yarn Releases

This release adds 62 new CVE templates covering critical vulnerabilities in various systems, migrates CI to native Node.js runtime, fixes false positives and negatives in multiple templates, and enhances template accuracy.

May 5, 2026

An unscheduled release addressing critical security fixes for the internal CORS proxy and API changes for the weather provider. It disables the CORS proxy by default and hardens security against SSRF and public instance exposure.

Apr 30, 2026

This release improves SSO account handling by linking external provider identities to local users instead of treating provider identifiers as usernames. It also refreshes account and SSO management, adds memo time display controls, and includes several authentication and editor fixes.

Apr 27, 2026

A significant update adding 121 new templates and 61 CVEs, focusing on critical vulnerabilities in various software. The release also includes major bug fixes to reduce false positives and false negatives in existing templates.

Apr 15, 2026

This release introduces breaking changes regarding configuration file handling and node version requirements (>=22.21.1 <23 || >=24). It features architectural updates like the removal of kioskmode, migration to a centralized HTTP fetcher, and updates to dependencies including Electron v41.

Apr 1, 2026

This release adds 76 new templates and fixes 42 CVEs, focusing on critical vulnerabilities like authentication bypasses and remote code execution. The update includes significant improvements to detection accuracy by addressing false positives and negatives, alongside internal bug fixes.

Mar 31, 2026

A maintenance release focusing on dependency updates, Wayland support, and a major migration of the testing framework from Jest to Vitest.

Jan 1, 2026

A maintenance release introducing configuration options, code refactoring to improve maintainability, and enhanced system logging.

Sep 30, 2025

The initial release of the 'Zero' mail client featuring a modern Next.js 15 UI, including theme toggling, attachment handling, and command menu functionality.

Jul 18, 2025

May 27, 2025

This release adds support for TimesFM-2.0 models, sets the median head as the default point forecaster, and includes bug fixes for PyTorch decoding.

Dec 31, 2024

Minimal release notes: "Fish Speech 1.5 release, both inference and finetune are done."

Dec 25, 2024

Nov 29, 2024

This release introduces an Audio Select feature to the WebUI, fixes various Docker and backend configuration issues, and updates documentation for the Fish Speech project.

Oct 25, 2024

May 21, 2024

Minimal release notes: "- Separate logic between 3 main components: Crawler, Parser, Scraper - Add cache layer to CLI app - Add docs - Update"

Apr 17, 2024

Mar 16, 2024

This release fixes a punycode warning and resolves a hoisting issue when transitive dependencies themselves listed aliases as dependencies.

Mar 9, 2024

This release fixes an issue introduced in v1.22.20 when calling Yarn from a project subfolder outside of a Corepack context, and introduces an environment variable to skip Corepack checks.

Nov 14, 2023

This significant release embeds Punycode within the bundle (deprecated by Node.js), adds a message when projects use non-1.x Yarn via packageManager field, stops generating yarn-error.log files, improves the yarn set version command to install exact versions directly, and prevents crashes on empty .yarnrc.yml files.

Nov 14, 2023