Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2024

Bumps @yarnpkg/core from 4.0.3 to 4.1.4.

Release notes

Sourced from @​yarnpkg/core's releases.

v4.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.1.0...@​yarnpkg/cli/4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.0.2...@​yarnpkg/cli/4.1.0

Changelog

Sourced from @​yarnpkg/core's changelog.

:::tip Yarn now accepts sponsors! Please take a look at our OpenCollective and GitHub Sponsors pages for more details. :::

Master

:::info Features in master can be tried out by running yarn set version from sources in your project. :::

  • Fixes preferInteractive forcing interactive mode in non-TTY environments.
  • node-modules linker now honors user-defined symlinks for <workspace>/node_modules directories
  • node-modules linker supports hoisting into inner workspaces that are parents of other workspaces
  • node-modules linker attemps to hoist tree more exhaustivel until nothing can be hoisted
  • node-modules linker uses aggregated count of peer and regular usages to decide hoisting priority, instead of preferring peer usages over regular as before, which should result in fewer duplicates

4.1.0

  • Tweaks -,--verbose in yarn workspaces foreach; -v will now only print the prefixes, -vv will be necessary to also print the timings.

  • Adds a new --json option to yarn run when called without script name

  • Fixes node-modules linker link: dependencies mistreatment as inner workspaces, when they point to a parent folder of a workspace

  • Fixes spurious "No candidates found" errors

  • Fixes missing executable permissions when using nodeLinker: pnpm

  • Fixes packages being incorrectly flagged as optional

  • Fixes cache key corruptions due to uncontrolled git merges

  • Fixes yarn version apply --all --dry-run making unexpected changes

  • Fixes yarn npm login when the remote registry is Verdaccio

4.0.1

  • Fixes creation of symlinks for node-modules linker when inner workspace depends on outer workspace
  • Fixes progress bars when the terminal is too large
  • Fixes crashes while running Yarn within Docker within GitHub Actions
  • Fixes yarn npm audit --ignore NUM which didn't apply to deprecations
  • Fixes yarn npm audit --json which didn't print the right output format
  • Fixes an incorrect type export in @yarnpkg/core
  • Implements back the yarn explain peer-requirements command

4.0.0

Major Changes

  • With Node.js 16's now being End of Life'd, we dropped support for Node.js versions lower than 18.12.

  • Some important defaults have changed:

    • yarn init and yarn set version will prefer using packageManager rather than yarnPath when possible (when they detect COREPACK_ROOT in your environment variables).

    • yarn init will no longer use zero-install by default. You still can enable it, but it should make it easier to start one-of projects without having to rewrite the configuration afterwards.

... (truncated)

Commits
  • b5baf9b Releasing 9 new packages
  • 3ad3052 fix(cli): Set COREPACK_ENABLE_AUTO_PIN=0 during local pack of github packages...
  • fb6d2d6 Sync master with the changes from master
  • 68e10d0 Releasing 6 new packages
  • 758a8be Avoid crash in simplifyRanges by removing subsets up front (#6459)
  • 3b156c9 fix(core): determine if a module is a builtin using module.isBuiltin (#5997)
  • 13d5b30 Sync master with the changes from master
  • ab48d62 Releasing 9 new packages
  • 2a47867 Fix peer warning message requester (#6376)
  • 9daddcf deps: update to esbuild-wasm@0.23.0 (#6387)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@yarnpkg/core](https://github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-core) from 4.0.3 to 4.1.4.
- [Release notes](https://github.com/yarnpkg/berry/releases)
- [Changelog](https://github.com/yarnpkg/berry/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yarnpkg/berry/commits/@yarnpkg/core/4.1.4/packages/yarnpkg-core)

---
updated-dependencies:
- dependency-name: "@yarnpkg/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants