Bump yarn-lib

[Netail]

Code improvement description

Yarn in yarn-lib got bumped to 1.22.22 (dependabot/yarn-lib#56), however the package update has to be published to NPM and then the published version has to be updated in here

[Netail]

It currently introduces the bug back when dependabot creates a PR :(
@jakecoffman @abdulapopoola @jeffwidman if any of you can publish the new yarn-lib version to the registry, I can create a PR in this repository

[BPScott]

Echoing the above request.
I am also running into problems as a result of dependabot's yarn v1 version not handling hoisting when transitive dependencies listed aliases as dependencies - which is fixed by yarn 1.22.22.

[pavera]

I've published the yarn-lib package to npm and am working to get dependabot to create the update PR in this repo.

[pavera]

I've now deployed and merged the yarn-lib bump. This should be resolved.

[Netail]

Thank you :)

[BPScott]

Thanks @pavera! When do you expect this to be released? I see that a dependabot release was made just before #9531 was merged, are there plans for a fast-follow release to get this yarn fix in or shall it be next week?

[jeffwidman]

@BPScott typically the code for is deployed daily if not more frequently to GitHub cloud.

The weekly release is primarily for the convenience of others who want to leverage Dependabot in custom ways via a versioned ruby gem.

So if you need it via RubyGems, you'll have to wait for the weekly release... otherwise it's already live.