add --frozen-lockfile flag to yarn install ran in CI

Author: d-gubert

.github/actions/setup-node/action.yml

@@ -92,12 +92,12 @@ runs:
     - name: yarn install
       if: inputs.install && inputs.type == 'development'
       shell: bash
-      run: YARN_ENABLE_HARDENED_MODE=${{ inputs.HARDENED_MODE }} yarn
+      run: YARN_ENABLE_HARDENED_MODE=${{ inputs.HARDENED_MODE }} yarn --frozen-lockfile
 
     - name: yarn install production
       if: inputs.install && inputs.type == 'production'
       shell: bash
-      run: YARN_ENABLE_HARDENED_MODE=${{ inputs.HARDENED_MODE }} yarn workspaces focus --all --production
+      run: YARN_ENABLE_HARDENED_MODE=${{ inputs.HARDENED_MODE }} yarn workspaces focus --all --production --frozen-lockfile
 
     - name: restore yarn config file
       if: inputs.install

apps/meteor/ee/server/services/Dockerfile

@@ -23,7 +23,7 @@ COPY ./packages/models packages/models
 
 COPY ./apps/meteor/ee/server/services apps/meteor/ee/server/services
 
-RUN yarn install
+RUN yarn install --frozen-lockfile
 
 RUN yarn workspace @rocket.chat/core-typings run build \
     && yarn workspace @rocket.chat/rest-typings run build
@@ -76,7 +76,7 @@ RUN apk update && \
     # Update OpenSSL
     # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
-    yarn workspaces focus --production && \
+    yarn workspaces focus --production --frozen-lockfile && \
     rm -rf /var/cache/apk/* && \
     apk del build-dependencies
 

ee/apps/account-service/Dockerfile

@@ -86,7 +86,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22
 

ee/apps/authorization-service/Dockerfile

@@ -86,7 +86,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22
 

ee/apps/ddp-streamer/Dockerfile

@@ -89,7 +89,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22
 

ee/apps/omnichannel-transcript/Dockerfile

@@ -99,7 +99,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22
 

ee/apps/presence-service/Dockerfile

@@ -87,7 +87,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22
 

ee/apps/queue-worker/Dockerfile

@@ -99,7 +99,7 @@ ENV NODE_ENV=production
 
 WORKDIR /app/ee/apps/${SERVICE}
 
-RUN yarn workspaces focus --production
+RUN yarn workspaces focus --production --frozen-lockfile
 
 FROM node:22.16.0-alpine3.22