Skip to content

fix(scaffold): add defaultSemverRangePrefix to .yarnrc.yml#887

Merged
YusukeHirao merged 1 commit intodevfrom
fix-env
Apr 7, 2026
Merged

fix(scaffold): add defaultSemverRangePrefix to .yarnrc.yml#887
YusukeHirao merged 1 commit intodevfrom
fix-env

Conversation

@YusukeHirao
Copy link
Copy Markdown
Member

@YusukeHirao YusukeHirao commented Apr 7, 2026

Summary

  • scaffoldの.yarnrc.ymldefaultSemverRangePrefix: ''を追加
  • yarn add時にバージョンプレフィックス(^~)が付かなくなり、常に固定バージョンでインストールされる
  • サプライチェーン攻撃対策(npmMinimalAgeGate)の補完対応

Test plan

  • yarn addで新規パッケージ追加時にバージョンが固定されることを確認

🤖 Generated with Claude Code


Note

Low Risk
Low risk config-only change to Yarn behavior; main impact is new dependencies will be added with exact versions, which could affect update expectations but not runtime logic.

Overview
Updates packages/@d-zero/scaffold/.yarnrc.yml to set defaultSemverRangePrefix: '', making yarn add record pinned (no ^/~) dependency versions by default for scaffolded projects.

Reviewed by Cursor Bugbot for commit 14b75c3. Configure here.

Add empty string defaultSemverRangePrefix setting to prevent

version range prefixes (^ or ~) when adding dependencies.
@YusukeHirao YusukeHirao merged commit 2a048a4 into dev Apr 7, 2026
2 checks passed
@YusukeHirao YusukeHirao deleted the fix-env branch April 7, 2026 08:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants