fix: add pnpm allowBuilds config

[Samk13]

❤️ Thank you for your contribution!

Description

• Specify build allowances for Font Awesome, Parcel, and SWC.
• closes installation: frontend assets install fails with pnpm 11 invenio-app-rdm#3444

Checklist

Ticks in all boxes and 🟢 on all GitHub actions status checks are required to merge:

• I'm aware of the code of conduct.
• I've created logical separate commits and followed the commit message format.
• I've added relevant test cases.
• I've added relevant documentation.
• I've marked translation strings.
• I've identified the copyright holder(s) and updated copyright headers for touched files (>15 lines contributions).
• I've NOT included third-party code (copy/pasted source code or new dependencies).
  • If you have added third-party code (copy/pasted or new dependencies), please reach out to an architect on Discord.

Frontend

• I've followed the CSS/JS and React guidelines.
• I've followed the web accessibility guidelines.
• I've followed the user interface guidelines.

Reminder

By using GitHub, you have already agreed to the GitHub’s Terms of Service including that:

1. You license your contribution under the same terms as the current repository’s license.
2. You agree that you have the right to license your contribution under the current repository’s license.

[max-moser]

Question: What does this build script do, is it needed?

[Samk13]

I tested locally without allowing the postinstall script, and the build still works for me.

The script looks like it only validates the native SWC binding and installs @swc/wasm as a fallback if needed.
I kept it allowed in case I am not aware of some edge cases for it, but I'm fine disabling it.

[max-moser]

Thanks for checking!
I've also not encountered any issues with all postinstall/build scripts being disabled so far; sounds like this is only relevant for other CPU architectures, e.g. if somebody wants to install InvenioRDM on ARM?

If so, then for the sake of compatibility we could leave it enabled, or for the sake of security we could disable the build script; I'm fine with either but slightly lean towards the latter.
Ping @slint @ntarocco your thoughts?

[ntarocco]

@Samk13 are you using an ARM based CPU?

[Samk13]

Yes, I'm on Apple Silicon ARM. Since everything works with the script disabled on ARM as well, I went ahead and disabled it. If we discover a platform-specific issue later, we can always re-enable it.