… to prevent command injection

Git is a native executable on Windows and does not require shell: true. Switch to array-based spawn and separate the -m flag from the commit message to prevent command injection via crafted commit messages.

(cherry picked from commit f1ed025)

Wrap the Vitest mocking overrides in a global guard to prevent repeated execution in shared environments or watch mode runs.

(cherry picked from commit e558117)

Reorder the nullish coalescing chain from `err.message ?? err.stack` to
`err.stack ?? err.message` so that the full stack trace is preserved when
available. Since `err.message` is almost always defined on Error objects,
the previous order meant `err.stack` was never reached.

Also add `assertIsError(err)` and consistent `err.code` inclusion across
all three error-handling locations for improved type safety and debugging.

Fixes #32503

(cherry picked from commit 81e4faa)

…d in watch mode

When stylesheet bundling fails due to an error in a SCSS partial, we now ensure that `referencedFiles` are still passed to the `FileReferenceTracker`. This prevents the dependency between the component and the error file from being lost, allowing the component to be correctly rebuilt when the error is fixed.

(cherry picked from commit 21d8aa4)

Ensure that project.sourceRoot is used directly as it is already relative to the workspace root, preventing duplicated path prefixes for sub-projects.

(cherry picked from commit 4815a54)

See associated pull request for more information.

See associated pull request for more information.

Prior to this change, if an unhandled promise rejection or error occurred
that lacked a `stack` property, the `console.error` wrapper in
`devkit-admin.mts` would receive `undefined`. Attempting to pass
`undefined` to Node`s `util.styleText` caused an unexpected
`ERR_INVALID_ARG_TYPE` crash instead of printing the original error.

This commit updates the `console.warn` and `console.error` overrides
to ensure they only apply `styleText` to strings. It also updates the
top-level try-catch block to fallback to the original error object
if `err.stack` is undefined, preventing silent suppression.

(cherry picked from commit 54c96c8)

…laywright instances

Previously, if CHROME_BIN was set in the environment and a user ran tests targeting the Playwright provider, the path was applied to the global Playwright launch options. This caused tests to crash if a user requested non-Chromium browsers (like Firefox) alongside Chromium, because Playwright would incorrectly attempt to launch the Chrome binary for the Firefox instance.

This commit updates the browser configuration to map instances before providers are initialized, and selectively injects `launchOptions: { executablePath: process.env.CHROME_BIN }` at the individual instance level for chrome and chromium only. This restores parity where users can maintain CHROME_BIN variables while safely invoking alternative browsers.

(cherry picked from commit 8dd341e)

…elper function

This extracts the verbose headless property mutation logic from the monolithic setupBrowserConfiguration function into a standalone applyHeadlessConfiguration helper function to improve maintainability and readability.

(cherry picked from commit 3663f80)