build: fix yarn install with angular-linking and avoid tsec errors

* Tsec expects all rules to have `deps`. This is not true for the new
  RJS `//:node_modules/x` targets.
* Yarn currently doesn't know about the `angular-linking` workspace, so
  we need to configure that properly.

Author: devversion

.aspect/rules/external_repository_action_cache/npm_translate_lock_MzA5NzUwNzMx

@@ -2,9 +2,10 @@
 # Input hashes for repository rule npm_translate_lock(name = "npm2", pnpm_lock = "@//:pnpm-lock.yaml").
 # This file should be checked into version control along with the pnpm-lock.yaml file.
 .npmrc=-2023857461
-package.json=-1210026051
-pnpm-lock.yaml=-803790935
+.pnpmfile.cjs=1191807371
+package.json=1476467266
+pnpm-lock.yaml=1713526192
 pnpm-workspace.yaml=-1443514472
 tools/bazel/angular-linking/index.mjs=475293377
 tools/bazel/angular-linking/package.json=-115142019
-yarn.lock=-770490238
+yarn.lock=824621907

.pnpmfile.cjs

@@ -0,0 +1,13 @@
+module.exports = {
+  hooks: {
+    readPackage: pkg => {
+      if (pkg.name === 'components-srcs') {
+        // Add the linking dependency so that `rules_js` makes it available.
+        // Note that we can't directly add it to the `package.json` due to our hybrid Yarn setup.
+        // TODO(devversion): Remove this when yarn.lock is removed.
+        pkg.dependencies['@devinfra/angular-linking'] = 'workspace:*';
+      }
+      return pkg;
+    },
+  },
+};

WORKSPACE

@@ -115,6 +115,8 @@ yarn_install(
         "//:tools/postinstall/patches/@angular+bazel+20.0.0-next.1.patch",
         "//:tools/postinstall/patches/@angular+build-tooling+0.0.0-1ebf18a3a60b182a3dbad12e9a149fd93af5c29b.patch",
         "//:tools/postinstall/patches/@bazel+concatjs+5.8.1.patch",
+        "//:tools/postinstall/patches/tsec+0.2.2.patch",
+        "//tools/bazel/angular-linking:package.json",
     ],
     # Currently disabled due to:
     #  1. Missing Windows support currently.
@@ -164,14 +166,15 @@ load("@aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")
 npm_translate_lock(
     name = "npm2",
     custom_postinstalls = {
-        "@angular/animations": "node ../../@devinfra/angular-linking/index.mjs",
-        "@angular/common": "node ../../@devinfra/angular-linking/index.mjs",
+        "@angular/animations": "ls . && ls ../ && ls ../.. && node ../../@devinfra/angular-linking/index.mjs",
+        "@angular/common": "ls -alh ../.. && node ../../@devinfra/angular-linking/index.mjs",
         "@angular/forms": "node ../../@devinfra/angular-linking/index.mjs",
         "@angular/platform-browser": "node ../../@devinfra/angular-linking/index.mjs",
         "@angular/router": "node ../../@devinfra/angular-linking/index.mjs",
         "@angular/localize": "node ../../@devinfra/angular-linking/index.mjs",
     },
     data = [
+        "//:.pnpmfile.cjs",
         "//:package.json",
         "//:pnpm-workspace.yaml",
         "//tools/bazel/angular-linking:index.mjs",

package.json

@@ -97,7 +97,6 @@
     "@bazel/runfiles": "5.8.1",
     "@bazel/terser": "5.8.1",
     "@bazel/worker": "5.8.1",
-    "@devinfra/angular-linking": "link:tools/bazel/angular-linking",
     "@firebase/app-types": "^0.7.0",
     "@material/material-color-utilities": "^0.3.0",
     "@octokit/rest": "18.3.5",

pnpm-lock.yaml

@@ -0,0 +1,22 @@
+diff --git a/node_modules/tsec/index.bzl b/node_modules/tsec/index.bzl
+index d2c2df7..f5bde10 100644
+--- a/node_modules/tsec/index.bzl
++++ b/node_modules/tsec/index.bzl
+@@ -16,7 +16,7 @@ def _capture_tsec_attrs_aspect_impl(target, ctx):
+     node_modules_root = None
+     if module_name:
+         paths[module_name] = target.label.package
+-    for d in ctx.rule.attr.deps:
++    for d in getattr(ctx.rule.attr, "deps", []):
+         if TsecTargetInfo in d:
+             paths.update(d[TsecTargetInfo].paths)
+         if DeclarationInfo in d:
+@@ -25,7 +25,7 @@ def _capture_tsec_attrs_aspect_impl(target, ctx):
+             node_modules_root = "/".join(["external", d[NpmPackageInfo].workspace, "node_modules"])
+     return [
+         TsecTargetInfo(
+-            srcs = ctx.rule.attr.srcs,
++            srcs = getattr(ctx.rule.attr, "srcs", []),
+             deps = depset(transitive = deps),
+             module_name = module_name,
+             paths = paths,

tools/postinstall/patches/tsec+0.2.2.patch

@@ -1585,10 +1585,6 @@
     enabled "2.0.x"
     kuler "^2.0.0"
 
-"@devinfra/angular-linking@link:tools/bazel/angular-linking":
-  version "0.0.0"
-  uid ""
-
 "@discoveryjs/[email protected]":
   version "0.6.3"
   resolved "https://registry.yarnpkg.com/@discoveryjs/json-ext/-/json-ext-0.6.3.tgz#f13c7c205915eb91ae54c557f5e92bddd8be0e83"