chore(deps): update yarn to v4.17.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
yarn (source)	4.5.0 → 4.17.0

---

Release Notes

yarnpkg/berry (yarn)

v4.17.0: v4.17.0

Compare Source

What's Changed

• Adds support for package map generation by @​arcanis in #​7184
• fix: add catalog settings to yarnrc schema by @​cyphercodes in #​7179
• docs: clarify background job exit codes by @​StantonMatt in #​7167
• fix: explain peer-default dependencies in why by @​StantonMatt in #​7168
• Docs: fix npmMinimalAgeGate default by @​clemyan in #​7181
• feat(plugin-npm): allow npmMinimalAgeGate per npmScope by @​erlandasz in #​7156

New Contributors

• @​cyphercodes made their first contribution in #​7179
• @​StantonMatt made their first contribution in #​7167
• @​erlandasz made their first contribution in #​7156

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.16.0...@​yarnpkg/cli/4.17.0

v4.16.0: v4.16.0

Compare Source

What's Changed

• PnP: Include Node 22.22.3 in fstat workaround by @​junjuny0227 in #​7141
• Implements yarn npm stage by @​arcanis in #​7147
• fix: Stop using EBADF workaround for Node 24.16.0+ by @​MJDSys in #​7152
• Bumps eslint-plugin-arca by @​arcanis in #​7163
• Enables staged publishing by @​arcanis in #​7164
• feat: Add editor SDK support for oxc (oxfmt & oxlint) by @​slainless in #​7078
• docs: fix npmMinimalAgeGate default value. by @​ryanfox1985 in #​7125

New Contributors

• @​junjuny0227 made their first contribution in #​7141
• @​MJDSys made their first contribution in #​7152
• @​slainless made their first contribution in #​7078
• @​ryanfox1985 made their first contribution in #​7125

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.15.0...@​yarnpkg/cli/4.16.0

v4.15.0: v4.15.0

Compare Source

What's Changed

• Fix Next.JS e2e test by @​brandonbothell in #​7115
• perf(plugin-nm): cache install state across workspaces by @​sophiebits in #​7126
• fix(patch) Correctly handle Unicode paths by @​liuxingbaoyu in #​7123
• fix(plugin-npm-cli): enable OIDC publish on CircleCI by @​joshuayoes in #​7122
• fix(core): ignore legacy YARN_IGNORE_SCRIPTS env var by @​KimHyeongRae0 in #​7120
• fix: Reject dependency names with leading/trailing whitespace (fixes duplicate installs) by @​muskaanshraogi in #​7124
• feat(plugin-pnpm): make pnpm install concurrency configurable by @​lennartschoch in #​7118
• PnP: Stop using EDABF solution for Node 26.1.0+ by @​clemyan in #​7133
• Makes npmMinimalAgeGate: 1d the default by @​arcanis in #​7135

New Contributors

• @​brandonbothell made their first contribution in #​7115
• @​sophiebits made their first contribution in #​7126
• @​liuxingbaoyu made their first contribution in #​7123
• @​joshuayoes made their first contribution in #​7122
• @​KimHyeongRae0 made their first contribution in #​7120
• @​muskaanshraogi made their first contribution in #​7124
• @​lennartschoch made their first contribution in #​7118

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.14.1...@​yarnpkg/cli/4.15.0

v4.14.1: v4.14.1

Compare Source

What's Changed

• fix: Widen EBADF fstat version gate to include Node 24.15+ by @​rfoel in #​7104

New Contributors

• @​rfoel made their first contribution in #​7104

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.14.0...@​yarnpkg/cli/4.14.1

v4.14.0: v4.14.0

Compare Source

What's Changed

• Add Re-release workflow to republish artifacts from a specific commit SHA by @​Copilot in #​7079
• fix: Node 25.7+ EBADF by reading CJS source of zip files by @​NormalGaussian in #​7070
• PnP: Fix watch mode for files required under PnP by @​clemyan in #​7077
• feat(plugin-npm): support OIDC auth for CircleCI by @​blimmer in #​7075
• Makes enableScripts: false the default by @​arcanis in #​7089
• Makes the exec: protocol respect enableScripts by @​arcanis in #​7090
• Adds approvedGitRepositories by @​arcanis in #​7091
• Fix: Names the Experimental ESM support warning by @​NormalGaussian in #​7069
• feat(why): allow specifying a version or range by @​remypar5 in #​6992

New Contributors

• @​Copilot made their first contribution in #​7079
• @​NormalGaussian made their first contribution in #​7070
• @​remypar5 made their first contribution in #​6992

