chore(deps): update vitest to 4.0.3 for consistency

Update vitest and @vitest/coverage-v8 from 3.2.4 to 4.0.3 to align with other Socket projects (socket-cli, socket-lib, socket-sdk-js, socket-registry).

Also improves esbuild configuration to properly handle @socketsecurity/lib bundling when using local aliases.

Part of project-wide dependency standardization effort.

Author: jdalton

.config/esbuild.config.mjs

@@ -194,13 +194,16 @@ function createAliasPlugin() {
     return null
   }
 
+  // Packages that should always be bundled (even when using local aliases)
+  const ALWAYS_BUNDLED = new Set(['@socketsecurity/lib'])
+
   return {
     name: 'local-package-aliases',
     setup(build) {
       // Intercept imports for aliased packages (except @socketsecurity/lib which should be bundled)
       for (const [packageName, _aliasPath] of Object.entries(aliases)) {
-        // Skip @socketsecurity/lib - it should be bundled, not externalized
-        if (packageName === '@socketsecurity/lib') {
+        // Skip packages that should always be bundled - let esbuild bundle them naturally
+        if (ALWAYS_BUNDLED.has(packageName)) {
           continue
         }
 
@@ -218,6 +221,19 @@ function createAliasPlugin() {
   }
 }
 
+// Get local package aliases for bundled packages
+function getBundledPackageAliases() {
+  const aliases = getLocalPackageAliases(rootPath)
+  const bundledAliases = {}
+
+  // @socketsecurity/lib should always be bundled (not external)
+  if (aliases['@socketsecurity/lib']) {
+    bundledAliases['@socketsecurity/lib'] = aliases['@socketsecurity/lib']
+  }
+
+  return bundledAliases
+}
+
 // Build configuration for CommonJS output
 export const buildConfig = {
   entryPoints: [`${srcPath}/index.ts`],
@@ -238,6 +254,9 @@ export const buildConfig = {
   // Preserve module structure for better tree-shaking
   splitting: false,
 
+  // Alias local packages that should be bundled (not external)
+  alias: getBundledPackageAliases(),
+
   // Use plugins for local package aliases and path shortening
   plugins: [createPathShorteningPlugin(), createAliasPlugin()].filter(Boolean),
 

package.json

@@ -56,7 +56,7 @@
     "@socketsecurity/registry": "1.5.3",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250926.1",
-    "@vitest/coverage-v8": "3.2.4",
+    "@vitest/coverage-v8": "4.0.3",
     "all-the-package-names": "2.0.0",
     "all-the-package-names-v1.3905.0": "npm:[email protected]",
     "del": "8.0.1",
@@ -79,7 +79,7 @@
     "typescript": "5.9.2",
     "typescript-eslint": "8.44.1",
     "validate-npm-package-name": "6.0.2",
-    "vitest": "3.2.4",
+    "vitest": "4.0.3",
     "yoctocolors-cjs": "2.1.3"
   },
   "engines": {