[Backport 2.x] Upgrade yarn version to be compatible with @openearch-project/opensearch

[opensearch-trigger-bot]

Backport d3fc27d from #3443.

[kavilla]

I would make sure to sign the last commit @zhongnansu or rebase onto the original commit.

Also, it appears that the OpenSearch JS bump caused a breaking change for downstream dependencies. And we have a revert commit on the way: 32944dd.

So probably best to hold off.

[codecov-commenter]

Codecov Report

Merging #3465 (ffb2f41) into 2.x (82c45c1) will not change coverage.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##              2.x    #3465   +/-   ##
=======================================
  Coverage   66.44%   66.44%           
=======================================
  Files        3205     3205           
  Lines       61567    61567           
  Branches     9497     9497           
=======================================
  Hits        40911    40911           
  Misses      18384    18384           
  Partials     2272     2272           

Flag	Coverage Δ
Linux	66.39% <ø> (ø)
Windows	66.40% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

[zhongnansu]

I would make sure to sign the last commit @zhongnansu or rebase onto the original commit.

Also, it appears that the OpenSearch JS bump caused a breaking change for downstream dependencies. And we have a revert commit on the way: 32944dd.

So probably best to hold off.

We don't know if there will be feature break unless we run the plugin regression test after this PR merged in

[AMoo-Miki]

This change should not be necessary.

OSD should not be bumping engines.yarn, and now on engines.node, just because a dep needs it or a CVE exists. OSD has a range to provide users the freedom to install whatever works for them.

OSD should only, and only, bump these values when it truly requires something provided by the newer versions.

[AMoo-Miki]

PS, i messed up the original PR msg but tried to fix it; i think i got it right.

[kavilla]

Closing to avoid confusion.

[zhongnansu]

@kavilla The reverted commit was re-added to 2.x, with an aliasing solution that doesn't bump js client version. But it will cause the plugin CI failure on 2.x branch. opensearch-project/opensearch-build#3210 (comment)

[zhongnansu]

The same fix is merged in main. To unblock 2.6 release, I propose we backport to 2.x @seanneumann @joshuarrrr @ananzh
cc: @seraphjiang

[AMoo-Miki]

I have raised PRs on all plugins that had flaws. This is not a problem that OSD has to or even can solve.