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.13.0...@​yarnpkg/cli/4.14.0

v4.13.0: v4.13.0

Compare Source

What's Changed

• docs(constraints): add missing @​typedef alias for Context by @​erickzhao in #​6989
• Fixes the /<name>/<version> format by @​arcanis in #​6993
• fix(fslib): handle float timestamps in convertToBigIntStats by @​nelsondude in #​6988
• Fixes foreach order when --topological isnt set by @​arcanis in #​6997
• CI: Select node version to run CI against automatically by @​clemyan in #​7032
• chore(deps): upgrade tar to v7 by @​mhassan1 in #​7038
• fix: npm run audit also on patched packages by @​tommasini in #​7042
• feat: display registry URL when publishing packages by @​KyeongJooni in #​7020
• Core: Enhance environment variable expansion in configuration by @​clemyan in #​7033
• Add --mode option to upgrade-interactive command by @​ipanasenko in #​7050
• Add c/r/l bulk selection shortcuts to upgrade-interactive by @​ipanasenko in #​7051
• feat(core): Export InstallOptions type by @​WooWan in #​7027
• fix: throw explicit error when all semver-matching versions are quarantined by @​ff1451 in #​7056
• fix(plugin-essentials): handle null on latest version retrieval by @​Xstoudi in #​7003

New Contributors

• @​erickzhao made their first contribution in #​6989
• @​nelsondude made their first contribution in #​6988
• @​tommasini made their first contribution in #​7042
• @​KyeongJooni made their first contribution in #​7020
• @​ipanasenko made their first contribution in #​7050
• @​ff1451 made their first contribution in #​7056
• @​Xstoudi made their first contribution in #​7003

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.12.0...@​yarnpkg/cli/4.13.0

v4.12.0: v4.12.0

Compare Source

What's Changed

• fix(git): split -c and core.autocrlf=false into separate args for clone by @​mhassan1 in #​6983
• Implements npm web login support by @​arcanis in #​6981
• Fix JSON Schema by @​joshkel in #​6973

New Contributors

• @​joshkel made their first contribution in #​6973

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.11.0...@​yarnpkg/cli/4.12.0

v4.11.0: v4.11.0

Compare Source

What's Changed

• Improves 'yarn workspaces focus' tests by @​arcanis in #​6932
• PnP: Allow FileHandle#read into TypedArrays and DataViews by @​clemyan in #​6950
• Adds support for _resolveFilename's option 'conditions' by @​arcanis in #​6966
• fix(publish): use correct workspace name in --json output by @​florianloechle in #​6949
• Update README.md badge link by @​Olexandr88 in #​6947
• fix: use correct env var to detect gitlab CI for OIDC by @​smoores-dev in #​6938
• Core: Create DURATION settings type by @​clemyan in #​6942
• Support escaping template variables in environment values by @​parksb in #​6935
• Migrates the "typescript" dependencies to a catalog by @​arcanis in #​6969
• docs: Clarify additional use-case of npmMinimalAgeGate by @​IchordeDionysos in #​6945
• Allow catalogs to work with descriptors without resolvers by @​parksb in #​6930

New Contributors

• @​florianloechle made their first contribution in #​6949
• @​Olexandr88 made their first contribution in #​6947
• @​parksb made their first contribution in #​6935
• @​IchordeDionysos made their first contribution in #​6945

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.3...@​yarnpkg/cli/4.11.0

v4.10.3: v4.10.3

Compare Source

What's Changed

• Fix OIDC publishing for scoped packages by @​cometkim in #​6911
• Fixes npmMinimalAgeGate with tags and prereleases by @​arcanis in #​6916
• Removes the protocol when it matches the default one by @​arcanis in #​6917
• Disables Prolog tests from new releases by @​arcanis in #​6918
• Enables postinstall scripts for pnpm by @​arcanis in #​6902

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.2...@​yarnpkg/cli/4.10.3

v4.10.2: v4.10.2

Compare Source

What's Changed

• Bust the metadata cache by @​arcanis in #​6908
• fix: support registries without publish times using minimalAgeGate by @​oblador in #​6907

New Contributors

• @​oblador made their first contribution in #​6907

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.1...@​yarnpkg/cli/4.10.2

v4.10.1: v4.10.1

Compare Source

What's Changed

• Fixes publishing archives by @​arcanis in #​6905

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.0...@​yarnpkg/cli/4.10.1

v4.10.0: v4.10.0

Compare Source

What's Changed

• Bumps TypeScript to 5.9 by @​arcanis in #​6889
• Updates tests for the merge conflict resolution v5 by @​arcanis in #​6892
• Tweaks tests by @​arcanis in #​6894
• docs: fix typo in enableScripts JSON schema key name by @​wo-o29 in #​6887
• feat: catalog support by @​ruimartin in #​6884
• feat: implement npmMinimalAgeGate and npmPreapprovedPackages config options by @​bienzaaron in #​6901
• feat: support OIDC auth for GitHub Actions/GitLab by @​cometkim in #​6898

New Contributors

• @​wo-o29 made their first contribution in #​6887
• @​ruimartin made their first contribution in #​6884
• @​bienzaaron made their first contribution in #​6901

