build: harden yarn configuration

Author: erickzhao

.yarn/releases/yarn-4.1.0.cjs

@@ -1,3 +1,11 @@
+enableScripts: false
+
 nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-4.1.0.cjs
+npmMinimalAgeGate: 10080
+
+npmPreapprovedPackages:
+  - "@electron/*"
+  - "electron"
+
+yarnPath: .yarn/releases/yarn-4.10.3.cjs

.yarn/releases/yarn-4.10.3.cjs

@@ -54,5 +54,10 @@
     "vitest": "^3.2.4",
     "xvfb-maybe": "^0.2.1"
   },
-  "packageManager": "yarn@4.1.0"
+  "packageManager": "yarn@4.10.3+sha512.c38cafb5c7bb273f3926d04e55e1d8c9dfa7d9c3ea1f36a4868fa028b9e5f72298f0b7f401ad5eb921749eb012eb1c3bb74bf7503df3ee43fd600d14a018266f",
+  "dependenciesMeta": {
+    "electron": {
+      "built": true
+    }
+  }
 }

.yarnrc.yml

@@ -20,6 +20,9 @@ __metadata:
     typescript: "npm:^5.5.4"
     vitest: "npm:^3.2.4"
     xvfb-maybe: "npm:^0.2.1"
+  dependenciesMeta:
+    electron:
+      built: true
   bin:
     asar: ./bin/asar.mjs
   languageName: unknown
@@ -2379,11 +2382,11 @@ __metadata:
 
 "typescript@patch:typescript@npm%3A^5.5.4#optional!builtin<compat/typescript>":
   version: 5.5.4
-  resolution: "typescript@patch:typescript@npm%3A5.5.4#optional!builtin<compat/typescript>::version=5.5.4&hash=d69c25"
+  resolution: "typescript@patch:typescript@npm%3A5.5.4#optional!builtin<compat/typescript>::version=5.5.4&hash=379a07"
   bin:
     tsc: bin/tsc
     tsserver: bin/tsserver
-  checksum: 10c0/10dd9881baba22763de859e8050d6cb6e2db854197495c6f1929b08d1eb2b2b00d0b5d9b0bcee8472f1c3f4a7ef6a5d7ebe0cfd703f853aa5ae465b8404bc1ba
+  checksum: 10c0/73409d7b9196a5a1217b3aaad929bf76294d3ce7d6e9766dd880ece296ee91cf7d7db6b16c6c6c630ee5096eccde726c0ef17c7dfa52b01a243e57ae1f09ef07
   languageName: node
   linkType: hard