Fixes immutablePatterns when running an install from a subdirectory (yarnpkg#6410)

## What's the problem this PR addresses?

The `checksumHash` function was retrieving relative paths from the
globing. When it subsequently tried to access those files when the user
was anywhere else but the root it crashed.

## How did you fix it?

We now join the paths with the base directory before accessing them.

## Checklist

<!--- Don't worry if you miss something, chores are automatically
tested. -->
<!--- This checklist exists to help you remember doing the chores when
you submit a PR. -->
<!--- Put an `x` in all the boxes that apply. -->
- [x] I have read the [Contributing
Guide](https://yarnpkg.com/advanced/contributing).

<!-- See
https://yarnpkg.com/advanced/contributing#preparing-your-pr-to-be-released
for more details. -->
<!-- Check with `yarn version check` and fix with `yarn version check
-i` -->
- [x] I have set the packages that need to be released for my changes to
be effective.

<!-- The "Testing chores" workflow validates that your PR follows our
guidelines. -->
<!-- If it doesn't pass, click on it to see details as to what your PR
might be missing. -->
- [x] I will check that all automated PR checks pass before the PR gets
reviewed.

Author: arcanis

.yarn/versions/30b3d908.yml

@@ -0,0 +1,34 @@
+releases:
+  "@yarnpkg/cli": patch
+  "@yarnpkg/core": patch
+
+declined:
+  - "@yarnpkg/plugin-compat"
+  - "@yarnpkg/plugin-constraints"
+  - "@yarnpkg/plugin-dlx"
+  - "@yarnpkg/plugin-essentials"
+  - "@yarnpkg/plugin-exec"
+  - "@yarnpkg/plugin-file"
+  - "@yarnpkg/plugin-git"
+  - "@yarnpkg/plugin-github"
+  - "@yarnpkg/plugin-http"
+  - "@yarnpkg/plugin-init"
+  - "@yarnpkg/plugin-interactive-tools"
+  - "@yarnpkg/plugin-link"
+  - "@yarnpkg/plugin-nm"
+  - "@yarnpkg/plugin-npm"
+  - "@yarnpkg/plugin-npm-cli"
+  - "@yarnpkg/plugin-pack"
+  - "@yarnpkg/plugin-patch"
+  - "@yarnpkg/plugin-pnp"
+  - "@yarnpkg/plugin-pnpm"
+  - "@yarnpkg/plugin-stage"
+  - "@yarnpkg/plugin-typescript"
+  - "@yarnpkg/plugin-version"
+  - "@yarnpkg/plugin-workspace-tools"
+  - "@yarnpkg/builder"
+  - "@yarnpkg/doctor"
+  - "@yarnpkg/extensions"
+  - "@yarnpkg/nm"
+  - "@yarnpkg/pnpify"
+  - "@yarnpkg/sdks"

packages/acceptance-tests/pkg-tests-specs/sources/features/immutablePatterns.test.ts

@@ -159,5 +159,20 @@ describe(`Features`, () => {
         },
       ),
     );
+
+    it(`shouldn't fail when running an install from a subdirectory`,
+      makeTemporaryEnv(
+        {},
+        async ({path, run, source}) => {
+          await xfs.writeFilePromise(ppath.join(path, Filename.rc), `immutablePatterns: [".pnp.cjs"]`);
+
+          const subPath = ppath.join(path, `subdir`);
+          await xfs.mkdirPromise(subPath);
+
+          await run(`install`, {cwd: subPath});
+          await run(`install`, `--immutable`, {cwd: subPath});
+        },
+      ),
+    );
   });
 });

packages/yarnpkg-core/sources/hashUtils.ts

@@ -1,6 +1,6 @@
-import {PortablePath, xfs, npath, FakeFS} from '@yarnpkg/fslib';
-import {createHash, BinaryLike}           from 'crypto';
-import fastGlob                           from 'fast-glob';
+import {PortablePath, xfs, npath, FakeFS, ppath} from '@yarnpkg/fslib';
+import {createHash, BinaryLike}                  from 'crypto';
+import fastGlob                                  from 'fast-glob';
 
 export function makeHash<T extends string = string>(...args: Array<BinaryLike | null>): T {
   const hash = createHash(`sha512`);
@@ -70,7 +70,7 @@ export async function checksumPattern(pattern: string, {cwd}: {cwd: PortablePath
   const hashes = await Promise.all(listing.map(async entry => {
     const parts: Array<Buffer> = [Buffer.from(entry)];
 
-    const p = npath.toPortablePath(entry);
+    const p = ppath.join(cwd, npath.toPortablePath(entry));
     const stat = await xfs.lstatPromise(p);
 
     if (stat.isSymbolicLink())