News for hackers. Stuff that matters.
Re:Yarn 4.0 by ljm on Monday October 23, 2023 @02:03PM (#37989291)
In the last few places I worked we dropped Yarn for pnpm. Did the job and now dependabot can understand it too, on github.

Corepack is a nice addition to Node to make it easy to install a package manager but it's also an unwelcome layer of abstraction (why isn't there just one?).

Re:Yarn 4.0 by morbicer on Monday October 23, 2023 @02:12PM (#37989418)
What issues did you have with Dependabot and Yarn? We use it and it checks & updates lock files for both v1 and v2 Yarns
Re:Yarn 4.0 by scrose on Monday October 23, 2023 @04:27PM (#37991109)
Dependabot only started supporting Yarn 2 and 3 in October of last year. Which at that point was over 2.5 years after the release of Yarn 2 itself.