Skip to content

.yarnrc registry regex incorrect #3474

@joshuagiggxon

Description

@joshuagiggxon

https://github.com/dependabot/dependabot-core/blob/main/npm_and_yarn/lib/dependabot/npm_and_yarn/update_checker/registry_finder.rb#L15

Regex for .yarnrc registry is:

/^(?:--)?registry\s+['"](?<registry>.*)['"]/

But it's common to wrap registry in quotes, which then fails to match.

e.g. (copied from a Google Search)

registry "https://nexus.dev/repository/npm-proxy/"
"@mycompany:registry" "https://myserver.dev/repository/npm-releases/"

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions