Disable scripts by default for yarn (#1546)

* disable scripts by default for yarn

* add changelog entry

* apply as well for cli project

Author: netomi

cli/.yarnrc.yml

@@ -1,3 +1,5 @@
+enableScripts: false
+
 compressionLevel: mixed
 
 enableGlobalCache: false

cli/CHANGELOG.md

@@ -11,6 +11,7 @@ This change log covers only the command line interface (CLI) of Open VSX.
 #### Changes
 
 - Move `ovsx` script to `bin` directory ([#1538](https://github.com/eclipse/openvsx/pull/1538))
+- Disable the automatic execution of lifecycle scripts by yarn ([#1546](https://github.com/eclipse/openvsx/pull/1546))
 
 ### [v0.10.8] (Jan. 2026)
 

webui/.yarnrc.yml

@@ -1,3 +1,5 @@
+enableScripts: false
+
 compressionLevel: mixed
 
 enableGlobalCache: false

webui/CHANGELOG.md

@@ -9,6 +9,10 @@ This change log covers only the frontend library (webui) of Open VSX.
 - Support removing reviews by admins ([#1403](https://github.com/eclipse/openvsx/pull/1403))
 - Support for GitHub flavored markdown alerts ([#1535](https://github.com/eclipse/openvsx/pull/1535))
 
+### Changed
+
+- Disable the automatic execution of lifecycle scripts by yarn ([#1546](https://github.com/eclipse/openvsx/pull/1546))
+
 ## [v0.17.1] (Jan. 2026)
 
 ### Dependencies