upgrade to yarn 2 and use resolutions to block vulnerable package versions (#2239)

* upgrade to yarn 2 and use resolutions to block vulnerable package versions

* rm deprecated .yarnrc

* rm yarnpath

* try committing yarn binary to repo

* try corepack enable for gha

* update run tests cmd

* rm yarnpath

* rm npm i yarn

* update all pipelines

* rm superfluous history types

Author: piyalbasu

.github/workflows/deployFreighterApiBeta.yml

@@ -19,6 +19,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: release/${{ github.event.inputs.release }}
+      - name: Enable Corepack
+        run: corepack enable
       - name: Build package
         uses: actions/setup-node@v4
         with:
@@ -41,7 +43,10 @@ jobs:
           SLACK_CHANNEL: team-wallet-eng
           SLACK_COLOR: "#70E1C8"
           SLACK_ICON: https://github.com/stellar/freighter/blob/master/docs/static/images/logo.png?size=48
-          SLACK_MESSAGE: "https://github.com/stellar/freighter/releases/tag/${{ github.event.inputs.release }}-beta.${{ github.event.inputs.version }}"
+          SLACK_MESSAGE:
+            "https://github.com/stellar/freighter/releases/tag/${{
+            github.event.inputs.release }}-beta.${{ github.event.inputs.version
+            }}"
           SLACK_TITLE: "@stellar/freighter-api beta has been deployed to npm!"
           SLACK_USERNAME: Freighter Administrative Assistant
           SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/deployFreighterApiProduction.yml

@@ -13,6 +13,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+      - name: Enable Corepack
+        run: corepack enable
       - name: Build package
         uses: actions/setup-node@v4
         with:

.github/workflows/runSnapshots.yml

@@ -26,14 +26,15 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - uses: actions/setup-node@v4
         with:
           node-version: 22
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.inputs.branch }}
-      - run: npm install -g yarn && yarn
+      - run: yarn
       - run: npx playwright install --with-deps chromium
       - run: yarn setup
       - run: yarn build:freighter-api

.github/workflows/runTests.yml

@@ -12,10 +12,11 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-      - run: npm install -g yarn && yarn
+      - run: yarn
       - run: npx playwright install --with-deps chromium
       - run: yarn setup
       - run: yarn build:freighter-api

.github/workflows/submitBeta.yml

@@ -76,6 +76,8 @@ jobs:
           value:
             ${{ github.event.inputs.release }}.${{ github.event.inputs.version
             }}
+      - name: Enable Corepack
+        run: corepack enable
       - name: Build extension
         uses: actions/setup-node@v4
         with:

.github/workflows/submitProduction.yml

@@ -52,6 +52,8 @@ jobs:
           file: ./extension/public/static/manifest/v3.json
           field: version
           value: ${{ steps.manifest_version.outputs.replaced }}
+      - name: Enable Corepack
+        run: corepack enable
       - name: Build extension
         uses: actions/setup-node@v4
         with:

.github/workflows/submitSafari.yml

@@ -53,6 +53,8 @@ jobs:
           file: ./extension/public/static/manifest/v3.json
           field: version
           value: ${{ steps.manifest_version.outputs.replaced }}
+      - name: Enable Corepack
+        run: corepack enable
       - name: Build extension
         uses: actions/setup-node@v4
         with:

.gitignore

@@ -21,6 +21,8 @@ node_modules
 .env.development.local
 .env.test.local
 .env.production.local
+.yarn
+.yarn/*
 
 npm-debug.log*
 yarn-debug.log*

.yarnrc

@@ -1 +1,3 @@
 enableScripts: false
+
+nodeLinker: node-modules