fix(deps): update dependency cockatiel to v4

[metamask-ci]

This PR contains the following updates:

Package	Change	Age	Confidence
cockatiel	^3.1.2 → ^4.0.0

---

Release Notes

connor4312/cockatiel (cockatiel)

v4.0.0

Compare Source

• breaking: updated minimum Node version to 22, and cockatiel is now built as an ES module
• breaking: errors surfaced from policies are no longer cast via as Error; callback and result types now reflect unknown for thrown values (#​97)
• feat: add halfOpenSampling option to the circuit breaker (#​73)
• fix: bulkhead queue starvation when queued executions were aborted (#​112)
• fix: propagate the abort signal into the half-open state of the circuit breaker (#​112)
• fix: deep copy state in CountBreaker and SamplingBreaker getters/setters via structuredClone (#​113)
• fix: correct type predicates for errors (#​103)
• fix: propagate abort reason in derived signals (#​101)
• docs: clarify that TaskCancelledError is not thrown on cooperative timeouts (#​98)
• docs: fix comment in wrapped policies example (#​118)
• chore: update node types to support AbortSignal (#​116)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

Note

Medium Risk
Cockatiel v4 drives resilience for RPC, backend HTTP, and Shield polling; a major bump can change retry/circuit-breaker behavior even without local code edits, though the diff is dependency-only.

Overview
Upgrades cockatiel from ^3.1.2 to ^4.0.0 in @metamask/base-data-service, @metamask/controller-utils, @metamask/core-backend, and @metamask/shield-controller, and in network-controller devDependencies, with matching [Unreleased] changelog lines and yarn.lock pinned to cockatiel@4.0.0.

There are no application source changes in this PR—only dependency and release-note updates. Consumers still use the same createServicePolicy / direct cockatiel imports for retries, circuit breakers, and Shield polling; they now resolve v4, which is ESM-only, requires Node 22+, and treats policy failures as unknown instead of Error (aligned with recent MetaMask package baselines).

^{Reviewed by Cursor Bugbot for commit e22c756. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cockatiel@​4.0.0

View full report

[metamask-ci]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.