ci: dependabot minimum package age check

[Lemonexe]

Description

• Mainly, add yarn "age gate", meaning that yarn won't let you install a version younger than 14 days
  • see yarn docs, or the PR for more info
• Add "cooldown" to dependabot, so that it doesn't suggest versions younger than that
  • see dependabot docs
  • that' less impactful because we don't check it that often, this is just to prevent nuissance where dependabot would require us to install a version that yarn forbids.

Exclusions

Exclusions are ofc possible for experimental, rapidly changing packages. Adding a few that we know about right away.

How to bump deps now?

When you run for example yarn list-outdated TEAM, the age gate is honored. So for example it suggests eslint 9.38 (old enough), not 9.39.1 (too young), which is amazing, otherwise it'd be really annoying 🙂

• yarn up honors the age gate automatically
• ncu doesn't do it automatically, but since 19.1.0 you can specify -c alias --cooldown yourself, so for example:
  ncu --deep -u -c 14 -t greatest --pre 0 -f @eslint/js
  will update eslint to the age gated version in all package.jsons 🚀 🙂
  • target greatest must be specified; default latest may not match anything with -c (more on that here)

Related Issue

Resolve #22681

Screenshots

I installed eslint 9.39.1, which is 9 days old as of writing this PR, and it won't let me install:

🔍🖥️ Suite web test results: View in Currents

🔍🖥️ Suite desktop test results: View in Currents

[tomasklim]

Suggested change

	- "@evolu/*"
	- "@evolu/*"
	- "@types/invity-api"

our package

[Lemonexe]

Added ✔️

In case of .yarnrc.yml it works with names in form @scope/name@resolver, in our case resolver is always npm, so I wrote it @* at the end, which will mean any version

[trezor-bot]

✅ Previously successful run of [Test] PR Suite Web e2e tests workflow has been found.
⏭️ Skipping tests for this run.
💡 If you are unsure about your latest changes, please rerun the workflow manually. (Use the Re-run all jobs option)

[trezor-bot]

✅ Previously successful run of [Test] PR Suite Desktop e2e tests workflow has been found.
⏭️ Skipping tests for this run.
💡 If you are unsure about your latest changes, please rerun the workflow manually. (Use the Re-run all jobs option)

[komret]

👏