Bump release

Recently, Node.js changed the way node modules are installed to allow for better parallel functionality and easier unbundling of certain parts of Node.js.

Previously, Node.js was using a symlink, %{_libdir}/node_modules, which pointed to a versioned path, e.g., %{_libdir}/node_modules_22.

This has changed to using a global %{_libdir}/node_modules static shared folder for generic modules and %{_libdir}/node_modules_XX for version-specific modules.

This change is better described in the Fedora change proposal wiki: https://fedoraproject.org/wiki/Changes/NodejsNodeModulesPath.

This also needed to be reflected in nodejs-packaging macros, which forces a rebuild of dependent packages.

.gitignore

@@ -15,3 +15,4 @@
 /yarnpkg-v1.22.22-bundled-20250624.tar.gz
 /yarnpkg-v1.22.22-bundled-20250728.tar.gz
 /yarnpkg-v1.22.22-bundled-20250930.tar.gz
+/yarnpkg-v1.22.22-bundled-20251203.tar.gz

sources

@@ -1 +1 @@
-SHA512 (yarnpkg-v1.22.22-bundled-20250930.tar.gz) = c6ed6537c82961002eefd2b6051abc18ea29e5ece420ca8c6df0a7ec686e564e32f75dac97092e92e21c95a0d15ee278ad2f06d1cd832223f16cfd439160d502
+SHA512 (yarnpkg-v1.22.22-bundled-20251203.tar.gz) = afcf0f4e3719a1d41e60b8e9a9633291161f3a7b04b67d85b3f12cfd9dce8abf9fef3f7be2eab90f3e8efa49e564342175a20ca1e305665a1d453a116b1f79d2

yarnpkg.spec

@@ -8,11 +8,11 @@
 # don't require bundled modules
 %global __requires_exclude_from ^(%{nodejs_sitelib}/yarn/lib/.*|%{nodejs_sitelib}/yarn/bin/yarn(|\\.cmd|\\.ps1|pkg.*))$
 
-%global bundledate 20250930
+%global bundledate 20251203
 
 Name:           yarnpkg
 Version:        1.22.22
-Release:        12%{?dist}
+Release:        14%{?dist}
 Summary:        Fast, reliable, and secure dependency management.
 License:        BSD-2-Clause
 URL:            https://github.com/yarnpkg/yarn
@@ -92,6 +92,12 @@ if [[ $(%{buildroot}%{_bindir}/yarn --version) == %{version} ]] ; then echo PASS
 
 
 %changelog
+* Wed Dec 03 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-14
+- Bump release
+
+* Wed Dec 03 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-13
+- Refresh bundle, fixes CVE-2025-64756
+
 * Tue Sep 30 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-12
 - Regenerate bundle, fixes CVE-2025-59343
 - Patch out eslint and commitizen devDependencies to reduce dependencies