This is just the same as already done for 5.4 and 6.1

Pull Request resolves # .

• I read the Generative AI policy and my contribution is either not created with the help of AI or is compatible with the policy and GNU/GPL 2 or later.

Summary of Changes

With npm 12 you now need to explicitly allow scripts see https://github.blog/changelog/2026-06-09-upcoming-breaking-changes-for-npm-v12/

Testing Instructions

if you are on npm 11.6 and higher and run npm i you will see information at the end that you need to allow certain scripts.

Actual result BEFORE applying this Pull Request

6 packages have install scripts blocked because they are not covered by allowScripts:
  vue-demi@0.14.10 (postinstall: node -e "try{require('./scripts/postinstall.js')}catch(e){}")
  vue-demi@0.14.10 (postinstall: node -e "try{require('./scripts/postinstall.js')}catch(e){}")
  core-js@3.48.0 (postinstall: node -e "try{require('./postinstall')}catch(e){}")
  cypress@15.18.0 (postinstall: node dist/index.js --exec install)
  esbuild@0.27.7 (postinstall: node install.js)
  vue-demi@0.13.11 (postinstall: node ./scripts/postinstall.js)

note if you are on a mac you will have an additional package listed of fsevents

Expected result AFTER applying this Pull Request

no warnings

Link to documentations

Please select:

• Documentation link for guide.joomla.org:

• No documentation changes for guide.joomla.org needed

• Pull Request link for manual.joomla.org:

• No documentation changes for manual.joomla.org needed