fix: Windows chat scroll bounce; CI matrix, identity bridge, deps (#562)

* refactor: fold arm64 NSIS smoke test into packaging-smoke matrix

- Move windows-11-arm WoA install test from standalone win-arm64-install
  job into packaging-smoke in build.yaml and release.yaml.
- Keep per-arch failure-log upload steps keyed on matrix.os (runner.temp
  is not valid in matrix definitions).
- Update windows-packaging contract test to assert matrix layout instead
  of the removed job name.

Keeps all four packaging smoke checks under one matrix in the workflow
graph while preserving arm64-on-WoA runner requirements.

* fix: decouple virtualizer scroll end threshold to stop Windows bounce

- Add VIRTUALIZER_SCROLL_END_THRESHOLD (30px) separate from the app UI
  CHAT_SCROLL_END_THRESHOLD (200px) so TanStack's independent wasAtEnd
  resize path clears after one Windows mouse wheel notch (~60px).
- Wire the tighter threshold in ChatPanel (Meshtastic/MeshCore chat) and
  RoomsPanel (MeshCore rooms); harden createChatScrollAdjustPredicate with
  a live isAtEnd() guard for stale pin-ref races.
- Mirror RoomsPanel follow-on-append in ChatPanel via scrollToEnd when
  isPinnedToBottomRef is true, preserving auto-scroll in the 30–200px band.

Windows wheel deltas were still within the 200px wasAtEnd window, causing
resizeItem to counter-adjust during flushSync and bounce the list back down
while isPinnedToBottomRef had not yet updated in React onScroll.

* chore: bump deps

* chore: trim blank line after issue template frontmatter

- Remove extra blank line between YAML frontmatter and body in bug,
  feature request, and translation-error issue templates.

Keeps issue template formatting consistent (whitespace-only).

* refactor: share prefixed id helper and centralize discovery identity patch

- Add randomPrefixedId in src/shared/ and use it from ConnectionDriver and
  meshIdentityBridge instead of duplicate local randomId/randomIdentityId.
- Introduce patchIdentityFromDiscovery in resolveOrCreateIdentity so
  signature, selfNodeNum, and publicKey are applied once for all code paths.
- Remove redundant updateIdentity block from bindMeshcoreIngress; reuse the
  same helper in finalizeMeshcoreDriverIdentity.

Avoids divergent identity/transport id formats and duplicate signature writes
when MeshCore ingress binds with post-connect discovery info.

Author: rinchen

.github/ISSUE_TEMPLATE/bug_report.md

@@ -4,7 +4,6 @@ about: Create a report to help us improve
 title: ''
 labels: ''
 assignees: ''
-
 ---
 
 **Describe the bug**

.github/ISSUE_TEMPLATE/feature_request.md

@@ -4,7 +4,6 @@ about: Suggest an idea for this project
 title: ''
 labels: ''
 assignees: ''
-
 ---
 
 **Is your feature request related to a problem? Please describe.**

.github/ISSUE_TEMPLATE/translation-error.md

@@ -4,7 +4,6 @@ about: Report a translation error
 title: ''
 labels: ''
 assignees: ''
-
 ---
 
 Language (in English):

.github/workflows/build.yaml

@@ -127,6 +127,10 @@ jobs:
             label: x64 NSIS install
             artifact: mesh-client-windows-${{ github.sha }}
             smoke_run: node scripts/test-win-nsis-install.mjs --arch x64
+          - os: windows-11-arm
+            label: arm64 NSIS install (WoA)
+            artifact: mesh-client-windows-${{ github.sha }}
+            smoke_run: node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
@@ -150,27 +154,8 @@ jobs:
           if-no-files-found: ignore
           retention-days: 7
 
-  win-arm64-install:
-    name: Smoke test arm64 NSIS install (WoA)
-    needs: build
-    runs-on: windows-11-arm
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Download Windows build artifact
-        uses: actions/download-artifact@v7
-        with:
-          name: mesh-client-windows-${{ github.sha }}
-          path: release
-
-      - name: Smoke test arm64 NSIS install (7z probe + install)
-        run: node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z
-
-      - name: Upload arm64 install failure logs
-        if: failure()
+      - name: Upload Windows arm64 install failure logs
+        if: failure() && matrix.os == 'windows-11-arm'
         uses: actions/upload-artifact@v7
         with:
           name: mesh-client-win-arm64-install-logs-${{ github.sha }}

.github/workflows/release.yaml

@@ -130,6 +130,10 @@ jobs:
             label: x64 NSIS install
             artifact: mesh-client-windows-${{ github.sha }}
             smoke_run: node scripts/test-win-nsis-install.mjs --arch x64
+          - os: windows-11-arm
+            label: arm64 NSIS install (WoA)
+            artifact: mesh-client-windows-${{ github.sha }}
+            smoke_run: node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
@@ -153,27 +157,8 @@ jobs:
           if-no-files-found: ignore
           retention-days: 7
 
-  win-arm64-install:
-    name: Smoke test arm64 NSIS install (WoA)
-    needs: release
-    runs-on: windows-11-arm
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Download Windows build artifact
-        uses: actions/download-artifact@v7
-        with:
-          name: mesh-client-windows-${{ github.sha }}
-          path: release
-
-      - name: Smoke test arm64 NSIS install (7z probe + install)
-        run: node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z
-
-      - name: Upload arm64 install failure logs
-        if: failure()
+      - name: Upload Windows arm64 install failure logs
+        if: failure() && matrix.os == 'windows-11-arm'
         uses: actions/upload-artifact@v7
         with:
           name: mesh-client-win-arm64-install-logs-${{ github.sha }}

package.json

@@ -123,7 +123,7 @@
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
     "@types/leaflet": "^1.9.21",
-    "@types/node": "^25.9.3",
+    "@types/node": "^25.9.4",
     "@types/node-forge": "^1.3.14",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
@@ -133,7 +133,7 @@
     "@vitest/coverage-v8": "^4.1.9",
     "concurrently": "^9.2.3",
     "electron": "^41.8.0",
-    "electron-builder": "^26.15.4",
+    "electron-builder": "^26.15.5",
     "esbuild": "^0.28.1",
     "eslint": "^10.5.0",
     "eslint-config-prettier": "^10.1.8",

pnpm-lock.yaml

@@ -146,12 +146,13 @@ describe('Windows packaging (contract)', () => {
     expect(buildWorkflow).toContain('packaging-smoke:');
     expect(buildWorkflow).toContain('label: x64 NSIS install');
     expect(buildWorkflow).toContain('node scripts/test-win-nsis-install.mjs --arch x64');
-    expect(buildWorkflow).toContain('win-arm64-install:');
-    expect(buildWorkflow).toContain('runs-on: windows-11-arm');
+    expect(buildWorkflow).toContain('label: arm64 NSIS install (WoA)');
+    expect(buildWorkflow).toContain('- os: windows-11-arm');
     expect(buildWorkflow).toContain(
       'node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z',
     );
     expect(buildWorkflow).toContain('needs: build');
+    expect(buildWorkflow).not.toContain('win-arm64-install:');
 
     const buildJobBlock = buildWorkflow.slice(
       buildWorkflow.indexOf('  build:'),
@@ -174,12 +175,13 @@ describe('Windows packaging (contract)', () => {
     expect(releaseWorkflow).toContain('packaging-smoke:');
     expect(releaseWorkflow).toContain('label: x64 NSIS install');
     expect(releaseWorkflow).toContain('node scripts/test-win-nsis-install.mjs --arch x64');
-    expect(releaseWorkflow).toContain('win-arm64-install:');
-    expect(releaseWorkflow).toContain('runs-on: windows-11-arm');
+    expect(releaseWorkflow).toContain('label: arm64 NSIS install (WoA)');
+    expect(releaseWorkflow).toContain('- os: windows-11-arm');
     expect(releaseWorkflow).toContain(
       'node scripts/test-win-nsis-install.mjs --arch arm64 --probe-7z',
     );
     expect(releaseWorkflow).toContain('needs: release');
+    expect(releaseWorkflow).not.toContain('win-arm64-install:');
 
     const releaseJobBlock = releaseWorkflow.slice(
       releaseWorkflow.indexOf('  release:'),