From 74cddad9bf2285e91f4834cf836598fe892dae9b Mon Sep 17 00:00:00 2001
From: saileshwar-skyflow
 <156889717+saileshwar-skyflow@users.noreply.github.com>
Date: Fri, 5 Jun 2026 13:59:35 +0530
Subject: [PATCH 1/2] =?UTF-8?q?SK-2839:=20harden=20against=20npm=20supply?=
 =?UTF-8?q?=20chain=20attacks=20=E2=80=94=20pin=20deps=20and=20add=20--ign?=
 =?UTF-8?q?ore-scripts=20to=20CI=20(#137)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CI.yml               |  2 +-
 .github/workflows/beta-release.yml     |  2 +-
 .github/workflows/internal-release.yml |  2 +-
 .github/workflows/main.yml             |  2 +-
 .github/workflows/release.yml          |  2 +-
 package.json                           | 46 +++++++++++++-------------
 6 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index eb5702f..2e4d799 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -29,7 +29,7 @@ jobs:
           node-version: 14.21.3
 
       - name: install node_modules
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Run spellcheck
         run: npm run spellcheck
diff --git a/.github/workflows/beta-release.yml b/.github/workflows/beta-release.yml
index ae90c66..000ec89 100644
--- a/.github/workflows/beta-release.yml
+++ b/.github/workflows/beta-release.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           node-version: 14.21.3
           registry-url: 'https://registry.npmjs.org'
-      - run: npm install
+      - run: npm install --ignore-scripts
 
       - name: Build
         run: npm run build
diff --git a/.github/workflows/internal-release.yml b/.github/workflows/internal-release.yml
index e756c3d..56bd221 100644
--- a/.github/workflows/internal-release.yml
+++ b/.github/workflows/internal-release.yml
@@ -24,7 +24,7 @@ jobs:
         with:
           node-version: 14.21.3
 
-      - run: npm install
+      - run: npm install --ignore-scripts
 
       - name: Get Previous tag
         id: previoustag
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index eaa5685..761daab 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -15,7 +15,7 @@ jobs:
           node-version: 14.21.3
 
       - name: install node_modules
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Run tests
         run: npm run test
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9bcd2dc..d2ff45f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
 
 
       - name: install modules
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Get Previous tag
         id: previoustag
diff --git a/package.json b/package.json
index 6603b57..b72cd1d 100644
--- a/package.json
+++ b/package.json
@@ -42,28 +42,28 @@
   "author": "Skyflow",
   "license": "MIT",
   "devDependencies": {
-    "@arkweid/lefthook": "^0.7.7",
-    "@babel/eslint-parser": "^7.18.2",
-    "@commitlint/config-conventional": "^17.0.2",
-    "@react-native-community/eslint-config": "^3.0.2",
-    "@testing-library/react-native": "^11.3.0",
-    "@types/jest": "^28.1.2",
-    "@types/lodash": "^4.14.185",
-    "@types/react": "~17.0.21",
+    "@arkweid/lefthook": "0.7.7",
+    "@babel/eslint-parser": "7.25.9",
+    "@commitlint/config-conventional": "17.8.1",
+    "@react-native-community/eslint-config": "3.2.0",
+    "@testing-library/react-native": "11.5.4",
+    "@types/jest": "28.1.8",
+    "@types/lodash": "4.17.13",
+    "@types/react": "17.0.21",
     "@types/react-native": "0.68.0",
-    "commitlint": "^17.0.2",
+    "commitlint": "17.8.1",
     "cspell": "4.2.8",
-    "eslint": "^8.4.1",
-    "eslint-config-prettier": "^8.5.0",
-    "eslint-plugin-prettier": "^4.0.0",
-    "jest": "^28.1.1",
-    "pod-install": "^0.1.0",
-    "prettier": "^2.0.5",
+    "eslint": "8.57.1",
+    "eslint-config-prettier": "8.10.0",
+    "eslint-plugin-prettier": "4.2.1",
+    "jest": "28.1.3",
+    "pod-install": "0.1.39",
+    "prettier": "2.8.8",
     "react": "18.0.0",
-    "react-native": "^0.71.19",
-    "react-native-builder-bob": "^0.18.3",
-    "react-test-renderer": "^18.2.0",
-    "typescript": "^4.5.2"
+    "react-native": "0.71.19",
+    "react-native-builder-bob": "0.18.3",
+    "react-test-renderer": "18.3.1",
+    "typescript": "4.9.5"
   },
   "resolutions": {
     "@types/react": "17.0.21",
@@ -133,9 +133,9 @@
     ]
   },
   "dependencies": {
-    "jwt-decode": "^3.1.2",
-    "lodash": "^4.17.21",
-    "react-native-uuid": "^2.0.1",
-    "set-value": "^4.1.0"
+    "jwt-decode": "3.1.2",
+    "lodash": "4.17.21",
+    "react-native-uuid": "2.0.3",
+    "set-value": "4.1.0"
   }
 }

From e0a857a8abf78cbb88aebcf5c90f9c8b932eefbc Mon Sep 17 00:00:00 2001
From: saileshwar-skyflow <saileshwar-skyflow@users.noreply.github.com>
Date: Fri, 5 Jun 2026 08:30:18 +0000
Subject: [PATCH 2/2] [AUTOMATED] Private Release 1.10.4-dev.74cddad

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index b72cd1d..4f2117c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "skyflow-react-native",
-  "version": "1.10.4",
+  "version": "1.10.4-dev.74cddad",
   "description": "Skyflow React Native SDK",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",