Fixed an issue where upstream Electron fails to extract

[devinbinnie]

Summary

An upstream issue with Electron's dependencies (electron/electron#51619) causes Node 24 to fail to extract the binary, causing tests to fail unexpectedly.

This PR adds an override for the library that was failing so that it will work on Node 24.

NOTE

Change Impact: 🟢 Low

Regression Risk: Minimal. This change only adds a dependency override in package.json to force yauzl version 3.3.1, which is a build-time dependency used by Electron for binary extraction. No application code logic is modified, and the override is narrowly scoped to resolve a specific Node 24 compatibility issue with Electron's binary extraction process. The change does not affect runtime behavior, core logic, or shared utilities.

QA Recommendation: Manual QA can be safely skipped for this change. Verification should focus on confirming that the build process completes successfully on Node 24 and that tests pass as expected (which appears to be the original issue being fixed). Automated build and test pipelines should provide sufficient validation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 525497f2-66fd-4d1d-a2f8-30033e5f46f2

📥 Commits

Reviewing files that changed from the base of the PR and between 4467ed1 and bdd4d7e.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

This PR adds an overrides section to package.json that pins the yauzl dependency to version 3.3.1. The change ensures a specific version of yauzl is used during dependency resolution across the project.

Changes

Dependency version override

Layer / File(s)	Summary
Yauzl version override package.json	overrides block added to force yauzl to version 3.3.1 during dependency tree resolution.

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main fix: addressing an upstream Electron extraction issue by overriding the problematic yauzl dependency in package.json.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch tests_broke

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[devinbinnie]

/cherry-pick release-6.2

[mattermost-build]

Cherry pick is scheduled.

[devinbinnie]

/cherry-pick release-5.13

[mattermost-build]

Cherry pick is scheduled.

[mattermost-build]

Error trying doing the automated Cherry picking. Please do this manually

+++ Updating remotes...
Fetching upstream
hostfile_replace_entries: mkstemp: Read-only file system
update_known_hosts: hostfile_replace_entries failed for /app/.ssh/known_hosts: Read-only file system
From github.com:mattermost/desktop
   0da9b0cb..a97fbb42  release-5.13 -> upstream/release-5.13
   b757345a..1eb9eca9  release-6.2  -> upstream/release-6.2
Fetching upstream
hostfile_replace_entries: mkstemp: Read-only file system
update_known_hosts: hostfile_replace_entries failed for /app/.ssh/known_hosts: Read-only file system
+++ Updating remotes done...
+++ Creating local branch automated-cherry-pick-of-desktop-#3836-upstream-release-5.13-1780503071
Switched to a new branch 'automated-cherry-pick-of-desktop-#3836-upstream-release-5.13-1780503071'
Branch 'automated-cherry-pick-of-desktop-#3836-upstream-release-5.13-1780503071' set up to track remote branch 'release-5.13' from 'upstream'.

+++ About to attempt cherry pick of PR #3836 with merge commit 6f075fb20f0574e634353fdded7004193449f0c1.

Auto-merging package-lock.json
CONFLICT (content): Merge conflict in package-lock.json
Auto-merging package.json
error: could not apply 6f075fb2... Fixed an issue where upstream Electron fails to extract (#3836)
hint: After resolving the conflicts, mark them with
hint: "git add/rm <pathspec>", then run
hint: "git cherry-pick --continue".
hint: You can instead skip this commit with "git cherry-pick --skip".
hint: To abort and get back to the state before "git cherry-pick",
hint: run "git cherry-pick --abort".

+++ Conflicts detected:

UU package-lock.json
Aborting.

+++ Aborting in-progress git cherry-pick.

+++ Returning you to the master branch and cleaning up.