fix(braze): derive runtime versions from package manifests

[rmi22186]

Summary

• replace Braze 3–6 hardcoded runtime versions with manifest-derived build values
• add Rollup-compatible version replacement with explicit missing-version failures
• cover each Braze runtime API and guard the complete kit version-surface inventory

Test plan

• Build Braze 3, 4, 5, and 6
• Run Braze 3–6 suites in Chrome and Firefox
• Run test/jest/release-scripts.spec.ts
• Run ESLint and JavaScript/TypeScript Prettier checks
• Inspect CJS, IIFE, and ESM outputs for 3.1.0 and stale version tokens

Notes

• npm run gts:check still crashes on the existing generated dist/types/src/audience.d.ts; targeted Jest compilation and Prettier checks pass for the changed TypeScript test.

[cursor]

PR Summary

Low Risk
Build-time version injection and tests only; no runtime event or identity behavior changes. Risk is mainly a misconfigured build leaving a bad version string, which the new guard and failing Rollup config are meant to catch.

Overview
Braze web kits v3–v5 no longer hardcode their reported version in source. Each kit now uses process.env.PACKAGE_VERSION, which Rollup replaces with package.json’s version when building IIFE/CJS (and ESM for v5). Builds fail fast if npm_package_version is unset.

Rollup gains rollup-plugin-replace (v3) or @rollup/plugin-replace (v4/v5). Karma tests assert getVersion() matches the manifest version.

A new release-scripts.spec.ts check inventories kits that expose runtime versions and requires the replace wiring in their build configs (including Braze 6 and Rokt), so future kits cannot drift back to manual version strings.

^{Reviewed by Cursor Bugbot for commit 04fd4e1. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a935bd2. Configure here.}

[sonarqubecloud]

Quality Gate failed

Failed conditions
33.1% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud