fix(deps): update dependency cockatiel to v4

[metamask-ci]

This PR contains the following updates:

Package	Change	Age	Confidence
cockatiel	^3.1.2 → ^4.0.0

---

Release Notes

connor4312/cockatiel (cockatiel)

v4.0.0

Compare Source

• breaking: updated minimum Node version to 22, and cockatiel is now built as an ES module
• breaking: errors surfaced from policies are no longer cast via as Error; callback and result types now reflect unknown for thrown values (#​97)
• feat: add halfOpenSampling option to the circuit breaker (#​73)
• fix: bulkhead queue starvation when queued executions were aborted (#​112)
• fix: propagate the abort signal into the half-open state of the circuit breaker (#​112)
• fix: deep copy state in CountBreaker and SamplingBreaker getters/setters via structuredClone (#​113)
• fix: correct type predicates for errors (#​103)
• fix: propagate abort reason in derived signals (#​101)
• docs: clarify that TaskCancelledError is not thrown on cooperative timeouts (#​98)
• docs: fix comment in wrapped policies example (#​118)
• chore: update node types to support AbortSignal (#​116)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

Note

Medium Risk
Changes retry and circuit-breaker dependency versions and error-handling signatures on RPC and shield polling paths; test-only ESM shimming limits runtime risk but those code paths warrant regression testing.

Overview
Upgrades cockatiel from ^3.2.1 to ^4.0.0 across packages that use it for retries and circuit breakers (base-data-service, controller-utils, core-backend, network-controller, shield-controller), with matching changelog and lockfile updates. The root monorepo also adds cockatiel as a devDependency for the shared test setup.

Because v4 ships as ESM-only, package tests (compiled to CommonJS) get a Jest bridge: setupCockatiel.mjs loads the real module via the ESM loader, tests/cockatiel.cjs re-exports it on globalThis, and jest.config.packages.cjs maps cockatiel to that shim so Node 22 can run tests without synchronous require(esm).

Application code aligns with v4’s unknown error typing: RPC retry helpers in network-controller (isHttpServerError, isTimeoutError, isConnectionResetError) and #shouldRetry in shield-controller now accept unknown and guard with isObject / hasProperty instead of assuming Error.

^{Reviewed by Cursor Bugbot for commit 26ecc8f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cockatiel@​4.0.0

View full report

[metamask-ci]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.