Search results

[rush] @microsoft/rush-lib depends on a version of js-yaml that has a security issue

effort: easyProbably a quick fix. Want to contribute? :-)Probably a quick fix. Want to contribute? :-)

help wantedIf you're looking to contribute, this issue is a good place to start!If you're looking to contribute, this issue is a good place to start!

Status: Open.

#5843 In microsoft/rushstack;

· kgetz-arista opened on Jun 22, 2026

[rush] "globalCatalogs" is not defined in json schema

Status: Open.

#5839 In microsoft/rushstack;

· kenrick95 opened on Jun 19, 2026

[rush] pnpm 11 no longer reads the pnpm field in package.json

Status: Open.

#5837 In microsoft/rushstack;

· brunojppb opened on Jun 18, 2026

[rush] rush change --verify didn't catch missing change file for rush plugin change

Status: Open.

#5835 In microsoft/rushstack;

· bmiddha opened on Jun 15, 2026

[rush] rush-lib bundles pnpm-sync-lib that pins vulnerable yaml@2.4.1

Status: Open.

#5833 In microsoft/rushstack;

· faizanongit opened on Jun 15, 2026

[heft] @rushstack/heft-sass-plugin: ignoreDeprecationsInDependencies is a silent no-op (never wired to Sass quietDeps)

Status: Open.

#5816 In microsoft/rushstack;

· cmalonzo opened on Jun 3, 2026

[api-extractor] Unable to analyze the export "Seq" when bundling immutable v5

Status: Open.

#5807 In microsoft/rushstack;

· miguelcalderon opened on May 20, 2026

[rush] Should Rush CLI tracing start earlier?

Status: Open.

#5791 In microsoft/rushstack;

· kevin-y-ang opened on Apr 21, 2026

[rush] package using rig with sharding defined is required to define _phase:name:shard script, even if it doesn't have the phase

Status: Open.

#5789 In microsoft/rushstack;

· UberMouse opened on Apr 20, 2026

[rush] Support pnpm configDependencies and updateConfig in pnpmfile

Status: Open.

#5776 In microsoft/rushstack;

· njxue opened on Apr 16, 2026

[rush] Would be nice if Rush shipped with a command-line tool to gather information for bug reports

Status: Open.

#5761 In microsoft/rushstack;

· kgetz-arista opened on Apr 9, 2026

[rush] minimumReleaseAge in pnpm-config.json is written to package.json but pnpm only reads it from .npmrc/pnpm-workspace.yaml

Status: Open.

#5752 In microsoft/rushstack;

· calm-mlin opened on Apr 7, 2026