public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/yarnpkg] rawhide: Orphaned for 6+ weeks
@ 2026-09-11 21:53 Orphaned Packages Process
0 siblings, 0 replies; only message in thread
From: Orphaned Packages Process @ 2026-09-11 21:53 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/yarnpkg
Branch : rawhide
Commit : 46436e0b796198f56b4f35ce616c75945a78d5d1
Author : Orphaned Packages Process <packaging-reports@fedoraproject.org>
Date : 2026-09-11T16:53:37-05:00
Stats : +1/-682 in 16 file(s)
URL : https://src.fedoraproject.org/rpms/yarnpkg/c/46436e0b796198f56b4f35ce616c75945a78d5d1?branch=rawhide
Log:
Orphaned for 6+ weeks
---
diff --git a/.gitignore b/.gitignore
deleted file mode 100644
index e479a15..0000000
--- a/.gitignore
+++ /dev/null
@@ -1,21 +0,0 @@
-/yarnpkg-v1.22.4-bundled.tar.gz
-/yarnpkg-v1.22.10-bundled.tar.gz
-/yarnpkg-v1.22.17-bundled.tar.gz
-/yarnpkg-v1.22.19-bundled.tar.gz
-/yarnpkg-v1.22.19-bundled-20230321.tar.gz
-/yarnpkg-v1.22.21-bundled-20240217.tar.gz
-/yarnpkg-v1.22.21-bundled-20240219.tar.gz
-/v1.22.22.tar.gz
-/yarnpkg-v1.22.22-bundled-20240309.tar.gz
-/yarnpkg-v1.22.22-bundled-20240704.tar.gz
-/yarnpkg-v1.22.22-bundled-20241010.tar.gz
-/yarnpkg-v1.22.22-bundled-20241015.tar.gz
-/yarnpkg-v1.22.22-bundled-20250328.tar.gz
-/yarnpkg-v1.22.22-bundled-20250604.tar.gz
-/yarnpkg-v1.22.22-bundled-20250624.tar.gz
-/yarnpkg-v1.22.22-bundled-20250728.tar.gz
-/yarnpkg-v1.22.22-bundled-20250930.tar.gz
-/yarnpkg-v1.22.22-bundled-20251203.tar.gz
-/yarnpkg-v1.22.22-bundled-20260126.tar.gz
-/yarnpkg-v1.22.22-bundled-20260308.tar.gz
-/yarnpkg-v1.22.22-bundled-20260402.tar.gz
diff --git a/0001-yarn-no-eslint.prebundle.patch b/0001-yarn-no-eslint.prebundle.patch
deleted file mode 100644
index d574382..0000000
--- a/0001-yarn-no-eslint.prebundle.patch
+++ /dev/null
@@ -1,116 +0,0 @@
-diff -rupN yarn-1.22.22/.eslintignore yarn-1.22.22-new/.eslintignore
---- yarn-1.22.22/.eslintignore 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/.eslintignore 1970-01-01 01:00:00.000000000 +0100
-@@ -1,12 +0,0 @@
--__tests__/fixtures
--lib
--lib-legacy
--node_modules
--flow-typed
--coverage
--gulpfile.js
--scripts
--updates
--artifacts
--dist
--packages
-diff -rupN yarn-1.22.22/.eslintrc.json yarn-1.22.22-new/.eslintrc.json
---- yarn-1.22.22/.eslintrc.json 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/.eslintrc.json 1970-01-01 01:00:00.000000000 +0100
-@@ -1,56 +0,0 @@
--{
-- "extends": "eslint-config-fb-strict",
-- "env": {
-- "jest": true
-- },
-- "plugins": [
-- "flowtype",
-- "yarn-internal",
-- "prettier"
-- ],
-- "rules": {
-- "yarn-internal/warn-language": "error",
-- "max-len": ["error", 120],
-- "prefer-arrow-callback": "off",
-- "flowtype/require-valid-file-annotation": ["error", "always"],
-- "flowtype/space-after-type-colon": ["error", "always"],
-- "flowtype/require-return-type": ["error", "always", {"excludeArrowFunctions": true}],
-- "require-await": "error",
-- "no-process-exit": "error",
-- "no-return-await": "error",
-- "sort-keys": "off",
-- "prettier/prettier": ["error", {
-- "singleQuote": true,
-- "trailingComma": "all",
-- "bracketSpacing": false,
-- "printWidth": 120,
-- "parser": "flow"
-- }]
-- },
-- "overrides": [
