Brooklyn Nicholson a692393da7 test(build): hold allowScripts in sync with the lockfile ... Both halves of this bug were the same failure mode: allowScripts is keyed by exact name@version, so an entry stops matching the moment a dependency moves and npm demotes the blocked script to a warning nobody reads. The breakage surfaces much later as a missing native artifact on one platform. Assert the two relationships that make the allowlist meaningful — every versioned pin resolves to a version the lockfile installs, and every package the lockfile marks as having an install script carries a decision. A bare-name key stays exempt from the version check so a standing denial like unicode-animations survives bumps. Lives in tests-js because the CI change classifier does not run the Python suite for a manifest-only diff.		2026-08-08 21:23:25 -05:00
..
allow-scripts-sync.test.ts	test(build): hold allowScripts in sync with the lockfile	2026-08-08 21:23:25 -05:00
assistant-ui-tap-compat.test.ts	…
desktop-mac-entitlements.test.ts	…
eslint.config.mjs	…
package-json-lazy-deps.test.ts	…
package.json	fix(js): hoist eslint shared devDeps to workspace root	2026-07-31 13:42:03 -04:00
tsconfig.json	…
vitest.config.ts	…