build: use yarn@v4 and migrate to vitest

[MarshallOfSound]

This appears to (a) fix socket dev dependency recognition and (b) make the tests not use deprecated / ancient mocha modules

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​esbuild/​aix-ppc64@​0.25.8
	@​esbuild/​android-arm64@​0.25.8
	@​esbuild/​darwin-arm64@​0.25.8
	@​esbuild/​darwin-x64@​0.25.8
	@​esbuild/​freebsd-arm64@​0.25.8
	@​esbuild/​freebsd-x64@​0.25.8
	@​esbuild/​linux-arm@​0.25.8
	@​esbuild/​linux-arm64@​0.25.8
	@​esbuild/​linux-ia32@​0.25.8
	@​esbuild/​linux-loong64@​0.25.8
	@​esbuild/​linux-mips64el@​0.25.8
	@​esbuild/​linux-ppc64@​0.25.8
	@​esbuild/​linux-riscv64@​0.25.8
	@​esbuild/​linux-s390x@​0.25.8
	@​esbuild/​linux-x64@​0.25.8
	@​esbuild/​openbsd-arm64@​0.25.8
	@​esbuild/​openbsd-x64@​0.25.8
	@​esbuild/​sunos-x64@​0.25.8
	@​esbuild/​win32-arm64@​0.25.8
	@​esbuild/​win32-ia32@​0.25.8
	@​esbuild/​win32-x64@​0.25.8
	@​esbuild/​netbsd-arm64@​0.25.8
	@​esbuild/​netbsd-x64@​0.25.8
	@​rollup/​rollup-darwin-arm64@​4.46.2
	@​rollup/​rollup-android-arm64@​4.46.2
	@​rollup/​rollup-win32-arm64-msvc@​4.46.2
	@​rollup/​rollup-freebsd-arm64@​4.46.2
	@​rollup/​rollup-linux-arm64-gnu@​4.46.2
	@​rollup/​rollup-linux-arm64-musl@​4.46.2
	@​rollup/​rollup-android-arm-eabi@​4.46.2
	@​rollup/​rollup-linux-arm-gnueabihf@​4.46.2
	@​rollup/​rollup-linux-arm-musleabihf@​4.46.2
See 94 more rows in the dashboard

View full report

[dsanders11]

cc @mmaietta as he has an earlier draft PR to migrate to Vitest which was blocked by the Node.js 22 bump. Would be good to make sure the two PRs more or less converged on the same end result.

This would be our first repo to venture off of yarn@v1 to yarn@v4. If that's needed to make the Socket security stuff work, sounds like we'd want to migrate most of our repos. Let's put it on the agenda to discuss at the Ecosystem WG meeting this week.

[notion-workspace]

asar