Skip to content

chore: upgrade to Yarn 4 (node-modules) with supply-chain age gate#19

Merged
furkando merged 4 commits into
mainfrom
chore/yarn-v4-upgrade
Jun 23, 2026
Merged

chore: upgrade to Yarn 4 (node-modules) with supply-chain age gate#19
furkando merged 4 commits into
mainfrom
chore/yarn-v4-upgrade

Conversation

@furkando

@furkando furkando commented Jun 23, 2026

Copy link
Copy Markdown

Pull Request

Summary

Apply the standard elliottech Yarn 1.22 → 4.15.0 migration:

  • .yarnrc.yml: nodeLinker node-modules, npmMinimalAgeGate "7d" (internal packages preapproved), httpTimeout, npmScopes; committed Yarn 4 release + yarnPath + classic .yarnrc so Yarn 1 consumers/CI delegate to Yarn 4.
  • pkg-guard plugin (afterAllInstalled) for malware/vuln scans; the age check lives only in Yarn's native npmMinimalAgeGate (pkg-guard.config.json has ageCheck disabled). This repo had no pkg-guard before — added for parity.
  • CI (publish, prerelease): corepack enable, yarn install --immutable, and Yarn 4 yarn version <v> syntax (was the removed --new-version/ --no-git-tag-version). Publishing unaffected (uses npm publish).
  • .gitignore: Yarn Berry entries.

Verified: yarn install + --immutable (exit 0).

Linear ticket: https://linear.app/lighter/issue/PRO-3719/upgrade-yarn-to-v4

Author Checklist

  • PR tested locally
  • PR tested on preview

Apply the standard elliottech Yarn 1.22 → 4.15.0 migration:
- .yarnrc.yml: nodeLinker node-modules, npmMinimalAgeGate "7d" (internal
  packages preapproved), httpTimeout, npmScopes; committed Yarn 4 release +
  yarnPath + classic .yarnrc so Yarn 1 consumers/CI delegate to Yarn 4.
- pkg-guard plugin (afterAllInstalled) for malware/vuln scans; the age check
  lives only in Yarn's native npmMinimalAgeGate (pkg-guard.config.json has
  ageCheck disabled). This repo had no pkg-guard before — added for parity.
- CI (publish, prerelease): corepack enable, `yarn install --immutable`, and
  Yarn 4 `yarn version <v>` syntax (was the removed `--new-version`/
  `--no-git-tag-version`). Publishing unaffected (uses `npm publish`).
- .gitignore: Yarn Berry entries.

Verified: yarn install + --immutable (exit 0).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jun 23, 2026

Copy link
Copy Markdown

✅ PR Checklist Validation Passed

Status: All 2 checklist items completed
Linear ticket: Valid ✅

🎉 This PR meets all requirements and is ready for review!


This validation ensures all PR requirements are met before merging.

@github-actions

github-actions Bot commented Jun 23, 2026

Copy link
Copy Markdown

🚀 Prerelease Published

Version: 0.19.0-furkando.3e98e85.chore-yarn-v4-upgrade
Tag: chore-yarn-v4-upgrade

Update package.json:

"@elliottech/react-native-kline-view": "0.19.0-furkando.3e98e85.chore-yarn-v4-upgrade"

Previous prereleases for this PR have been cleaned up. This prerelease will be automatically cleaned up when the PR is merged.

@furkando furkando merged commit fe48ee6 into main Jun 23, 2026
2 checks passed
@github-actions

Copy link
Copy Markdown

🧹 Prerelease Cleanup Complete

All prerelease versions for branch chore-yarn-v4-upgrade have been cleaned up.

The following actions were performed:

  • ✅ Unpublished all versions tagged with chore-yarn-v4-upgrade
  • ✅ Removed prerelease packages from npm registry

This cleanup was performed automatically after PR merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants