fix(PLT-3359): harden yarn configuration (#737)

* fix(PLT-3359): harden yarn configuration

* fix(PLT-3359): Update workflows

---------

Co-authored-by: David <david.salvador@typeform.com>
Co-authored-by: promiseNwafor <promise.nwafor@typeform.com>

Author: 3 people

.github/dependabot.yml

@@ -1,5 +1,4 @@
 version: 2
-
 registries:
   npm-github:
     type: npm-registry
@@ -10,7 +9,6 @@ registries:
     url: https://github.com
     username: x-access-token
     password: '${{ secrets.GH_TOKEN }}'
-
 updates:
   - package-ecosystem: npm
     schedule:
@@ -27,7 +25,14 @@ updates:
     registries:
       - npm-github
       - git-github
-
+    cooldown:
+      default-days: 7
+      exclude:
+        - '@typeform/*'
+    ignore:
+      - dependency-name: semantic-release
+        versions:
+          - '>=25.0.0'
   - package-ecosystem: github-actions
     schedule:
       interval: weekly

.github/workflows/pull-request.yml

@@ -76,6 +76,9 @@ jobs:
         if: steps.yarn-cache.outputs.cache-hit != 'true'
         run: yarn install --frozen-lockfile
 
+      - name: Install Cypress binary
+        run: yarn cypress install
+
       - run: yarn build
       - run: yarn test:functional
 

.github/workflows/visual.yml

@@ -33,6 +33,9 @@ jobs:
         if: steps.yarn-cache.outputs.cache-hit != 'true'
         run: yarn install --frozen-lockfile
 
+      - name: Install Cypress binary
+        run: yarn cypress install
+
       - run: yarn build
 
       - run: yarn test:visual

.yarnrc

@@ -0,0 +1,2 @@
+ignore-scripts true
+save-exact true