-- {
-- "files": [
-- "__tests__/fixtures/**/*.js",
-- "bin/*.js",
-- "src/cli/index.js"
-- ],
-- "rules": {
-- "no-console": "off"
-- }
-- },
-- {
-- "files": [
-- "src/util/generate-pnp-map-api.tpl.js"
-- ],
-- "rules": {
-- "prettier/prettier": ["error", {
-- "singleQuote": true,
-- "trailingComma": "es5",
-- "bracketSpacing": false,
-- "printWidth": 120,
-- "parser": "flow"
-- }]
-- }
-- }
-- ]
--}
-diff -rupN yarn-1.22.22/package.json yarn-1.22.22-new/package.json
---- yarn-1.22.22/package.json 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/package.json 2026-01-29 19:42:33.944311623 +0100
-@@ -58,7 +58,6 @@
- },
- "devDependencies": {
- "babel-core": "^6.26.0",
-- "babel-eslint": "^7.2.3",
- "babel-loader": "^6.2.5",
- "babel-plugin-array-includes": "^2.0.3",
- "babel-plugin-inline-import": "^3.0.0",
-@@ -71,18 +70,6 @@
- "babylon": "^6.5.0",
- "commitizen": "^2.9.6",
- "cz-conventional-changelog": "^2.0.0",
-- "eslint": "^4.3.0",
-- "eslint-config-fb-strict": "^22.0.0",
-- "eslint-plugin-babel": "^5.0.0",
-- "eslint-plugin-flowtype": "^2.35.0",
-- "eslint-plugin-jasmine": "^2.6.2",
-- "eslint-plugin-jest": "^21.0.0",
-- "eslint-plugin-jsx-a11y": "^6.0.2",
-- "eslint-plugin-prefer-object-spread": "^1.2.1",
-- "eslint-plugin-prettier": "^2.1.2",
-- "eslint-plugin-react": "^7.1.0",
-- "eslint-plugin-relay": "^0.0.28",
-- "eslint-plugin-yarn-internal": "file:scripts/eslint-rules",
- "execa": "^0.11.0",
- "fancy-log": "^1.3.2",
- "flow-bin": "^0.66.0",
-@@ -123,9 +110,7 @@
- "build-win-installer": "scripts\\build-windows-installer.bat",
- "changelog": "git-release-notes $(git describe --tags --abbrev=0 $(git describe --tags --abbrev=0)^)..$(git describe --tags --abbrev=0) scripts/changelog.md",
- "dupe-check": "yarn jsinspect ./src",
-- "lint": "eslint . && flow check",
- "pkg-tests": "yarn --cwd packages/pkg-tests jest yarn.test.js",
-- "prettier": "eslint src __tests__ --fix",
- "release-branch": "./scripts/release-branch.sh",
- "test": "yarn lint && yarn test-only",
- "test-only": "node --max_old_space_size=4096 node_modules/jest/bin/jest.js --verbose",
diff --git a/0002-yarn-no-commitizen.prebundle.patch b/0002-yarn-no-commitizen.prebundle.patch
deleted file mode 100644
index a1fc504..0000000
--- a/0002-yarn-no-commitizen.prebundle.patch
+++ /dev/null
@@ -1,30 +0,0 @@
-diff -rupN yarn-1.22.22/package.json yarn-1.22.22-new/package.json
---- yarn-1.22.22/package.json 2026-01-29 19:43:12.400879552 +0100
-+++ yarn-1.22.22-new/package.json 2026-01-29 19:43:21.918142076 +0100
-@@ -68,7 +68,6 @@
- "babel-preset-flow": "^6.23.0",
- "babel-preset-stage-0": "^6.0.0",
- "babylon": "^6.5.0",
-- "commitizen": "^2.9.6",
- "cz-conventional-changelog": "^2.0.0",
- "execa": "^0.11.0",
- "fancy-log": "^1.3.2",
-@@ -116,8 +115,7 @@
- "test-only": "node --max_old_space_size=4096 node_modules/jest/bin/jest.js --verbose",
- "test-only-debug": "node --inspect-brk --max_old_space_size=4096 node_modules/jest/bin/jest.js --runInBand --verbose",
- "test-coverage": "node --max_old_space_size=4096 node_modules/jest/bin/jest.js --coverage --verbose",
-- "watch": "gulp watch",
-- "commit": "git-cz"
-+ "watch": "gulp watch"
- },
- "jest": {
- "collectCoverageFrom": [
