From 828596318bf4923666cccbb3037764b41b86bc33 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 11:25:35 +0200
Subject: [PATCH 01/33] ci: debug package managers

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 44 ++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 50100ada..c7963428 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -52,6 +52,8 @@ jobs:
           - os: macos-latest # macos-latest has issues with node14
             node-version: "14"
     steps:
+      - name: test npm
+        run: npm --version
       - name: Checkout
         # see https://github.com/actions/checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -102,6 +104,29 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false  # must not usecaches. we want the latest, always
+      - name: Remove Yarn 1 from PATH (Windows)
+        if: ${{ runner.os == 'Windows' }}
+        shell: pwsh
+        run: |
+          Set-PSDebug -Trace 1
+          # find yarn
+          Get-Alias yarn -ErrorAction SilentlyContinue
+          Get-ChildItem Function:\yarn -ErrorAction SilentlyContinue
+          Get-Command yarn
+          # remove yarn
+          Remove-Item Alias:\yarn -Verbose -ErrorAction SilentlyContinue
+          Remove-Item Function:\yarn -Verbose -ErrorAction SilentlyContinue
+          Remove-Item "C:\npm\prefix\yarn*" -Verbose -Force -ErrorAction SilentlyContinue
+          # verify
+          Get-Alias yarn -ErrorAction SilentlyContinue
+          Get-ChildItem Function:\yarn -ErrorAction SilentlyContinue
+          Get-Command yarn -ErrorAction SilentlyContinue
+      - name: enable yarn
+        run: |-
+          corepack enable yarn
+          corepack prepare yarn@latest --activate
+          yarn --version
+        working-directory: ..  # prevent evaluation of package.json
       - name: install project
         run: > 
           yarn install
@@ -148,11 +173,30 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false  # must not usecaches. we want the latest, always
+      - name: Remove PNPM from PATH (Windows)
+        if: ${{ runner.os == 'Windows' }}
+        shell: pwsh
+        run: |
+          Set-PSDebug -Trace 1
+          # find pnpm
+          Get-Alias pnpm -ErrorAction SilentlyContinue
+          Get-ChildItem Function:\pnpm -ErrorAction SilentlyContinue
+          Get-Command pnpm -ErrorAction SilentlyContinue
+          # remove pnpm
+          Remove-Item Alias:\pnpm -Verbose -ErrorAction SilentlyContinue
+          Remove-Item Function:\pnpm -Verbose -ErrorAction SilentlyContinue
+          Remove-Item "C:\npm\prefix\pnpm*" -Verbose -Force -ErrorAction SilentlyContinue
+          # verify
+          Get-Alias pnpm -ErrorAction SilentlyContinue
+          Get-ChildItem Function:\pnpm -ErrorAction SilentlyContinue
+          Get-Command pnpm -ErrorAction SilentlyContinue
       - name: setup pnpm
         ## see https://github.com/pnpm/action-setup
         uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           version: ${{ matrix.pnpm-version }}
+      - name: test pnpm
+        run: pnpm --version
       - name: install project
         run: >
           pnpm install

From 4a6c6510bfad5edd3b3134d81c378711c7a96cdf Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:06:36 +0200
Subject: [PATCH 02/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index c7963428..ba68bfdb 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -131,6 +131,8 @@ jobs:
         run: > 
           yarn install
           --inline-builds
+        env:
+          YARN_ENABLE_HARDENED_MODE: "0"
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From dda7a3d91646804113027b89407765cdfe3031d7 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:08:20 +0200
Subject: [PATCH 03/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index ba68bfdb..cb895139 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -124,7 +124,7 @@ jobs:
       - name: enable yarn
         run: |-
           corepack enable yarn
-          corepack prepare yarn@latest --activate
+          corepack prepare yarn --activate
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: install project

From 6f5a5a32c0d751d2a9f28e09abe2aaf0965e1e48 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:12:05 +0200
Subject: [PATCH 04/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index cb895139..63cf3731 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -130,9 +130,8 @@ jobs:
       - name: install project
         run: > 
           yarn install
+          --immutable
           --inline-builds
-        env:
-          YARN_ENABLE_HARDENED_MODE: "0"
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 06310f557607f841468be6a46223915523ba7285 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:15:56 +0200
Subject: [PATCH 05/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 63cf3731..6f3fe42f 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -132,6 +132,8 @@ jobs:
           yarn install
           --immutable
           --inline-builds
+        env:
+          YARN_ENABLE_HARDENED_MODE: "0"
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From ab594c8189c82de9342818a66c97752ae38da8cf Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:17:19 +0200
Subject: [PATCH 06/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 6f3fe42f..63b1e33c 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -124,7 +124,7 @@ jobs:
       - name: enable yarn
         run: |-
           corepack enable yarn
-          corepack prepare yarn --activate
+          corepack prepare --activate yarn@latest
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: install project

From a812f86a1e3c9fe905a18291eeb8b33ad740a372 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:20:50 +0200
Subject: [PATCH 07/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 63b1e33c..c26113c6 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -124,7 +124,7 @@ jobs:
       - name: enable yarn
         run: |-
           corepack enable yarn
-          corepack prepare --activate yarn@latest
+          corepack install --global yarn@stable
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: install project

From e6466a14f299f0f79c19fdfd3783a366933537ff Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:22:44 +0200
Subject: [PATCH 08/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index c26113c6..afe60cbc 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -124,7 +124,7 @@ jobs:
       - name: enable yarn
         run: |-
           corepack enable yarn
-          corepack install --global yarn@stable
+          corepack prepare --activate yarn@stable
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: install project

From 15f333c6963e800d4b2fcb2a2f4b6f7089f8cca8 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:23:54 +0200
Subject: [PATCH 09/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index afe60cbc..fd6d6f85 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -122,9 +122,11 @@ jobs:
           Get-ChildItem Function:\yarn -ErrorAction SilentlyContinue
           Get-Command yarn -ErrorAction SilentlyContinue
       - name: enable yarn
+        shell: bash
         run: |-
+          set -x
           corepack enable yarn
-          corepack prepare --activate yarn@stable
+          corepack install --global yarn@stable || corepack prepare --activate yarn@stable
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: install project

From 465ee44f075cfb29ee9df25b0872eb9fe78c566d Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:26:40 +0200
Subject: [PATCH 10/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index fd6d6f85..73295669 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -129,6 +129,9 @@ jobs:
           corepack install --global yarn@stable || corepack prepare --activate yarn@stable
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
+      - name: create dummy lock
+        shell: bash
+        run: echo  > yarn.lock
       - name: install project
         run: > 
           yarn install

From 1e1cc2ccc09c4a8565d164d44915ab360cf52b7b Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:30:13 +0200
Subject: [PATCH 11/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 73295669..f6a35682 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -126,7 +126,7 @@ jobs:
         run: |-
           set -x
           corepack enable yarn
-          corepack install --global yarn@stable || corepack prepare --activate yarn@stable
+          corepack install --global yarn@stable || corepack prepare --activate yarn
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: create dummy lock

From b3e007a25fecd15e3466e9a39b62c24707c2e999 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:35:06 +0200
Subject: [PATCH 12/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index f6a35682..4da194fc 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -126,7 +126,7 @@ jobs:
         run: |-
           set -x
           corepack enable yarn
-          corepack install --global yarn@stable || corepack prepare --activate yarn
+          corepack install --global yarn@stable || corepack prepare --activate yarn@latest
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: create dummy lock

From 8c64b57487549a234c093b836f948cd695ed6573 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 12:36:59 +0200
Subject: [PATCH 13/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 4da194fc..73295669 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -126,7 +126,7 @@ jobs:
         run: |-
           set -x
           corepack enable yarn
-          corepack install --global yarn@stable || corepack prepare --activate yarn@latest
+          corepack install --global yarn@stable || corepack prepare --activate yarn@stable
           yarn --version
         working-directory: ..  # prevent evaluation of package.json
       - name: create dummy lock

From a2b24169af9cd16805e15f91f0a99e26d4cb0239 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:03:58 +0200
Subject: [PATCH 14/33] yarn

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 73295669..43827073 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -52,6 +52,22 @@ jobs:
           - os: macos-latest # macos-latest has issues with node14
             node-version: "14"
     steps:
+      - name: bump npm
+        shell: bash
+        env:
+          NODE_VERSION: '${{ matrix.node-version }}'
+        run:
+          case "$NODE_VERSION" in
+          '26' )
+          npm install -g npm@latest
+          ;;
+          '24')
+          npm i -g npm@^11
+          ;;
+          '20' | '20.18.0')
+          npm i -g npm@^10
+          ;;
+          esac
       - name: test npm
         run: npm --version
       - name: Checkout
@@ -124,10 +140,19 @@ jobs:
       - name: enable yarn
         shell: bash
         run: |-
-          set -x
+          set -eux
           corepack enable yarn
-          corepack install --global yarn@stable || corepack prepare --activate yarn@stable
+          case "$NODE_VERSION" in
+          '14' | '16' )
+          corepack prepare --activate yarn@latest
+          ;;
+          '*')
+          corepack install --global yarn@stable
+          ;;
+          esac
           yarn --version
+        env:
+          NODE_VERSION: ${{ matrix.node-version }}
         working-directory: ..  # prevent evaluation of package.json
       - name: create dummy lock
         shell: bash

From 8d701ce80e486e78a4aa366e2b54d47d376da025 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:05:45 +0200
Subject: [PATCH 15/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 43827073..ad759c1a 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -52,6 +52,16 @@ jobs:
           - os: macos-latest # macos-latest has issues with node14
             node-version: "14"
     steps:
+      - name: Checkout
+        # see https://github.com/actions/checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - name: Setup Node.js ${{ matrix.node-version }}
+        # see https://github.com/actions/setup-node
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        with:
+          node-version: ${{ matrix.node-version }}
+          package-manager-cache: false  # must not usecaches. we want the latest, always
+
       - name: bump npm
         shell: bash
         env:
@@ -68,17 +78,7 @@ jobs:
           npm i -g npm@^10
           ;;
           esac
-      - name: test npm
-        run: npm --version
-      - name: Checkout
-        # see https://github.com/actions/checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - name: Setup Node.js ${{ matrix.node-version }}
-        # see https://github.com/actions/setup-node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
-        with:
-          node-version: ${{ matrix.node-version }}
-          package-manager-cache: false  # must not usecaches. we want the latest, always
+          npm --version
       - name: install project
         run: >
           npm install

From 8c56acaaf379f8a5726cb22c7e14c2deb581da4c Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:09:40 +0200
Subject: [PATCH 16/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index ad759c1a..b78fc3ad 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -61,12 +61,11 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false  # must not usecaches. we want the latest, always
-
       - name: bump npm
         shell: bash
         env:
           NODE_VERSION: '${{ matrix.node-version }}'
-        run:
+        run: |
           case "$NODE_VERSION" in
           '26' )
           npm install -g npm@latest

From dee9f82a8f25f6bc0dc7642ccdb71c45f045059a Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:10:42 +0200
Subject: [PATCH 17/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index b78fc3ad..71ce9d3a 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -66,16 +66,17 @@ jobs:
         env:
           NODE_VERSION: '${{ matrix.node-version }}'
         run: |
+          set -eux
           case "$NODE_VERSION" in
           '26' )
-          npm install -g npm@latest
-          ;;
+            npm install -g npm@latest
+            ;;
           '24')
-          npm i -g npm@^11
-          ;;
+            npm i -g npm@^11
+            ;;
           '20' | '20.18.0')
-          npm i -g npm@^10
-          ;;
+            npm i -g npm@^10
+            ;;
           esac
           npm --version
       - name: install project

From fdb3ae2d87f42dc32d72434da5c342e952890f09 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:15:49 +0200
Subject: [PATCH 18/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 71ce9d3a..ef242473 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -68,15 +68,15 @@ jobs:
         run: |
           set -eux
           case "$NODE_VERSION" in
-          '26' )
-            npm install -g npm@latest
-            ;;
-          '24')
-            npm i -g npm@^11
-            ;;
-          '20' | '20.18.0')
-            npm i -g npm@^10
-            ;;
+            '26' )
+              npm install -g npm@latest
+              ;;
+            '24')
+              npm i -g npm@^11
+              ;;
+            '20' | '20.18.0')
+              npm i -g npm@^10
+              ;;
           esac
           npm --version
       - name: install project
@@ -139,16 +139,16 @@ jobs:
           Get-Command yarn -ErrorAction SilentlyContinue
       - name: enable yarn
         shell: bash
-        run: |-
+        run: |
           set -eux
           corepack enable yarn
           case "$NODE_VERSION" in
-          '14' | '16' )
-          corepack prepare --activate yarn@latest
-          ;;
-          '*')
-          corepack install --global yarn@stable
-          ;;
+            '14' | '16' )
+              corepack prepare --activate yarn@latest
+              ;;
+            *)
+              corepack install --global yarn@stable
+              ;;
           esac
           yarn --version
         env:

From f14f7732c3f8dcebca17a8cc46a5ec1b376dda81 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:29:14 +0200
Subject: [PATCH 19/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index ef242473..eb08dc67 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -143,8 +143,11 @@ jobs:
           set -eux
           corepack enable yarn
           case "$NODE_VERSION" in
-            '14' | '16' )
-              corepack prepare --activate yarn@latest
+            '14')
+              corepack prepare --activate yarn@3
+              ;;
+            '16')
+              corepack prepare --activate yarn@4
               ;;
             *)
               corepack install --global yarn@stable

From a1380df7f4305f4d7c885510ed51a64c452f0627 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:32:44 +0200
Subject: [PATCH 20/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index eb08dc67..ef6e4f83 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -144,10 +144,10 @@ jobs:
           corepack enable yarn
           case "$NODE_VERSION" in
             '14')
-              corepack prepare --activate yarn@3
+              corepack prepare --activate yarn@3.8.7
               ;;
             '16')
-              corepack prepare --activate yarn@4
+              corepack prepare --activate yarn@4.0.0
               ;;
             *)
               corepack install --global yarn@stable

From ab6672c61f5e590ecdececea612e1962bcd3bd11 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:35:51 +0200
Subject: [PATCH 21/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index ef6e4f83..6e75fef5 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -166,7 +166,7 @@ jobs:
           --immutable
           --inline-builds
         env:
-          YARN_ENABLE_HARDENED_MODE: "0"
+        #  YARN_ENABLE_HARDENED_MODE: "0"
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 36dc72a6fe4090e9f8647386d1c879e2a2994af9 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:37:20 +0200
Subject: [PATCH 22/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 6e75fef5..b4a7f021 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -165,7 +165,7 @@ jobs:
           yarn install
           --immutable
           --inline-builds
-        env:
+        #env:
         #  YARN_ENABLE_HARDENED_MODE: "0"
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:

From 7b0e79d75891f2ec57450b6e31c62ef0825d279c Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:42:17 +0200
Subject: [PATCH 23/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index b4a7f021..54f2356e 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -161,12 +161,15 @@ jobs:
         shell: bash
         run: echo  > yarn.lock
       - name: install project
-        run: > 
-          yarn install
-          --immutable
-          --inline-builds
-        #env:
-        #  YARN_ENABLE_HARDENED_MODE: "0"
+        shell: bash
+        run: |
+          set -eux
+          YARN_VERSION=$(yarn --version)
+          YARN_MAJOR=${YARN_VERSION%%.*}
+          if [ "$YARN_MAJOR" -ge 4 ]; then
+            export YARN_ENABLE_HARDENED_MODE=0
+          fi
+          yarn install --immutable --inline-builds
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From c580985f1afbfa215a914da37e3856f83e0349cb Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:45:40 +0200
Subject: [PATCH 24/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 18 +-----------------
 1 file changed, 1 insertion(+), 17 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 54f2356e..f3ff767f 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -120,27 +120,11 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false  # must not usecaches. we want the latest, always
-      - name: Remove Yarn 1 from PATH (Windows)
-        if: ${{ runner.os == 'Windows' }}
-        shell: pwsh
-        run: |
-          Set-PSDebug -Trace 1
-          # find yarn
-          Get-Alias yarn -ErrorAction SilentlyContinue
-          Get-ChildItem Function:\yarn -ErrorAction SilentlyContinue
-          Get-Command yarn
-          # remove yarn
-          Remove-Item Alias:\yarn -Verbose -ErrorAction SilentlyContinue
-          Remove-Item Function:\yarn -Verbose -ErrorAction SilentlyContinue
-          Remove-Item "C:\npm\prefix\yarn*" -Verbose -Force -ErrorAction SilentlyContinue
-          # verify
-          Get-Alias yarn -ErrorAction SilentlyContinue
-          Get-ChildItem Function:\yarn -ErrorAction SilentlyContinue
-          Get-Command yarn -ErrorAction SilentlyContinue
       - name: enable yarn
         shell: bash
         run: |
           set -eux
+          npm uninstall -g yarn
           corepack enable yarn
           case "$NODE_VERSION" in
             '14')

