Vuln fixes and general polishing

.github/pull_request_template.md

@@ -1,7 +1,7 @@
-# JS SDK
+# JavaScript SDK
 
 ## What did you accomplish?
 
 ## How do we test the changes introduced in this PR?
 
-## Extra Notes
+## Extra Notes

.github/workflows/ci-cd.yml

@@ -8,6 +8,9 @@ on:
     branches:
       - '*'
 
+env:
+  CHROME_BIN: /usr/bin/google-chrome-stable
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.run_number || github.event.pull_request.number }}
   cancel-in-progress: true
@@ -40,6 +43,8 @@ jobs:
 
       - name: npm ci
         run: npm ci
+        env:
+          PUPPETEER_SKIP_DOWNLOAD: 'true'
 
       - name: npm ts tests
         run: npm run test-ts-decls

.gitignore

@@ -9,9 +9,6 @@
 /.vscode
 dump.rdb
 
-## local environment setup
-/startup.sh
-
 ## coverage info
 /karma/coverage
 

CHANGES.txt

@@ -1,3 +1,8 @@
+11.11.2 (June 25, 2026)
+ - Updated @splitsoftware/splitio-commons package to version 2.12.1, which:
+     - updates internal modules to handle `null` values from `/splitChanges` response.
+     - updates some dependencies for vulnerability fixes.
+
 11.11.1 (March 18, 2026)
  - Updated TypeScript declaration to use `namespace` instead of `module` for compatibility with TypeScript 7 (Related to issue https://github.com/splitio/javascript-client/issues/920).
 

karma/config.js

@@ -1,7 +1,9 @@
 'use strict';
-// Comment the next two lines if you want to run with Chrome instead of Chromium
-const puppeteer = require('puppeteer');
-process.env.CHROME_BIN = puppeteer.executablePath();
+// Use CHROME_BIN env var if set (e.g., in CI), otherwise fall back to Puppeteer's bundled Chromium
+if (!process.env.CHROME_BIN) {
+  const puppeteer = require('puppeteer');
+  process.env.CHROME_BIN = puppeteer.executablePath();
+}
 
 const NodePolyfillPlugin = require('node-polyfill-webpack-plugin');
 
@@ -29,21 +31,7 @@ module.exports = {
     // Uncomment to run a particular UT:
     // '**/listeners/__tests__/browser.spec.js',
     // Run browser UTs. Commons and Node UTs run with `test-node` npm script
-    '*/**/__tests__/**/browser.spec.js',
-    {
-      pattern: 'engine/__tests__/engine/mocks/murmur3*.csv',
-      watched: false,
-      included: false,
-      served: true,
-      nocache: true
-    },
-    {
-      pattern: 'engine/__tests__/matchers/mocks/regex.txt',
-      watched: false,
-      included: false,
-      served: true,
-      nocache: true
-    }
+    '*/**/__tests__/**/browser.spec.js'
   ],
 
   // list of files / patterns to exclude