In the last few places I worked we dropped Yarn for pnpm. Did the job and now dependabot can understand it too, on github.

Corepack is a nice addition to Node to make it easy to install a package manager but it's also an unwelcome layer of abstraction (why isn't there just one?).