yarn
yarn copied to clipboard
Package resolved to relying on unencrypted git protocol is now broken
Just realized all my CI build pipeline with yarn are broken with error similar to this one:
After looking into the issue, it appears that GitHub is dropping support for unauthenticated git protocol:
https://github.blog/2021-09-01-improving-git-protocol-security-github/
It says March 15, 2022 the support will be dropped, but I guess the real feature may be dropped today? As if there are many package resolved to install via git protocol, they are now all broken. Is there a way to force yarn to avoid resolving packages to use git protocol ?
One way to get the build working locally is to update your gitconfig to rewrite the URLs:
git config --global url."https://github.com/".insteadOf git://github.com/
This will not fix the invalid URLs in yarn.lock, but can be used as a (temporary) workaround.
I'm going to close this as it appears to be just a breaking change on GitHub's end.