Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update yarn to v3.8.7 #1744

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

chore(deps): update yarn to v3.8.7 #1744

wants to merge 1 commit into from
+1,757 −1,755

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 1, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
yarn (source) 3.6.4 -> 3.8.7 age adoption passing confidence

Release Notes

yarnpkg/berry (yarn)

v3.8.7

Compare Source

v3.8.6

Compare Source

v3.8.5

Compare Source

v3.8.4

Compare Source

v3.8.3

Compare Source

v3.8.2

Compare Source

v3.8.1

Compare Source

v3.8.0

Compare Source

v3.7.0

Compare Source

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate Renovate
Copy link
Contributor Author

renovate bot commented May 1, 2024

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: back/strapi/yarn.lock
/opt/containerbase/tools/corepack/0.28.0/14.21.3/node_modules/corepack/dist/yarn.js:2
process.env.COREPACK_ENABLE_DOWNLOAD_PROMPT??='1'
                                           ^^^

SyntaxError: Unexpected token '??='
    at wrapSafe (internal/modules/cjs/loader.js:1029:16)
    at Module._compile (internal/modules/cjs/loader.js:1078:27)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1143:10)
    at Module.load (internal/modules/cjs/loader.js:979:32)
    at Function.Module._load (internal/modules/cjs/loader.js:819:12)
    at Function.executeUserEntryPoint [as runMain] (internal/modules/run_main.js:75:12)
    at internal/main/run_main_module.js:17:47

@renovate renovate bot added the dependencies label May 1, 2024
@socket-security Socket Security
Copy link

socket-security bot commented May 1, 2024 •
edited
Loading

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Critical CVE npm/[email protected] ⚠︎
Possible typosquat attack npm/[email protected] ⚠︎

View full report↗︎

Next steps

What is a critical CVE?

Contains a Critical Common Vulnerability and Exposure (CVE).

Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from ce6ea00 to 478e377 Compare May 2, 2024 19:18
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.1 chore(deps): update yarn to v3.8.2 May 2, 2024
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 478e377 to 0d5c8e5 Compare May 13, 2024 08:49
@renovate Renovate
Copy link
Contributor Author

renovate bot commented May 13, 2024 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: back/strapi/yarn.lock
/opt/containerbase/tools/corepack/0.30.0/14.21.3/node_modules/corepack/dist/yarn.js:2
process.env.COREPACK_ENABLE_DOWNLOAD_PROMPT??='1'
                                           ^^^

SyntaxError: Unexpected token '??='
    at wrapSafe (internal/modules/cjs/loader.js:1029:16)
    at Module._compile (internal/modules/cjs/loader.js:1078:27)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1143:10)
    at Module.load (internal/modules/cjs/loader.js:979:32)
    at Function.Module._load (internal/modules/cjs/loader.js:819:12)
    at Function.executeUserEntryPoint [as runMain] (internal/modules/run_main.js:75:12)
    at internal/main/run_main_module.js:17:47

@sonarcloud SonarCloud
Copy link

sonarcloud bot commented May 13, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 0d5c8e5 to 05d0d62 Compare June 21, 2024 16:25
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.2 chore(deps): update yarn to v3.8.3 Jun 21, 2024
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 05d0d62 to 74cb86b Compare July 1, 2024 09:23
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 74cb86b to 00a6552 Compare July 3, 2024 14:45
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 00a6552 to 033bec2 Compare July 8, 2024 08:10
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 033bec2 to 739d622 Compare July 22, 2024 11:58
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 739d622 to c228e55 Compare July 22, 2024 15:49
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from c228e55 to 8261cb4 Compare July 22, 2024 15:55
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.3 chore(deps): update yarn to v3.8.4 Aug 5, 2024
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 792b386 to e44be80 Compare August 12, 2024 09:16
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from e44be80 to 99e3f96 Compare August 12, 2024 13:33
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 99e3f96 to 4a188de Compare August 12, 2024 17:54
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 4a188de to 85c1c9d Compare August 24, 2024 15:53
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.4 chore(deps): update yarn to v3.8.5 Aug 24, 2024
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 85c1c9d to a19e37d Compare August 26, 2024 09:23
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from a19e37d to 058aee6 Compare August 26, 2024 09:35
@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 058aee6 to 16e4c97 Compare August 26, 2024 09:49
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Aug 26, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from 16e4c97 to a46efc0 Compare October 18, 2024 19:09
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.5 chore(deps): update yarn to v3.8.6 Oct 18, 2024
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Oct 18, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@renovate renovate bot force-pushed the renovate/yarn-monorepo branch from a46efc0 to c37c549 Compare December 4, 2024 04:37
@renovate renovate bot changed the title chore(deps): update yarn to v3.8.6 chore(deps): update yarn to v3.8.7 Dec 4, 2024
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Dec 4, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@socket-security Socket Security
Copy link

Report too large to display inline

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants