build: add --ignore-scripts to npm install commands (#4655)

.github/workflows/ci-bundle.yml

@@ -21,7 +21,7 @@ jobs:
         uses: actions/setup-node@v6
 
       - name: Install npm dependencies
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Build
         env:

.github/workflows/ci-flatpak.yml

@@ -50,7 +50,7 @@ jobs:
           node-version: ${{ env.NODE_VERSION }}
 
       - name: Install npm dependencies
-        run: npm install --package-lock-only
+        run: npm install --ignore-scripts --package-lock-only
 
       - name: Debug package-lock.json
         run: cat package-lock.json

cmake/targets/common.cmake

@@ -54,10 +54,9 @@ endif()
 #WebUI build
 find_program(NPM npm REQUIRED)
 
+set(NPM_INSTALL_FLAGS "--ignore-scripts")
 if (NPM_OFFLINE)
-    set(NPM_INSTALL_FLAGS "--offline")
-else()
-    set(NPM_INSTALL_FLAGS "")
+    set(NPM_INSTALL_FLAGS "${NPM_INSTALL_FLAGS} --offline")
 endif()
 
 add_custom_target(web-ui ALL