feat(node): Support virtual dependencies with Yarn2

Use the `--virtuals` option with `yarn info` to make the returned list
of `PackageInfo`'s include also the virtual dependencies.

Enhance the functional test to cover this case which runs into
`NoSuchElementException` at [1] when `--virtuals` is not provided.

Note: This commit originally intended to fix [2]. The functional test
      shows that it works for Yarn version 3.2.1 and experiments on a
      development machine have shown that it also works after migrating
      that `project-with-lockfile` to Yarn version 4.0.2 which is the
      version [2] targets. However, the new behavior has not yet been
      verified with using Corepack to bootstrap Yarn, which is the setup
      of [2], which is why the issue is left open.

[1]: https://github.com/oss-review-toolkit/ort/blob/2a31f79c600b9f0429ae23755149c32fd939526b/plugins/package-managers/node/src/main/kotlin/yarn2/Yarn2.kt#L136
[2]: #8058

Signed-off-by: Frank Viernau <[email protected]>

Author: fviernau

plugins/package-managers/node/src/funTest/assets/projects/synthetic/yarn2/project-with-lockfile-expected-output.yml

@@ -76,6 +76,7 @@ project:
     - id: "NPM::promise:7.3.1"
       dependencies:
       - id: "NPM::asap:2.0.6"
+    - id: "NPM:@react-native-community:netinfo:11.2.1"
   - name: "devDependencies"
     dependencies:
     - id: "NPM::cson:4.1.0"
@@ -1265,6 +1266,36 @@ packages:
     url: "https://github.com/TooTallNate/util-deprecate.git"
     revision: "475fb6857cd23fafff20c1be846c1350abf8e6d4"
     path: ""
+- id: "NPM:@react-native-community:netinfo:11.2.1"
+  purl: "pkg:npm/%40react-native-community/[email protected]"
+  authors:
+  - "Matt Oakes"
+  declared_licenses:
+  - "MIT"
+  declared_licenses_processed:
+    spdx_expression: "MIT"
+  description: "React Native Network Info API for iOS & Android"
+  homepage_url: "https://github.com/react-native-netinfo/react-native-netinfo#readme"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://registry.npmjs.org/@react-native-community/netinfo/-/netinfo-11.2.1.tgz"
+    hash:
+      value: "177f5409f2ac41fd51ede6e4994307bb0edb2178"
+      algorithm: "SHA-1"
+  vcs:
+    type: "Git"
+    url: "https://github.com/react-native-netinfo/react-native-netinfo.git"
+    revision: "736138c36eeebb0a320f8eccd263f909855f5c75"
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/react-native-netinfo/react-native-netinfo.git"
+    revision: "736138c36eeebb0a320f8eccd263f909855f5c75"
+    path: ""
 - id: "NPM:@types:node:22.9.0"
   purl: "pkg:npm/%40types/[email protected]"
   declared_licenses:

plugins/package-managers/node/src/funTest/assets/projects/synthetic/yarn2/project-with-lockfile-skip-excluded-scopes-expected-output.yml

@@ -76,6 +76,7 @@ project:
     - id: "NPM::promise:7.3.1"
       dependencies:
       - id: "NPM::asap:2.0.6"
+    - id: "NPM:@react-native-community:netinfo:11.2.1"
 packages:
 - id: "NPM::asap:2.0.6"
   purl: "pkg:npm/[email protected]"
@@ -850,6 +851,36 @@ packages:
     url: "https://github.com/TooTallNate/util-deprecate.git"
     revision: "475fb6857cd23fafff20c1be846c1350abf8e6d4"
     path: ""
+- id: "NPM:@react-native-community:netinfo:11.2.1"
+  purl: "pkg:npm/%40react-native-community/[email protected]"
+  authors:
+  - "Matt Oakes"
+  declared_licenses:
+  - "MIT"
+  declared_licenses_processed:
+    spdx_expression: "MIT"
+  description: "React Native Network Info API for iOS & Android"
+  homepage_url: "https://github.com/react-native-netinfo/react-native-netinfo#readme"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://registry.npmjs.org/@react-native-community/netinfo/-/netinfo-11.2.1.tgz"
+    hash:
+      value: "177f5409f2ac41fd51ede6e4994307bb0edb2178"
+      algorithm: "SHA-1"
+  vcs:
+    type: "Git"
+    url: "https://github.com/react-native-netinfo/react-native-netinfo.git"
+    revision: "736138c36eeebb0a320f8eccd263f909855f5c75"
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/react-native-netinfo/react-native-netinfo.git"
+    revision: "736138c36eeebb0a320f8eccd263f909855f5c75"
+    path: ""
 - id: "NPM:@types:node:22.9.0"
   purl: "pkg:npm/%40types/[email protected]"
   declared_licenses:

plugins/package-managers/node/src/funTest/assets/projects/synthetic/yarn2/project-with-lockfile/package.json

@@ -10,6 +10,7 @@
   "author": "The Author <[email protected]> (https://www.the.author.example/index.html)",
   "private": true,
   "dependencies": {
+    "@react-native-community/netinfo": "11.2.1",
     "cheerio": "1.0.0-rc.1",
     "long": "^3.2.0"
   },

plugins/package-managers/node/src/funTest/assets/projects/synthetic/yarn2/project-with-lockfile/yarn.lock

@@ -5,6 +5,15 @@ __metadata:
   version: 6
   cacheKey: 8
 
+"@react-native-community/netinfo@npm:11.2.1":
+  version: 11.2.1
+  resolution: "@react-native-community/netinfo@npm:11.2.1"
+  peerDependencies:
+    react-native: ">=0.59"
+  checksum: d54b75c6dc6d7a8cbb054d84ed9326e1715259137e333f26cd801c6b820996cacceb5a1cf3ee94b91866361c040b7a12eb78db3695b076e8f30c3403985f98d5
+  languageName: node
+  linkType: hard
+
 "@types/node@npm:*":
   version: 22.9.0
   resolution: "@types/node@npm:22.9.0"
@@ -362,6 +371,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "yarn2-package-with-lockfile@workspace:."
   dependencies:
+    "@react-native-community/netinfo": 11.2.1
     cheerio: 1.0.0-rc.1
     cson: ~4.1.0
     long: ^3.2.0

plugins/package-managers/node/src/main/kotlin/yarn2/Yarn2.kt

@@ -157,6 +157,7 @@ class Yarn2(override val descriptor: PluginDescriptor = Yarn2Factory.descriptor,
             "--all",
             "--recursive",
             "--manifest",
+            "--virtuals",
             "--json",
             workingDir = workingDir,
             environment = mapOf("YARN_NODE_LINKER" to "pnp")