Update Yarn to v1.22.22

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
yarn	1.18.0 -> 1.22.22

---

Release Notes

yarnpkg/yarn (yarn)

v1.22.22

Compare Source

[!WARNING]
This release is missing a couple of artifacts (the .msi/.rpm/.deb/.asc files); we're working on fixing this.

• Fixes a punycode warning.

• Fixes a hoisting issue when transitive dependencies themselves listed aliases as dependencies.

v1.22.21

Compare Source

[!WARNING]
This release is missing a couple of artifacts (the .msi/.rpm/.deb/.asc files); we're working on fixing this.

• Fixes an issue in the v1.22.20 when calling Yarn from a project subfolder, outside of a Corepack context.

• Added a SKIP_YARN_COREPACK_CHECK environment variable to skip the Corepack check.

v1.22.20

Compare Source

• Important: Punycode is now embed within the bundle, as it has been deprecated by Node.js and will be removed in a future version.

• A message will be displayed when Yarn 1.22 notices that the local project has a package.json file referencing a non-1.x Yarn release via the packageManager field. The message will explain that the project is intended to be used with Corepack.

• The yarn-error.log files won't be generated anymore, as we don't process non-critical 1.x bug reports (we however process all bugs reported on https://github.com/yarnpkg/berry; we just released the 4.0.2 release there).

• The yarn set version x.y.z command will now install the exact x.y.z version (prior to this change it used to first install the latest version, and only in a second step would it downgrade to x.y.z; this was causing issues when we bump the minimal Node.js version we support, as running yarn set version 3.6.4 wouldn't work on Node 16).

• Prevents crashes when reading from an empty .yarnrc.yml file.

v1.22.19

Compare Source

• Adds compatibility with WebAuthn on the npm registry

v1.22.18

Compare Source

Node 17.7.0 had a regression in url.resolve which broke Yarn, causing network errors. This release fixes that, although the regression also got fixed on the Node side starting from 17.7.1, so as long as you keep your Node up-to-date it'll be fine.

v1.22.17

Compare Source

Strangely this released disappeared from GitHub, re-adding it.

v1.22.16

Compare Source

v1.22.15

Compare Source

• Fixes an issue on Windows where relative scripts would fail to execute

v1.22.14

Compare Source

• Fixes false positives that would happen on non-win32 platforms ("Potentially dangerous call to ...")

v1.22.13

Compare Source

• Fixes a potential security issue where packages could run scripts even with --ignore-builds set (Windows only)
• Fixes yarn init -y2 w/ Corepack
• yarn set version stable (and canary) will now defer to the stable & canary for upgrading the project

v1.22.12

Compare Source

Bogus release (published the wrong folder)

v1.22.11

Compare Source

This version fixes a problem where Yarn wasn't forwarding SIGTERM to the binary spawned via yarnPath. It also makes yarn init -2 compatible with Corepack. The behaviour of yarn init (without -2) doesn't change.

Remember that Yarn 1.x won't receive further functional improvements. We recommend you to switch to the recently-released 3.0, and to ping us on Discord if you find issues when migrating (also check our Migration Guide).

v1.22.10

• Tweak the preinstall check to not cause errors when Node is installed as root (as a downside, it won't run at all on Windows, which should be an acceptable tradeoff): https://github.com/yarnpkg/yarn/issues/8358

v1.22.7

This release doesn't change anything and was caused by a publish issue.

v1.22.6

• Running yarn init with the -2 flag won't print the set version output anymore.

• A new preinstall check will ensure that npm install -g yarn works even under Corepack. It doesn't have any effect on other setups.

v1.22.5

Compare Source

• Headers won't be printed when calling yarn init with the -2 flag

  Maël Nison

• Files with the .cjs extension will be spawned by yarnPath using `execPath

  #​8144 - bgotink

• Generates local yarn verions as .cjs files when calling yarn set version

  #​8145 - bgotink

• Sorts files when running yarn pack to produce identical layout on Windows and Unix systems

  #​8142 - Merceyz

v1.22.4

Compare Source

Those versions didn't contain any changes and were just triggered by our infra while working on the tests.

v1.22.1

Compare Source

This version fixes a problem where Yarn wasn't forwarding SIGTERM to the binary spawned via yarnPath. It also makes yarn init -2 compatible with Corepack. The behaviour of yarn init (without -2) doesn't change.

Remember that Yarn 1.x won't receive further functional improvements. We recommend you to switch to the recently-released 3.0, and to ping us on Discord if you find issues when migrating (also check our Migration Guide).

v1.22.0

Compare Source

• Allows some dots in binary names again

  #​7811 - Valery Bugakov

• Better error handling on yarn set version

  #​7848 - Nick Olinger

• Passes arguments following -- when running a workspace script (yarn workspace pkg run command -- arg)

  #​7776 - Jeff Valore

• Fixes an issue where the archive paths were incorrectly sanitized

  #​7831 - Maël Nison

• Implements yarn init -2

  #​7862 - Maël Nison

• Implements yarn set version <version> as an alias for policies set-version

  #​7862 - Maël Nison

v1.21.1

Compare Source

v1.21.0

Compare Source

v1.19.2

Compare Source

• Folders like .cache won't be pruned from the node_modules after each install.

  #​7699 - Maël Nison

• Correctly installs workspace child dependencies when workspace child not symlinked to root.

  #​7289 - Daniel Tschinder

• Makes running scripts with Plug'n Play possible on node 13.

  #​7650 - Sander Verweij

• Change run command to check cwd/node_modules/.bin for commands. Fixes run in workspaces.

  #​7151 - Jeff Valore

v1.19.1

Compare Source

Important: This release contains a cache bump. It will cause the very first install following the upgrade to take slightly more time, especially if you don't use the Offline Mirror feature. After that everything will be back to normal.

• Computes the --modules-folder & friends paths based on the cwd.

  #​7607 - mbpreble

• Stores the sha512 in the cache even when not provided by the server.

  #​7591 - Maël Nison / #​7595 - Michael

• Uses the right Node binary when using yarn-path.

  #​7592 - Maël Nison

v1.19.0

Compare Source

Important: This release contains a cache bump. It will cause the very first install following the upgrade to take slightly more time, especially if you don't use the Offline Mirror feature. After that everything will be back to normal.

• Fixes a potential vulnerability regarding how the build artifacts are stored

  Reported by ChALkeR, fixed by Maël Nison

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

error Couldn't find package "@ordermentum/asap-core@*" required by "@ordermentum/axios-asap@0.1.3-beta" on the "npm" registry.
Error: Couldn't find package "@ordermentum/asap-core@*" required by "@ordermentum/express-asap@0.1.5-beta3" on the "npm" registry.
    at MessageError.ExtendableBuiltin (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:721:66)
    at new MessageError (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:750:123)
    at PackageRequest.<anonymous> (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:36590:17)
    at Generator.throw (<anonymous>)
    at step (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:310:30)
    at /opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:323:13
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
Error: Couldn't find package "@ordermentum/asap-core@*" required by "@ordermentum/hapi-asap@0.1.2-beta" on the "npm" registry.
    at MessageError.ExtendableBuiltin (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:721:66)
    at new MessageError (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:750:123)
    at PackageRequest.<anonymous> (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:36590:17)
    at Generator.throw (<anonymous>)
    at step (/opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:310:30)
    at /opt/buildpack/tools/yarn-slim/1.22.19/lib/node_modules/yarn/lib/cli.js:323:13
    at processTicksAndRejections (node:internal/process/task_queues:96:5)