-@@ -137,8 +135,5 @@
- ]
- },
- "config": {
-- "commitizen": {
-- "path": "./node_modules/cz-conventional-changelog"
-- }
- }
- }
diff --git a/0003-yarn-no-jest.prebundle.patch b/0003-yarn-no-jest.prebundle.patch
deleted file mode 100644
index 0ac9a02..0000000
--- a/0003-yarn-no-jest.prebundle.patch
+++ /dev/null
@@ -1,43 +0,0 @@
-diff -rupN yarn-1.22.22/package.json yarn-1.22.22-new/package.json
---- yarn-1.22.22/package.json 2026-01-29 19:43:38.748927341 +0100
-+++ yarn-1.22.22-new/package.json 2026-01-29 19:44:35.305149558 +0100
-@@ -79,7 +79,6 @@
- "gulp-newer": "^1.0.0",
- "gulp-plumber": "^1.0.1",
- "gulp-sourcemaps": "^2.2.0",
-- "jest": "^22.4.4",
- "jsinspect": "^0.12.6",
- "minimatch": "^3.0.4",
- "mock-stdin": "^0.3.0",
-@@ -109,31 +108,9 @@
- "build-win-installer": "scripts\\build-windows-installer.bat",
- "changelog": "git-release-notes $(git describe --tags --abbrev=0 $(git describe --tags --abbrev=0)^)..$(git describe --tags --abbrev=0) scripts/changelog.md",
- "dupe-check": "yarn jsinspect ./src",
-- "pkg-tests": "yarn --cwd packages/pkg-tests jest yarn.test.js",
- "release-branch": "./scripts/release-branch.sh",
-- "test": "yarn lint && yarn test-only",
-- "test-only": "node --max_old_space_size=4096 node_modules/jest/bin/jest.js --verbose",
-- "test-only-debug": "node --inspect-brk --max_old_space_size=4096 node_modules/jest/bin/jest.js --runInBand --verbose",
-- "test-coverage": "node --max_old_space_size=4096 node_modules/jest/bin/jest.js --coverage --verbose",
- "watch": "gulp watch"
- },
-- "jest": {
-- "collectCoverageFrom": [
-- "src/**/*.js"
-- ],
-- "testEnvironment": "node",
-- "modulePathIgnorePatterns": [
-- "__tests__/fixtures/",
-- "packages/pkg-tests/pkg-tests-fixtures",
-- "dist/"
-- ],
-- "testPathIgnorePatterns": [
-- "__tests__/(fixtures|__mocks__)/",
-- "updates/",
-- "_(temp|mock|install|init|helpers).js$",
-- "packages/pkg-tests"
-- ]
-- },
- "config": {
- }
- }
diff --git a/0004-yarn-js-yaml.prebundle.patch b/0004-yarn-js-yaml.prebundle.patch
deleted file mode 100644
index 2a8e2c2..0000000
--- a/0004-yarn-js-yaml.prebundle.patch
+++ /dev/null
@@ -1,12 +0,0 @@
-diff -rupN yarn-1.22.22/package.json yarn-1.22.22-new/package.json
---- yarn-1.22.22/package.json 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/package.json 2026-01-29 19:53:54.399623053 +0100
-@@ -29,7 +29,7 @@
- "is-builtin-module": "^2.0.0",
- "is-ci": "^1.0.10",
- "is-webpack-bundle": "^1.0.0",
-- "js-yaml": "^3.13.1",
-+ "js-yaml": "^4.1.1",
- "leven": "^2.0.0",
- "loud-rejection": "^1.2.0",
- "micromatch": "^2.3.11",
diff --git a/CVE-2022-37599.patch b/CVE-2022-37599.patch
deleted file mode 100644
index cdeb7cc..0000000
--- a/CVE-2022-37599.patch
+++ /dev/null
@@ -1,12 +0,0 @@
-diff -rupN --no-dereference yarn-1.22.22/node_modules/loader-utils/index.js yarn-1.22.22-new/node_modules/loader-utils/index.js
---- yarn-1.22.22/node_modules/loader-utils/index.js 2025-07-28 09:42:24.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/loader-utils/index.js 2025-07-31 00:36:49.585249573 +0200
-@@ -299,7 +299,7 @@ exports.interpolateName = function inter
- var url = filename;
- if(content) {
- // Match hash template
