Update Yarn to v1.22.19 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
yarn	>=1.12.3 -> >=1.22.19
yarn	^1.12.3 -> ^1.22.19

---

Release Notes

yarnpkg/yarn

v1.22.19

Compare Source

• Adds compatibility with WebAuthn on the npm registry

v1.22.18

Compare Source

Node 17.7.0 had a regression in url.resolve which broke Yarn, causing network errors. This release fixes that, although the regression also got fixed on the Node side starting from 17.7.1, so as long as you keep your Node up-to-date it'll be fine.

v1.22.17

Compare Source

Strangely this released disappeared from GitHub, re-adding it.

v1.22.16

Compare Source

v1.22.15

Compare Source

• Fixes an issue on Windows where relative scripts would fail to execute

v1.22.14

Compare Source

• Fixes false positives that would happen on non-win32 platforms ("Potentially dangerous call to ...")

v1.22.13

Compare Source

• Fixes a potential security issue where packages could run scripts even with --ignore-builds set (Windows only)
• Fixes yarn init -y2 w/ Corepack
• yarn set version stable (and canary) will now defer to the stable & canary for upgrading the project

v1.22.12

Compare Source

Bogus release (published the wrong folder)

v1.22.11

Compare Source

This version fixes a problem where Yarn wasn't forwarding SIGTERM to the binary spawned via yarnPath. It also makes yarn init -2 compatible with Corepack. The behaviour of yarn init (without -2) doesn't change.

Remember that Yarn 1.x won't receive further functional improvements. We recommend you to switch to the recently-released 3.0, and to ping us on Discord if you find issues when migrating (also check our Migration Guide).

v1.22.10

• Tweak the preinstall check to not cause errors when Node is installed as root (as a downside, it won't run at all on Windows, which should be an acceptable tradeoff): https://github.com/yarnpkg/yarn/issues/8358

v1.22.7

This release doesn't change anything and was caused by a publish issue.

v1.22.6

• Running yarn init with the -2 flag won't print the set version output anymore.

• A new preinstall check will ensure that npm install -g yarn works even under Corepack. It doesn't have any effect on other setups.

v1.22.5

Compare Source

• Headers won't be printed when calling yarn init with the -2 flag

  Maël Nison

• Files with the .cjs extension will be spawned by yarnPath using `execPath

  #​8144 - bgotink

• Generates local yarn verions as .cjs files when calling yarn set version

  #​8145 - bgotink

• Sorts files when running yarn pack to produce identical layout on Windows and Unix systems

  #​8142 - Merceyz

v1.22.4

Compare Source

Those versions didn't contain any changes and were just triggered by our infra while working on the tests.

v1.22.1

Compare Source

This version fixes a problem where Yarn wasn't forwarding SIGTERM to the binary spawned via yarnPath. It also makes yarn init -2 compatible with Corepack. The behaviour of yarn init (without -2) doesn't change.

Remember that Yarn 1.x won't receive further functional improvements. We recommend you to switch to the recently-released 3.0, and to ping us on Discord if you find issues when migrating (also check our Migration Guide).

v1.22.0

Compare Source

• Allows some dots in binary names again

  #​7811 - Valery Bugakov

• Better error handling on yarn set version

  #​7848 - Nick Olinger

• Passes arguments following -- when running a workspace script (yarn workspace pkg run command -- arg)

  #​7776 - Jeff Valore

• Fixes an issue where the archive paths were incorrectly sanitized

  #​7831 - Maël Nison

• Implements yarn init -2

  #​7862 - Maël Nison

• Implements yarn set version <version> as an alias for policies set-version

  #​7862 - Maël Nison

v1.21.1

Compare Source

v1.21.0

Compare Source

v1.19.2

Compare Source

• Folders like .cache won't be pruned from the node_modules after each install.

  #​7699 - Maël Nison

• Correctly installs workspace child dependencies when workspace child not symlinked to root.

  #​7289 - Daniel Tschinder

• Makes running scripts with Plug'n Play possible on node 13.

  #​7650 - Sander Verweij

• Change run command to check cwd/node_modules/.bin for commands. Fixes run in workspaces.

  #​7151 - Jeff Valore

v1.19.1

Compare Source

Important: This release contains a cache bump. It will cause the very first install following the upgrade to take slightly more time, especially if you don't use the Offline Mirror feature. After that everything will be back to normal.

• Computes the --modules-folder & friends paths based on the cwd.

  #​7607 - mbpreble

• Stores the sha512 in the cache even when not provided by the server.

  #​7591 - Maël Nison / #​7595 - Michael

• Uses the right Node binary when using yarn-path.

  #​7592 - Maël Nison

v1.19.0

Compare Source

Important: This release contains a cache bump. It will cause the very first install following the upgrade to take slightly more time, especially if you don't use the Offline Mirror feature. After that everything will be back to normal.

• Fixes a potential vulnerability regarding how the build artifacts are stored

  Reported by ChALkeR, fixed by Maël Nison

v1.18.0

Compare Source

• Suggests using the Yarn 2 development trunk on PnP-enabled projects

  #​7512 - Maël Nison

• Preserves linked packages when calling yarn create

  #​7543 - Nick McCurdy

• Fixes the offline mirror filenames when using Verdaccio

  #​7499 - xv2

• Fixes using link:. to refer to the package folder

  #​7512 - Maël Nison

• Runs the prepare lifecycle of git dependencies even if NODE_ENV is set to production.

  #​7398 - John Firebaugh

• Fixes the postversion lifecycle method not being called when using --no-git-tag-version.

  #​7154 - Hampus Tågerud

• Ignores potentially large vscode keys in package.json to avoid E2BIG errors.

  #​7419 - Eric Amodio

• Enforces https for the Yarn and npm registries.