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.4...@​yarnpkg/cli/4.10.0

v4.9.4: v4.9.4

Compare Source

What's Changed

• fix(plugin-essentials): fix hash validation pattern of explain peer-requirements by @​pudovmaxim in #​6881
• Fix behavior for yarn version pre* to match the docs by @​ClementValot in #​6879

New Contributors

• @​pudovmaxim made their first contribution in #​6881
• @​ClementValot made their first contribution in #​6879

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.3...@​yarnpkg/cli/4.9.4

v4.9.3: v4.9.3

Compare Source

What's Changed

• feat: Add provenance to @​yarnpkg/cli-dist by @​clemyan in #​6815
• Adds GIT_AUTHOR_NAME to the test env by @​arcanis in #​6825
• Fix libc detection on various platforms by @​ItsHarper in #​6840
• fix(core): increase hash length by @​sekyungk in #​6829
• chore: replace lodash with es-toolkit by @​wojtekmaj in #​6502
• fix(plugin-npm): mark fetchFromNetwork private to fix TypeScript issue by @​vinzscam in #​6764
• fix(pnpm): allow EBUSY when deleting node_modules by @​lizthegrey in #​6826
• ci: use react with vite in storybook E2E by @​MikeMcC399 in #​6864
• feat(publish): Add --dry-run and --json flag to yarn npm publish by @​Saadnajmi in #​6850
• test: Fix test failures by specifying initial branch name in git init by @​WooWan in #​6872
• Remove references to deprecated -v flag for yarn config by @​ItsHarper in #​6878

New Contributors

• @​ItsHarper made their first contribution in #​6840
• @​sekyungk made their first contribution in #​6829
• @​vinzscam made their first contribution in #​6764
• @​Saadnajmi made their first contribution in #​6850
• @​WooWan made their first contribution in #​6872

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.2...@​yarnpkg/cli/4.9.3

v4.9.2: v4.9.2

Compare Source

What's Changed

• Docusaurus: Update Docusaurus to 3.7 by @​clemyan in #​6777
• fix(extensions): @fastify/type-provider-typebox by @​paulius-valiunas in #​6780
• Fix resolveExports thrown error by @​smeng9 in #​6782
• chore: upgrade workflows to ubuntu 22 images by @​SagnikPradhan in #​6776
• docs: replace create-react-app with create-vite in dlx example by @​MikeMcC399 in #​6792
• feat(perf) - de-duplicate chalk dependency by @​spanishpear in #​6784
• Core: Use hpagent for proxies by @​clemyan in #​6779
• fix(plugin-nm): set binary permissions for partial installs by @​oskarols in #​6807
• Improve display of JSON values within constraints by @​arcanis in #​6812
• fix: correctly install implicit nested types dependencies by @​spanishpear in #​6800
• fix(core): fix the value check for publishConfig.provenance by @​smorimoto in #​6781

New Contributors

• @​paulius-valiunas made their first contribution in #​6780
• @​smeng9 made their first contribution in #​6782
• @​spanishpear made their first contribution in #​6784
• @​oskarols made their first contribution in #​6807

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.1...@​yarnpkg/cli/4.9.2

v4.9.1: v4.9.1

Compare Source

What's Changed

• Fixes performance regression on pnpm installs by @​goloveychuk in #​6760
• Fixes the metadata file name to avoid ambiguities by @​MLoughry in #​6762

New Contributors

• @​MLoughry made their first contribution in #​6762

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.0...@​yarnpkg/cli/4.9.1

v4.9.0: v4.9.0

Compare Source

What's Changed

• Experimental JS-based zip parser for the PnP hook by @​goloveychuk in #​6688
• Adds npm provenance support by @​GauBen in #​6750
• Adds support for the jsr: protocol by @​arcanis in #​6752

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.8.1...@​yarnpkg/cli/4.9.0

v4.8.1: v4.8.1

Compare Source

What's Changed

• Fix memory leak introduced in 4.8.0 (#​6743)

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.8.0...@​yarnpkg/cli/4.8.1

v4.8.0: v4.8.0

Compare Source

What's Changed

• Adds support for argument passing to "yarn init " by @​arcanis in #​6709
• Fixes topLevel dependencies by @​arcanis in #​6712
• Refactors tests to abstract implementation details by @​arcanis in #​6711
• Add configuration option to configure .store folder in pnpm mode by @​dannyvv in #​6710
• Fix Integration tests for Big endian on GA CI by @​sangitanalkar in #​6720
• Replace deprecated ESLint rules by @​MikeMcC399 in #​6719
• fix(workspaces-tools): promote --no-private in foreach usage by @​GauBen in #​6727
• fix(npm-audit): ensure message is a string before trimming for deprec… by @​JohannesWill in #​6742
• fix: correction to the set resolution docs by @​darren-dooley in #​6739
• Fix deduplication of virtual packages installed under aliases by @​clemyan in #​6735
• Yarn config respect --no-defaults with --json (fixes #​6341) by @​sparrowt in #​6635
• Support version apply exact by @​snowystinger in #​6629
• Use RefCountedCache for ZipFs instances in Cache to avoid duplicate allocations by @​dannyvv in #​6723

