chore: unfork + Yarn v4 (#2180)

* copy all files from fork

* fix gha

* clean up deps a bit

* gut deps some more

* fix audit

* remove dotenv-safe

* remove more deps

* update prettier

* remove jimp and tinycolor2

* yarn v4

* remove unused script

* ci yarn

* don't gitignore yarn lockfile

* clean this up a bit more

* update test deps

* add `private` to package.json

* remove semantic.yml

Author: erickzhao

.github/CODEOWNERS

@@ -1 +1,2 @@
-* @electron/wg-ecosystem @toinane
+* @electron/wg-ecosystem
+* @toinane

.github/dependabot.yml

@@ -7,18 +7,13 @@ on:
       - edited
       - synchronize
 
-permissions: {}
 jobs:
   main:
-    permissions:
-      pull-requests: read # to analyze PRs (amannn/action-semantic-pull-request)
-      statuses: write # to mark status of analyzed PR (amannn/action-semantic-pull-request)
-
     name: Validate PR Title
     runs-on: ubuntu-latest
     steps:
       - name: semantic-pull-request
-        uses: amannn/action-semantic-pull-request@v5
+        uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.github/workflows/schedule.yml

@@ -2,25 +2,20 @@ name: CI
 
 on:
   pull_request:
-    branches:
-      - master
   push:
     branches:
-      - master
-
-permissions: {}
+      - main
 
 jobs:
   build:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: '12.x'
+          node-version: '24.x'
+          cache: 'yarn'
       - name: Install dependencies
-        run: 'npm ci'
+        run: 'yarn install --immutable'
       - name: Run tests
-        run: 'npm test'
+        run: 'yarn test'

.github/workflows/semantic.yml

@@ -2,10 +2,7 @@
 .env
 .npmrc
 *-256.png
-*-128.png
 *-32.png
 *-64.png
-index.json
 node_modules
-yarn.lock
-.gitsync_lock
+.yarn/install-state.gz

.github/workflows/test.yml

@@ -0,0 +1,10 @@
+enableScripts: false
+
+nodeLinker: node-modules
+
+npmMinimalAgeGate: 10080
+
+npmPreapprovedPackages:
+  - '@electron/*'
+
+yarnPath: .yarn/releases/yarn-4.10.3.cjs