-- url = url.replace(/\[(?:(\w+):)?hash(?::([a-z]+\d*))?(?::(\d+))?\]/ig, function() {
-+ url = url.replace(/\[(?:([^[:\]]+):)?hash(?::([a-z]+\d*))?(?::(\d+))?\]/ig, function() {
- return exports.getHashDigest(content, arguments[1], arguments[2], parseInt(arguments[3], 10));
- }).replace(/\[emoji(?::(\d+))?\]/ig, function() {
- return encodeStringToEmoji(content, arguments[1]);
diff --git a/CVE-2023-26136.patch b/CVE-2023-26136.patch
deleted file mode 100644
index dccadfe..0000000
--- a/CVE-2023-26136.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-diff -rupN --no-dereference yarn-1.22.22/node_modules/tough-cookie/lib/memstore.js yarn-1.22.22-new/node_modules/tough-cookie/lib/memstore.js
---- yarn-1.22.22/node_modules/tough-cookie/lib/memstore.js 2025-07-28 11:18:19.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/tough-cookie/lib/memstore.js 2025-07-31 00:36:47.884055369 +0200
-@@ -36,7 +36,7 @@ var util = require('util');
-
- function MemoryCookieStore() {
- Store.call(this);
-- this.idx = {};
-+ this.idx = Object.create(null);
- }
- util.inherits(MemoryCookieStore, Store);
- exports.MemoryCookieStore = MemoryCookieStore;
-@@ -115,10 +115,10 @@ MemoryCookieStore.prototype.findCookies
-
- MemoryCookieStore.prototype.putCookie = function(cookie, cb) {
- if (!this.idx[cookie.domain]) {
-- this.idx[cookie.domain] = {};
-+ this.idx[cookie.domain] = Object.create(null);
- }
- if (!this.idx[cookie.domain][cookie.path]) {
-- this.idx[cookie.domain][cookie.path] = {};
-+ this.idx[cookie.domain][cookie.path] = Object.create(null);
- }
- this.idx[cookie.domain][cookie.path][cookie.key] = cookie;
- cb(null);
diff --git a/CVE-2024-4067.patch b/CVE-2024-4067.patch
deleted file mode 100644
index 1d28ec7..0000000
--- a/CVE-2024-4067.patch
+++ /dev/null
@@ -1,48 +0,0 @@
-diff -rupN --no-dereference yarn-1.22.22/node_modules/anymatch/node_modules/micromatch/index.js yarn-1.22.22-new/node_modules/anymatch/node_modules/micromatch/index.js
---- yarn-1.22.22/node_modules/anymatch/node_modules/micromatch/index.js 2025-07-28 09:42:30.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/anymatch/node_modules/micromatch/index.js 2025-07-31 00:36:51.203223937 +0200
-@@ -621,7 +621,7 @@ micromatch.braces = function(pattern, op
- }
-
- function expand() {
-- if (options && options.nobrace === true || !/\{.*\}/.test(pattern)) {
-+ if (options && options.nobrace === true || !/\{.*?\}/.test(pattern)) {
- return utils.arrayify(pattern);
- }
- return braces(pattern, options);
-diff -rupN --no-dereference yarn-1.22.22/node_modules/liftoff/node_modules/micromatch/index.js yarn-1.22.22-new/node_modules/liftoff/node_modules/micromatch/index.js
---- yarn-1.22.22/node_modules/liftoff/node_modules/micromatch/index.js 2025-07-28 09:42:30.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/liftoff/node_modules/micromatch/index.js 2025-07-31 00:36:51.203775750 +0200
-@@ -621,7 +621,7 @@ micromatch.braces = function(pattern, op
- }
-
- function expand() {
-- if (options && options.nobrace === true || !/\{.*\}/.test(pattern)) {
-+ if (options && options.nobrace === true || !/\{.*?\}/.test(pattern)) {
- return utils.arrayify(pattern);
- }
- return braces(pattern, options);