New Contributors

• @​dannyvv made their first contribution in #​6710
• @​JohannesWill made their first contribution in #​6742
• @​darren-dooley made their first contribution in #​6739
• @​sparrowt made their first contribution in #​6635
• @​snowystinger made their first contribution in #​6629

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.7.0...@​yarnpkg/cli/4.8.0

v4.7.0: v4.7.0

Compare Source

What's Changed

• test: don't use .ts for unknown extension tests by @​merceyz in #​6649
• fix: typo in yarn pack by @​GauBen in #​6663
• Fix error handling when looking for configuration files by @​yannayl in #​6676
• Removes CRA from the E2E tests by @​arcanis in #​6692
• Upgrades Eslint to v9 by @​arcanis in #​6694
• ci: migrate e2e to eslint v9 flat config by @​MikeMcC399 in #​6699
• Fix Integration test failures for Big endian on GA CI by @​sangitanalkar in #​6702
• fix: use a repository URL supported by npm by @​aduh95 in #​6700
• Improves yarn init by @​arcanis in #​6703
• Fix #​6029 Avoid undefined checksums after merge conflict resolution by @​ReDrUm in #​6704
• fix(6706): pack creates sub-directories by @​GauBen in #​6707

New Contributors

• @​yannayl made their first contribution in #​6676
• @​MikeMcC399 made their first contribution in #​6699
• @​sangitanalkar made their first contribution in #​6702
• @​ReDrUm made their first contribution in #​6704

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.6.0...@​yarnpkg/cli/4.7.0

v4.6.0: v4.6.0

Compare Source

What's Changed

• fix(pnp): support require(esm) by @​merceyz in #​6639
• feat: add yarnpkg/core sub exports by @​ChALkeR in #​6614
• add a config option to disallow the cache clean command by @​elbywan in #​6610
• Small typo in yarn workspaces foreach: include -> exclude by @​miorel in #​6561

New Contributors

• @​elbywan made their first contribution in #​6610
• @​miorel made their first contribution in #​6561

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.5.3...@​yarnpkg/cli/4.6.0

v4.5.3: v4.5.3

Compare Source

What's Changed

• fix(plugin-workspace-tools): properly report errors for all non-zero exit codes by @​kumavis in #​6535
• feat: add yarnpkg/nm/hoist export by @​ChALkeR in #​6611
• chore: unlock cross-spawn range by @​lswith in #​6606

New Contributors

• @​kumavis made their first contribution in #​6535
• @​ChALkeR made their first contribution in #​6611
• @​lswith made their first contribution in #​6606

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.5.2...@​yarnpkg/cli/4.5.3

v4.5.2: v4.5.2

Compare Source

What's Changed

• Use Node 22 for GitHub actions for now by @​clemyan in #​6575
• fix(extensions): notistack@^3.0.0 by @​aqeelat in #​6593
• fix(fslib): handle symlinks to zip files by @​thatsmydoing in #​6603
• fix(compat): update patch for typescript@5.7.1-rc by @​merceyz in #​6591

New Contributors

• @​aqeelat made their first contribution in #​6593
• @​thatsmydoing made their first contribution in #​6603

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.5.1...@​yarnpkg/cli/4.5.2

v4.5.1: v4.5.1

Compare Source

What's Changed

• Fix CLI docs links by @​TyMick in #​6496
• fix(nm): optimize hoisting by treating peer deps same as other deps by @​akwodkiewicz in #​6517
• chore(libui): update ink by @​BasixKOR in #​6524
• Website: add netlify.toml by @​clemyan in #​6432
• ci(e2e): fix E2E Storybook by @​k1tikurisu in #​6543
• ci(e2e): fix syntax error in the Parcel workflow by @​k1tikurisu in #​6548
• Fix (partially) Svelte E2E test by @​clemyan in #​6428
• Website: Wrap navbar when there is not enough space by @​clemyan in #​6541
• fix(compat): update patch for typescript@5.7.0-beta by @​merceyz in #​6533
• fix(cli): Set COREPACK_ENABLE_AUTO_PIN=0 during local pack of github packages by @​islandryu in #​6529
• chore: add script to generate e2e status list by @​merceyz in #​6434

New Contributors

• @​TyMick made their first contribution in #​6496
• @​k1tikurisu made their first contribution in #​6543
• @​islandryu made their first contribution in #​6529

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.5.0...@​yarnpkg/cli/4.5.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.