The Yarn Blog
Let's keep in touch.
Releases posts, design notes, and the occasional thinking-out-loud skeets from the @yarnpkg.dev team.
May 2026
We just released the 4.15 branch 🎊
One important change is that npmMinimalAgeGate will now default to 1d for new projects.
7 Likes The new Yarn website lets you diff packages between versions. No particular reason for that 😅 v6.yarnpkg.com/package/@tan...
6 Likes Reminder that Yarn lets you filter out fresh packages with `npmMinimalAgeGate` and it's a good idea to use it on your work repos!
5 Likes April 2026
We just released the 4.14 branch! 🎊
Two important security changes:
- `enableScripts` now defaults to `false` (can be overridden on a per-package basis)
- A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.
27 Likes January 2026
— end of thread