From ac80cd06117f73b9cb9dd0104ede24d57d970403 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Moreno?= <joaomoreno@users.noreply.github.com>
Date: Wed, 18 Mar 2026 18:47:16 +0100
Subject: [PATCH] chore: remove workflow to prevent package-lock.json changes
 in PRs (#302901)

---
 .github/workflows/no-package-lock-changes.yml | 51 -------------------
 1 file changed, 51 deletions(-)
 delete mode 100644 .github/workflows/no-package-lock-changes.yml

diff --git a/.github/workflows/no-package-lock-changes.yml b/.github/workflows/no-package-lock-changes.yml
deleted file mode 100644
index 04ea8a43a80..00000000000
--- a/.github/workflows/no-package-lock-changes.yml
+++ /dev/null
@@ -1,51 +0,0 @@
-name: Prevent package-lock.json changes in PRs
-
-on: pull_request
-permissions: {}
-
-jobs:
-  main:
-    name: Prevent package-lock.json changes in PRs
-    runs-on: ubuntu-latest
-    steps:
-      - name: Get file changes
-        uses: trilom/file-changes-action@ce38c8ce2459ca3c303415eec8cb0409857b4272
-        id: file_changes
-      - name: Check if lockfiles were modified
-        id: lockfile_check
-        run: |
-          if cat $HOME/files.json | jq -e 'any(test("package-lock\\.json$|Cargo\\.lock$"))' > /dev/null; then
-            echo "lockfiles_modified=true" >> $GITHUB_OUTPUT
-            echo "Lockfiles were modified in this PR"
-          else
-            echo "lockfiles_modified=false" >> $GITHUB_OUTPUT
-            echo "No lockfiles were modified in this PR"
-          fi
-      - name: Prevent Copilot from modifying lockfiles
-        if: ${{ steps.lockfile_check.outputs.lockfiles_modified == 'true' && github.event.pull_request.user.login == 'Copilot' }}
-        run: |
-          echo "Copilot is not allowed to modify package-lock.json or Cargo.lock files."
-          echo "If you need to update dependencies, please do so manually or through authorized means."
-          exit 1
-      - uses: octokit/request-action@dad4362715b7fb2ddedf9772c8670824af564f0d # v2.4.0
-        id: get_permissions
-        if: ${{ steps.lockfile_check.outputs.lockfiles_modified == 'true' && github.event.pull_request.user.login != 'Copilot' }}
-        with:
-          route: GET /repos/microsoft/vscode/collaborators/{username}/permission
-          username: ${{ github.event.pull_request.user.login }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Set control output variable
-        id: control
-        if: ${{ steps.lockfile_check.outputs.lockfiles_modified == 'true' && github.event.pull_request.user.login != 'Copilot' }}
-        run: |
-          echo "user: ${{ github.event.pull_request.user.login }}"
-          echo "role: ${{ fromJson(steps.get_permissions.outputs.data).permission }}"
-          echo "is dependabot: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}"
-          echo "should_run: ${{ !contains(fromJson('["admin", "maintain", "write"]'), fromJson(steps.get_permissions.outputs.data).permission) }}"
-          echo "should_run=${{ !contains(fromJson('["admin", "maintain", "write"]'), fromJson(steps.get_permissions.outputs.data).permission) && github.event.pull_request.user.login != 'dependabot[bot]' }}" >> $GITHUB_OUTPUT
-      - name: Check for lockfile changes
-        if: ${{ steps.lockfile_check.outputs.lockfiles_modified == 'true' && steps.control.outputs.should_run == 'true' }}
-        run: |
-          echo "Changes to package-lock.json/Cargo.lock files aren't allowed in PRs."
-          exit 1