MetaMask · tommasini · Apr 7, 2025 · Apr 7, 2025 · Apr 7, 2025 · Apr 7, 2025
diff --git a/.depcheckrc.yml b/.depcheckrc.yml
@@ -40,7 +40,6 @@ ignores:
   - 'eslint-plugin-react-native'
   - 'execa'
   - 'fbjs-scripts'
-  - 'improved-yarn-audit'
   - 'jetifier'
   - 'metro-react-native-babel-preset'
   - 'octonode'
@@ -85,10 +84,9 @@ ignores:
   - 'app'
   - 'i18n-js'
   - 'images'
-  
+
   ## Expo
   - '@config-plugins/detox'
   - 'cross-spawn'
   - 'expo-build-properties'
   - 'expo-dev-client'
-
diff --git a/.github/scripts/package.json b/.github/scripts/package.json
@@ -25,7 +25,7 @@
     "ts-node": "^10.5.0",
     "typescript": "~5.4.5"
   },
-  "packageManager": "yarn@1.22.22",
+  "packageManager": "yarn@3.8.7",
   "lavamoat": {
     "allowScripts": {
       "@lavamoat/preinstall-always-fail": false,

diff --git a/.github/workflows/add-release-label.yml b/.github/workflows/add-release-label.yml
@@ -14,6 +14,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
             fetch-depth: 0 # This is needed to checkout all branches
 

diff --git a/.github/workflows/bitrise-e2e-gate.yml b/.github/workflows/bitrise-e2e-gate.yml
@@ -22,7 +22,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
-
+      - name: Enable Corepack
+          run: corepack enable
       - name: Set up Node.js
         uses: actions/setup-node@v3
         with:

diff --git a/.github/workflows/check-template-and-add-labels.yml b/.github/workflows/check-template-and-add-labels.yml
@@ -12,6 +12,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
           fetch-depth: 1 # This retrieves only the latest commit.
 

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -11,6 +11,8 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -34,6 +36,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -52,6 +56,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -71,6 +77,8 @@ jobs:
           - test:tgz-check
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -93,6 +101,8 @@ jobs:
         shard: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10]
     steps:
       - uses: actions/checkout@v3
+    - name: Enable Corepack
+        run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -126,6 +136,8 @@ jobs:
     needs: unit-tests
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -159,6 +171,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'
@@ -202,6 +216,8 @@ jobs:
     needs: merge-unit-tests
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
         with:
           fetch-depth: 0 # SonarCloud needs a full checkout to perform necessary analysis
       - uses: actions/setup-node@v3
@@ -243,6 +259,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
       - name: SonarCloud Quality Gate Status
         id: sonar-status
         env:

diff --git a/.github/workflows/close-bug-report.yml b/.github/workflows/close-bug-report.yml
@@ -14,6 +14,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
             fetch-depth: 1 # This retrieves only the latest commit.
 

diff --git a/.github/workflows/create-cherry-pick-pr.yml b/.github/workflows/create-cherry-pick-pr.yml
@@ -20,6 +20,8 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
         with:
           fetch-depth: 0
           ref: ${{ vars.branch_name }}

diff --git a/.github/workflows/create-release-draft.yml b/.github/workflows/create-release-draft.yml
@@ -15,6 +15,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
           ref: ${{ github.ref }}  # Explicitly specifies the tag ref
 

diff --git a/.github/workflows/create-release-pr.yml b/.github/workflows/create-release-pr.yml
@@ -26,6 +26,8 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
         with:
           # This is to guarantee that the most recent tag is fetched.
           # This can be configured to a more reasonable value by consumers.

diff --git a/.github/workflows/crowdin-branch-pr-ready-for-translation.yml b/.github/workflows/crowdin-branch-pr-ready-for-translation.yml
@@ -30,6 +30,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
           ref: main
 
@@ -43,6 +45,8 @@ jobs:
 
