fix(install): verify modern Yarn hashes against the CLI binary - #2227

Merged

fengmk2 merged 12 commits into

voidzero-dev:mainfrom

leslieeilsel:agent/yarn-corepack-hash

Aug 11, 2026

Commits on Aug 11, 2026

fix(install): verify modern Yarn hashes against the CLI binary

leslieeilsel
authored and
fengmk2
committed
f736472
test(install): cover Corepack Yarn hash snapshots

leslieeilsel
authored and
fengmk2
committed
30dec74
fix(install): harden Corepack Yarn verification

leslieeilsel
authored and
fengmk2
committed
474af7f
fix(install): name the artifact a packageManager hash covers
fengmk2
committed
9602948
fix(install): treat every Yarn 2.x prerelease as Berry
fengmk2
committed
9a25c8e
refactor(install): give the cached-CLI check one home
fengmk2
committed
77e7133
test(install): cover vp run aborting on a failed integrity check
fengmk2
committed
e76df93
docs(install): rewrite the new prose in simplified technical english
fengmk2
committed
97f4b76
perf(install): record the verified pin instead of hashing the CLI again
fengmk2
committed
fc20a2b
fix(install): check the cached CLI status against the record
fengmk2
committed
c881a8d
Revert "fix(install): check the cached CLI status against the record"
fengmk2
committed
0f71670
docs(rfc): document how Vite+ verifies a packageManager pin
fengmk2
committed
1143616