ci: ignore install scripts in release workflows (#1839)

This commit is contained in:
Affaan Mustafa 2026-05-12 21:36:36 -04:00 committed by GitHub
parent 71ed7c58d4
commit 33db548be3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 6 additions and 2 deletions

View File

@ -26,7 +26,7 @@ jobs:
registry-url: 'https://registry.npmjs.org'
- name: Install dependencies
run: npm ci
run: npm ci --ignore-scripts
- name: Verify OpenCode package payload
run: node tests/scripts/build-opencode.test.js

View File

@ -50,7 +50,7 @@ jobs:
registry-url: 'https://registry.npmjs.org'
- name: Install dependencies
run: npm ci
run: npm ci --ignore-scripts
- name: Verify OpenCode package payload
run: node tests/scripts/build-opencode.test.js

View File

@ -41,6 +41,10 @@ for (const workflow of [
assert.match(content, /registry-url:\s*['"]https:\/\/registry\.npmjs\.org['"]/);
});
test(`${workflow} ignores dependency lifecycle scripts before privileged publish`, () => {
assert.match(content, /npm ci --ignore-scripts/);
});
test(`${workflow} checks whether the tagged npm version already exists`, () => {
assert.match(content, /Check npm publish state/);
assert.match(content, /npm view "\$\{PACKAGE_NAME\}@\$\{PACKAGE_VERSION\}" version/);