Files
pnpm/.changeset/light-carrots-fetch.md
Oren ba065f6a8b fix(git-fetcher): block git dependencies from running prepare scripts unless allowed (#10288)
* fix(git-fetcher): block git dependencies from running prepare scripts unless allowed

* Update exec/prepare-package/src/index.ts

Co-authored-by: Zoltan Kochan <z@kochan.io>

* Also implement in gitHostedTarballFetcher

* refactor: move allowBuild function creation to the store manager

* refactor: pass allowBuild function to fetch function directly

* refactor: revert not needed changes and update changesets

* test: fix

* fix: implemented CR suggestions

* test: fix

* test: fix

---------

Co-authored-by: Zoltan Kochan <z@kochan.io>
2025-12-09 18:25:07 +01:00

452 B

@pnpm/prepare-package, @pnpm/git-fetcher, @pnpm/tarball-fetcher, @pnpm/core, @pnpm/headless, @pnpm/fetcher-base, @pnpm/package-requester, @pnpm/resolve-dependencies, @pnpm/store-controller-types, pnpm
@pnpm/prepare-package @pnpm/git-fetcher @pnpm/tarball-fetcher @pnpm/core @pnpm/headless @pnpm/fetcher-base @pnpm/package-requester @pnpm/resolve-dependencies @pnpm/store-controller-types pnpm
major patch patch patch patch minor minor minor minor patch

Block git-hosted dependencies from running prepare scripts unless explicitly allowed in onlyBuiltDependencies #10288.