chore(release): prepare core 3.0.0

[rmi22186]

Background

This is stage 1 of the manual 3.0.0 bootstrap release. It prepares the core @mparticle/web-sdk package without publishing, tagging, creating a GitHub release, or changing npm dist-tags.

After this PR merges, the core package must be manually published under the next dist-tag before the kit lockfiles can resolve core 3.0.0. Kit manifest and lockfile updates belong to the subsequent stage.

What Has Changed

• Set the root package and lockfile versions to exactly 3.0.0.
• Updated the three tracked core runtime bundles that embed src/constants.ts's package-derived SDK version: IIFE, CommonJS, and ESM.
• Left all kit manifests, dependency ranges, lockfiles, and generated kit artifacts unchanged.
• Left CHANGELOG.md unchanged. Standard releases generate it through semantic-release; release notes/changelog preparation remains a manual-release prerequisite for this bootstrap.

Generated Artifact Scope

A full build was run and inspected. The stub and declaration outputs do not embed the core package version, and their generated differences reflected unrelated pre-existing source/artifact drift, so they are intentionally excluded. The committed runtime bundle diffs contain only 2.79.0 to 3.0.0 version substitutions.

Validation

• Base verified: origin/main exactly 7dc7adbe5c8fd157baccd25c2eecdb7d88925461.
• Clean install: npm ci.
• Lint: npm run lint.
• Formatting: npm run prettier.
• Build: npm run build (completed successfully; the repository's build:types command emitted its existing declaration diagnostics, which it explicitly tolerates while verifying required declarations exist).
• Jest: npm run test:jest — 26 suites, 628 tests passed.
• Full browser suite: npm test — 2,138 Chrome/Firefox executions passed.
• Stub: npm run test:stub — 5 passed.
• Integrations: npm run test:integrations — RequireJS plus Browserify, Webpack, and Rollup CJS/ESM suites passed in Chrome and Firefox.
• Runtime version: CommonJS mParticle.getVersion() returned 3.0.0; IIFE, CommonJS, and ESM bundles each contain the authoritative 3.0.0 version constant and no 2.79.0 version constant.
• Package validation: npm pack --dry-run --json reported @mparticle/web-sdk@3.0.0, 127 files, and all required runtime/type/source entries.
• Diff validation: git diff --check passed; no kit package manifest or lockfile changed.

Publication

No publication occurs in this PR. No v3.0.0 tag, GitHub release, npm publication, or npm dist-tag change has been created.

[cursor]

PR Summary

Low Risk
Mechanical semver and regenerated dist output with no application logic changes in the diff.

Overview
Stage-one 3.0.0 bootstrap for the core @mparticle/web-sdk package: no npm publish, tags, or kit updates in this PR.

Version alignment: package.json and package-lock.json move from 2.80.1 to 3.0.0. The rebuilt IIFE, CommonJS, and ESM runtime bundles (dist/mparticle.js, mparticle.common.js, mparticle.esm.js) now embed 3.0.0 as the SDK version constant (sourced from package.json via src/constants.ts), so getVersion() and server-reported sdkVersion match the new major.

Out of scope (unchanged): kit manifests/lockfiles, CHANGELOG.md, stub/types-only artifacts, and any behavioral SDK code—the committed bundle diffs are version-string substitutions only.

^{Reviewed by Cursor Bugbot for commit d83b3e2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[jaissica12]

#1314 already removed logCheckout / logRefund / cart / getCart from source (feat: remove unused deprecated cart/commerce APIs (keep logPurchase)). That PR did not regenerate dist/mparticle.js, so the checked-in IIFE still contains those APIs.

This branch only rewrites 2.80.1 → 3.0.0 in package.json and the existing bundle. dist/mparticle.js still has logCheckout: (same stale IIFE #1314 left behind). Shipping this as 3.0.0 would label a v3 release while the CDN file still exposes the removed methods.

[crisryantan]

@jaissica12 Good catch — addressed in 4a220d4.

The bundles (plus stub and dist/types) are now regenerated from source at this commit rather than version-patched, so the checked-in dist reflects the #1314 removals:

	committed bundle before	after 4a220d4
logCheckout / logRefund / getCart occurrences in dist/mparticle.js	35	0
version constant	3.0.0 (patched into stale IIFE)	3.0.0 (built from source)

Remaining AddToCart hits are the legitimate ProductActionType / CommerceEventType enums from src/types.ts, which #1314 intentionally kept alongside logPurchase.

Note for the record: the stale IIFE was never going to reach the CDN — the release workflow builds fresh from source — but the checked-in artifact mislabeling a v3 was real and is now fixed. Jest (28 suites / 694 tests) and the full kit matrix were green on the parent commit; checks are re-running on this one.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud