chore(deps): update yarn to v4.17.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
yarn (source)	4.9.2 → 4.17.0

---

Release Notes

yarnpkg/berry (yarn)

v4.17.0: v4.17.0

Compare Source

What's Changed

• Adds support for package map generation by @​arcanis in #​7184
• fix: add catalog settings to yarnrc schema by @​cyphercodes in #​7179
• docs: clarify background job exit codes by @​StantonMatt in #​7167
• fix: explain peer-default dependencies in why by @​StantonMatt in #​7168
• Docs: fix npmMinimalAgeGate default by @​clemyan in #​7181
• feat(plugin-npm): allow npmMinimalAgeGate per npmScope by @​erlandasz in #​7156

New Contributors

• @​cyphercodes made their first contribution in #​7179
• @​StantonMatt made their first contribution in #​7167
• @​erlandasz made their first contribution in #​7156

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.16.0...@​yarnpkg/cli/4.17.0

v4.16.0: v4.16.0

Compare Source

What's Changed

• PnP: Include Node 22.22.3 in fstat workaround by @​junjuny0227 in #​7141
• Implements yarn npm stage by @​arcanis in #​7147
• fix: Stop using EBADF workaround for Node 24.16.0+ by @​MJDSys in #​7152
• Bumps eslint-plugin-arca by @​arcanis in #​7163
• Enables staged publishing by @​arcanis in #​7164
• feat: Add editor SDK support for oxc (oxfmt & oxlint) by @​slainless in #​7078
• docs: fix npmMinimalAgeGate default value. by @​ryanfox1985 in #​7125

New Contributors

• @​junjuny0227 made their first contribution in #​7141
• @​MJDSys made their first contribution in #​7152
• @​slainless made their first contribution in #​7078
• @​ryanfox1985 made their first contribution in #​7125

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.15.0...@​yarnpkg/cli/4.16.0

v4.15.0: v4.15.0

Compare Source

What's Changed

• Fix Next.JS e2e test by @​brandonbothell in #​7115
• perf(plugin-nm): cache install state across workspaces by @​sophiebits in #​7126
• fix(patch) Correctly handle Unicode paths by @​liuxingbaoyu in #​7123
• fix(plugin-npm-cli): enable OIDC publish on CircleCI by @​joshuayoes in #​7122
• fix(core): ignore legacy YARN_IGNORE_SCRIPTS env var by @​KimHyeongRae0 in #​7120
• fix: Reject dependency names with leading/trailing whitespace (fixes duplicate installs) by @​muskaanshraogi in #​7124
• feat(plugin-pnpm): make pnpm install concurrency configurable by @​lennartschoch in #​7118
• PnP: Stop using EDABF solution for Node 26.1.0+ by @​clemyan in #​7133
• Makes npmMinimalAgeGate: 1d the default by @​arcanis in #​7135

New Contributors

• @​brandonbothell made their first contribution in #​7115
• @​sophiebits made their first contribution in #​7126
• @​liuxingbaoyu made their first contribution in #​7123
• @​joshuayoes made their first contribution in #​7122
• @​KimHyeongRae0 made their first contribution in #​7120
• @​muskaanshraogi made their first contribution in #​7124
• @​lennartschoch made their first contribution in #​7118

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.14.1...@​yarnpkg/cli/4.15.0

v4.14.1: v4.14.1

Compare Source

What's Changed

• fix: Widen EBADF fstat version gate to include Node 24.15+ by @​rfoel in #​7104

New Contributors

• @​rfoel made their first contribution in #​7104

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.14.0...@​yarnpkg/cli/4.14.1

v4.14.0: v4.14.0

Compare Source

What's Changed

• Add Re-release workflow to republish artifacts from a specific commit SHA by @​Copilot in #​7079
• fix: Node 25.7+ EBADF by reading CJS source of zip files by @​NormalGaussian in #​7070
• PnP: Fix watch mode for files required under PnP by @​clemyan in #​7077
• feat(plugin-npm): support OIDC auth for CircleCI by @​blimmer in #​7075
• Makes enableScripts: false the default by @​arcanis in #​7089
• Makes the exec: protocol respect enableScripts by @​arcanis in #​7090
• Adds approvedGitRepositories by @​arcanis in #​7091
• Fix: Names the Experimental ESM support warning by @​NormalGaussian in #​7069
• feat(why): allow specifying a version or range by @​remypar5 in #​6992

