Chore: Upgrade jest-environment-jsdom, auth0.js and component-cdn-uploader

[ankita10119]

Changes

This pull request upgrades several dependencies and refactors the test setup to align with the latest version of Jest and jsdom. It removes the deprecated jest-environment-jsdom-global in favor of the built-in "jsdom" environment, updates browser utilities, and ensures that all tests continue to run reliably after the upgrade.

Dependency Upgrades

• Removed jest-environment-jsdom-global and replaced it with the built-in "jsdom" test environment.
• Upgraded jest-environment-jsdom from version ^29.3.1 to ^30.2.0.
• Upgraded auth0-js from version ^9.27.0 to ^9.29.0.
• Upgraded @auth0/component-cdn-uploader from version ^2.2.2 to ^2.4.0.

Test Infrastructure Changes

• Replaced jest-environment-jsdom-global functionality by defining a global jsdom.reconfigure() mock within src/tests/setup-tests.js.
• Added src/utils/browser.js to safely mock browser globals such as window.location, href, pathname, and search across tests.
• Introduced src/test-setup/polyfills.js to provide polyfills for TextEncoder, MessagePort, and other web APIs required by jsdom.
• Updated tests to use the new browser utility helpers and adjusted snapshots where necessary.

Code Updates

• Updated logic in core/index.js, core/sso/last_login_screen.jsx, and core/web_api/p2_api.js to use the new browser utilities for accessing and mocking location data.
• Replaced spread syntax with Object.assign for better legacy browser compatibility (IE 11).
• Updated Babel and Webpack configurations to target IE 11 explicitly and ensure all transforms are applied.

Testing

• No functional changes in production code.
• All test suites continue to pass with the updated setup.
• Minor snapshot changes due to rendering differences in updated jsdom and Jest versions.

Reference

https://github.com/auth0/lock/security/dependabot/189

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All code quality tools/guidelines have been run/followed
• All relevant assets have been compiled

[ankita10119]

@claude

[gyaneshgouraw-okta]

@claude

[yogeshchoudhary147]

Great work on this PR. This is a really important cleanup—getting rid of deprecated packages and strengthening the test setup is a big win. The new browser utility and the IE11 fixes look correct. LGTM!

[gyaneshgouraw-okta]

@claude

[github-actions]

Object spread operator incompatible with IE11

The object spread syntax (...ulpTelemetry, ...ulpTelemetry.env) is not supported in IE11, even with Babel polyfills. While Babel will transpile this, the PR description mentions replacing spread syntax with Object.assign for IE11 compatibility.

For consistency with the stated goals, replace with Object.assign:

telemetry = Object.assign({}, ulpTelemetry, {
  env: Object.assign({}, ulpTelemetry.env, {
    'lock.js-ulp': getVersion(),
    'auth0.js-ulp': auth0.version.raw
  })
});

[gyaneshgouraw-okta]

@ankita10119 please check this, if this is relevant

[ankita10119]

Addressed and updated