From 7dd6c8775f37ece6a9f6cbf1f6b3211076b8b9ba Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:49:30 +0200
Subject: [PATCH 25/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index f3ff767f..9c914830 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -141,9 +141,6 @@ jobs:
         env:
           NODE_VERSION: ${{ matrix.node-version }}
         working-directory: ..  # prevent evaluation of package.json
-      - name: create dummy lock
-        shell: bash
-        run: echo  > yarn.lock
       - name: install project
         shell: bash
         run: |

From 7896697b723941714e29fadd940684c159f6db08 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 13:50:29 +0200
Subject: [PATCH 26/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 9c914830..08affb60 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,7 +150,7 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
-          yarn install --immutable --inline-builds
+          yarn install
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 647e0c98d179e44690a95f16dfd026ed5eb0e74c Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 15:59:10 +0200
Subject: [PATCH 27/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 08affb60..41954a5e 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,6 +150,7 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
+          echo > yarn.lock
           yarn install
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:

From ea8257328153cfc8f5f3358564b2fda2804120f9 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:05:58 +0200
Subject: [PATCH 28/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 41954a5e..08affb60 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,7 +150,6 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
-          echo > yarn.lock
           yarn install
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:

From bada2c8d35371b836041d85e23e9aef5f6d13dc7 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:09:55 +0200
Subject: [PATCH 29/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 08affb60..57d32bbf 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,7 +150,7 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
-          yarn install
+          yarn install --immutable
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 71b1011e205a29124ce8da9d863d0ad59fbae3ec Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:10:12 +0200
Subject: [PATCH 30/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 57d32bbf..1a154a8b 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,7 +150,7 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
-          yarn install --immutable
+          yarn install --no-immutable
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 8e4ad306e80d3858e29601acea6a1b8385b38cc3 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:11:38 +0200
Subject: [PATCH 31/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 1a154a8b..5ffaff66 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -127,10 +127,10 @@ jobs:
           npm uninstall -g yarn
           corepack enable yarn
           case "$NODE_VERSION" in
-            '14')
+            '14' | '16')
               corepack prepare --activate yarn@3.8.7
               ;;
-            '16')
+            '18')
               corepack prepare --activate yarn@4.0.0
               ;;
             *)

From 6216b9383687b5d3c23de4b3646ec98d85d79ffa Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:14:16 +0200
Subject: [PATCH 32/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 5ffaff66..f3b46f0f 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -150,7 +150,9 @@ jobs:
           if [ "$YARN_MAJOR" -ge 4 ]; then
             export YARN_ENABLE_HARDENED_MODE=0
           fi
-          yarn install --no-immutable
+          yarn install \
+          --no-immutable \
+          --inline-builds
       # proven: the package can be installed. that's enough for a meta-package
   test-pnpm-install:
     name: PNPM install (node${{ matrix.node-version }}, ${{ matrix.os }})

From 1c6e3a57d1f61077208660bff103b1719a86720a Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Wed, 3 Jun 2026 16:15:16 +0200
Subject: [PATCH 33/33] wip

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/nodejs.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index f3b46f0f..904dc881 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -120,7 +120,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           package-manager-cache: false  # must not usecaches. we want the latest, always
-      - name: enable yarn
+      - name: Setup Yarn
         shell: bash
         run: |
           set -eux