fix: Update postinstall scripts to check DEPENDABOT variable

.github/workflows/lint-build-test.yml

@@ -106,7 +106,7 @@ jobs:
           is-high-risk-environment: false
           node-version: ${{ matrix.node-version }}
         env:
-          PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1
+          PLAYWRIGHT_ONLY_SHELL: 1
       - run: yarn build
       - run: "yarn test --coverage=${{ matrix.node-version == '24.x' && 'true' || 'false' }}"
       - name: Upload coverage artifact

scripts/playwright-install.sh

@@ -1,9 +1,25 @@
 #!/bin/bash
 
-# Skip in Dependabot PRs (native builds aren't needed and may fail)
-if [ "$GITHUB_ACTOR" = "dependabot[bot]" ]; then
-    echo "⏭️  Skipping native rebuild in Dependabot PR"
+# Skip in Dependabot environments (not needed and causes failures)
+# DEPENDABOT is set in the updater environment, GITHUB_ACTOR in PR workflows
+if [ -n "$DEPENDABOT" ] || [ "$GITHUB_ACTOR" = "dependabot[bot]" ]; then
+    echo "⏭️  Skipping Playwright install in Dependabot environment"
     exit 0
 fi
 
-yarn playwright install chromium
+# Also respect PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD for CI environments
+if [ "$PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD" = "1" ]; then
+    echo "⏭️  Skipping Playwright install (PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1)"
+    exit 0
+fi
+
+# Install Chromium (with system deps in CI, headless shell only if requested)
+if [ "$CI" = "true" ]; then
+    if [ "$PLAYWRIGHT_ONLY_SHELL" = "1" ]; then
+        yarn playwright install --with-deps --only-shell chromium
+    else
+        yarn playwright install --with-deps chromium
+    fi
+else
+    yarn playwright install chromium
+fi

scripts/rebuild-native.sh

@@ -4,9 +4,10 @@
 # This checks if artifacts already exist to avoid unnecessary rebuilds.
 # Pass --force or -f to rebuild even if build artifacts already exist.
 
-# Skip in Dependabot PRs (native builds aren't needed and may fail)
-if [ "$GITHUB_ACTOR" = "dependabot[bot]" ]; then
-    echo "⏭️  Skipping native rebuild in Dependabot PR"
+# Skip in Dependabot environments (native builds aren't needed and may fail)
+# DEPENDABOT is set in the updater environment, GITHUB_ACTOR in PR workflows
+if [ -n "$DEPENDABOT" ] || [ "$GITHUB_ACTOR" = "dependabot[bot]" ]; then
+    echo "⏭️  Skipping native rebuild in Dependabot environment"
     exit 0
 fi