test: remove Yarn Modern approvedGitRepositories

[MikeMcC399]

Situation

The configuration files in the Yarn Modern example directories:

• examples/yarn-modern/.yarnrc.yml
• examples/yarn-modern-pnp/.yarnrc.yml

include a section that was automatically added by Yarn migration in preparation of PR #1728:

approvedGitRepositories:
  - '**'

• Yarn added this for backwards compatibility, however the dependencies for Yarn Modern examples do not require to be installed from a GitHub repository and allowing it is a security risk.
• An additional issue is a conflict between Yarn and Prettier. yarn set version latest changes from single quotes to double quotes, whereas Prettier requires single quotes. This is separately reported in [Bug?]: approvedGitRepositories overwritten with doublequotes yarnpkg/berry#7138

Change

In the Yarn Modern example configuration files:

• examples/yarn-modern/.yarnrc.yml
• examples/yarn-modern-pnp/.yarnrc.yml

remove the section which allows installing dependencies from arbitrary repositories instead of from the npm registry:

approvedGitRepositories:
  - '**'

Verification

git clean -xfd
npm install corepack@latest -g
corepack enable yarn
corepack install yarn@latest -g

cd examples

cd yarn-modern
yarn install
cd ..

cd yarn-modern-pnp
yarn install
cd ..

cd ..

./scripts/update-cypress-latest-yarn.sh

Confirm no errors and no uncommitted changes produced.

---

Note

Low Risk
Low risk config-only change limited to example Yarn settings; it mainly reduces an overly permissive install allowance and shouldn’t affect installs that use registry dependencies.

Overview
Removes approvedGitRepositories: ['**'] from the examples/yarn-modern and examples/yarn-modern-pnp Yarn configs, eliminating the ability for these examples to install dependencies from arbitrary git repositories.

All other Yarn settings in these examples remain unchanged (e.g., enableScripts, and nodeLinker for yarn-modern).

^{Reviewed by Cursor Bugbot for commit bdd51ba. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cypress-app-bot]

• Create a Draft Pull Request if your PR is not ready for review. Mark the PR as Ready for Review when you're ready for a Cypress team member to review the PR.