Skip to content

fix(yarn): protect against exotic version number of yarn#7525

Merged
jeremylong merged 1 commit intodependency-check:mainfrom
chadoc:fix/yarn-version
Mar 14, 2025
Merged

fix(yarn): protect against exotic version number of yarn#7525
jeremylong merged 1 commit intodependency-check:mainfrom
chadoc:fix/yarn-version

Conversation

@chadoc
Copy link
Copy Markdown
Contributor

@chadoc chadoc commented Mar 14, 2025

Description of Change

Changed how Semver lib is used to test Yarn version so it is protected against exotic version.

Related issues

Have test cases been added to cover the new functionality?

yes (was already tested for nominal case of yarn)

@boring-cyborg boring-cyborg bot added the core changes to core label Mar 14, 2025
@chadoc chadoc force-pushed the fix/yarn-version branch from bd14ea3 to ae86f3a Compare March 14, 2025 08:01
@chadoc chadoc changed the title fix(yarn): protect against exotic version number of yarn (#7488) fix(yarn): protect against exotic version number of yarn Mar 14, 2025
Copy link
Copy Markdown
Collaborator

@jeremylong jeremylong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jeremylong jeremylong merged commit 0ce5ea8 into dependency-check:main Mar 14, 2025
6 checks passed
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Apr 14, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

core changes to core

Projects

None yet

Development

Successfully merging this pull request may close these issues.

(Yarn Audit Analyzer) Invalid version string format Version [0.32+git] is not valid semver.

2 participants