Skip to content

feat: add process docs and scripts for yarn.lock only backports#2713

Open
JessicaJHee wants to merge 1 commit into
redhat-developer:release-1.10from
JessicaJHee:lockfile-patch-scripts
Open

feat: add process docs and scripts for yarn.lock only backports#2713
JessicaJHee wants to merge 1 commit into
redhat-developer:release-1.10from
JessicaJHee:lockfile-patch-scripts

feat: add process docs and scripts for yarn.lock only backports

d6e3084
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Jul 6, 2026 in 35s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 46 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZXAMoaauKZWBXn3aZ&open=AZ8ZXAMoaauKZWBXn3aZ&pullRequest=2713

Check warning on line 85 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use the "RegExp.exec()" method instead.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8Z&open=AZ8dZZsHVoNIKH_aIm8Z&pullRequest=2713

Check warning on line 561 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'(dep as Json).version ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZXAMoaauKZWBXn3ao&open=AZ8ZXAMoaauKZWBXn3ao&pullRequest=2713

Check failure on line 753 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ84cFt67ctcaw4SeJko&open=AZ84cFt67ctcaw4SeJko&pullRequest=2713

Check warning on line 486 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

`names` should be a `Set`, and use `names.has()` to check existence or non-existence.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZjumgaauKZWBXpdOu&open=AZ8ZjumgaauKZWBXpdOu&pullRequest=2713

Check warning on line 107 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use the "RegExp.exec()" method instead.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8c&open=AZ8dZZsHVoNIKH_aIm8c&pullRequest=2713

Check warning on line 71 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.version ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8U&open=AZ8dZZsHVoNIKH_aIm8U&pullRequest=2713

Check warning on line 74 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.lessThan' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8V&open=AZ8dZZsHVoNIKH_aIm8V&pullRequest=2713

Check warning on line 79 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.lessThanOrEqual' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8X&open=AZ8dZZsHVoNIKH_aIm8X&pullRequest=2713

Check warning on line 69 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.status ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8T&open=AZ8dZZsHVoNIKH_aIm8T&pullRequest=2713

Check warning on line 141 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'meta.state ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZXAMoaauKZWBXn3ah&open=AZ8ZXAMoaauKZWBXn3ah&pullRequest=2713

Check warning on line 157 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'entry[key] ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZXAMoaauKZWBXn3ai&open=AZ8ZXAMoaauKZWBXn3ai&pullRequest=2713

Check warning on line 183 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8d&open=AZ8dZZsHVoNIKH_aIm8d&pullRequest=2713

Check warning on line 100 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use the "RegExp.exec()" method instead.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8b&open=AZ8dZZsHVoNIKH_aIm8b&pullRequest=2713

Check warning on line 226 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'depNode.version ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8e&open=AZ8dZZsHVoNIKH_aIm8e&pullRequest=2713

Check warning on line 80 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.lessThanOrEqual' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8Y&open=AZ8dZZsHVoNIKH_aIm8Y&pullRequest=2713

Check warning on line 93 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use the "RegExp.exec()" method instead.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8a&open=AZ8dZZsHVoNIKH_aIm8a&pullRequest=2713

Check warning on line 75 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'v.lessThan' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8W&open=AZ8dZZsHVoNIKH_aIm8W&pullRequest=2713

Check warning on line 459 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZjumgaauKZWBXpdOt&open=AZ8ZjumgaauKZWBXpdOt&pullRequest=2713

Check failure on line 66 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 16 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8S&open=AZ8dZZsHVoNIKH_aIm8S&pullRequest=2713

Check warning on line 437 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'data['repo-ref'] ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZjumgaauKZWBXpdOr&open=AZ8ZjumgaauKZWBXpdOr&pullRequest=2713

Check failure on line 769 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 19 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8i&open=AZ8dZZsHVoNIKH_aIm8i&pullRequest=2713

Check warning on line 250 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'depNode.version ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8h&open=AZ8dZZsHVoNIKH_aIm8h&pullRequest=2713

Check warning on line 40 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8ZXAMoaauKZWBXn3aY&open=AZ8ZXAMoaauKZWBXn3aY&pullRequest=2713

Check warning on line 232 in scripts/yarnlock-backport/backport.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

'npmLsJson.version ?? ''' will use Object's default stringification format ('[object Object]') when stringified.

See more on https://sonarcloud.io/project/issues?id=redhat-developer_rhdh-plugin-export-overlays&issues=AZ8dZZsHVoNIKH_aIm8g&open=AZ8dZZsHVoNIKH_aIm8g&pullRequest=2713