Update dependency vitest to v4 [SECURITY] (#1959)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: lukasIO <mail@lukasseiler.de>

Author: renovate[bot]

eslint.config.mjs

@@ -168,4 +168,14 @@ export default [
       '@typescript-eslint/prefer-nullish-coalescing': 'off',
     },
   },
+  {
+    // vitest v4 requires `function`/`class` (not arrow) implementations for
+    // mocks invoked with `new` (e.g. WebSocketStream, RTCRtpScriptTransform)
+    name: 'test/mock-constructors',
+    files: ['**/*.test.ts'],
+    rules: {
+      'prefer-arrow-callback': 'off',
+      'func-names': 'off',
+    },
+  },
 ];

package.json

@@ -123,7 +123,7 @@
     "typescript": "5.9.3",
     "typescript-eslint": "^8.47.0",
     "vite": "7.3.3",
-    "vitest": "^3.0.0"
+    "vitest": "^4.0.0"
   },
   "packageManager": "pnpm@10.33.0"
 }

pnpm-lock.yaml

@@ -3,3 +3,5 @@ minimumReleaseAgeExclude:
   - '@livekit/*'
   # allow webrtc-adapter 9.0.5, see https://github.com/livekit/client-sdk-js/issues/1806
   - webrtc-adapter@9.0.5
+  # Renovate security update: vitest@4.1.0
+  - vitest@4.1.0

pnpm-workspace.yaml

@@ -77,7 +77,7 @@ function mockWebSocketStream(options: MockWebSocketStreamOptions = {}) {
     onUrl,
   } = options;
 
-  return vi.mocked(WebSocketStream).mockImplementationOnce((url) => {
+  return vi.mocked(WebSocketStream).mockImplementationOnce(function (url) {
     onUrl?.(url);
     return {
       url: 'wss://test.livekit.io',
@@ -283,7 +283,7 @@ describe('SignalClient.connect', () => {
     it('should reject when AbortSignal is triggered', async () => {
       const abortController = new AbortController();
 
-      vi.mocked(WebSocketStream).mockImplementation(() => {
+      vi.mocked(WebSocketStream).mockImplementation(function () {
         // Simulate abort
         setTimeout(() => abortController.abort(new Error('User aborted connection')), 50);
 
@@ -344,7 +344,7 @@ describe('SignalClient.connect', () => {
         extensions: '',
       };
 
-      vi.mocked(WebSocketStream).mockImplementation(() => {
+      vi.mocked(WebSocketStream).mockImplementation(function () {
         return {
           url: 'wss://test.livekit.io',
           opened: Promise.resolve(mockConnection),
@@ -526,7 +526,7 @@ describe('SignalClient.connect', () => {
         closedResolve = resolve;
       });
 
-      vi.mocked(WebSocketStream).mockImplementation(() => {
+      vi.mocked(WebSocketStream).mockImplementation(function () {
         // Simulate close during connection
         queueMicrotask(() => {
           closedResolve({ closeCode: 1006, reason: 'Connection lost' });

src/api/SignalClient.test.ts

@@ -129,24 +129,24 @@ describe('WebSocketStream', () => {
     vi.clearAllMocks();
 
     // Store original WebSocket
-    originalWebSocket = global.WebSocket;
+    originalWebSocket = globalThis.WebSocket;
 
     // Mock WebSocket globally
-    global.WebSocket = vi.fn((url: string, protocols?: string | string[]) => {
+    globalThis.WebSocket = vi.fn(function (url: string, protocols?: string | string[]) {
       mockWebSocket = new MockWebSocket(url, protocols);
       return mockWebSocket as any;
     }) as any;
 
     // Add constants to the mocked WebSocket
-    (global.WebSocket as any).CONNECTING = MockWebSocket.CONNECTING;
-    (global.WebSocket as any).OPEN = MockWebSocket.OPEN;
-    (global.WebSocket as any).CLOSING = MockWebSocket.CLOSING;
-    (global.WebSocket as any).CLOSED = MockWebSocket.CLOSED;
+    (globalThis.WebSocket as any).CONNECTING = MockWebSocket.CONNECTING;
+    (globalThis.WebSocket as any).OPEN = MockWebSocket.OPEN;
+    (globalThis.WebSocket as any).CLOSING = MockWebSocket.CLOSING;
+    (globalThis.WebSocket as any).CLOSED = MockWebSocket.CLOSED;
   });
 
   afterEach(() => {
     // Restore original WebSocket
-    global.WebSocket = originalWebSocket;
+    globalThis.WebSocket = originalWebSocket;
   });
 
   describe('Constructor and Initialization', () => {

src/api/WebSocketStream.test.ts

@@ -8,7 +8,10 @@
       "ES2018.Promise",
       "WebWorker",
       "ES2021.WeakRef",
-      "DOM.AsyncIterable"
+      "DOM.AsyncIterable",
+      "ES2020.BigInt",
+      "ES2018.AsyncIterable",
+      "ES2018.AsyncGenerator"
     ]
   }
 }

src/e2ee/worker/tsconfig.json

@@ -103,7 +103,9 @@ describe('PacketTrailerManager', () => {
   it('uses RTCRtpScriptTransform for packet trailer extraction when supported', () => {
     useSafariUserAgent();
     const transform = {};
-    const RTCRtpScriptTransform = vi.fn(() => transform);
+    const RTCRtpScriptTransform = vi.fn(function () {
+      return transform;
+    });
     setScriptTransform(RTCRtpScriptTransform);
 
     const worker = {} as Worker;

src/packetTrailer/PacketTrailerManager.test.ts

@@ -8,7 +8,10 @@
       "ES2018.Promise",
       "WebWorker",
       "ES2021.WeakRef",
-      "DOM.AsyncIterable"
+      "DOM.AsyncIterable",
+      "ES2020.BigInt",
+      "ES2018.AsyncIterable",
+      "ES2018.AsyncGenerator"
     ]
   }
 }

src/packetTrailer/worker/tsconfig.json

@@ -185,7 +185,9 @@ describe('RTCEngine', () => {
     stubScriptTransformSupport();
 
     const transform = {};
-    const RTCRtpScriptTransform = vi.fn(() => transform);
+    const RTCRtpScriptTransform = vi.fn(function () {
+      return transform;
+    });
     Object.defineProperty(window, 'RTCRtpScriptTransform', {
       configurable: true,
       value: RTCRtpScriptTransform,