chore(deps): update yarn (#507)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@yarnpkg/cli](https://redirect.github.com/yarnpkg/berry)
([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-cli))
| [`4.13.0` →
`4.14.1`](https://renovatebot.com/diffs/npm/@yarnpkg%2fcli/4.13.0/4.14.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@yarnpkg%2fcli/4.14.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@yarnpkg%2fcli/4.13.0/4.14.1?slim=true)
|
| [@yarnpkg/core](https://redirect.github.com/yarnpkg/berry)
([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-core))
| [`4.6.0` →
`4.7.0`](https://renovatebot.com/diffs/npm/@yarnpkg%2fcore/4.6.0/4.7.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@yarnpkg%2fcore/4.7.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@yarnpkg%2fcore/4.6.0/4.7.0?slim=true)
|
| [@yarnpkg/plugin-git](https://redirect.github.com/yarnpkg/berry)
([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/plugin-git))
| [`3.1.4` →
`3.2.0`](https://renovatebot.com/diffs/npm/@yarnpkg%2fplugin-git/3.1.4/3.2.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@yarnpkg%2fplugin-git/3.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@yarnpkg%2fplugin-git/3.1.4/3.2.0?slim=true)
|
| [yarn](https://redirect.github.com/yarnpkg/berry)
([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-cli))
| [`4.13.0` →
`4.14.1`](https://renovatebot.com/diffs/npm/yarn/4.13.0/4.14.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/@yarnpkg%2fcli/4.14.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@yarnpkg%2fcli/4.13.0/4.14.1?slim=true)
|

---

### Release Notes

<details>
<summary>yarnpkg/berry (@&#8203;yarnpkg/cli)</summary>

###
[`v4.14.1`](https://redirect.github.com/yarnpkg/berry/compare/38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba...72b4aa5d62a6c42dc765710ea66b6dd0f63f4941)

[Compare
Source](https://redirect.github.com/yarnpkg/berry/compare/38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba...72b4aa5d62a6c42dc765710ea66b6dd0f63f4941)

###
[`v4.14.0`](https://redirect.github.com/yarnpkg/berry/compare/81f3e15d2b6259cb64245411220fa1bf61242526...38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba)

[Compare
Source](https://redirect.github.com/yarnpkg/berry/compare/81f3e15d2b6259cb64245411220fa1bf61242526...38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba)

</details>

<details>
<summary>yarnpkg/berry (@&#8203;yarnpkg/core)</summary>

###
[`v4.7.0`](https://redirect.github.com/yarnpkg/berry/compare/81f3e15d2b6259cb64245411220fa1bf61242526...38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba)

[Compare
Source](https://redirect.github.com/yarnpkg/berry/compare/81f3e15d2b6259cb64245411220fa1bf61242526...38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba)

</details>

<details>
<summary>yarnpkg/berry (@&#8203;yarnpkg/plugin-git)</summary>

###
[`v3.2.0`](https://redirect.github.com/yarnpkg/berry/blob/HEAD/CHANGELOG.md#320)

[Compare
Source](https://redirect.github.com/yarnpkg/berry/compare/8385300e30af7dd7cbf9e8a9ecb8db730ba69bba...38ebf0014ba8c0356168d4bbd23c09dbb2bdc9ba)

Various improvements have been made in the core to improve performance.
Additionally:

##### Commands

- The `yarn workspaces foreach run` command is now able to run binaries.
- The `yarn npm info` command now supports displaying information about
a tagged version of a package (e.g. `yarn npm info vue@next`).
- A new `yarn explain` command has been added. It can be used to explain
an error code, or list all available error codes.
  - For example, try to run `yarn explain YN0002`.
- The `yarn npm publish` command now accepts a new `--otp` option, to
set the One-Time Password from the CLI.
- A better error message will also be shown when a query fails due to an
invalid OTP.
- `yarn upgrade-interactive` now has improved paging:
- Yarn will display as many suggestions as can fit in the viewport
(rather than a fixed-size list).
- The suggestions that fit in the viewport will be fetched in the
foreground and will load one-by-one.
- The suggestions that don't will be fetched in the background and will
be loaded in batches to increase responsiveness and reduce input lag.
- Most notably, you won't have to wait for all of the suggestions to be
fetched (which took a very long time before on large monorepos) before
you can start navigating through the list.

