Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove postinstall script #942

Merged
merged 25 commits into from
Jan 25, 2022
Merged

Conversation

Saadnajmi
Copy link
Collaborator

Please select one of the following

  • I am removing an existing difference between facebook/react-native and microsoft/react-native-macos 👍
  • I am cherry-picking a change from Facebook's react-native into microsoft/react-native-macos 👍
  • I am making a fix / change for the macOS implementation of react-native
  • I am making a change required for Microsoft usage of react-native

Summary

Way back in #244 , we added a postinstall script to set the executable bit on our scripts. This was needed because we our publish pipeline at the time was running on a windows VM Image, and the windows filesystem doesn't have an executable bit. We no longer need to run on windows VM images, so this is no longer necessary.

Additionally, post install scripts are a security concern, so it's best we remove unnecessary ones.

This change also removes the last usage of a windows VM in our publish pipeline: the react-native-macos-init publish job.

Changelog

[Internal] [Security] - Removed postinstall script

Test Plan

I can't actually test this as this is a publish pipeline, but I have a few reasons to believe it's safe:

Saadnajmi and others added 22 commits March 22, 2021 14:59
[pull] master from microsoft:master
#2)

Co-authored-by: Ryan Linton <ryanlntn@gmail.com>
[pull] master from microsoft:master
[pull] master from microsoft:master
* Deprecated api (microsoft#853)

* Remove deprecated/unused context param
* Update a few Mac deprecated APIs

* Packing RN dependencies, hermes and ignoring javadoc failure,  (microsoft#852)

* Ignore javadoc failure

* Bringing few more changes from 0.63-stable

* Fixing a patch in engine selection

* Fixing a patch in nuget spec

* Fixing the output directory of nuget pack

* Packaging dependencies in the nuget

* Fix onMouseEnter/onMouseLeave callbacks not firing on Pressable (microsoft#855)

* add pull yml

* match handleOpenURLNotification event payload with iOS (microsoft#755) (#2)

Co-authored-by: Ryan Linton <ryanlntn@gmail.com>

* fix mouse evetns on pressable

* delete extra yml from this branch

* Add macOS tags

* reorder props to have onMouseEnter/onMouseLeave always be before onPress

Co-authored-by: pull[bot] <39814207+pull[bot]@users.noreply.github.com>
Co-authored-by: Ryan Linton <ryanlntn@gmail.com>

* Grammar fixes. (microsoft#856)

Updates simple grammar issues.

Co-authored-by: Nick Trescases <42704557+ntre@users.noreply.github.com>
Co-authored-by: Anandraj <anandrag@microsoft.com>
Co-authored-by: Saad Najmi <saadnajmi2@gmail.com>
Co-authored-by: pull[bot] <39814207+pull[bot]@users.noreply.github.com>
Co-authored-by: Ryan Linton <ryanlntn@gmail.com>
Co-authored-by: Muhammad Hamza Zaman <mh.zaman.4069@gmail.com>
@Saadnajmi Saadnajmi requested a review from alloy as a code owner January 9, 2022 07:16
@pull-bot
Copy link

pull-bot commented Jan 9, 2022

Warnings
⚠️ 🔒 package.json - Changes were made to package.json. This will require a manual import by a Facebook employee.

Generated by 🚫 dangerJS against 08964d3

@Saadnajmi
Copy link
Collaborator Author

Saadnajmi commented Jan 9, 2022

Fails
🚫
❗ Base Branch - The base branch for this PR is something other than master. Are you sure you want to target something other than the master branch?

Warnings
⚠️ 🔒 package.json - Changes were made to package.json. This will require a manual import by a Facebook employee.
Generated by 🚫 dangerJS against 7a25e37

@HeyImChris Probably should fix this somehow too, still think's we're master. EDIT: #946 should do that.

.ado/publish.yml Outdated Show resolved Hide resolved
@Saadnajmi
Copy link
Collaborator Author

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 2 pipeline(s).

@Saadnajmi
Copy link
Collaborator Author

Interestingly enough react-native-macos-init hasn't had a new release in 2 years: https://www.npmjs.com/package/react-native-macos-init

This makes sense to me, as I haven't seen any changes to this package in this repo in ~2 years. Regardless, that helps me consider this an even more safe change so I'll go ahead and merge it.

@Saadnajmi Saadnajmi merged commit a51a1d1 into microsoft:main Jan 25, 2022
@Saadnajmi Saadnajmi deleted the remove-postinstall branch January 25, 2022 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants