feat(yarn): Fail in case an update of the lockfile is needed

Do not update the lockfile and fail if an update is needed, so that the
lockfile effectively pins the version reliably. See also [1].

[1]: https://yarnpkg.com/cli/install#options

Signed-off-by: Frank Viernau <frank_viernau@epam.com>

plugins/package-managers/node/src/main/kotlin/Yarn.kt

@@ -80,7 +80,8 @@ class Yarn(
         // fixed minor version to be sure to get consistent results.
         checkVersion()
 
-    override fun runInstall(workingDir: File) = run(workingDir, "install", "--ignore-scripts", "--ignore-engines")
+    override fun runInstall(workingDir: File) =
+        run(workingDir, "install", "--ignore-scripts", "--ignore-engines", "--immutable")
 
     override fun getRemotePackageDetails(workingDir: File, packageName: String): PackageJson {
         yarnInfoCache.read(packageName)?.let { return parsePackageJson(it) }