New Contributors

• @​Copilot made their first contribution in #​7079
• @​NormalGaussian made their first contribution in #​7070
• @​remypar5 made their first contribution in #​6992

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.13.0...@​yarnpkg/cli/4.14.0

v4.13.0: v4.13.0

Compare Source

What's Changed

• docs(constraints): add missing @​typedef alias for Context by @​erickzhao in #​6989
• Fixes the /<name>/<version> format by @​arcanis in #​6993
• fix(fslib): handle float timestamps in convertToBigIntStats by @​nelsondude in #​6988
• Fixes foreach order when --topological isnt set by @​arcanis in #​6997
• CI: Select node version to run CI against automatically by @​clemyan in #​7032
• chore(deps): upgrade tar to v7 by @​mhassan1 in #​7038
• fix: npm run audit also on patched packages by @​tommasini in #​7042
• feat: display registry URL when publishing packages by @​KyeongJooni in #​7020
• Core: Enhance environment variable expansion in configuration by @​clemyan in #​7033
• Add --mode option to upgrade-interactive command by @​ipanasenko in #​7050
• Add c/r/l bulk selection shortcuts to upgrade-interactive by @​ipanasenko in #​7051
• feat(core): Export InstallOptions type by @​WooWan in #​7027
• fix: throw explicit error when all semver-matching versions are quarantined by @​ff1451 in #​7056
• fix(plugin-essentials): handle null on latest version retrieval by @​Xstoudi in #​7003

New Contributors

• @​erickzhao made their first contribution in #​6989
• @​nelsondude made their first contribution in #​6988
• @​tommasini made their first contribution in #​7042
• @​KyeongJooni made their first contribution in #​7020
• @​ipanasenko made their first contribution in #​7050
• @​ff1451 made their first contribution in #​7056
• @​Xstoudi made their first contribution in #​7003

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.12.0...@​yarnpkg/cli/4.13.0

v4.12.0: v4.12.0

Compare Source

What's Changed

• fix(git): split -c and core.autocrlf=false into separate args for clone by @​mhassan1 in #​6983
• Implements npm web login support by @​arcanis in #​6981
• Fix JSON Schema by @​joshkel in #​6973

New Contributors

• @​joshkel made their first contribution in #​6973

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.11.0...@​yarnpkg/cli/4.12.0

v4.11.0: v4.11.0

Compare Source

What's Changed

• Improves 'yarn workspaces focus' tests by @​arcanis in #​6932
• PnP: Allow FileHandle#read into TypedArrays and DataViews by @​clemyan in #​6950
• Adds support for _resolveFilename's option 'conditions' by @​arcanis in #​6966
• fix(publish): use correct workspace name in --json output by @​florianloechle in #​6949
• Update README.md badge link by @​Olexandr88 in #​6947
• fix: use correct env var to detect gitlab CI for OIDC by @​smoores-dev in #​6938
• Core: Create DURATION settings type by @​clemyan in #​6942
• Support escaping template variables in environment values by @​parksb in #​6935
• Migrates the "typescript" dependencies to a catalog by @​arcanis in #​6969
• docs: Clarify additional use-case of npmMinimalAgeGate by @​IchordeDionysos in #​6945
• Allow catalogs to work with descriptors without resolvers by @​parksb in #​6930

New Contributors

• @​florianloechle made their first contribution in #​6949
• @​Olexandr88 made their first contribution in #​6947
• @​parksb made their first contribution in #​6935
• @​IchordeDionysos made their first contribution in #​6945