-diff -rupN --no-dereference yarn-1.22.22/node_modules/matchdep/node_modules/micromatch/index.js yarn-1.22.22-new/node_modules/matchdep/node_modules/micromatch/index.js
---- yarn-1.22.22/node_modules/matchdep/node_modules/micromatch/index.js 2025-07-28 09:42:30.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/matchdep/node_modules/micromatch/index.js 2025-07-31 00:36:51.204199053 +0200
-@@ -621,7 +621,7 @@ micromatch.braces = function(pattern, op
- }
-
- function expand() {
-- if (options && options.nobrace === true || !/\{.*\}/.test(pattern)) {
-+ if (options && options.nobrace === true || !/\{.*?\}/.test(pattern)) {
- return utils.arrayify(pattern);
- }
- return braces(pattern, options);
-diff -rupN --no-dereference yarn-1.22.22/node_modules/readdirp/node_modules/micromatch/index.js yarn-1.22.22-new/node_modules/readdirp/node_modules/micromatch/index.js
---- yarn-1.22.22/node_modules/readdirp/node_modules/micromatch/index.js 2025-07-28 09:42:30.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/readdirp/node_modules/micromatch/index.js 2025-07-31 00:36:51.204611282 +0200
-@@ -621,7 +621,7 @@ micromatch.braces = function(pattern, op
- }
-
- function expand() {
-- if (options && options.nobrace === true || !/\{.*\}/.test(pattern)) {
-+ if (options && options.nobrace === true || !/\{.*?\}/.test(pattern)) {
- return utils.arrayify(pattern);
- }
- return braces(pattern, options);
diff --git a/CVE-2025-8262.patch b/CVE-2025-8262.patch
deleted file mode 100644
index b531b79..0000000
--- a/CVE-2025-8262.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-diff -rupN --no-dereference yarn-1.22.22/src/resolvers/exotics/hosted-git-resolver.js yarn-1.22.22-new/src/resolvers/exotics/hosted-git-resolver.js
---- yarn-1.22.22/src/resolvers/exotics/hosted-git-resolver.js 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/src/resolvers/exotics/hosted-git-resolver.js 2025-07-31 00:36:53.007366080 +0200
-@@ -30,8 +30,9 @@ export function explodeHostedGitFragment
- }
-
- const parts = fragment
-- .replace(/(.*?)#.*/, '$1') // Strip hash
-- .replace(/.*:(.*)/, '$1') // Strip prefixed protocols
-+ .split('#', 1)[0]
-+ .split(':')
-+ .pop()
- .replace(/.git$/, '') // Strip the .git suffix
- .split('/');
-
diff --git a/CVE-2025-8263.patch b/CVE-2025-8263.patch
deleted file mode 100644
index 7d31b12..0000000
--- a/CVE-2025-8263.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-diff -rupN yarn-1.22.22/node_modules/form-data/lib/form_data.js yarn-1.22.22-new/node_modules/form-data/lib/form_data.js
---- yarn-1.22.22/node_modules/form-data/lib/form_data.js 2025-07-28 11:18:19.000000000 +0200
-+++ yarn-1.22.22-new/node_modules/form-data/lib/form_data.js 2025-07-31 00:39:06.012116839 +0200
-@@ -5,6 +5,7 @@ var http = require('http');
- var https = require('https');
- var parseUrl = require('url').parse;
- var fs = require('fs');
-+var crypto = require('crypto');
- var mime = require('mime-types');
- var asynckit = require('asynckit');
- var populate = require('./populate.js');
-@@ -316,12 +317,7 @@ FormData.prototype.getBoundary = functio
- FormData.prototype._generateBoundary = function() {
- // This generates a 50 character boundary similar to those used by Firefox.
- // They are optimized for boyer-moore parsing.