       - name: Checkout Branch and push to crowdin
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
           ref: ${{ steps.extract_current_branch.outputs.branch }}
       - name: Crowdin sources push

diff --git a/.github/workflows/crowdin-pull-branch-pr-completed-translations.yml b/.github/workflows/crowdin-pull-branch-pr-completed-translations.yml
@@ -35,7 +35,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
-
+      - name: Enable Corepack
+          run: corepack enable
       - name: Get Branches with Label
         id: get-branches
         run: |

diff --git a/.github/workflows/crowdin-reusable-translation-download.yml b/.github/workflows/crowdin-reusable-translation-download.yml
@@ -35,6 +35,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
         with:
           ref: ${{ inputs.branch }}
 

diff --git a/.github/workflows/crowdin-upload-both-sources-translations.yml b/.github/workflows/crowdin-upload-both-sources-translations.yml
@@ -17,7 +17,8 @@ jobs:
         id: extract_current_branch
       - name: Checkout
         uses: actions/checkout@v3
-
+      - name: Enable Corepack
+          run: corepack enable
       - name: Crowdin push
         uses: crowdin/github-action@c953b17499daa6be3e5afbf7a63616fb02d8b18d
         with:

diff --git a/.github/workflows/crowdin_action.yml b/.github/workflows/crowdin_action.yml
@@ -19,7 +19,8 @@ jobs:
 
     - name: Checkout
       uses: actions/checkout@v3
-
+      - name: Enable Corepack
+          run: corepack enable
     - name: crowdin action
       uses: crowdin/github-action@a3160b9e5a9e00739392c23da5e580c6cabe526d
       with:

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -15,6 +15,8 @@ jobs:
         uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
 
       - uses: actions/checkout@v3
+      - name: Enable Corepack
+          run: corepack enable
 
       - name: Build and load
         uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5

diff --git a/.github/workflows/fitness-functions.yml b/.github/workflows/fitness-functions.yml
@@ -11,6 +11,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        - name: Enable Corepack
+            run: corepack enable
         with:
           fetch-depth: 0
 

diff --git a/.github/workflows/run-bitrise-e2e-check.yml b/.github/workflows/run-bitrise-e2e-check.yml
@@ -24,7 +24,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
-
+      - name: Enable Corepack
+          run: corepack enable
       - name: Set up Node.js
         uses: actions/setup-node@v3
         with:

diff --git a/.github/workflows/update-latest-build-version.yml b/.github/workflows/update-latest-build-version.yml
@@ -28,6 +28,8 @@ jobs:
           id-token: write
         steps:
         - uses: actions/checkout@v3
+        - name: Enable Corepack
+            run: corepack enable
           with:
             fetch-depth: 0
             ref: ${{ inputs.base-branch }}

diff --git a/.gitignore b/.gitignore
@@ -139,3 +139,6 @@ expo-env.d.ts
 
 # CICD
 github-tools/
+
+# Yarn
+.yarn/*
diff --git a/.iyarc b/.iyarc
diff --git a/.yarnrc b/.yarnrc
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -0,0 +1,9 @@
+enableScripts: false
+nodeLinker: node-modules
+npmAuditIgnoreAdvisories: [
+### Advisories:
+# Issue: Regular Expression Denial of Service (ReDoS) in cross-spawn
+# URL - https://github.com/advisories/GHSA-3xgq-45jj-v275
+# The affected versions <6.0.6, is only present in wdio which is a dev dependency
+1100562,
+]
diff --git a/bitrise.yml b/bitrise.yml
@@ -2212,7 +2212,7 @@ app:
       NODE_VERSION: 20.18.0
     - opts:
         is_expand: false
-      YARN_VERSION: 1.22.22
+      YARN_VERSION: 3.8.7
     - opts:
         is_expand: false
       COREPACK_VERSION: 0.28.0
-Original file line number
+Diff line change
@@ Expand Up / @@ -139,3 +139,6 @@ expo-env.d.ts @@
     # CICD
     github-tools/
+    # Yarn
+    .yarn/*