fix: sanitize .yarnrc.yml in publish-preview to prevent token exfiltration#227

Merged

cryptodev-2s merged 2 commits intomainfrom

fix/preview-publish-security

Mar 17, 2026

Commits on Mar 17, 2026

fix: sanitize .yarnrc.yml scoped registry overrides in publish-preview
cryptodev-2s
committed
fix: also strip npmPublishRegistry from .yarnrc.yml
cryptodev-2s
committed