-- var boundary = '--------------------------';
-- for (var i = 0; i < 24; i++) {
-- boundary += Math.floor(Math.random() * 10).toString(16);
-- }
--
-- this._boundary = boundary;
-+ this._boundary = '--------------------------' + crypto.randomBytes(12).toString('hex');
- };
-
- // Note: getLengthSync DOESN'T calculate streams length
diff --git a/README.md b/README.md
deleted file mode 100644
index edf2d14..0000000
--- a/README.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# yarnpkg
-
-The yarnpkg package
\ No newline at end of file
diff --git a/dead.package b/dead.package
new file mode 100644
index 0000000..5204a84
--- /dev/null
+++ b/dead.package
@@ -0,0 +1 @@
+Orphaned for 6+ weeks
diff --git a/sources b/sources
deleted file mode 100644
index 5a76495..0000000
--- a/sources
+++ /dev/null
@@ -1 +0,0 @@
-SHA512 (yarnpkg-v1.22.22-bundled-20260402.tar.gz) = 190a8d9ecd7b2a82969a9ab33bdef9630efa523199d69f5fca8691fdd8fe8baedb4fb6a27386084039b751e7eda833c3871dc26b78b96b4d570239bd3b880374
diff --git a/yarn-jsyaml4.patch b/yarn-jsyaml4.patch
deleted file mode 100644
index 645b80b..0000000
--- a/yarn-jsyaml4.patch
+++ /dev/null
@@ -1,30 +0,0 @@
-diff -rupN yarn-1.22.22/src/lockfile/parse.js yarn-1.22.22-new/src/lockfile/parse.js
---- yarn-1.22.22/src/lockfile/parse.js 2024-03-09 22:33:28.000000000 +0100
-+++ yarn-1.22.22-new/src/lockfile/parse.js 2026-04-02 10:31:02.536547390 +0200
-@@ -9,7 +9,7 @@ import {LOCKFILE_VERSION} from '../const
- import {MessageError} from '../errors.js';
- import map from '../util/map.js';
-
--const {safeLoad, FAILSAFE_SCHEMA} = require('js-yaml');
-+const {load, FAILSAFE_SCHEMA} = require('js-yaml');
-
- type Token = {
- line: number,
-@@ -390,7 +390,7 @@ function parse(str: string, fileLoc: str
- return parser.parse();
- } catch (error1) {
- try {
-- return safeLoad(str, {
-+ return load(str, {
- schema: FAILSAFE_SCHEMA,
- });
- } catch (error2) {
-@@ -398,7 +398,7 @@ function parse(str: string, fileLoc: str
- }
- }
- } else {
-- const result = safeLoad(str, {
-+ const result = load(str, {
- schema: FAILSAFE_SCHEMA,
- });
- if (typeof result === 'object') {
diff --git a/yarnpkg-tarball.sh b/yarnpkg-tarball.sh
deleted file mode 100755
index 363f5bf..0000000
--- a/yarnpkg-tarball.sh
+++ /dev/null
@@ -1,22 +0,0 @@
-#!/bin/sh
-
-version=$(rpm -q --specfile --qf='%{version}\n' yarnpkg.spec | head -n1)
-timestamp=$(date +%Y%m%d)
-if [ ! -e v$version.tar.gz ]; then
-wget https://github.com/yarnpkg/yarn/archive/v$version.tar.gz
-fi
-rm -rf yarn-$version
-tar -zxf v$version.tar.gz
-cd yarn-$version
-for file in $(ls -1 ../*.prebundle.patch 2>/dev/null); do
-patch -p1 < $file
-done
-rm yarn.lock
-yarn install
-yarn autoclean --force
-yarn audit fix
-# Delete all binary files in node_modules
-echo "Deleting binary files..."
-find node_modules -type f -not -name '*.js' -exec file {} \; | grep ELF | awk -F':' '{print $1}' | xargs rm
-cd ..
-tar -zcf yarnpkg-v$version-bundled-$timestamp.tar.gz yarn-$version
diff --git a/yarnpkg.spec b/yarnpkg.spec
deleted file mode 100644
index fb0e2f3..0000000
--- a/yarnpkg.spec
+++ /dev/null
@@ -1,279 +0,0 @@
-%global debug_package %{nil}
-%global npm_name yarn
-
-%{?nodejs_find_provides_and_requires}
-
-%global enable_tests 1
-
-# don't require bundled modules
-%global __requires_exclude_from ^(%{nodejs_sitelib}/yarn/lib/.*|%{nodejs_sitelib}/yarn/bin/yarn(|\\.cmd|\\.ps1|pkg.*))$
-
-%global bundledate 20260402
-
-Name: yarnpkg
-Version: 1.22.22
-Release: 19%{?dist}
-Summary: Fast, reliable, and secure dependency management.
-License: BSD-2-Clause
-URL: https://github.com/yarnpkg/yarn
-# we need tarball with node_modules
-Source0: %{name}-v%{version}-bundled-%{bundledate}.tar.gz
-Source1: yarnpkg-tarball.sh
-
-# These are applied by yarnpkg-tarball.sh
-# yarn-update-jest.prebundle.patch
-# yarn-no-commitizen.prebundle.patch
-# yarn-no-eslint.prebundle.patch
-
-Patch0: CVE-2023-26136.patch
-Patch1: CVE-2022-37599.patch
-Patch2: CVE-2024-4067.patch
-# https://github.com/yarnpkg/yarn/commit/97731871e674bf93bcbf29e9d3258da8685f3076.patch
-Patch3: CVE-2025-8262.patch
-# https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0
-Patch4: CVE-2025-8263.patch
-# Adapt for js-yaml 4.x
-Patch5: yarn-jsyaml4.patch
-
-ExclusiveArch: %{nodejs_arches}
-
-BuildRequires: nodejs-packaging
-%if 0%{?fedora}
-BuildRequires: %{_bindir}/npm
-%else
-BuildRequires: npm
-%endif
-
-%description
-Fast, reliable, and secure dependency management.