  #​7393 - Maël Nison

• Adds support for reading yarnPath from v2-produced .yarnrc.yml files.

  #​7350 - Maël Nison

v1.17.3

Compare Source

v1.17.2

Compare Source

v1.17.1

Compare Source

v1.17.0

Compare Source

• Adds prereleases flags and prerelease identifier to yarn version.

  #​7336 - Daniel Seijo

• Fixes audits when used with yarn add & yarn upgrade

  #​7326 - David Sanders

• Adds support for the --offline flag to yarn global add

  #​7330 - Francis Crick

• Yarn will tolerate Yaml at parse time. Full support isn't ready yet and will only come at the next major.

  #​7300 - Maël Nison

• Fixes a bug when using the link: protocol with a folder that doesn't contain a package.json

  #​7337 - Maël Nison

v1.16.0

Compare Source

• Retries downloading a package on yarn install when we get a ETIMEDOUT error.

  #​7163 - Vincent Bailly

• Implements yarn audit --level [severity] flag to filter the audit command's output.

  #​6716 - Rogério Vicente

• Implements yarn audit --groups group_name [group_name ...].

  #​6724 - Tom Milligan

• Exposes the script environment variables to yarn create spawned processes.

  #​7127 - Eli Perelman

• Prevents EPIPE errors from being printed.

  #​7194 - Abhishek Reddy

• Adds support for the npm enterprise URLs when computing the offline mirror filenames.

  #​7200 - John Millikin

• Tweaks the lockfile parser logic to parse a few extra cases

  #​7210 - Maël Nison

v1.15.2

Compare Source

The 1.15.1 doesn't exist due to a release hiccup.

• Reverts a behavior causing boggus interactions between PowerShell and yarn global

  #​6954 - briman0094

• Fixes a bug where non-zero exit codes were converted to a generic 1 when running yarn run

  #​6926 - Kyle Fang

• Fixes production / development reporting when running yarn audit

  #​6970 - Adam Richardson

v1.15.1

Compare Source

v1.15.0

Compare Source

• Removes --scripts-prepend-node-path as Yarn's default behavior makes this obsolete

  #​7057 - Jason Grout

• Fixes the advisory link printed by yarn audit

  #​7091 - Jakob Krigovsky

• Fixes npm_config_ environment variable parsing to support those prefixed with underscore (ex: _auth)

  #​7070 - Nicholas Boll

• Fixes yarn upgrade --latest for dependencies using > or >= range specifier

  #​7080 - Xukai Wu

• Fixes --modules-folder handling in several places (ex: yarn check now respects --modules-folder)

  #​6850 - Jeff Valore

• Removes rootModuleFolders (internal variable which wasn't used anywhere)

  #​6846 - Jeff Valore

• Adds support for setting global-folder from .yarnrc files

  #​7056 - Hsiao-nan Cheung

• Makes yarn version cancellable via ctrl-c or empty string

  #​7064 - Olle Lauri Boström

• Adds support for yarn policies set-version berry

  #​7041 - Maël Nison

• Fixes yarn upgrade --scope when using exotic (github) dependencies

  #​7017 - Jeff Valore

• Fixes occasionally mismatching upper/lowecases of drive letters in win32 pnp check

  #​7007 - Christoph Werner

• Fixes the error reporting for non-HTTP network errors (such as invalid certificates)

  #​6968 - Chih-Hsuan Yen

• Changes the location where the --require ./.pnp.js flag gets added into NODE_OPTIONS: now at the front (bis)

  #​6951 - John-David Dalton

• Packages won't be auto-unplugged anymore if ignore-scripts is set in the yarnrc file

  #​6983 - Micha Reiser

• Enables displaying Emojis on Terminus by default

  #​7093 - David Refoua

• Run the engines check before executing run scripts.

  #​7013 - Eloy Durán

v1.14.0

Compare Source

• Improves PnP compatibility with Node 6

  #​6871 - Robert Jackson

• Fixes PnP detection with workspaces (installConfig is now read at the top-level)

  #​6878 - Maël Nison

• Fixes an interaction between yarn pack and bundled dependencies

  #​6908 - Travis Hoover

• Adds support for GITHUB_TOKEN in yarn policies set-version

  #​6912 - Billy Vong

• Fixes an issue where resolve would forward an incomplete basedir to the PnP hook

  #​6882 - Zoran Regvart

• Fixes the command that yarn unlink recommends to run as a followup (now yarn install --force)

  #​6931 - Justin Sacbibit

• Changes the location where the --require ./.pnp.js flag gets added into NODE_OPTIONS: now at the front

  #​6942 - John-David Dalton

• Fixes a bug where os and platform requirements weren't properly checked when engines was missing

  #​6976 - Micha Reiser

v1.13.0

Compare Source

• Implements a new package.json field: peerDependenciesMeta

  #​6671 - Maël Nison

• Adds an optional settings to peerDependenciesMeta to silence missing peer dependency warnings

  #​6671 - Maël Nison

• Implements yarn policies set-version [range]. Check the documentation for usage & tips.

  #​6673 - Maël Nison

• Fixes a resolution issue when a package had an invalid main entry

  #​6682 - Maël Nison

• Decreases the size of the generated $PATH environment variable for a better Windows support

  #​6683 - Rowan Lonsdale

• Fixes postinstall scripts for third-party packages when they were referencing a binary from their own dependencies

  #​6712 - Maël Nison

• Fixes yarn audit exit code overflow

  #​6748 - Andrey Vetlugin

• Stops automatically unplugging packages with postinstall script when running under --ignore-scripts

  #​6820 - Maël Nison

• Adds transparent support for the resolve package when using Plug'n'Play

  #​6816 - Maël Nison

• Properly reports the error codes when the npm registry throws 500's

  #​6817 - Maël Nison

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.