Skip to content

Conversation

@pichlermarc
Copy link
Member

@pichlermarc pichlermarc commented Sep 29, 2025

Which problem is this PR solving?

I have checked some postinstall scripts, but they seem to mostly be for for warning users of improper usage and can therefore be safely ignored in CI. Ignoring the scripts also reduces attack surface a bit further.

@pichlermarc pichlermarc marked this pull request as ready for review September 29, 2025 11:49
@pichlermarc pichlermarc requested a review from a team as a code owner September 29, 2025 11:49
@maryliag maryliag merged commit e612aa1 into open-telemetry:main Sep 29, 2025
18 checks passed
@pichlermarc pichlermarc deleted the chore/ignore-scripts branch September 29, 2025 14:31
@pichlermarc
Copy link
Member Author

Follow-up: #3122 - looks like knex actually needs scripts to generate bindings on install. That does only affect runtime behavior though, so I allowed scripts for the test run only.

trentm added a commit to trentm/opentelemetry-js-contrib that referenced this pull request Oct 7, 2025
…to pass

https://github.com/open-telemetry/opentelemetry-js-contrib/actions/workflows/test-all-versions.yml started
failing last week after open-telemetry#3121. We cannot use --ignore-scripts in this case. This is
the equivalent change as was done for test.yml in open-telemetry#3122.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants