fix(scripts): correct rootPath in validation scripts and remove stale vitest import

Fix two critical issues preventing CI from passing:

1. Validation scripts rootPath bug:
   - All scripts in scripts/validate/ were using path.join(__dirname, '..')
   - Should be path.join(__dirname, '..', '..') since they're nested two levels deep
   - Caused scripts to look in scripts/ instead of project root
   - Fixed in 7 validation scripts: bundle-deps, esbuild-minify, file-count,
     file-size, markdown-filenames, no-cdn-refs, no-link-deps

2. CDN validator self-exclusion bug:
   - Script was checking for 'validate-no-cdn-refs.mjs' but actual filename is 'no-cdn-refs.mjs'
   - Caused validator to flag itself as containing CDN references
   - Fixed filename check to match actual file

3. Vitest config stale import:
   - Removed import of get-local-package-aliases.mjs (deleted in 40d1abe)
   - Removed unused resolve.alias configuration
   - Config now matches isolated config pattern

All checks and tests now pass locally and should pass in CI.

Author: jdalton

.config/vitest.config.mts

@@ -20,15 +20,8 @@
  * - Full process isolation between tests
  * - File naming: *.isolated.test.mts suffix
  */
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
-
 import { defineConfig } from 'vitest/config'
 
-import { getLocalPackageAliases } from '../scripts/utils/get-local-package-aliases.mjs'
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url))
-
 // Check if coverage is enabled via CLI flags or environment.
 const isCoverageEnabled =
   process.env.COVERAGE === 'true' ||
@@ -42,9 +35,6 @@ if (isCoverageEnabled) {
 
 export default defineConfig({
   cacheDir: './.cache/vitest',
-  resolve: {
-    alias: getLocalPackageAliases(path.join(__dirname, '..')),
-  },
   test: {
     globals: false,
     environment: 'node',

scripts/validate/bundle-deps.mjs

@@ -15,7 +15,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 // Node.js builtins to ignore (including node: prefix variants)
 const BUILTIN_MODULES = new Set([

scripts/validate/esbuild-minify.mjs

@@ -7,7 +7,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 /**
  * Validate esbuild configuration has minify: false.

scripts/validate/file-count.mjs

@@ -18,7 +18,7 @@ const logger = loggerPkg.getDefaultLogger()
 const execAsync = promisify(exec)
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 // Maximum number of files in a single commit
 const MAX_FILES_PER_COMMIT = 50

scripts/validate/file-size.mjs

@@ -16,7 +16,7 @@ import loggerPkg from '@socketsecurity/lib/logger'
 const logger = loggerPkg.getDefaultLogger()
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 // Maximum file size: 2MB (2,097,152 bytes)
 const MAX_FILE_SIZE = 2 * 1024 * 1024

scripts/validate/markdown-filenames.mjs

@@ -25,7 +25,7 @@ import loggerPkg from '@socketsecurity/lib/logger'
 const logger = loggerPkg.getDefaultLogger()
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 // Allowed SCREAMING_CASE markdown files (without .md extension for comparison)
 const ALLOWED_SCREAMING_CASE = new Set([

scripts/validate/no-cdn-refs.mjs

@@ -21,7 +21,7 @@ import loggerPkg from '@socketsecurity/lib/logger'
 const logger = loggerPkg.getDefaultLogger()
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 // CDN domains to block
 const CDN_PATTERNS = [
@@ -114,7 +114,7 @@ async function findTextFiles(dir, files = []) {
  */
 async function checkFileForCdnRefs(filePath) {
   // Skip this validator script itself (it mentions CDN domains by necessity)
-  if (filePath.endsWith('validate-no-cdn-refs.mjs')) {
+  if (filePath.endsWith('no-cdn-refs.mjs')) {
     return []
   }
 

scripts/validate/no-link-deps.mjs

@@ -8,7 +8,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const rootPath = path.join(__dirname, '..')
+const rootPath = path.join(__dirname, '..', '..')
 
 /**
  * Find all package.json files in the repository.