Skip to content

feat: frogbot support for yarn workspaces#1343

Open
sean-perkins wants to merge 2 commits into
jfrog:devfrom
sean-perkins:master
Open

feat: frogbot support for yarn workspaces#1343
sean-perkins wants to merge 2 commits into
jfrog:devfrom
sean-perkins:master

Conversation

@sean-perkins

Copy link
Copy Markdown
  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies

Relates to #798

Frogbot fails to apply dependency fixes in Yarn workspace (monorepo) projects. When a vulnerability is detected in a workspace package the fix command is run from the workspace package's subdirectory, but yarn upgrade/yarn up must be run from the workspace root against a specific workspace. This PR adds workspace detection.

A secondary bug is also fixed: isYarnV1Project previously ran the global yarn --version binary to determine the project's Yarn version. Projects using Yarn Berry ship their own binary via .yarnrc.yml yarnPath, so the global version could be wrong. The new implementation reads the version directly from the yarnPath filename in .yarnrc.yml, which is faster and version-agnostic.

@sean-perkins sean-perkins marked this pull request as ready for review June 3, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant