chore: prevent dependency lifecycle scripts

[puckowski]

• Prevent dependency lifecycle scripts during CI work.

What:

Prevent dependency lifecycle scripts from running during CI work.

Why:

Dependency lifecycle scripts should be unnecessary for Less.js CI needs.

Checklist:

• Documentation
• Added/updated unit tests
• Code complete

Summary by CodeRabbit

• Chores
  • CI/CD workflows updated to enforce lockfile consistency and disable package install lifecycle scripts across build, release, and publish pipelines, improving determinism and safety of dependency installs. No changes to public APIs or runtime behavior; these updates only affect dependency installation during CI runs.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 40e20cda-248c-41f6-b1f4-a7af4844c152

📥 Commits

Reviewing files that changed from the base of the PR and between b2ddebf and 6f0cf97.

📒 Files selected for processing (1)

• .github/workflows/ci.yml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/workflows/ci.yml

---

📝 Walkthrough

Walkthrough

Three GitHub Actions workflows were updated so their pnpm install commands include --ignore-scripts; the CI workflow also uses --frozen-lockfile during install.

Changes

Install script suppression across CI workflows

Layer / File(s)	Summary
CI install step .github/workflows/ci.yml	Replaced pnpm install with pnpm install --frozen-lockfile --ignore-scripts, enforcing lockfile consistency and disabling package lifecycle scripts during CI runs.
Create-release-pr install step .github/workflows/create-release-pr.yml	Added --ignore-scripts to the existing pnpm install --frozen-lockfile command used when preparing release PRs.
Publish workflow install step .github/workflows/publish.yml	Added --ignore-scripts to the existing pnpm install --frozen-lockfile command used in the publish workflow.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hop through YAML, gentle and spry,
Quiet installs under a lockfile sky.
Scripts stay sleeping, builds hum on cue,
Cozy workflows—nice and true.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: prevent dependency lifecycle scripts' directly and clearly describes the main change across all three workflow files, which add --ignore-scripts to pnpm install commands.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}