Build/Test Tools: Opt in to the npm supply chain defaults

.npmrc

@@ -3,3 +3,10 @@ legacy-peer-deps = true
 lockfile-version = 3
 prefer-dedupe = true
 save-exact = true
+# fail the install on any dependency script not covered by allowScripts in package.json
+strict-allow-scripts = true
+# opt in to the npm v12 defaults that refuse git and remote URL dependencies
+allow-git = none
+allow-remote = none
+# extend that to local tarballs
+allow-file = none

.nvmrc

@@ -1 +1 @@
-24.18
+24.20

package.json

@@ -11,17 +11,17 @@
 		"ghcrRepo": "WordPress/gutenberg/gutenberg-wp-develop-build"
 	},
 	"engines": {
-		"node": ">=24.18.0",
-		"npm": ">=11.16.0"
+		"node": ">=24.20.0",
+		"npm": ">=11.18.0"
 	},
 	"devEngines": {
 		"runtime": {
 			"name": "node",
-			"version": ">=24.18.0"
+			"version": ">=24.20.0"
 		},
 		"packageManager": {
 			"name": "npm",
-			"version": ">=11.16.0",
+			"version": ">=11.18.0",
 			"onFail": "error"
 		}
 	},
@@ -159,5 +159,12 @@
 		"gutenberg:copy": "node tools/gutenberg/copy.js",
 		"gutenberg:verify": "node tools/gutenberg/utils.js",
 		"gutenberg:download": "node tools/gutenberg/download.js && npm run build:gutenberg"
+	},
+	"allowScripts": {
+		"@parcel/watcher": false,
+		"core-js": false,
+		"core-js-pure": false,
+		"fsevents": false,
+		"unrs-resolver": false
 	}
 }

src/wp-content/themes/twentytwentyfive/.npmrc

@@ -0,0 +1,7 @@
+# fail the install on any dependency script not covered by allowScripts in package.json
+strict-allow-scripts = true
+# opt in to the npm v12 defaults that refuse git and remote URL dependencies
+allow-git = none
+allow-remote = none
+# extend that to local tarballs
+allow-file = none

src/wp-content/themes/twentytwentyfive/.nvmrc

@@ -1 +1 @@
-24.18
+24.20

src/wp-content/themes/twentytwentyfive/package.json

@@ -13,17 +13,17 @@
 	},
 	"homepage": "https://wordpress.org/themes/twentytwentyfive/",
 	"engines": {
-		"node": ">=24.18.0",
-		"npm": ">=11.16.0"
+		"node": ">=24.20.0",
+		"npm": ">=11.18.0"
 	},
 	"devEngines": {
 		"runtime": {
 			"name": "node",
-			"version": ">=24.18.0"
+			"version": ">=24.20.0"
 		},
 		"packageManager": {
 			"name": "npm",
-			"version": ">=11.16.0",
+			"version": ">=11.18.0",
 			"onFail": "error"
 		}
 	},
@@ -39,5 +39,8 @@
 	"scripts": {
 		"build": "postcss style.css --use cssnano -o style.min.css --no-map",
 		"watch": "postcss style.css --use cssnano -o style.min.css --no-map --watch"
+	},
+	"allowScripts": {
+		"fsevents": false
 	}
 }

src/wp-content/themes/twentytwentyone/.npmrc

@@ -1 +1,8 @@
 legacy-peer-deps = true
+# fail the install on any dependency script not covered by allowScripts in package.json
+strict-allow-scripts = true
+# opt in to the npm v12 defaults that refuse git and remote URL dependencies
+allow-git = none
+allow-remote = none
+# extend that to local tarballs
+allow-file = none

src/wp-content/themes/twentytwentyone/.nvmrc

@@ -1 +1 @@
-24.18
+24.20

src/wp-content/themes/twentytwentyone/package.json

@@ -13,17 +13,17 @@
 	},
 	"homepage": "https://wordpress.org/themes/twentytwentyone/",
 	"engines": {
-		"node": ">=24.18.0",
-		"npm": ">=11.16.0"
+		"node": ">=24.20.0",
+		"npm": ">=11.18.0"
 	},
 	"devEngines": {
 		"runtime": {
 			"name": "node",
-			"version": ">=24.18.0"
+			"version": ">=24.20.0"
 		},
 		"packageManager": {
 			"name": "npm",
-			"version": ">=11.16.0",
+			"version": ">=11.18.0",
 			"onFail": "error"
 		}
 	},
@@ -80,5 +80,11 @@
 		"watch": "chokidar \"**/*.scss\" -c \"npm run build\" --initial",
 		"lint:scss": "stylelint **/*.scss",
 		"lint-fix:scss": "stylelint **/*.scss --fix"
+	},
+	"allowScripts": {
+		"@parcel/watcher": false,
+		"core-js": false,
+		"core-js-pure": false,
+		"fsevents": false
 	}
 }

src/wp-content/themes/twentytwentytwo/.npmrc

@@ -0,0 +1,7 @@
+# fail the install on any dependency script not covered by allowScripts in package.json
+strict-allow-scripts = true
+# opt in to the npm v12 defaults that refuse git and remote URL dependencies
+allow-git = none
+allow-remote = none
+# extend that to local tarballs
+allow-file = none

src/wp-content/themes/twentytwentytwo/.nvmrc

@@ -1 +1 @@
-24.18
+24.20

src/wp-content/themes/twentytwentytwo/package.json

@@ -13,17 +13,17 @@
 	},
 	"homepage": "https://wordpress.org/themes/twentytwentytwo/",
 	"engines": {
-		"node": ">=24.18.0",
-		"npm": ">=11.16.0"
+		"node": ">=24.20.0",
+		"npm": ">=11.18.0"
 	},
 	"devEngines": {
 		"runtime": {
 			"name": "node",
-			"version": ">=24.18.0"
+			"version": ">=24.20.0"
 		},
 		"packageManager": {
 			"name": "npm",
-			"version": ">=11.16.0",
+			"version": ">=11.18.0",
 			"onFail": "error"
 		}
 	},
@@ -39,5 +39,8 @@
   "scripts": {
     "build": "postcss style.css --use cssnano -o style.min.css --no-map",
     "watch": "postcss style.css --use cssnano -o style.min.css --no-map --watch"
+  },
+  "allowScripts": {
+    "fsevents": false
   }
 }