How to handle .yarnrc.yml file when it contains secret info?

[Yohanna]

This a follow up to my earlier question here #2756. If my .yarnrc.yml contains auth info for private registries, then I can't commit it. At the same time .yarnrc.yml is needed to tell other project members which version of Yarn to use. What's the best way to handle situations like this?

Thank you :)

[arcanis]

Store passwords etc in your home folder's .yarnrc.yml (and only keep "public" settings in the project-local one).

[Yohanna]

Thanks, Maël. I'll try that.