Security update addressing #41.
- Upgrade the Docker runtime from Node.js 20 to Node.js 24.22.1, including the fix for CVE-2026-111497.
- Update vulnerable production dependencies; npm audit reports zero vulnerabilities in the updated dependency tree.
- Exclude macOS metadata from Git and Docker build contexts.
Updating
Docker users only need to pull the updated image and recreate the container. No database migration or configuration changes are required.
docker compose pull yarnl
docker compose up -d yarnlImages are available as titandrive/yarnl:0.11.5 and titandrive/yarnl:latest for linux/amd64 and linux/arm64.
Non-Docker installations must use Node.js 24.22.1 or newer within the 24.x line, reinstall dependencies, and restart Yarnl.
Full Changelog: v0.11.4...v0.11.5