Situation
The release notes for npm@12.0.0 and the CHANGELOG 12.0.0 entry contain no mention of the breaking change to block lifecycle scripts by default.
In npm@11.18.0, a default npm configuration results in the following warning when a dependency with a lifecycle script is installed. The lifecycle script is executed:
npm warn allow-scripts 1 package has install scripts not yet covered by allowScripts:
In npm@12.0.0 this changes to a block by default. The lifecycle script is not executed. This is a breaking change:
npm warn install-scripts 1 package had install scripts blocked because they are not covered by allowScripts:
Suggestion
Add the breaking change for npm@12.0.0 to the release notes, corresponding to the warning:
npm warn install-scripts 1 package had install scripts blocked because they are not covered by allowScripts:
Situation
The release notes for npm@12.0.0 and the CHANGELOG 12.0.0 entry contain no mention of the breaking change to block lifecycle scripts by default.
In npm@11.18.0, a default npm configuration results in the following warning when a dependency with a lifecycle script is installed. The lifecycle script is executed:
In npm@12.0.0 this changes to a block by default. The lifecycle script is not executed. This is a breaking change:
Suggestion
Add the breaking change for
npm@12.0.0to the release notes, corresponding to the warning: