From b35dcff656e124c68088e156b63824c4f44ed5af Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Wed, 13 May 2026 16:37:31 +0200
Subject: [PATCH 1/6] chore(release): bump version to 7.0.0-beta.57 and add
 readme note

---
 README.md    | 2 ++
 package.json | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index db97371a35..6d01f5eef0 100644
--- a/README.md
+++ b/README.md
@@ -18,6 +18,8 @@
 
 The DataGrid component is designed to handle large datasets efficiently while offering a rich set of features for customization and interactivity.
 
+_Note: This package is a fork of [react-data-grid](https://github.com/Comcast/react-data-grid) with support for React 18._
+
 ## Features
 
 - [React 19.0+](package.json) support
diff --git a/package.json b/package.json
index 0a35b97040..97c4bac932 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@grafana/react-data-grid",
-  "version": "7.0.0-beta.56",
+  "version": "7.0.0-beta.57",
   "license": "MIT",
   "description": "Feature-rich and customizable data grid React component",
   "keywords": [

From c7d219b362d3553f6ef0b115179a110f8d462f1a Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Thu, 14 May 2026 07:35:26 +0200
Subject: [PATCH 2/6] chore(npm): rename typo install-scripts -> ignore-scripts

---
 .npmrc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.npmrc b/.npmrc
index dc0c9f29df..e0543e9829 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1,2 +1,2 @@
 legacy-peer-deps = true
-install-scripts = false
+ignore-scripts = true

From fc52f03a46781999875fa6546a431ca965ba0784 Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Thu, 14 May 2026 07:39:13 +0200
Subject: [PATCH 3/6] chore: roll version forwards as beta.57 is now on npm

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 97c4bac932..ab854f8582 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@grafana/react-data-grid",
-  "version": "7.0.0-beta.57",
+  "version": "7.0.0-beta.58",
   "license": "MIT",
   "description": "Feature-rich and customizable data grid React component",
   "keywords": [

From 7239d53bd8f9a1dda8cf5ee215f70af482bba44c Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Thu, 14 May 2026 07:45:45 +0200
Subject: [PATCH 4/6] chore(npm): update repo.url for trusted publishing

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index ab854f8582..b8fa9bc53f 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/grafana/react-data-grid.git"
+    "url": "http://github.com/grafana/react-data-grid.git"
   },
   "bugs": "https://github.com/grafana/react-data-grid/issues",
   "type": "module",

From 83fece81c94ecf849d3829f96c67e133b3889851 Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Thu, 14 May 2026 09:31:46 +0200
Subject: [PATCH 5/6] ci(release): add build step and publish tag to prevent
 npm erroring

---
 .github/workflows/ci.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 506bac0875..ba9e94c1e0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -82,6 +82,10 @@ jobs:
         if: steps.version_check.outputs.changed == 'true'
         run: yarn install --immutable
 
+      - name: Build package
+        if: steps.version_check.outputs.changed == 'true'
+        run: yarn build
+
       - name: Publish package to NPM
         if: steps.version_check.outputs.changed == 'true'
-        run: npm publish
+        run: npm publish --tag latest

From c2aa840acce1fe7c9be53e90730bb85a571a9ac8 Mon Sep 17 00:00:00 2001
From: Jack Westbrook <jack.westbrook@gmail.com>
Date: Thu, 14 May 2026 16:21:19 +0200
Subject: [PATCH 6/6] ci(publish): disable npm cache to prevent poisoning

---
 .github/workflows/ci.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba9e94c1e0..e381870e36 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,8 +13,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 24
       - name: yarn install
@@ -50,7 +50,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: react-18
           persist-credentials: false
@@ -73,10 +73,11 @@ jobs:
 
       - name: Setup .npmrc file for NPM registry
         if: steps.version_check.outputs.changed == 'true'
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
+        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version-file: .nvmrc
           registry-url: 'https://registry.npmjs.org'
+          package-manager-cache: false # never use caching in release builds
 
       - name: Install dependencies
         if: steps.version_check.outputs.changed == 'true'