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.3...@​yarnpkg/cli/4.11.0

v4.10.3: v4.10.3

Compare Source

What's Changed

• Fix OIDC publishing for scoped packages by @​cometkim in #​6911
• Fixes npmMinimalAgeGate with tags and prereleases by @​arcanis in #​6916
• Removes the protocol when it matches the default one by @​arcanis in #​6917
• Disables Prolog tests from new releases by @​arcanis in #​6918
• Enables postinstall scripts for pnpm by @​arcanis in #​6902

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.2...@​yarnpkg/cli/4.10.3

v4.10.2: v4.10.2

Compare Source

What's Changed

• Bust the metadata cache by @​arcanis in #​6908
• fix: support registries without publish times using minimalAgeGate by @​oblador in #​6907

New Contributors

• @​oblador made their first contribution in #​6907

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.1...@​yarnpkg/cli/4.10.2

v4.10.1: v4.10.1

Compare Source

What's Changed

• Fixes publishing archives by @​arcanis in #​6905

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.10.0...@​yarnpkg/cli/4.10.1

v4.10.0: v4.10.0

Compare Source

What's Changed

• Bumps TypeScript to 5.9 by @​arcanis in #​6889
• Updates tests for the merge conflict resolution v5 by @​arcanis in #​6892
• Tweaks tests by @​arcanis in #​6894
• docs: fix typo in enableScripts JSON schema key name by @​wo-o29 in #​6887
• feat: catalog support by @​ruimartin in #​6884
• feat: implement npmMinimalAgeGate and npmPreapprovedPackages config options by @​bienzaaron in #​6901
• feat: support OIDC auth for GitHub Actions/GitLab by @​cometkim in #​6898

New Contributors

• @​wo-o29 made their first contribution in #​6887
• @​ruimartin made their first contribution in #​6884
• @​bienzaaron made their first contribution in #​6901

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.4...@​yarnpkg/cli/4.10.0

v4.9.4: v4.9.4

Compare Source

What's Changed

• fix(plugin-essentials): fix hash validation pattern of explain peer-requirements by @​pudovmaxim in #​6881
• Fix behavior for yarn version pre* to match the docs by @​ClementValot in #​6879

New Contributors

• @​pudovmaxim made their first contribution in #​6881
• @​ClementValot made their first contribution in #​6879

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.3...@​yarnpkg/cli/4.9.4

v4.9.3: v4.9.3

Compare Source

What's Changed

• feat: Add provenance to @​yarnpkg/cli-dist by @​clemyan in #​6815
• Adds GIT_AUTHOR_NAME to the test env by @​arcanis in #​6825
• Fix libc detection on various platforms by @​ItsHarper in #​6840
• fix(core): increase hash length by @​sekyungk in #​6829
• chore: replace lodash with es-toolkit by @​wojtekmaj in #​6502
• fix(plugin-npm): mark fetchFromNetwork private to fix TypeScript issue by @​vinzscam in #​6764
• fix(pnpm): allow EBUSY when deleting node_modules by @​lizthegrey in #​6826
• ci: use react with vite in storybook E2E by @​MikeMcC399 in #​6864
• feat(publish): Add --dry-run and --json flag to yarn npm publish by @​Saadnajmi in #​6850
• test: Fix test failures by specifying initial branch name in git init by @​WooWan in #​6872
• Remove references to deprecated -v flag for yarn config by @​ItsHarper in #​6878

New Contributors

• @​ItsHarper made their first contribution in #​6840
• @​sekyungk made their first contribution in #​6829
• @​vinzscam made their first contribution in #​6764
• @​Saadnajmi made their first contribution in #​6850
• @​WooWan made their first contribution in #​6872

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.9.2...@​yarnpkg/cli/4.9.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3d9b5c0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.19%. Comparing base (0a8fdd6) to head (3d9b5c0).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #829   +/-   ##
=======================================
  Coverage   92.19%   92.19%           
=======================================
  Files          17       17           
  Lines         397      397           
  Branches      128      128           
=======================================
  Hits          366      366           
  Misses         31       31           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.