-05-27 20:04:14 +00:00
5 changed files with 114 additions and 113 deletions
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -15,3 +15,4 @@ logFilters:
    level: discard

 nodeLinker: node-modules
+enableScripts: false
--- a/dist/index.cjs
+++ b/dist/index.cjs
--- a/dist/index.cjs.map
+++ b/dist/index.cjs.map
--- a/dist/licenses.txt
+++ b/dist/licenses.txt
@@ -6927,7 +6927,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - tmp@0.2.7
+ - tmp@0.2.5

 This package contains the following license:

--- a/yarn.lock
+++ b/yarn.lock
@@ -6126,9 +6126,9 @@ __metadata:
  linkType: hard

 "tmp@npm:^0.2.5":
-  version: 0.2.7
-  resolution: "tmp@npm:0.2.7"
-  checksum: 10/0a3bc90beb0c6275273c3475fb57e466eaab1c9c4a101d029ff62b18146ce136e7f75d09de34863d9f2c2a492751402508f9e028bc98eb34a1416195d4b15619
+  version: 0.2.5
+  resolution: "tmp@npm:0.2.5"
+  checksum: 10/dd4b78b32385eab4899d3ae296007b34482b035b6d73e1201c4a9aede40860e90997a1452c65a2d21aee73d53e93cd167d741c3db4015d90e63b6d568a93d7ec
  languageName: node
  linkType: hard