From a4220d0b83bedeeb6a425557c696609794db0536 Mon Sep 17 00:00:00 2001 From: dev-hari-prasad Date: Mon, 7 Sep 2026 15:59:49 +0530 Subject: [PATCH] chore(security): restore checksumBehavior to throw in web and runtime Revert checksumBehavior from update back to Yarn's default (throw) in web/.yarnrc.yml and runtime/.yarnrc.yml to restore tamper detection and ensure builds fail if downloaded package checksums do not match lockfiles. --- runtime/.yarnrc.yml | 2 +- web/.yarnrc.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/runtime/.yarnrc.yml b/runtime/.yarnrc.yml index 6413a424d82..6a7583f0f74 100644 --- a/runtime/.yarnrc.yml +++ b/runtime/.yarnrc.yml @@ -1,4 +1,4 @@ -checksumBehavior: update +checksumBehavior: throw logFilters: - code: YN0013 diff --git a/web/.yarnrc.yml b/web/.yarnrc.yml index 9960d2bd622..3808f40a3a8 100644 --- a/web/.yarnrc.yml +++ b/web/.yarnrc.yml @@ -1,7 +1,7 @@ approvedGitRepositories: - "**" -checksumBehavior: update +checksumBehavior: throw enableScripts: true