update lockfile-lint

.github/workflows/verify-yarn-lock.yml

@@ -39,7 +39,7 @@ jobs:
         with:
           # Fine to skip scripts since we don't run any code
           # Hardened mode validates lockfile security (no mismatched metadata, valid resolutions)
-          command: YARN_ENABLE_HARDENED_MODE=1 yarn install --skip-builds
+          command: YARN_ENABLE_HARDENED_MODE=1 yarn install --mode skip-build
           attempt_limit: 3
           attempt_delay: 2000
 

package.json

@@ -355,12 +355,18 @@
   },
   "lockfile-lint": {
     "path": "yarn.lock",
+    "type": "yarn",
     "allowedHosts": [
       "npm",
-      "yarn"
+      "yarn",
+      "github.com"
     ],
     "allowedSchemes": [
-      "https:"
+      "https:",
+      "npm:",
+      "workspace:",
+      "link:",
+      "patch:"
     ],
     "allowedPackageNameAliases": [
       "@babel/traverse--for-generate-function-map:@babel/traverse",
@@ -373,8 +379,8 @@
       "https://codeload.github.com/bluesky-social/react-native-progress/tar.gz/5a372f4f2ce5feb26f4f47b6a4d187ab9b923ab4",
       "https://codeload.github.com/mattermost/react-native-paste-input/tar.gz/f260447edc645a817ab1ba7b46d8341d84dba8e9"
     ],
-    "emptyHostname": false,
+    "emptyHostname": true,
     "validatePackageNames": true,
-    "validateIntegrity": true
+    "validateIntegrity": false
   }
 }