From 702dcc75e6c7028f262062448c00df61068b155a Mon Sep 17 00:00:00 2001 From: Joe Clark Date: Thu, 16 Jul 2026 10:19:40 +0100 Subject: [PATCH 1/3] tighten whitelist and install --- .changeset/fast-stars-agree.md | 5 +++++ .changeset/sharp-nights-end.md | 5 +++++ packages/engine-multi/src/whitelist.ts | 2 +- packages/runtime/src/modules/repo.ts | 7 ++++++- 4 files changed, 17 insertions(+), 2 deletions(-) create mode 100644 .changeset/fast-stars-agree.md create mode 100644 .changeset/sharp-nights-end.md diff --git a/.changeset/fast-stars-agree.md b/.changeset/fast-stars-agree.md new file mode 100644 index 000000000..9217c1dad --- /dev/null +++ b/.changeset/fast-stars-agree.md @@ -0,0 +1,5 @@ +--- +'@openfn/engine-multi': patch +--- + +Tighten default autoinstall whitelist diff --git a/.changeset/sharp-nights-end.md b/.changeset/sharp-nights-end.md new file mode 100644 index 000000000..54fee2e51 --- /dev/null +++ b/.changeset/sharp-nights-end.md @@ -0,0 +1,5 @@ +--- +'@openfn/runtime': patch +--- + +Ignore scripts on adaptor install diff --git a/packages/engine-multi/src/whitelist.ts b/packages/engine-multi/src/whitelist.ts index 51f5db26f..769962dfc 100644 --- a/packages/engine-multi/src/whitelist.ts +++ b/packages/engine-multi/src/whitelist.ts @@ -1 +1 @@ -export default [/^@openfn/]; +export default [/^@openfn\//]; diff --git a/packages/runtime/src/modules/repo.ts b/packages/runtime/src/modules/repo.ts index 1ab794a28..5b938d45e 100644 --- a/packages/runtime/src/modules/repo.ts +++ b/packages/runtime/src/modules/repo.ts @@ -16,7 +16,12 @@ const defaultPkg = { }; export const defaultRepoPath = path.join(homeDir, './openfn/repo/cli'); -const npmInstallFlags = ['--no-audit', '--no-fund', '--no-package-lock']; +const npmInstallFlags = [ + '--no-audit', + '--no-fund', + '--no-package-lock', + '--ignore-scripts', +]; type InstallList = Array<{ name: string; version: string }>; From 3a13a74cc23de93f9cd4c939d796ead5c4995b84 Mon Sep 17 00:00:00 2001 From: Joe Clark Date: Thu, 16 Jul 2026 10:37:21 +0100 Subject: [PATCH 2/3] update test --- packages/runtime/test/repo/install.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/runtime/test/repo/install.test.ts b/packages/runtime/test/repo/install.test.ts index a7b17db4d..a2f276f8c 100644 --- a/packages/runtime/test/repo/install.test.ts +++ b/packages/runtime/test/repo/install.test.ts @@ -4,7 +4,6 @@ */ import test from 'ava'; import mock from 'mock-fs'; -import semver from 'semver'; import { createMockLogger } from '@openfn/logger'; import { install, loadRepoPkg } from '../../src'; import exec from '../../src/util/exec'; @@ -119,10 +118,11 @@ test.serial('installing should use the correct flags', async (t) => { const flags = cmd .split(' ') .filter((token: string) => token.startsWith('--')); - t.assert(flags.length === 3); + t.assert(flags.length === 4); t.assert(flags.includes('--no-audit')); t.assert(flags.includes('--no-fund')); t.assert(flags.includes('--no-package-lock')); + t.assert(flags.includes('--ignore-scripts')); }); test.serial('install with the correct alias', async (t) => { From 70e1fff434fd111b6da14a6de78339caafca0e54 Mon Sep 17 00:00:00 2001 From: Joe Clark Date: Mon, 20 Jul 2026 10:07:28 +0100 Subject: [PATCH 3/3] versions --- .changeset/fast-stars-agree.md | 5 ----- .changeset/sharp-nights-end.md | 5 ----- packages/cli/CHANGELOG.md | 7 +++++++ packages/cli/package.json | 2 +- packages/engine-multi/CHANGELOG.md | 8 ++++++++ packages/engine-multi/package.json | 2 +- packages/lightning-mock/CHANGELOG.md | 9 +++++++++ packages/lightning-mock/package.json | 2 +- packages/runtime/CHANGELOG.md | 6 ++++++ packages/runtime/package.json | 2 +- packages/ws-worker/CHANGELOG.md | 9 +++++++++ packages/ws-worker/package.json | 2 +- 12 files changed, 44 insertions(+), 15 deletions(-) delete mode 100644 .changeset/fast-stars-agree.md delete mode 100644 .changeset/sharp-nights-end.md diff --git a/.changeset/fast-stars-agree.md b/.changeset/fast-stars-agree.md deleted file mode 100644 index 9217c1dad..000000000 --- a/.changeset/fast-stars-agree.