Qualify native crypto after npm12 install-script blocking #355

Merged

karsten merged 2 commits from fix/native-update-npm12-crypto into main 2026-11-12 08:11:27 +00:00

Conversation 0 Commits 2 Files changed 1 +7 -1

karsten commented 2026-11-12 08:08:13 +00:00

Owner

Copy link

Actual native self-update probe exposed npm12 silently returning successful npm rebuild while blocking @matrix-org native postinstall under allowScripts. CoreCI uses an already-qualified addon and npm11, so this did not appear there. Execute only that reviewed pinned native downloader directly, then require the addon before build/validation. Do not loosen global npm policy or allow arbitrary dependency scripts. Real host direct download + require confirmed. Focused source lifecycle tests pass. This is a real installation-path correction to merged #354.

Actual native self-update probe exposed npm12 silently returning successful npm rebuild while blocking @matrix-org native postinstall under allowScripts. CoreCI uses an already-qualified addon and npm11, so this did not appear there. Execute only that reviewed pinned native downloader directly, then require the addon before build/validation. Do not loosen global npm policy or allow arbitrary dependency scripts. Real host direct download + require confirmed. Focused source lifecycle tests pass. This is a real installation-path correction to merged #354.

karsten added 2 commits 2026-11-12 08:08:14 +00:00

fix: qualify native crypto explicitly when npm blocks install scripts 1be0df10ab

Merge remote-tracking branch 'origin/main' into fix/native-update-npm12-crypto 4effbba3b1

karsten merged commit d941f173ce into main 2026-11-12 08:11:27 +00:00

karsten referenced this pull request from a commit 2026-11-12 08:11:27 +00:00

Merge pull request 'Qualify native crypto after npm12 install-script blocking' (#355) from fix/native-update-npm12-crypto into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

harness/core!355

No description provided.