Update Yarn to 1.0.2 for Node 8.5

[razor-x]

This includes a particularly critical bug fix for private packages: yarnpkg/yarn#4422

[razor-x]

I can confirm that the update from yarn 0.27.5 (2924f14) broke our builds on node 8.5 but that yarn 1.0.2 does not have the corresponded bug.

Requesting this gets merged quickly 👍

[SimenB]

@nodejs/docker What should be done here? Pretty bad bug

[pesho]

I'm torn. If this was the only change in Yarn 1.0.2 I'd say let's make a policy exception and upgrade it. But looking at the commit log there are 22 total commits between 1.0.1 and 1.0.2 so this is not a trivial/risk-free upgrade.

[SimenB]

Full diff: yarnpkg/yarn@v1.0.1...v1.0.2

[SimenB]

I think we should merge it, the other changes aren't too crazy IMO, and the bug is really bad.

[pesho]

Ok, in this case I agree. Does anyone else have objections?

[Starefossen]

I'm looking through the commits for yarn 1.0.1 to 1.0.2 now

[SimenB]

docker-library/official-images#3450

[razor-x]

Thanks all for pushing this exception though. Builds are humming along again 😀