feat: implement npmMinimalAgeGate and npmPreapprovedPackages config options

.yarn/versions/25eb93a2.yml

@@ -0,0 +1,35 @@
+releases:
+  "@yarnpkg/core": minor
+  "@yarnpkg/plugin-essentials": minor
+  "@yarnpkg/plugin-npm": minor
+  "@yarnpkg/plugin-compat": minor
+  "@yarnpkg/plugin-constraints": minor
+  "@yarnpkg/plugin-dlx": minor
+  "@yarnpkg/plugin-exec": minor
+  "@yarnpkg/plugin-file": minor
+  "@yarnpkg/plugin-git": minor
+  "@yarnpkg/plugin-github": minor
+  "@yarnpkg/plugin-http": minor
+  "@yarnpkg/plugin-init": minor
+  "@yarnpkg/plugin-interactive-tools": minor
+  "@yarnpkg/plugin-jsr": minor
+  "@yarnpkg/plugin-link": minor
+  "@yarnpkg/plugin-nm": minor
+  "@yarnpkg/plugin-npm-cli": minor
+  "@yarnpkg/plugin-pack": minor
+  "@yarnpkg/plugin-patch": minor
+  "@yarnpkg/plugin-pnp": minor
+  "@yarnpkg/plugin-pnpm": minor
+  "@yarnpkg/plugin-stage": minor
+  "@yarnpkg/plugin-typescript": minor
+  "@yarnpkg/plugin-version": minor
+  "@yarnpkg/plugin-workspace-tools": minor
+  "@yarnpkg/builder": minor
+  "@yarnpkg/cli": minor
+  "@yarnpkg/doctor": minor
+  "@yarnpkg/extensions": minor
+  "@yarnpkg/nm": minor
+  "@yarnpkg/pnpify": minor
+  "@yarnpkg/sdks": minor
+
+

packages/acceptance-tests/pkg-tests-core/sources/utils/makeTemporaryEnv.ts

@@ -18,7 +18,7 @@ const mte = generatePkgDriver({
   ) {
     const rcEnv: Record<string, any> = {};
     for (const [key, value] of Object.entries(config))
-      rcEnv[`YARN_${key.replace(/([A-Z])/g, `_$1`).toUpperCase()}`] = Array.isArray(value) ? value.join(`;`) : value;
+      rcEnv[`YARN_${key.replace(/([A-Z])/g, `_$1`).toUpperCase()}`] = Array.isArray(value) ? value.join(`,`) : value;
 
     const nativePath = npath.fromPortablePath(path);
     const nativeHomePath = npath.dirname(nativePath);

packages/acceptance-tests/pkg-tests-core/sources/utils/tests.ts

@@ -46,7 +46,7 @@ export const TEST_TIMEOUT = os.endianness() === `BE`
   ? 300000
   : 75000;
 
-export type PackageEntry = Map<string, {path: string, packageJson: Record<string, any>}>;
+export type PackageEntry = Map<string, {path: string, packageJson: Record<string, any>, releaseDate: string | undefined}>;
 export type PackageRegistry = Map<string, PackageEntry>;
 
 interface RunDriverOptions extends Record<string, any> {
@@ -177,6 +177,24 @@ export const ADVISORIES = new Map<string, Array<npmAuditTypes.AuditMetadata>>([
   }]],
 ]);
 
+const RELEASE_DATE_PACKAGES: Record<string, Record<string, number | string>> = {
+  "release-date": {
+    "1.0.0": new Date(new Date().getTime() - /* 10 days */ 1000 * 60 * 60 * 24 * 10).toISOString(),
+    "1.1.0": new Date(new Date().getTime() - /* 5 days */ 1000 * 60 * 60 * 24 * 5).toISOString(),
+    "1.1.1": new Date().toISOString(),
+  },
+  "release-date-transitive": {
+    "1.0.0": new Date(new Date().getTime() - /* 10 days */ 1000 * 60 * 60 * 24 * 10).toISOString(),
+    "1.1.0": new Date(new Date().getTime() - /* 5 days */ 1000 * 60 * 60 * 24 * 5).toISOString(),
+    "1.1.1": new Date().toISOString(),
+  },
+  "@scoped/release-date": {
+    "1.0.0": new Date(new Date().getTime() - /* 10 days */ 1000 * 60 * 60 * 24 * 10).toISOString(),
+    "1.1.0": new Date(new Date().getTime() - /* 5 days */ 1000 * 60 * 60 * 24 * 5).toISOString(),
+    "1.1.1": new Date().toISOString(),
+  },
+};
+
 export const validLogins = {
   fooUser: new Login(`foo-user`),
   barUser: new Login(`bar-user`),
@@ -233,7 +251,7 @@ export const getPackageRegistry = (): Promise<PackageRegistry> => {
       const packageFile = ppath.join(packagesDir, packageName, Filename.manifest);
       const packageJson = await xfs.readJsonPromise(packageFile);
 
-      const {name, version} = packageJson;
+      const {name, version}: {name: string, version: string} = packageJson;
       if (name.startsWith(`git-`))
         continue;
 
@@ -422,6 +440,7 @@ export const startPackageServer = ({type}: {type: keyof typeof packageServerUrls
             }),
           )),
         ),
+        time: name in RELEASE_DATE_PACKAGES ? RELEASE_DATE_PACKAGES[name] : undefined,
         [`dist-tags`]: {
           latest: semver.maxSatisfying(versions, `*`),
           ...distTags,

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.0.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.0.0/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "@scoped/release-date",
+    "version": "1.0.0"
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.1.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.1.0/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "@scoped/release-date",
+    "version": "1.1.0"
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.1.1/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/@scoped__release-date-1.1.1/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "@scoped/release-date",
+    "version": "1.1.1"
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.0.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.0.0/package.json

@@ -0,0 +1,7 @@
+{
+    "name": "release-date",
+    "version": "1.0.0",
+    "dependencies": {
+        "release-date-transitive": "^1.0.0"
+    }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.1.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.1.0/package.json

@@ -0,0 +1,7 @@
+{
+    "name": "release-date",
+    "version": "1.1.0",
+    "dependencies": {
+        "release-date-transitive": "^1.0.0"
+    }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.1.1/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-1.1.1/package.json

@@ -0,0 +1,7 @@
+{
+    "name": "release-date",
+    "version": "1.1.1",
+    "dependencies": {
+        "release-date-transitive": "^1.0.0"
+    }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.0.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.0.0/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "release-date-transitive",
+    "version": "1.0.0"
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.1.0/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.1.0/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "release-date-transitive",
+    "version": "1.1.0"
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.1.1/index.js

@@ -0,0 +1,7 @@
+module.exports = require(`./package.json`);
+
+for (const key of [`dependencies`, `devDependencies`, `peerDependencies`]) {
+  for (const dep of Object.keys(module.exports[key] || {})) {
+    module.exports[key][dep] = require(dep);
+  }
+}

packages/acceptance-tests/pkg-tests-fixtures/packages/release-date-transitive-1.1.1/package.json

@@ -0,0 +1,4 @@
+{
+    "name": "release-date-transitive",
+    "version": "1.1.1"
+}