From dc4f71c395b586d11862a8c8c3fe4b88a0a54de6 Mon Sep 17 00:00:00 2001
From: vltbaudbot <264001112+vltbaudbot@users.noreply.github.com>
Date: Wed, 30 Sep 2026 17:40:55 +0000
Subject: [PATCH] fix: add --allow-scripts for bun/deno in npm v11

npm v11 blocks dependency lifecycle scripts by default. bun and deno
both use postinstall scripts to download platform-specific binaries,
so they need --allow-scripts to work.

Changes:
- scripts/variations/ci+setup.sh: Add --allow-scripts=bun and
  --allow-scripts=deno to SETUP_INSTALL_BUN and SETUP_INSTALL_DENO
- scripts/setup.sh: Add --allow-scripts=bun,deno,nx to the main
  npm install -g line (latent bug masked by runner image having
  these pre-installed)
---
 scripts/setup.sh               | 2 +-
 scripts/variations/ci+setup.sh | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/scripts/setup.sh b/scripts/setup.sh
index ec4af0a054..250d55220d 100644
--- a/scripts/setup.sh
+++ b/scripts/setup.sh
@@ -45,7 +45,7 @@ echo "hyperfine: $HYPERFINE_VERSION"
 
 # Install Node.js package managers and tools
 echo "Installing package managers and tools..."
-npm install -g npm@latest corepack@latest vlt@latest bun@latest deno@latest nx@latest turbo@latest
+npm install -g --allow-scripts=bun,deno,nx npm@latest corepack@latest vlt@latest bun@latest deno@latest nx@latest turbo@latest
 
 # Install Vite+ (vp) via npm (available as the `vite-plus` package)
 npm install -g vite-plus@latest
diff --git a/scripts/variations/ci+setup.sh b/scripts/variations/ci+setup.sh
index 106961762d..6eb71120a8 100644
--- a/scripts/variations/ci+setup.sh
+++ b/scripts/variations/ci+setup.sh
@@ -42,8 +42,8 @@ SETUP_INSTALL_PNPM=""  # corepack auto-downloads on first invocation
 PACQUET_SETUP_CACHE="/tmp/bench-pacquet-cache"
 SETUP_INSTALL_PACQUET="npm install --global pnpm@next-12 --prefix /tmp/pnpm12 --cache $PACQUET_SETUP_CACHE --allow-scripts=pnpm >/dev/null 2>&1"
 SETUP_INSTALL_VLT="npm install -g vlt@latest >/dev/null 2>&1"
-SETUP_INSTALL_BUN="npm install -g bun@latest >/dev/null 2>&1"
-SETUP_INSTALL_DENO="npm install -g deno@latest >/dev/null 2>&1"
+SETUP_INSTALL_BUN="npm install -g --allow-scripts=bun bun@latest >/dev/null 2>&1"
+SETUP_INSTALL_DENO="npm install -g --allow-scripts=deno deno@latest >/dev/null 2>&1"
 SETUP_INSTALL_AUBE="npm install -g --allow-scripts=@endevco/aube @endevco/aube@latest >/dev/null 2>&1"
 SETUP_INSTALL_UPM="npm install -g upm@latest >/dev/null 2>&1"