FailproofAI · NiveditJain · Jun 9, 2026 · Jun 9, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## 0.0.11-beta.3 — 2026-05-28
 
+### Dependencies
+- Swap the Vitest DOM environment from `happy-dom` to `jsdom` (`vitest.config.mts`, `package.json`, 15 `docs/*/testing.mdx`). happy-dom is single-maintainer and had a 2024 critical CVE; jsdom has 6 maintainers, ~7× the weekly downloads, and a perfect Snyk maintenance score. Test suite (1691 tests across 82 files) stays green on jsdom (#419).
+
 ### Fixes
 - Treat GitHub `neutral` check-run conclusions as non-failing in the `require-ci-green-before-stop` policy (e.g. Socket Security: Pull Request Alerts when the head branch is from an outside contributor and Socket can't process it). Previously the policy treated anything other than `success` / `skipped` / `cancelled` as failing, producing false-positive Stop blocks on PRs whose only "non-green" check was an explicit `neutral` (#410).
 - Fix the `bump-platform-submodule.yml` workflow's first post-merge push, which failed with `fatal: could not read Username for 'https://github.com'`. The `persist-credentials: false` hardening from #394 left the cross-repo `git push`/`fetch` unauthenticated, and the inline `Authorization: bearer …` extraheader only authenticates GitHub's REST API — git-over-HTTPS smart-protocol expects Basic auth with `x-access-token:<pat>`. Switch to a base64-encoded Basic header (matching `actions/checkout`'s own internal extraheader format) so the push and the rebase-and-retry fetch in the loop both authenticate (#395).

diff --git a/bun.lock b/bun.lock
diff --git a/docs/ar/testing.mdx b/docs/ar/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## اختبارات الوحدة
 
-تقع اختبارات الوحدة في `__tests__/` وتستخدم [Vitest](https://vitest.dev) مع `happy-dom`.
+تقع اختبارات الوحدة في `__tests__/` وتستخدم [Vitest](https://vitest.dev) مع `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/de/testing.mdx b/docs/de/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Unit-Tests
 
-Unit-Tests befinden sich in `__tests__/` und verwenden [Vitest](https://vitest.dev) mit `happy-dom`.
+Unit-Tests befinden sich in `__tests__/` und verwenden [Vitest](https://vitest.dev) mit `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/es/testing.mdx b/docs/es/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Pruebas unitarias
 
-Las pruebas unitarias se encuentran en `__tests__/` y utilizan [Vitest](https://vitest.dev) con `happy-dom`.
+Las pruebas unitarias se encuentran en `__tests__/` y utilizan [Vitest](https://vitest.dev) con `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/fr/testing.mdx b/docs/fr/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Tests unitaires
 
-Les tests unitaires se trouvent dans `__tests__/` et utilisent [Vitest](https://vitest.dev) avec `happy-dom`.
+Les tests unitaires se trouvent dans `__tests__/` et utilisent [Vitest](https://vitest.dev) avec `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/he/testing.mdx b/docs/he/testing.mdx
@@ -32,7 +32,7 @@ bun run lint
 
 ## בדיקות יחידה
 
-בדיקות יחידה נמצאות ב-`__tests__/` והן משתמשות ב-[Vitest](https://vitest.dev) עם `happy-dom`.
+בדיקות יחידה נמצאות ב-`__tests__/` והן משתמשות ב-[Vitest](https://vitest.dev) עם `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/hi/testing.mdx b/docs/hi/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## यूनिट टेस्ट
 
