chore(deps)!: Upgrade Vitest and Node.js tooling

.github/workflows/build.yml

@@ -91,7 +91,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node: [18, 20, 22]
+        node: ['20.19', 22, 24]
         os:
           - ubuntu-latest
           - macos-15 # We need to use macos-15 to test with Xcode 16

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## Unreleased
 
+- chore(deps): Upgrade Vitest to v4 to remove vulnerable tinypool, use Node.js 24 for development, and test on Node.js 20.19, 22, and 24 ([#1369](https://github.com/getsentry/sentry-wizard/pull/1369)).
 - fix(flutter): Support SDK v10 by removing obsolete Logs and Profiling setup ([#1370](https://github.com/getsentry/sentry-wizard/pull/1370)).
 
 ## 8.0.1

e2e-tests/package.json

@@ -8,7 +8,7 @@
     "test": "vitest -c ./vitest.config.ts --run --coverage"
   },
   "volta": {
-    "node": "22.18.0",
+    "node": "24.21.0",
     "yarn": "1.22.19"
   }
 }

e2e-tests/vitest.config.ts

@@ -9,7 +9,6 @@ export default defineConfig({
         '../bin.ts',
         '../index.ts',
       ],
-      ignoreEmptyLines: true,
       enabled: true,
       reporter: ['lcov', 'clover', 'json', 'json-summary', 'text'],
     },

package.json

@@ -47,13 +47,13 @@
     "@types/glob": "^7.2.0",
     "@types/inquirer": "^0.0.43",
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^18.19.76",
+    "@types/node": "^24.19.2",
     "@types/opn": "5.1.0",
     "@types/semver": "^7.3.7",
     "@types/yargs": "^16.0.9",
     "@typescript-eslint/eslint-plugin": "^5.13.0",
     "@typescript-eslint/parser": "^5.13.0",
-    "@vitest/coverage-v8": "3.2.7",
+    "@vitest/coverage-v8": "4.1.11",
     "clifty": "0.3.2",
     "eslint": "^8.18.0",
     "eslint-config-prettier": "^8.3.0",
@@ -63,7 +63,7 @@
     "ts-node": "^10.9.1",
     "typescript": "^5.0.4",
     "vite": "^6.4.3",
-    "vitest": "3.2.7"
+    "vitest": "4.1.11"
   },
   "resolutions": {
     "simple-plist": "1.4.0-0",
@@ -97,7 +97,7 @@
   "author": "Sentry",
   "license": "FSL-1.1-MIT",
   "volta": {
-    "node": "18.20.6",
+    "node": "24.21.0",
     "yarn": "1.22.19"
   },
   "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"

test/cloudflare/sdk-setup.test.ts

@@ -59,6 +59,7 @@ describe('createSentryInitFile', () => {
 
   beforeEach(() => {
     vi.clearAllMocks();
+    getEntryPointFromWranglerConfigMock.mockReset();
 
     tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sdk-setup-test-'));
 

test/utils/clack/index.test.ts

@@ -37,6 +37,7 @@ import {
   beforeEach,
   Mocked,
   Mock,
+  type MockInstance,
   afterEach,
 } from 'vitest';
 
@@ -682,7 +683,7 @@ describe('confirmContinueIfNoOrDirtyGitRepo', () => {
   // process.exit is mocked to throw so that abort() halts execution the same
   // way it would terminate the process in production, instead of falling
   // through to the interactive prompt.
-  let exitSpy: ReturnType<typeof vi.spyOn>;
+  let exitSpy: MockInstance<typeof process.exit>;
 
   beforeEach(() => {
     vi.clearAllMocks();

test/utils/clack/mcp-config.test.ts

@@ -1,4 +1,12 @@
-import { describe, expect, it, vi, beforeEach, afterEach } from 'vitest';
+import {
+  describe,
+  expect,
+  it,
+  vi,
+  beforeEach,
+  afterEach,
+  type Mock,
+} from 'vitest';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import * as childProcess from 'node:child_process';
@@ -49,7 +57,7 @@ describe('mcp-config', () => {
   };
 
   type ClackUtilsMocks = {
-    abortIfCancelled: ReturnType<typeof vi.fn>;
+    abortIfCancelled: Mock<(value: unknown) => Promise<unknown>>;
     showCopyPasteInstructions: ReturnType<typeof vi.fn>;
   };
 

vitest.config.ts

@@ -4,7 +4,6 @@ export default defineConfig({
   test: {
     coverage: {
       include: ['src/**/*.{ts,tsx}', 'lib/**/*.{ts,tsx}', 'bin.ts', 'index.ts'],
-      ignoreEmptyLines: true,
       enabled: true,
       reporter: ['lcov', 'clover', 'json', 'json-summary', 'text'],
       reportOnFailure: true,