chore: Bump Yarn to 4.10.3 and configure NPM age gate

.yarnrc.yml

@@ -18,4 +18,14 @@ plugins:
   - path: .yarn/plugins/local/plugin-workspaces-filter.js
   - path: .yarn/plugins/local/plugin-lifecycle-scripts.js
 
-yarnPath: .yarn/releases/yarn-4.4.1.cjs
+yarnPath: .yarn/releases/yarn-4.10.3.cjs
+
+# Configure the NPM minimal age gate to 3 days, meaning packages must be at
+# least 3 days old to be installed.
+npmMinimalAgeGate: 4320 # 3 days (in minutes)
+
+# Override the minimal age gate, allowing certain packages to be installed
+# regardless of their publish age.
+npmPreapprovedPackages:
+  - '@metamask/*'
+  - '@lavamoat/*'

package.json

@@ -122,7 +122,7 @@
     "typescript-eslint": "^8.6.0",
     "vite": "^6.2.7"
   },
-  "packageManager": "yarn@4.4.1",
+  "packageManager": "yarn@4.10.3",
   "engines": {
     "node": "^20 || >=22"
   },

packages/snaps-execution-environments/lavamoat/build-system/policy.json

@@ -818,7 +818,7 @@
       },
       "packages": {
         "ts-loader>micromatch>braces": true,
-        "ts-loader>micromatch>picomatch": true
+        "depcheck>readdirp>picomatch": true
       }
     },
     "webpack>mime-types": {
@@ -860,7 +860,7 @@
         "process": true
       }
     },
-    "ts-loader>micromatch>picomatch": {
+    "depcheck>readdirp>picomatch": {
       "builtin": {
         "path.basename": true,
         "path.sep": true

yarn.config.cjs

@@ -241,7 +241,7 @@ module.exports = defineConfig({
       if (isChildWorkspace) {
         workspace.unset('packageManager');
       } else {
-        expectWorkspaceField(workspace, 'packageManager', 'yarn@4.4.1');
+        expectWorkspaceField(workspace, 'packageManager', 'yarn@4.10.3');
       }
 
       // All packages must specify a minimum Node.js version of 18.18.