-यूनिट टेस्ट `__tests__/` में रहते हैं और [Vitest](https://vitest.dev) को `happy-dom` के साथ उपयोग करते हैं।
+यूनिट टेस्ट `__tests__/` में रहते हैं और [Vitest](https://vitest.dev) को `jsdom` के साथ उपयोग करते हैं।
 
 ```text
 __tests__/

diff --git a/docs/it/testing.mdx b/docs/it/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Test unitari
 
-I test unitari si trovano in `__tests__/` e utilizzano [Vitest](https://vitest.dev) con `happy-dom`.
+I test unitari si trovano in `__tests__/` e utilizzano [Vitest](https://vitest.dev) con `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/ja/testing.mdx b/docs/ja/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## ユニットテスト
 
-ユニットテストは `__tests__/` に配置されており、`happy-dom` を使用した [Vitest](https://vitest.dev) で実行されます。
+ユニットテストは `__tests__/` に配置されており、`jsdom` を使用した [Vitest](https://vitest.dev) で実行されます。
 
 ```text
 __tests__/

diff --git a/docs/ko/testing.mdx b/docs/ko/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## 단위 테스트
 
-단위 테스트는 `__tests__/` 디렉토리에 위치하며, `happy-dom`을 사용하는 [Vitest](https://vitest.dev)로 작성됩니다.
+단위 테스트는 `__tests__/` 디렉토리에 위치하며, `jsdom`을 사용하는 [Vitest](https://vitest.dev)로 작성됩니다.
 
 ```text
 __tests__/

diff --git a/docs/pt-br/testing.mdx b/docs/pt-br/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Testes unitários
 
-Os testes unitários ficam em `__tests__/` e utilizam [Vitest](https://vitest.dev) com `happy-dom`.
+Os testes unitários ficam em `__tests__/` e utilizam [Vitest](https://vitest.dev) com `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/ru/testing.mdx b/docs/ru/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Модульные тесты
 
-Модульные тесты находятся в `__tests__/` и используют [Vitest](https://vitest.dev) с `happy-dom`.
+Модульные тесты находятся в `__tests__/` и используют [Vitest](https://vitest.dev) с `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/testing.mdx b/docs/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Unit tests
 
-Unit tests live in `__tests__/` and use [Vitest](https://vitest.dev) with `happy-dom`.
+Unit tests live in `__tests__/` and use [Vitest](https://vitest.dev) with `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/tr/testing.mdx b/docs/tr/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Unit testler
 
-Unit testler `__tests__/` dizininde yer alır ve [Vitest](https://vitest.dev) ile `happy-dom` kullanır.
+Unit testler `__tests__/` dizininde yer alır ve [Vitest](https://vitest.dev) ile `jsdom` kullanır.
 
 ```text
 __tests__/

diff --git a/docs/vi/testing.mdx b/docs/vi/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## Unit tests
 
-Unit tests nằm trong `__tests__/` và sử dụng [Vitest](https://vitest.dev) với `happy-dom`.
+Unit tests nằm trong `__tests__/` và sử dụng [Vitest](https://vitest.dev) với `jsdom`.
 
 ```text
 __tests__/

diff --git a/docs/zh/testing.mdx b/docs/zh/testing.mdx
@@ -31,7 +31,7 @@ bun run lint
 
 ## 单元测试
 
-单元测试位于 `__tests__/` 目录下，使用 [Vitest](https://vitest.dev) 和 `happy-dom`。
+单元测试位于 `__tests__/` 目录下，使用 [Vitest](https://vitest.dev) 和 `jsdom`。
 
 ```text
 __tests__/

diff --git a/package.json b/package.json
@@ -84,7 +84,7 @@
     "clsx": "^2.1.1",
     "eslint": "^10.2.0",
     "eslint-config-next": "^16.2.2",
-    "happy-dom": "^20.7.0",
+    "jsdom": "^29.1.1",
     "lucide-react": "^1.0.1",
     "next": "^16.2.2",
     "react": "^19.2.4",

diff --git a/vitest.config.mts b/vitest.config.mts
@@ -11,7 +11,7 @@ export default defineConfig({
   },
   test: {
     globals: true,
-    environment: "happy-dom",
+    environment: "jsdom",
     setupFiles: ["__tests__/setup.ts"],
     include: ["__tests__/**/*.test.{ts,tsx}"],
     exclude: ["__tests__/e2e/**"],