-
Notifications
You must be signed in to change notification settings - Fork 135
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove postinstall script #942
Conversation
[pull] master from microsoft:master
#2) Co-authored-by: Ryan Linton <ryanlntn@gmail.com>
[pull] master from microsoft:master
[pull] master from microsoft:master
* Deprecated api (microsoft#853) * Remove deprecated/unused context param * Update a few Mac deprecated APIs * Packing RN dependencies, hermes and ignoring javadoc failure, (microsoft#852) * Ignore javadoc failure * Bringing few more changes from 0.63-stable * Fixing a patch in engine selection * Fixing a patch in nuget spec * Fixing the output directory of nuget pack * Packaging dependencies in the nuget * Fix onMouseEnter/onMouseLeave callbacks not firing on Pressable (microsoft#855) * add pull yml * match handleOpenURLNotification event payload with iOS (microsoft#755) (#2) Co-authored-by: Ryan Linton <ryanlntn@gmail.com> * fix mouse evetns on pressable * delete extra yml from this branch * Add macOS tags * reorder props to have onMouseEnter/onMouseLeave always be before onPress Co-authored-by: pull[bot] <39814207+pull[bot]@users.noreply.github.com> Co-authored-by: Ryan Linton <ryanlntn@gmail.com> * Grammar fixes. (microsoft#856) Updates simple grammar issues. Co-authored-by: Nick Trescases <42704557+ntre@users.noreply.github.com> Co-authored-by: Anandraj <anandrag@microsoft.com> Co-authored-by: Saad Najmi <saadnajmi2@gmail.com> Co-authored-by: pull[bot] <39814207+pull[bot]@users.noreply.github.com> Co-authored-by: Ryan Linton <ryanlntn@gmail.com> Co-authored-by: Muhammad Hamza Zaman <mh.zaman.4069@gmail.com>
@HeyImChris Probably should fix this somehow too, still think's we're master. EDIT: #946 should do that. |
/azp run |
Azure Pipelines successfully started running 2 pipeline(s). |
…into remove-postinstall
…into remove-postinstall
Interestingly enough This makes sense to me, as I haven't seen any changes to this package in this repo in ~2 years. Regardless, that helps me consider this an even more safe change so I'll go ahead and merge it. |
Please select one of the following
Summary
Way back in #244 , we added a postinstall script to set the executable bit on our scripts. This was needed because we our publish pipeline at the time was running on a windows VM Image, and the windows filesystem doesn't have an executable bit. We no longer need to run on windows VM images, so this is no longer necessary.
Additionally, post install scripts are a security concern, so it's best we remove unnecessary ones.
This change also removes the last usage of a windows VM in our publish pipeline: the
react-native-macos-init
publish job.Changelog
[Internal] [Security] - Removed postinstall script
Test Plan
I can't actually test this as this is a publish pipeline, but I have a few reasons to believe it's safe:
ubuntu-latest
.