From bdeb8b1fbd7fbe9d364855bb7a365f3c844c5792 Mon Sep 17 00:00:00 2001
From: Joe Heffernan <interim17@gmail.com>
Date: Wed, 11 Feb 2026 08:10:54 -0800
Subject: [PATCH 1/3] add workflow for installing dependencies with yarn as
 package manager

---
 .github/workflows/setup_yarn.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/workflows/setup_yarn.yml

diff --git a/.github/workflows/setup_yarn.yml b/.github/workflows/setup_yarn.yml
new file mode 100644
index 0000000..1a31554
--- /dev/null
+++ b/.github/workflows/setup_yarn.yml
@@ -0,0 +1,30 @@
+name: Setup Yarn
+
+on:
+  workflow_call:
+    inputs:
+      node-version:
+        required: false
+        default: '24'
+        type: string
+      yarn-version:
+        required: false
+        default: '1.22.22'
+        type: string
+
+jobs:
+  setup:
+    name: Setup Yarn
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.node-version }}
+          cache: "yarn"
+      - name: Install yarn at specific version
+        run: npm install -g yarn@${{ inputs.yarn-version }}
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile #--frozen-lockfile ensures that the exact versions in yarn.lock are installed

From 0ef9cdd56fc2d30d3f42daa52667a10d65a34a83 Mon Sep 17 00:00:00 2001
From: Joe Heffernan <interim17@gmail.com>
Date: Thu, 12 Feb 2026 16:34:35 -0800
Subject: [PATCH 2/3] use v6.2.0 of setup node action and reference with hash

---
 .github/workflows/setup_yarn.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/setup_yarn.yml b/.github/workflows/setup_yarn.yml
index 1a31554..4a4e7be 100644
--- a/.github/workflows/setup_yarn.yml
+++ b/.github/workflows/setup_yarn.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Checkout repo
         uses: actions/checkout@v4
       - name: Setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0
         with:
           node-version: ${{ inputs.node-version }}
           cache: "yarn"

From a28a89ce3fca6d2c94650ad9778bdeedfa7d42bc Mon Sep 17 00:00:00 2001
From: Joe Heffernan <interim17@gmail.com>
Date: Thu, 12 Feb 2026 16:36:48 -0800
Subject: [PATCH 3/3] make node and npm version inputs optional in setup_npm

---
 .github/workflows/setup_npm.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/setup_npm.yml b/.github/workflows/setup_npm.yml
index a0d66b6..4e97bf2 100644
--- a/.github/workflows/setup_npm.yml
+++ b/.github/workflows/setup_npm.yml
@@ -4,11 +4,11 @@ on:
   workflow_call:
     inputs:
       node-version:
-        required: true
+        required: false
         default: '24' # >= 24 required for OIDC token support
         type: string
       npm-version:
-        required: true
+        required: false
         default: '11.9.0' # >= v11.5.1 required for OIDC token support
         type: string