[cryptodev-2s]

Explanation

First live run of the repair workflow failed in Set up environment, before any repair ran:

YN0028: The lockfile would have been modified by this install, which is explicitly forbidden.

MetaMask/action-checkout-and-setup installs with yarn --immutable, and Dependabot's lockfile does not always satisfy that. Core's normal CI never hits it because a pull_request build uses the merge ref; this workflow checks out the head branch, since that is what it pushes back to.

The action has no input for immutability, so this skips its install and does our own, keeping the retry wrapper it would otherwise have given us.

References

Follows #10231 and #10235. Part of WPC-1161.

Checklist

• I've updated the test suite for new or updated code as appropriate (workflow only)
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed (no published package is touched)
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 1457f9c. Configure here.}