From 59daef7b2dca39aa7ea2f5f8f1d524f8c33681c0 Mon Sep 17 00:00:00 2001
From: Remco Haszing <remcohaszing@gmail.com>
Date: Fri, 26 Jun 2026 09:31:23 +0200
Subject: [PATCH] Define allowScripts in package.json
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Modern versions of npm (12) require you to define allowScripts to run
dependencies’ install scripts. In npm 11 this can already be enabled,
and is recommended.

VSCode relies on install scripts, so `allowScripts` must be defined to
work with modern setups of npm.

The changes to `package-lock.json` are autogenerated. They appear
unrelated. Possibly this removes remnants from an inproperly resolved
merge conflict.
---
 package-lock.json        |  3 ---
 package.json             | 25 +++++++++++++++++++++++++
 remote/package-lock.json |  3 ---
 3 files changed, 25 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 11ee47ac0fa348..4833f17909c49a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17351,9 +17351,6 @@
         "nan": "^2.23.0"
       }
     },
-    "node_modules/ssh2/node_modules/cpu-features": {
-      "optional": true
-    },
     "node_modules/stable": {
       "version": "0.1.8",
       "resolved": "https://registry.npmjs.org/stable/-/stable-0.1.8.tgz",
diff --git a/package.json b/package.json
index 36a96b45e45921..4e986f075ad140 100644
--- a/package.json
+++ b/package.json
@@ -284,5 +284,30 @@
   },
   "optionalDependencies": {
     "windows-foreground-love": "0.6.1"
+  },
+  "allowScripts": {
+    "@parcel/watcher": true,
+    "@playwright/browser-chromium": true,
+    "@vscode/deviceid": true,
+    "@vscode/native-watchdog": true,
+    "@vscode/policy-watcher": true,
+    "@vscode/ripgrep": true,
+    "@vscode/spdlog": true,
+    "@vscode/sqlite3": true,
+    "@vscode/windows-ca-certs": true,
+    "@vscode/windows-mutex": true,
+    "@vscode/windows-process-tree": true,
+    "@vscode/windows-registry": true,
+    "bufferutil": true,
+    "es5-ext": true,
+    "fsevents": true,
+    "husky": true,
+    "kerberos": true,
+    "native-is-elevated": true,
+    "native-keymap": true,
+    "node-pty": true,
+    "ssh2": true,
+    "utf-8-validate": true,
+    "windows-foreground-love": true
   }
 }
diff --git a/remote/package-lock.json b/remote/package-lock.json
index 383aa08c2167bc..f7fd357d8e0f35 100644
--- a/remote/package-lock.json
+++ b/remote/package-lock.json
@@ -1614,9 +1614,6 @@
         "nan": "^2.23.0"
       }
     },
-    "node_modules/ssh2/node_modules/cpu-features": {
-      "optional": true
-    },
     "node_modules/string_decoder": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",