chore(deps): update rust crates by renovate[bot] · Pull Request #10244 · rolldown/rolldown

renovate · 2026-07-12T16:20:59Z

This PR contains the following updates:

Package	Type	Update	Change
ignore (source)	dependencies	patch	`0.4.27` → `0.4.28`
ignore (source)	workspace.dependencies	patch	`0.4.27` → `0.4.28`
jsonschema	workspace.dependencies	minor	`0.46.10` → `0.47.0`
memchr	workspace.dependencies	patch	`2.8.2` → `2.8.3`
regex	workspace.dependencies	minor	`1.12.4` → `1.13.0`
uuid	workspace.dependencies	patch	`1.23.4` → `1.23.5`

Release Notes

BurntSushi/ripgrep (ignore)

`v0.4.28`

Compare Source

BurntSushi/memchr (memchr)

`v2.8.3`

Compare Source

rust-lang/regex (regex)

`v1.13.0`

Compare Source

===================
This release includes a new API, a regex! macro, for lazy compilation of
a regex from a string literal. If you use regexes a lot, it's likely you've
already written one exactly like it. The new macro can be used like this:

use regex::regex;

fn is_match(line: &str) -> bool {
    // The regex will be compiled approximately once and reused automatically.
    // This avoids the footgun of using `Regex::new` here, which would
    // guarantee that it would be compiled every time this routine is called.
    // This would likely make this routine much slower than it needs to be.
    regex!(r"bar|baz").is_match(line)
}

let hay = "\
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";

let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

#709:
Add a new regex! macro for efficient and automatic reuse of a compiled regex.

uuid-rs/uuid (uuid)

`v1.23.5`

Compare Source

What's Changed

doc: Fix broken link by @frostyplanet in #891
perf: Optimize UUID hex parsing and formatting by @geeknoid in #894
Prepare for 1.23.5 release by @KodrAus in #895

New Contributors

@geeknoid made their first contribution in #894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-07-12T16:21:18Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/ignore@0.4.27 ⏵ 0.4.28	^-1
	cargo/regex@1.12.4 ⏵ 1.13.0
	cargo/uuid@1.23.4 ⏵ 1.23.5
	cargo/memchr@2.8.2 ⏵ 2.8.3
	cargo/jsonschema@0.46.10 ⏵ 0.47.0	⁺¹

View full report

socket-security · 2026-07-12T16:21:20Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

netlify · 2026-07-12T16:22:23Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`277902c`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/6a54470d51c4ce0008b3195a

codspeed-hq · 2026-07-12T16:29:21Z

Merging this PR will not alter performance

✅ 7 untouched benchmarks
⏩ 10 skipped benchmarks¹

_{Comparing renovate/rust-crates (277902c) with main (8f36f95)}

10 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

renovate · 2026-07-13T02:06:09Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

### Description `idna_adapter` is pinned to `=1.0.0` on purpose. #9811 pinned it to keep the lighter unicode-rs backend and avoid pulling in the ICU4X dependencies, which would grow the binary by about 129 KB. Renovate does not know about this intent, so it keeps proposing to bump the pin (for example in #10244). This PR adds a `packageRules` entry that disables Renovate updates for `idna_adapter`, with a `description` field explaining why. After this lands, rebasing #10244 will drop the `idna_adapter` bump while keeping the other crate updates.

