Set yanrs CA file path config based on yarn version

Author: jurre

Dockerfile.updater

@@ -47,7 +47,6 @@ bundle install
 COPY --chown=dependabot:dependabot updater/config/.yarnrc updater/config/.npmrc $DEPENDABOT_HOME/
 
 # For Yarn Berry we can set this via an environment variable
-ENV YARN_HTTPS_CA_FILE_PATH=/etc/ssl/certs/ca-certificates.crt
 ENV NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
 
 # END: HACKY WORKAROUND FOR NPM GIT INSTALLS SPAWNING CHILD PROCESS

npm_and_yarn/lib/dependabot/npm_and_yarn/helpers.rb

@@ -29,6 +29,15 @@ def self.run_yarn_commands(*commands)
         if (https_proxy = ENV.fetch("HTTPS_PROXY", false))
           SharedHelpers.run_shell_command("yarn config set httpsProxy #{https_proxy}")
         end
+        if (ca_file_path = ENV.fetch("NODE_EXTRA_CA_CERTS", false))
+          output = SharedHelpers.run_shell_command("yarn --version")
+          major_version = Version.new(output).major
+          if major_version >= 4
+            SharedHelpers.run_shell_command("yarn config set httpsCaFilePath #{ca_file_path}")
+          else
+            SharedHelpers.run_shell_command("yarn config set caFilePath #{ca_file_path}")
+          end
+        end
         commands.each { |cmd| SharedHelpers.run_shell_command(cmd) }
       end
     end