Set --frozen-lockfile with yarn when necessary

ci/build/build-release.sh

@@ -69,7 +69,7 @@ EOF
   ) > "$VSCODE_OUT_PATH/product.json"
 
   pushd "$VSCODE_OUT_PATH"
-  yarn --production --ignore-scripts
+  yarn --production --frozen-lockfile --ignore-scripts
   popd
 
   # We clear any native module builds.

ci/build/build-static-release.sh

@@ -19,7 +19,7 @@ main() {
   rsync "$node_path" "$RELEASE_PATH/lib/node"
 
   cd "$RELEASE_PATH"
-  yarn --production
+  yarn --production --frozen-lockfile
 }
 
 main "$@"

ci/dev/vscode.sh

@@ -15,7 +15,7 @@ main() {
   (
     cd lib/vscode
     # Install VS Code dependencies.
-    yarn
+    yarn ${CI+--frozen-lockfile}
   )
 }
 

ci/steps/fmt.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 main() {
   cd "$(dirname "$0")/../.."
 
-  yarn
+  yarn --frozen-lockfile
 
   git submodule update --init
   # We do not `yarn vscode` to make test.sh faster.

ci/steps/lint.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 main() {
   cd "$(dirname "$0")/../.."
 
-  yarn
+  yarn --frozen-lockfile
 
   git submodule update --init
   # We do not `yarn vscode` to make test.sh faster.

ci/steps/release.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 main() {
   cd "$(dirname "$0")/../.."
 
-  yarn
+  yarn --frozen-lockfile
   yarn vscode
   yarn build
   yarn build:vscode

ci/steps/test.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 main() {
   cd "$(dirname "$0")/../.."
 
-  yarn
+  yarn --frozen-lockfile
 
   git submodule update --init
   # We do not `yarn vscode` to make test.sh faster.