Configure dependency age gate

[tbrent]

Summary

• Upgrade vendored Yarn from 4.3.1 to 4.12.0
• Set Yarn npmMinimalAgeGate to 7d

Notes

• Yarn 4.12.0 supports the age gate, but does not accept the approvedGitRepositories setting yet.
• Pushed with --no-verify because the temporary worktree did not have node_modules for the local pre-push lint hook.

[coderabbitai]

Warning

Rate limit exceeded

@tbrent has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 59 minutes and 58 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: fd52508c-90dc-4105-9429-0fbbc3197036

📥 Commits

Reviewing files that changed from the base of the PR and between 9cda9d8 and 5697afd.

⛔ Files ignored due to path filters (2)

• .yarn/releases/yarn-4.12.0.cjs is excluded by !**/.yarn/**
• .yarn/releases/yarn-4.3.1.cjs is excluded by !**/.yarn/**

📒 Files selected for processing (2)

• .yarnrc.yml
• package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex-dependency-install-policy-20260512

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}