Skip to content

fix: respect allowScripts policy in prune, dedupe, uninstall, audit, and link - #9456

Merged
owlstronaut merged 1 commit into
npm:latestfrom
JamieMagee:fix/9435-respect-allow-scripts
Jun 2, 2026
Merged

fix: respect allowScripts policy in prune, dedupe, uninstall, audit, and link#9456
owlstronaut merged 1 commit into
npm:latestfrom
JamieMagee:fix/9435-respect-allow-scripts

Conversation

@JamieMagee

@JamieMageeJamieMagee commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

These commands built Arborist options without resolving the package.jsonallowScripts policy, so they warned about install scripts that were already approved. They now resolve the policy the same way install, ci, and update do.

References

Fixes#9435
Superseded #9438

@JamieMagee
JamieMagee requested review from a team as code ownersJune 1, 2026 21:24
@JamieMageeJamieMagee mentioned this pull request Jun 1, 2026
Closed
@JamieMageeJamieMagee changed the title fix: respect allowScripts policy in prune, dedupe, uninstall, audit fix, and linkfix: respect allowScripts policy in prune, dedupe, uninstall, audit, and linkJun 1, 2026
@owlstronaut
owlstronaut merged commit 75bf7de into npm:latestJun 2, 2026
22 of 23 checks passed
@github-actionsgithub-actionsBot mentioned this pull request Jun 2, 2026
Merged
@github-actions

github-actionsBot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

🎉 Backport to release/v11 created: #9462

@github-actionsgithub-actionsBot mentioned this pull request Jun 2, 2026
Merged
owlstronaut pushed a commit that referenced this pull request Jun 3, 2026
@github-actions@JamieMagee
fix: respect allowScripts policy in prune, dedupe, uninstall, audit, …
9dd219b
…and link (#9462)
Backport of #9456 to `release/v11`.
Co-authored-by: Jamie Magee <jamie.magee@gmail.com>
@JamieMagee
JamieMagee deleted the fix/9435-respect-allow-scripts branch June 3, 2026 21:43
@npm-cli-botnpm-cli-bot mentioned this pull request Jun 23, 2026
Closed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@owlstronautowlstronautowlstronaut approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

backport:v11

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[BUG] allowsScripts not respected by prune command

2 participants

@JamieMagee@owlstronaut