From 224e394e906c452c35357e3a17d3128bf18162a2 Mon Sep 17 00:00:00 2001 From: fullsend-code <278716306+fullsend-ai-coder[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 19:52:56 +0000 Subject: [PATCH] fix(#3208): disable Yarn npmMinimalAgeGate in run-e2e.sh MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The generated .yarnrc.yml only set nodeLinker without configuring npmMinimalAgeGate. Yarn 4.17 defaults to a 24-hour quarantine (1440 minutes), causing YN0016 failures when any workspace dependency was published within the last 24 hours. Since run-e2e.sh deletes yarn.lock and resolves from scratch, every nightly e2e run was vulnerable to this. Set npmMinimalAgeGate: 0 in the generated .yarnrc.yml to disable quarantine. This is appropriate because run-e2e.sh is a CI-only test runner where dependencies are author-pinned — the fresh resolution is an artifact of the workspace hoisting strategy, not a supply-chain trust boundary. Closes #3208 --- run-e2e.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/run-e2e.sh b/run-e2e.sh index 4750d1ad01..2c00abf036 100755 --- a/run-e2e.sh +++ b/run-e2e.sh @@ -204,7 +204,10 @@ cat > package.json < .yarnrc.yml <<< 'nodeLinker: node-modules' +cat > .yarnrc.yml <