-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Initial yarn berry support #5660
Conversation
fe7da7a
to
2e091f1
Compare
68de0b5
to
5efc6c5
Compare
42ad037
to
db3a4c4
Compare
npm_and_yarn/lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb
Outdated
Show resolved
Hide resolved
Thanks @brrygrdn / @landongrindheim, I've addressed those issues I think 🙇 |
npm_and_yarn/lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd love to see another 👍 from someone with better JS chops. Given the assurance that this is behind a feature flag, I'm happy to sign off 🚀
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me 💯
The v1 parser can handle the files just fine
Adds basic support for parsing + updating yarn berry projects using workspaces.
The package _name_ only contains `@npm:` if it's actually aliased, and looks like `my-fetch-factory@npm:fetch-factory`, the _requirement_ will have an additional `@npm:<version>` in yarn berry, but this is not present in the package name
In order to merge these changes into main without disrupting existing behavior, gate the changes behind a feature flag, so we can gradually roll them out and iron out issues without building up a huge set of changes.
This config option ensures that we don't run postinstall scripts that ship with npm packages. This is something we already do for all ecosystems including npm and yarn classic.
Co-authored-by: Landon Grindheim <[email protected]>
We'd rather not error if we can't determine the yarn version, returning `nil` is preferable.
Co-authored-by: Barry Gordon <[email protected]>
Co-authored-by: Landon Grindheim <[email protected]>
33c04de
to
193d22d
Compare
This adds support for yarn-berry behind a feature flag, meaning that it won't run on repo's by default, but we can start using it to test targeted repo's.
There are a few notable known limitations: