refactor(ui-scripts,command-utils): remove pkg-utils package and update deps

Finalize the merge of @instructure/pkg-utils into ui-scripts: move its package
utilities into lib/utils/pkg-utils/package-utils.ts, add getPackages() there,
and repoint all imports (bump, deprecate, publish, publish-private, tag, npm,
addNewExportsEntiresToPackageJSONs) at the local module. Drop the package from
the tsconfig references and the eslint node-package list.

Convert the root scripts/*.js to ESM (.mjs) so they can consume the ESM-only
chalk 5 and read-package-up, and update dependencies: chalk 5, which 7,
read-package-up 12, @vitejs/plugin-react, and codesandbox-import-utils.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: matyasf

cypress/component/Tooltip.cy.tsx

@@ -158,7 +158,7 @@ describe('<Tooltip/>', () => {
     })
   })
 
-  it('should close when Esc key is pressed', async () => {
+  it('should close when Esc key is pressed', () => {
     cy.mount(
       <Tooltip renderTip={<h2>Hello</h2>}>
         <a data-testid="trigger" href="example.html">
@@ -173,15 +173,17 @@ describe('<Tooltip/>', () => {
 
       cy.get(tooltip).should('not.be.visible')
 
-      cy.contains('Hover me!').realHover()
+      cy.get('[data-testid="trigger"]').focus()
+
+      cy.get(tooltip).should('be.visible')
 
-      cy.get(tooltip).should('be.visible').realPress('Escape')
+      cy.get('[data-testid="trigger"]').realPress('Escape')
 
       cy.get(tooltip).should('not.be.visible')
     })
   })
 
-  it('should close when Esc key is pressed and Tooltip is hovered over', async () => {
+  it('should close when Esc key is pressed and Tooltip is hovered over', () => {
     cy.mount(
       <Tooltip renderTip={<h2>Hello</h2>}>
         <a data-testid="trigger" href="example.html">
@@ -256,7 +258,6 @@ describe('<Tooltip/>', () => {
         .realPress('Escape')
         .then(() => {
           cy.get(tooltip).should('not.be.visible')
-          cy.wait(300)
           cy.get('[role="dialog"]').should('be.visible')
         })
 

eslint.config.mjs

@@ -65,8 +65,7 @@ const NODE_PACKAGES = [
   'ui-webpack-config',
   'command-utils',
   'instui-cli',
-  'babel-plugin-transform-imports',
-  'pkg-utils'
+  'babel-plugin-transform-imports'
 ].join("|")
 
 const finalConfig = tseslint.config(

package.json

@@ -27,16 +27,16 @@
     "lint:changes": "pnpm run lint -- --since HEAD^",
     "lint:fix": "pnpm -r --stream lint:fix",
     "lint:commits": "commitlint --from=HEAD^1",
-    "bootstrap": "node scripts/bootstrap.js",
+    "bootstrap": "node scripts/bootstrap.mjs",
     "build": "pnpm -r --stream build",
     "build:watch": "pnpm -r --stream build:watch",
     "build:docs": "pnpm --filter docs-app bundle",
     "build:themes": "ui-scripts build-themes",
     "build:tokens": "ui-scripts generate-all-tokens",
     "build:types": "tsc -b tsconfig.references.json",
     "build:ts": "pnpm --filter @instructure/ui-icons prepare-build && pnpm run build:types",
-    "clean": "node scripts/clean.js",
-    "clean-node": "node scripts/clean.js --nuke_node",
+    "clean": "node scripts/clean.mjs",
+    "clean-node": "node scripts/clean.mjs --nuke_node",
     "export:icons": "pnpm --filter @instructure/ui-icons export",
     "create-component-version": "ui-scripts create-component-version",
     "bump": "ui-scripts bump",
@@ -47,7 +47,7 @@
     "release": "ui-scripts publish",
     "publish-private": "ui-scripts publish-private",
     "commit": "cz",
-    "husky:pre-commit": "lint-staged && node scripts/checkTSReferences.js",
+    "husky:pre-commit": "lint-staged && node scripts/checkTSReferences.mjs",
     "postinstall": "husky",
     "ts:check": "pnpm -r --stream ts:check"
   },
@@ -63,7 +63,6 @@
     "@emotion/react": "^11.14.0",
     "@eslint/js": "^9.39.4",
     "@instructure/browserslist-config-instui": "workspace:*",
-    "@instructure/pkg-utils": "workspace:*",
     "@instructure/ui-babel-preset": "workspace:*",
     "@instructure/ui-scripts": "workspace:*",
     "@testing-library/dom": "^10.4.1",
@@ -74,11 +73,11 @@
     "@types/node": "^24",
     "@types/react": "18.3.26",
     "@types/react-dom": "18.3.1",
-    "@vitejs/plugin-react": "^6.0.3",
+    "@vitejs/plugin-react": "^5.2.0",
     "@vitest/eslint-plugin": "^1.6.20",
     "babel-plugin-add-import-extension": "^1.6.0",
     "chai": "^4.4.1",
-    "chalk": "^4.1.2",
+    "chalk": "^5.6.2",
     "commitizen": "^4.3.2",
     "concurrently": "^9.2.3",
     "cross-spawn": "^7.0.6",
@@ -94,6 +93,7 @@
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "eslint-plugin-notice": "^1.0.0",
     "eslint-plugin-react": "^7.37.5",
+    "read-package-up": "^12.0.0",
     "globals": "^17.7.0",
     "husky": "^9.1.7",
     "jsdom": "^29.1.1",
@@ -108,7 +108,6 @@
   "//dependency-comments": {
     "scripts": "The '--' at the end of commands is needed so user parameters are passed forward",
     "danger": "^11.3.1 -- add this back if we use it in pr-validation.yml",
-    "chalk": "Chalk 5 is ESM. (used here by the scripts/ folder)",
     "tar": "Lerna 8 needs tar for this fixed(?) bug: https://github.com/lerna/lerna/issues/4005",
     "eslint-import-resolver-typescript": "^3.6.1 not supported by ESLint 9",
     "eslint-plugin-import-x": "^3.1.0 not supported by ESLint 9",

packages/__docs__/package.json

@@ -115,7 +115,7 @@
     "babel-loader": "^10.1.1",
     "@babel/runtime": "^7.29.7",
     "@babel/standalone": "^7.29.3",
-    "codesandbox": "^2.2.3",
+    "codesandbox-import-utils": "^2.2.3",
     "lorem-ipsum": "^3.0.0",
     "marked-react": "^4.0.0",
     "moment": "^2.30.1",

packages/__docs__/src/CodeSandboxButton/index.tsx

@@ -23,7 +23,7 @@
  */
 
 import { Component } from 'react'
-import { getParameters } from 'codesandbox/lib/api/define'
+import { getParameters } from 'codesandbox-import-utils/lib/api/define'
 
 import { Tooltip } from '@instructure/ui-tooltip'
 import { SVGIcon } from '@instructure/ui-svg-images'

packages/command-utils/package.json

@@ -18,9 +18,9 @@
   },
   "license": "MIT",
   "dependencies": {
-    "chalk": "^5.4.1",
+    "chalk": "^5.6.2",
     "cross-spawn": "^7.0.6",
-    "which": "^4.0.0"
+    "which": "^7.0.0"
   },
   "publishConfig": {
     "access": "public"