-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update yarn to v3.8.5 #1744
base: develop
Are you sure you want to change the base?
Conversation
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: back/strapi/yarn.lock
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
ce6ea00
to
478e377
Compare
478e377
to
0d5c8e5
Compare
|
Quality Gate passedIssues Measures |
0d5c8e5
to
05d0d62
Compare
05d0d62
to
74cb86b
Compare
74cb86b
to
00a6552
Compare
00a6552
to
033bec2
Compare
033bec2
to
739d622
Compare
739d622
to
c228e55
Compare
c228e55
to
8261cb4
Compare
8261cb4
to
10e5a1f
Compare
10e5a1f
to
7e9c42f
Compare
7e9c42f
to
93171f6
Compare
93171f6
to
792b386
Compare
792b386
to
e44be80
Compare
e44be80
to
99e3f96
Compare
99e3f96
to
4a188de
Compare
4a188de
to
85c1c9d
Compare
85c1c9d
to
a19e37d
Compare
a19e37d
to
058aee6
Compare
058aee6
to
16e4c97
Compare
Quality Gate passedIssues Measures |
Report too large to display inline |
This PR contains the following updates:
3.6.4
->3.8.5
Release Notes
yarnpkg/berry (yarn)
v3.8.5
Compare Source
v3.8.4
Compare Source
v3.8.3
Compare Source
v3.8.2
Compare Source
v3.8.1
Compare Source
v3.8.0
Compare Source
v3.7.0
Compare Source
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" in timezone Europe/Paris, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.