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@openfn/engine-multi': patch ---- - -Tighten default autoinstall whitelist diff --git a/.changeset/sharp-nights-end.md b/.changeset/sharp-nights-end.md deleted file mode 100644 index 54fee2e51..000000000 --- a/.changeset/sharp-nights-end.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@openfn/runtime': patch ---- - -Ignore scripts on adaptor install diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 56feb92d8..117d78cdb 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,12 @@ # @openfn/cli +## 1.38.5 + +### Patch Changes + +- Updated dependencies [702dcc7] + - @openfn/runtime@1.9.5 + ## 1.38.4 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index 41582bbb9..e1c5a7120 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/cli", - "version": "1.38.4", + "version": "1.38.5", "description": "CLI devtools for the OpenFn toolchain", "engines": { "node": ">=18", diff --git a/packages/engine-multi/CHANGELOG.md b/packages/engine-multi/CHANGELOG.md index 2e919ca7c..fd5fb6940 100644 --- a/packages/engine-multi/CHANGELOG.md +++ b/packages/engine-multi/CHANGELOG.md @@ -1,5 +1,13 @@ # engine-multi +## 1.12.2 + +### Patch Changes + +- 702dcc7: Tighten default autoinstall whitelist +- Updated dependencies [702dcc7] + - @openfn/runtime@1.9.5 + ## 1.12.1 ### Patch Changes diff --git a/packages/engine-multi/package.json b/packages/engine-multi/package.json index bf4fb5b1e..54ea77cac 100644 --- a/packages/engine-multi/package.json +++ b/packages/engine-multi/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/engine-multi", - "version": "1.12.1", + "version": "1.12.2", "description": "Multi-process runtime engine", "main": "dist/index.js", "type": "module", diff --git a/packages/lightning-mock/CHANGELOG.md b/packages/lightning-mock/CHANGELOG.md index 5f20937fe..f865607cc 100644 --- a/packages/lightning-mock/CHANGELOG.md +++ b/packages/lightning-mock/CHANGELOG.md @@ -1,5 +1,14 @@ # @openfn/lightning-mock +## 2.4.23 + +### Patch Changes + +- Updated dependencies [702dcc7] +- Updated dependencies [702dcc7] + - @openfn/engine-multi@1.12.2 + - @openfn/runtime@1.9.5 + ## 2.4.22 ### Patch Changes diff --git a/packages/lightning-mock/package.json b/packages/lightning-mock/package.json index f230accb4..5451acce4 100644 --- a/packages/lightning-mock/package.json +++ b/packages/lightning-mock/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/lightning-mock", - "version": "2.4.22", + "version": "2.4.23", "private": true, "description": "A mock Lightning server", "main": "dist/index.js", diff --git a/packages/runtime/CHANGELOG.md b/packages/runtime/CHANGELOG.md index a453fd125..aa3796d81 100644 --- a/packages/runtime/CHANGELOG.md +++ b/packages/runtime/CHANGELOG.md @@ -1,5 +1,11 @@ # @openfn/runtime +## 1.9.5 + +### Patch Changes + +- 702dcc7: Ignore scripts on adaptor install + ## 1.9.4 ### Patch Changes diff --git a/packages/runtime/package.json b/packages/runtime/package.json index 37bae258f..a51349db9 100644 --- a/packages/runtime/package.json +++ b/packages/runtime/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/runtime", - "version": "1.9.4", + "version": "1.9.5", "description": "Job processing runtime.", "type": "module", "exports": { diff --git a/packages/ws-worker/CHANGELOG.md b/packages/ws-worker/CHANGELOG.md index d215b2740..a3de076a9 100644 --- a/packages/ws-worker/CHANGELOG.md +++ b/packages/ws-worker/CHANGELOG.md @@ -1,5 +1,14 @@ # ws-worker +## 1.27.2 + +### Patch Changes + +- Updated dependencies [702dcc7] +- Updated dependencies [702dcc7] + - @openfn/engine-multi@1.12.2 + - @openfn/runtime@1.9.5 + ## 1.27.1 ### Patch Changes diff --git a/packages/ws-worker/package.json b/packages/ws-worker/package.json index 01d883dc8..3a00f4ea9 100644 --- a/packages/ws-worker/package.json +++ b/packages/ws-worker/package.json @@ -1,6 +1,6 @@ { "name": "@openfn/ws-worker", - "version": "1.27.1", + "version": "1.27.2", "description": "A Websocket Worker to connect Lightning to a Runtime Engine", "main": "dist/index.js", "type": "module",