@h-a-n-a

## [1.2.0] - 2026-07-15 ### 🚀 Features - dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a - dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a - dev: client-side HMR (#10164) by @h-a-n-a - dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda - treat `import.meta['url']` and `import.meta['ROLLUP_FILE_URL_*']` as side-effect free (#10267) by @sapphi-red - rewrite `import.meta['url']` (#10251) by @sapphi-red - add `FILE_NOT_FOUND` error (#10220) by @sapphi-red - treat `import.meta.ROLLUP_FILE_URL_*` as side-effect free (#10217) by @sapphi-red ### 🐛 Bug Fixes - sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev - `[format]` in `*FileNames` option for ESM format should be `es` instead of `esm` (#10214) by @sapphi-red - sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev - rolldown_plugin_vite_import_glob: support tsconfig paths with `import.meta.glob` (#10167) by @sapphi-red - dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda - dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda - treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY - watch: rebuild when tsconfig files change (#10258) by @shulaoda - watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda - incorrect `EMPTY_IMPORT_META` warning for `import.meta.ROLLUP_FILE_URL_*` for CJS output (#10221) by @sapphi-red - deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY - rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY - rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY - tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm - s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620 ### 🚜 Refactor - dev: move full-reload to client side (#10207) by @h-a-n-a - readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY - replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen - share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda - rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY - rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY - sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY - extract external import symbol merging into a method (#10224) by @IWANABETHATGUY - rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev - resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda - rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev - rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev ### 📚 Documentation - show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red - add an explanation about removing imports from external modules without any messages (#10215) by @sapphi-red ### ⚡ Performance - sourcemap: owned merge in SourceJoiner::join (4005->5 allocs/chunk) (#10250) by @Boshen - avoid redundant sourcemap string copies in collapse and minify paths (#10093) by @Boshen ### 🧪 Testing - code-splitting: establish strict-order review baselines (#10287) by @hyfdev - dev: add hot API test cases (#10181) by @h-a-n-a - code-splitting: normalize strict execution order variants (#10277) by @hyfdev - code-splitting: harden strict execution order coverage (#10252) by @hyfdev - code-splitting: add strict execution order regressions (#10253) by @hyfdev ### ⚙️ Miscellaneous Tasks - deps: update github actions (#10241) by @renovate[bot] - deps: update oxc to 0.140.0 (#10274) by @shulaoda - update Yunfei's GitHub username (#10275) by @hyfdev - deps: update napi (#10260) by @renovate[bot] - deps: update test262 submodule for tests (#10266) by @rolldown-guard[bot] - deps: update dependency vite-plus to v0.2.4 (#10256) by @renovate[bot] - deps: update napi (#10240) by @renovate[bot] - deps: update oxc resolver to v11.24.2 (#10245) by @renovate[bot] - deps: update rust crates (#10244) by @renovate[bot] - disable Renovate updates for idna_adapter (#10248) by @shulaoda - deps: update oxc resolver to v11.24.1 (#10232) by @renovate[bot] - deps: update rust crate oxc_sourcemap to v8.1.1 (#10233) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to ^0.27.0 (#10206) by @renovate[bot] - deps: upgrade sugar_path to v3 (#10230) by @hyfdev - add `dist-*` to `.gitignore` in sourcemap-filenames/hash-final-content fixture (#10216) by @sapphi-red - deps: update dependency rust to v1.97.0 (#10209) by @renovate[bot] ### ❤️ New Contributors * @satyamg1620 made their first contribution in [#10211](#10211) Co-authored-by: shulaoda <[email protected]>

renovate Bot force-pushed the renovate/rust-crates branch 2 times, most recently from ec0b617 to 25e9365 Compare July 12, 2026 17:22

chore(deps): update rust crates

1d70985

renovate Bot force-pushed the renovate/rust-crates branch from 25e9365 to 1d70985 Compare July 12, 2026 23:50

shulaoda mentioned this pull request Jul 13, 2026

chore: disable Renovate updates for idna_adapter #10248

Merged

shulaoda self-assigned this Jul 13, 2026

shulaoda added 2 commits July 13, 2026 09:59

u

435c38c

Merge branch 'main' into renovate/rust-crates

277902c

shulaoda approved these changes Jul 13, 2026

View reviewed changes

shulaoda merged commit 20fbd69 into main Jul 13, 2026
54 of 56 checks passed

shulaoda deleted the renovate/rust-crates branch July 13, 2026 03:28

rolldown-guard Bot mentioned this pull request Jul 15, 2026

release: v1.2.0 #10292

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update rust crates#10244

chore(deps): update rust crates#10244
shulaoda merged 3 commits into
mainfrom
renovate/rust-crates

renovate Bot commented Jul 12, 2026 •

edited by shulaoda

Loading

Uh oh!

socket-security Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jul 12, 2026 • edited by shulaoda Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.4.28

v2.8.3

v1.13.0

v1.23.5

What's Changed

New Contributors

Configuration

Uh oh!

socket-security Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

codspeed-hq Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will not alter performance

Footnotes

Uh oh!

renovate Bot commented Jul 13, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jul 12, 2026 •

edited by shulaoda

Loading

`v0.4.28`

`v2.8.3`

`v1.13.0`

`v1.23.5`

socket-security Bot commented Jul 12, 2026 •

edited

Loading

socket-security Bot commented Jul 12, 2026 •

edited

Loading

netlify Bot commented Jul 12, 2026 •

edited

Loading

codspeed-hq Bot commented Jul 12, 2026 •

edited

Loading