diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
index 56feb92d8..117d78cdb 100644
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @openfn/cli
 
+## 1.38.5
+
+### Patch Changes
+
+- Updated dependencies [702dcc7]
+  - @openfn/runtime@1.9.5
+
 ## 1.38.4
 
 ### Patch Changes
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 41582bbb9..e1c5a7120 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/cli",
-  "version": "1.38.4",
+  "version": "1.38.5",
   "description": "CLI devtools for the OpenFn toolchain",
   "engines": {
     "node": ">=18",
diff --git a/packages/engine-multi/CHANGELOG.md b/packages/engine-multi/CHANGELOG.md
index 2e919ca7c..fd5fb6940 100644
--- a/packages/engine-multi/CHANGELOG.md
+++ b/packages/engine-multi/CHANGELOG.md
@@ -1,5 +1,13 @@
 # engine-multi
 
+## 1.12.2
+
+### Patch Changes
+
+- 702dcc7: Tighten default autoinstall whitelist
+- Updated dependencies [702dcc7]
+  - @openfn/runtime@1.9.5
+
 ## 1.12.1
 
 ### Patch Changes
diff --git a/packages/engine-multi/package.json b/packages/engine-multi/package.json
index bf4fb5b1e..54ea77cac 100644
--- a/packages/engine-multi/package.json
+++ b/packages/engine-multi/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/engine-multi",
-  "version": "1.12.1",
+  "version": "1.12.2",
   "description": "Multi-process runtime engine",
   "main": "dist/index.js",
   "type": "module",
diff --git a/packages/engine-multi/src/whitelist.ts b/packages/engine-multi/src/whitelist.ts
index 51f5db26f..769962dfc 100644
--- a/packages/engine-multi/src/whitelist.ts
+++ b/packages/engine-multi/src/whitelist.ts
@@ -1 +1 @@
-export default [/^@openfn/];
+export default [/^@openfn\//];
diff --git a/packages/lightning-mock/CHANGELOG.md b/packages/lightning-mock/CHANGELOG.md
index 5f20937fe..f865607cc 100644
--- a/packages/lightning-mock/CHANGELOG.md
+++ b/packages/lightning-mock/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @openfn/lightning-mock
 
+## 2.4.23
+
+### Patch Changes
+
+- Updated dependencies [702dcc7]
+- Updated dependencies [702dcc7]
+  - @openfn/engine-multi@1.12.2
+  - @openfn/runtime@1.9.5
+
 ## 2.4.22
 
 ### Patch Changes
diff --git a/packages/lightning-mock/package.json b/packages/lightning-mock/package.json
index f230accb4..5451acce4 100644
--- a/packages/lightning-mock/package.json
+++ b/packages/lightning-mock/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/lightning-mock",
-  "version": "2.4.22",
+  "version": "2.4.23",
   "private": true,
   "description": "A mock Lightning server",
   "main": "dist/index.js",
diff --git a/packages/runtime/CHANGELOG.md b/packages/runtime/CHANGELOG.md
index a453fd125..aa3796d81 100644
--- a/packages/runtime/CHANGELOG.md
+++ b/packages/runtime/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @openfn/runtime
 
+## 1.9.5
+
+### Patch Changes
+
+- 702dcc7: Ignore scripts on adaptor install
+
 ## 1.9.4
 
 ### Patch Changes
diff --git a/packages/runtime/package.json b/packages/runtime/package.json
index 37bae258f..a51349db9 100644
--- a/packages/runtime/package.json
+++ b/packages/runtime/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/runtime",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Job processing runtime.",
   "type": "module",
   "exports": {
diff --git a/packages/runtime/src/modules/repo.ts b/packages/runtime/src/modules/repo.ts
index 1ab794a28..5b938d45e 100644
--- a/packages/runtime/src/modules/repo.ts
+++ b/packages/runtime/src/modules/repo.ts
@@ -16,7 +16,12 @@ const defaultPkg = {
 };
 
 export const defaultRepoPath = path.join(homeDir, './openfn/repo/cli');
-const npmInstallFlags = ['--no-audit', '--no-fund', '--no-package-lock'];
+const npmInstallFlags = [
+  '--no-audit',
+  '--no-fund',
+  '--no-package-lock',
+  '--ignore-scripts',
+];
 
 type InstallList = Array<{ name: string; version: string }>;
 
diff --git a/packages/runtime/test/repo/install.test.ts b/packages/runtime/test/repo/install.test.ts
index a7b17db4d..a2f276f8c 100644
--- a/packages/runtime/test/repo/install.test.ts
+++ b/packages/runtime/test/repo/install.test.ts
@@ -4,7 +4,6 @@
  */
 import test from 'ava';
 import mock from 'mock-fs';
-import semver from 'semver';
 import { createMockLogger } from '@openfn/logger';
 import { install, loadRepoPkg } from '../../src';
 import exec from '../../src/util/exec';
@@ -119,10 +118,11 @@ test.serial('installing should use the correct flags', async (t) => {
   const flags = cmd
     .split(' ')
     .filter((token: string) => token.startsWith('--'));
-  t.assert(flags.length === 3);
+  t.assert(flags.length === 4);
   t.assert(flags.includes('--no-audit'));
   t.assert(flags.includes('--no-fund'));
   t.assert(flags.includes('--no-package-lock'));
+  t.assert(flags.includes('--ignore-scripts'));
 });
 
 test.serial('install with the correct alias', async (t) => {
diff --git a/packages/ws-worker/CHANGELOG.md b/packages/ws-worker/CHANGELOG.md
index d215b2740..a3de076a9 100644
--- a/packages/ws-worker/CHANGELOG.md
+++ b/packages/ws-worker/CHANGELOG.md
@@ -1,5 +1,14 @@
 # ws-worker
 
+## 1.27.2
+
+### Patch Changes
+
+- Updated dependencies [702dcc7]
+- Updated dependencies [702dcc7]
+  - @openfn/engine-multi@1.12.2
+  - @openfn/runtime@1.9.5
+
 ## 1.27.1
 
 ### Patch Changes
diff --git a/packages/ws-worker/package.json b/packages/ws-worker/package.json
index 01d883dc8..3a00f4ea9 100644
--- a/packages/ws-worker/package.json
+++ b/packages/ws-worker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openfn/ws-worker",
-  "version": "1.27.1",
+  "version": "1.27.2",
   "description": "A Websocket Worker to connect Lightning to a Runtime Engine",
   "main": "dist/index.js",
   "type": "module",