Change8

@yarnpkg/cli/4.14.0

Breaking Changes
📦 yarnView on GitHub →
1 breaking3 features🐛 3 fixes🔧 2 symbols

Summary

This release defaults `enableScripts` to false, introduces OIDC support for CircleCI, and fixes several issues related to Node 25.7+ compatibility and PnP watch mode.

⚠️ Breaking Changes

  • The default value for `enableScripts` is now `false`. If your workflows relied on scripts being enabled by default (e.g., in `postinstall`), you must now explicitly set `enableScripts: true` in your configuration.

Migration Steps

  1. If scripts were previously enabled by default in your setup, explicitly set `enableScripts: true` in your Yarn configuration to restore previous behavior.
  2. If using `exec:` protocol, ensure that `enableScripts` setting is respected by updating configurations if necessary.

✨ New Features

  • Added support for OIDC authentication for CircleCI within the npm plugin.
  • The `yarn why` command now allows specifying a version or range to check dependencies against.
  • Added the `approvedGitRepositories` configuration option.

🐛 Bug Fixes

  • Fixed an issue causing EBADF errors on Node 25.7+ by reading CJS source of zip files.
  • Fixed watch mode for files required under PnP.
  • Named the Experimental ESM support warning for better identification.

Affected Symbols