Starstruk Logo MarkStarstruk

v1.22.13

yarnpkg/yarnv1.22.13Sep 29, 2021by arcanis

AI Summary

A security and maintenance release addressing script execution bypasses and improving Corepack compatibility.

Key Highlights

  • Fixes a security issue where scripts could run despite the `--ignore-builds` flag on Windows.
  • Improved compatibility for `yarn init` and `yarn set version` with Corepack.

New Features

  • Updated `yarn set version` behavior to defer to stable/canary versions.

Full Release Notes

- Fixes a potential security issue where packages could run scripts even with `--ignore-builds` set (Windows only)
- Fixes `yarn init -y2` w/ Corepack
- `yarn set version stable` (and `canary`) will now defer to the stable & canary for upgrading the project