##### Installs

- The node-modules linker now tolerates if `node_modules` is a symbolic
link, and doesn't recreate it.
- On top of the `cpu` and `arch` fields, Yarn now support a new `libc`
field which can be used in tandem with `optionalDependencies` to avoid
downloading packages that have been linked against incompatible standard
libraries (we currently support two values: `glibc` and `musl`).
- The pnpm linker has received various improvements:
- It will now remove the `node_modules/.store` and `node_modules`
folders if they are empty.
  - It now supports running binaries of soft links.
- It will now create self-references for packages that don't depend on
other versions of themselves.
- It will now remove scope folders (e.g. `node_modules/@&#8203;yarnpkg`)
if they are empty or after removing a scoped dependency.
- All `.pnp.cjs` files with inlined data will now store the data in a
JSON string literal instead of an object literal [to improve startup
performance](https://v8.dev/blog/cost-of-javascript-2019#json).

##### Compatibility

- The shell now treats backslashes same as Bash (so it mostly ignore
them).
- Could potentially be a breaking change, but the old behavior caused
portability issues with a few packages, so we had to make this change
(especially since the portable shell is intended to help portability).
- The shell now supports `${FOO:+}`.
- The PnP filesystem now handles `read` and `readSync` using options.
- The PnP filesystem now handles UNC paths using forward slashes.
- The PnP filesystem now sets the proper `path` property on streams
created by `createReadStream()` and obtained from zip archives.
- The PnP runtime now throws an `ERR_REQUIRE_ESM` error when attempting
to require an ES Module, matching the default Node.js behaviour.
- Updates the PnP compatibility layer for TypeScript 4.6 Beta (it's
possible we'll need to publish another patch update once the 4.6 enters
stable).

##### Bugfixes

- `@yarnpkg/pnpify` now escapes paths correctly.
- The ESM loader is now enabled regardless of the entrypoint module
type, this fixes support for dynamic imports in commonjs modules when
the entrypoint is also commonjs.
- The ESM loader is now able to resolve relative imports with search
parameters.
- The `node` field inside the `npm_config_user_agent` Yarn sets will now
include a leading `v`.
- Yarn is now able to recover from a corrupted install state.
- Yarn is now able to migrate classic lockfiles containing
unconventional tarball URLs.
- The nm linker hoists portals after hoisting their dependencies first.
- Fixed a crash caused by a bad interaction between aliased packages and
peer dependencies.
- The ESBuild plugin will no longer allow access to Node.js builtins if
the `platform` isn't set to Node.
- SemVer ranges with build metadata can now be resolved.
- The `YARN_IGNORE_NODE` environment variable will now be parsed using
the same mechanism as env variable configuration settings (i.e. both
`1`/`0` and `true`/`false` will be accepted)

##### ZipFS Extension

- You can now unmount zip folders by right-clicking on their workspaces.

##### Miscellaneous Features

- Reporting for Git errors has been improved.
- The resolution step now has a progress indicator.
- The experimental ESM loader warning emitted by Node.js is now
suppressed.
- Private registries can now be authenticated using private keys and
certificates.
- A new `wrapNetworkRequest` hook now lets you wrap network requests
(for example to log them).

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Only on Sunday and Saturday (`* * * * 0,6`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/CycloneDX/cyclonedx-node-yarn).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: renovate[bot]

package.json

@@ -172,5 +172,5 @@
     "dogfooding": "node $PROJECT_CWD/bin/cyclonedx-yarn-cli.js"
   },
   "preferUnplugged": true,
-  "packageManager": "yarn@4.13.0"
+  "packageManager": "yarn@4.14.1"
 }

tests/_data/snapshots/plain_yarn4_zeroinstall.json.bin

@@ -1,3 +1,5 @@
+approvedGitRepositories: []
+
 enableScripts: false
 
 npmScopes:

tests/_data/snapshots/plain_yarn4_zeroinstall.xml.bin

@@ -13,5 +13,6 @@
   },
   "dependencies": {
     "@act/act": "npm:@jsr/act__act@^0.1.3"
-  }
+  },
+  "packageManager": "yarn@4.14.1"
 }