The Yarn Blog
Let's keep in touch.
Releases posts, design notes, and the occasional thinking-out-loud skeets from the @yarnpkg.dev team.
April 2026
We just released the 4.14 branch! 🎊
Two important security changes:
- `enableScripts` now defaults to `false` (can be overridden on a per-package basis)
- A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.
25 Likes January 2026
September 2025
Yarn 4.10 is fresh off the press! 💫 It includes a new npmMinimalAgeGate setting, catalog support, and OIDC publishing.
16 Likes June 2025
April 2025
— end of thread