-
-
-%prep
-%autosetup -p1 -n %{npm_name}-%{version}
-
-
-%build
-# use build script
-npm run build
-
-
-%install
-mkdir -p %{buildroot}%{nodejs_sitelib}/%{npm_name}
-
-cp -pr package.json lib bin node_modules \
- %{buildroot}%{nodejs_sitelib}/%{npm_name}
-
-mkdir -p %{buildroot}%{_bindir}
-ln -sfr %{buildroot}%{nodejs_sitelib}/%{npm_name}/bin/yarn.js %{buildroot}%{_bindir}/yarnpkg
-ln -sfr %{buildroot}%{nodejs_sitelib}/%{npm_name}/bin/yarn.js %{buildroot}%{_bindir}/yarn
-
-# Fix the shebang in yarn.js because brp-mangle-shebangs fails to detect this properly (rhbz#1998924)
-sed -e "s|^#!/usr/bin/env node$|#!/usr/bin/node|" \
- -i %{buildroot}%{nodejs_sitelib}/%{npm_name}/bin/yarn.js
-
-# Remove executable bits from bundled dependency tests
-find %{buildroot}%{nodejs_sitelib}/%{npm_name}/node_modules \
- -ipath '*/test/*' -type f -executable \
- -exec chmod -x '{}' +
-
-
-%if 0%{?enable_tests}
-%check
-%nodejs_symlink_deps --check
-if [[ $(%{buildroot}%{_bindir}/yarnpkg --version) == %{version} ]] ; then echo PASS; else echo FAIL && exit 1; fi
-if [[ $(%{buildroot}%{_bindir}/yarn --version) == %{version} ]] ; then echo PASS; else echo FAIL && exit 1; fi
-%endif
-
-
-%files
-%doc README.md
-%license LICENSE
-%{_bindir}/yarnpkg
-%{_bindir}/yarn
-%{nodejs_sitelib}/%{npm_name}/
-
-
-%changelog
-* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.22-19
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
-
-* Thu Apr 02 2026 Sandro Mani <manisandro@gmail.com> - 1.22.22-18
-- Add yarn-jsyaml4.patch
-- Refresh vendor bundle, fixes CVE-2026-4800
-
-* Sat Mar 07 2026 Sandro Mani <manisandro@gmail.com> - 1.22.22-17
-- Refresh vendor bundle
-
-* Tue Jan 27 2026 Sandro Mani <manisandro@gmail.com> - 1.22.22-16
-- Refresh bundle, fixes CVE-2025-13465
-
-* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.22-15
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
-
-* Wed Dec 03 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-14
-- Bump release
-
-* Wed Dec 03 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-13
-- Refresh bundle, fixes CVE-2025-64756
-
-* Tue Sep 30 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-12
-- Regenerate bundle, fixes CVE-2025-59343
-- Patch out eslint and commitizen devDependencies to reduce dependencies
-
-* Wed Jul 30 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-11
-- Refresh bundle
-- Drop patches obsoleted by new bundle
-- Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
-- Apply fixes for CVE-2025-8262 and CVE-2025-8263
-
-* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.22-10
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
-
-* Tue Jun 24 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-9
-- Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.
-
-* Wed Jun 04 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-8
-- Refresh bundle tarball for CVE-2025-48387
-
-* Fri Mar 28 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-7
-- Fix CVE-2024-12905
-
-* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.22-6
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
-
-* Tue Oct 15 2024 Sandro Mani <manisandro@gmail.com> - 1.22.22-5
-- Update bundled ws (CVE-2024-37890)
-
-* Thu Oct 10 2024 Sandro Mani <manisandro@gmail.com> - 1.22.22-4
-- Update bundled elliptic (CVE-2024-48949)
-
-* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.22-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
-
-* Thu Jul 04 2024 Sandro Mani <manisandro@gmail.com> - 1.22.22-2
-- Backport patch for CVE-2024-4067
-
-* Sat Mar 09 2024 Sandro Mani <manisandro@gmail.com> - 1.22.22-1
-- Update to 1.22.22
-
-* Mon Feb 19 2024 Sandro Mani <manisandro@gmail.com> - 1.22.21-2
-- Backport patches for CVE-2022-37599, CVE-2023-26136, CVE-2023-46234
-
-* Fri Feb 16 2024 Sandro Mani <manisandro@gmail.com> - 1.22.21-1
-- Update to 1.22.21
-
-* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.19-8
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.19-7
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Wed May 03 2023 Sandro Mani <manisandro@gmail.com> - 1.22.19-6
-- Rebuild (nodejs20)
-
-* Tue Mar 21 2023 Sandro Mani <manisandro@gmail.com> - 1.22.19-5
-- Add patch for CVE-2022-38900, proper fixes for CVE-2021-43138, CVE-2022-3517,
- CVE-2020-7677
-
-* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.19-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Wed Jan 11 2023 Sandro Mani <manisandro@gmail.com> - 1.22.19-3
-- Add patches for CVE-2021-43138, CVE-2022-3517, CVE-2020-7677
-
-* Tue Jan 03 2023 Sandro Mani <manisandro@gmail.com> - 1.22.19-2
-- Backport fix for CVE-2021-35065 for bundled glob-parent
-
-* Thu Dec 15 2022 Sandro Mani <manisandro@gmail.com> - 1.22.19-1
-- Update to 1.22.19
-
-* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.17-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.17-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Tue Nov 23 2021 zsvetlik@redhat.com - 1.22.17-1
-- Update to latest upstream release
-- use --force in yarnpkg-tarball.sh to workaround dependency conflincts
-
-* Mon Aug 30 2021 Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
-- Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
-- Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)
-
-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.10-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
-
-* Thu Jan 28 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.10-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
-
-* Fri Oct 09 2020 zsvetlik@redhat.com - 1.22.10-1
-- Update to 1.22.10
-- Resolves: RHBZ#1816262, RHBZ#1851876
-- Long resolved CVEs, just not mentioned in changelog
-
-* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.22.4-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
-
-* Mon Jun 22 2020 Neal Gompa <ngompa13@gmail.com> - 1.22.4-2
-- Ensure Obsoletes + Provides stanza takes effect
-- Fix broken author identity in changelog entries
-
-* Tue Apr 14 2020 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.22.4-1
-- Rename to yarnpkg, remove symlink-deps macro
-- Update to 1.22.4
-
-* Mon Jan 27 2020 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.21.1-1
-- Resolves: RHBZ#1627748, #1687099, #1788329
-- Update to 1.21.1
-- Provides /usr/bin/yarn
-- Resolves CVE-2019-10773
-
-* Thu Dec 05 2019 Neal Gompa <ngompa@datto.com> - 1.13.0-4
-- Rename nodejs-yarn binary package to yarnpkg (similar to other distros)
-- Use nodejs macros consistently throughout spec
-- Make the tests fail the build if the tests fail
-
-* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.13.0-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Wed Feb 13 2019 Jan Staněk <jstanek@redhat.com> - 1.13.0-2
-- Remove executable bits from bundled tests
-- Related: rhbz#1674073
-
-* Thu Feb 07 2019 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.13.0-1
-- Update
-
-* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Mon Jul 30 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.9.2-1
-- Update to 1.9.2
-
-* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.0-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Thu May 24 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.7.0-1
-- Update to 1.7.0
-
-* Wed May 09 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.6.0-1
-- Rebase, rebuild with new packaging
-
-* Wed Mar 21 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.5.1-2
-- Add requires_exclude_from macro
-- rename nodejs-yarnpkg to yarn
-
-* Wed Mar 21 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.5.1-1
-- Rebase
-
-* Tue Jan 30 2018 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.4.1-1
-- rebase
-- package from GH, build with npm
-
-* Tue Dec 05 2017 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.3.2-2
-- Add fedora readme so users are able to find renamed commands
-- change source url
-- rename license according to guidelines
-
-* Mon Nov 27 2017 Zuzana Svetlikova <zsvetlik@redhat.com> - 1.3.2-1
-- Initial build
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-11 21:53 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 21:53 [rpms/yarnpkg] rawhide: Orphaned for 6+ weeks Orphaned Packages Process
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox