chore(deps): lock file maintenance npm packages by renovate[bot] · Pull Request #5878 · rolldown/rolldown

renovate · 2025-08-24T16:49:43Z

This PR contains the following updates:

Package	Type	Update	Change
		lockFileMaintenance	All locks refreshed
zx (source)	dependencies	patch	`8.8.0` -> `8.8.1`
@vueuse/core (source)	dependencies	minor	`13.6.0` -> `13.7.0`
knip (source)	devDependencies	minor	`5.62.0` -> `5.63.0`
pnpm (source)	packageManager	minor	`10.14.0` -> `10.15.0`
rollup (source)	devDependencies	minor	`4.46.2` -> `4.48.0`
tinybench	devDependencies	patch	`5.0.0` -> `5.0.1`
tsx (source)	devDependencies	patch	`4.20.4` -> `4.20.5`
vite (source)	dependencies	patch	`7.1.2` -> `7.1.3`
vue (source)	dependencies	patch	`3.5.18` -> `3.5.19`
zx (source)	devDependencies	patch	`8.8.0` -> `8.8.1`

🔧 This Pull Request updates lock files to use the latest dependency versions.

Release Notes

google/zx (zx)

`v8.8.1`: — Turbo Flush

Compare Source

We keep improving the projects internal infra to bring more stability, safety and performance for artifacts.

Featfixes

Applied flags filtration for CLI-driven deps install #1308
Added kill() event logging #1312
Set SIGTERM as kill() fallback signal #1313
Allowed stdio() arg be an array #1311

const p = $({halt: true})`cmd`
p.stdio([stream, 'ignore', 'pipe'])

Enhancements

Added check for zx@lite pkg contents #1317 #1316
Simplified ProcessPromise[asyncIterator] inners #1307
Updated deps: chalk 5.6.0, fs-extra 11.3.1, yaml 2.8.1 #1309 #1323 #1326
Added TS@next to the test matrix #1310
Optimized internal shell setters #1314
Refactored build-publish pipelines and scripts #1319 #1320 #1321 #1322 #1324 #1325 #1327

vueuse/vueuse (@vueuse/core)

View changes on GitHub

webpro-nl/knip (knip)

`v5.63.0`

Compare Source

Don't default-export null (should fix CI) (cacf119)
Always remove ignored issues (#1184) (8deecde) - thanks @wereHamster!
Add option to ignore class member implementations (#1174) (e132ab5) - thanks @Desuuuu!
Update configuration.md (#1195) (15d05e2) - thanks @Swimburger!
Astro: don't interpret files and folders beginning with underscores as entrypoints (#1187) (efac577) - thanks @Ivo-Evans!
Edit docs: enhanced-resolve → oxc-resolver (fdaa2d0)
Add support for negated ignoreWorkspaces (resolves #1191) (592bd73)
Update dependencies (63dacd5)
Fix up formatly report handling (5d4d166)
Replace type-fest with two basic type defs (99ef1e4)
docs: only add TSDoc for configuration (#1161) (377bf73) - thanks @cylewaitforit!
Prioritize renamed re-exports (resolves #1196) (0e21c3b)
Re-gen sponsorships chart (bda00d0)
Format (0de887b)
Bump Node.js 20 → 24 in ecosystem integration tests (5b7b1ce)
Too many times "If this is a Svelte or Vue component.." (f71c919)
Bail out early in lefthook plugin in production mode (50999c8)
Add tsc commands, gitignore file, node version to repro templates (close #1197) (44faf38)
Consistent namespaced issue storage (15ee3fe)
Bump engines.node for dev/docs (3237a47)
Edit docs (78cab1c)
Add globalSetup and globalTeardown to playwright plugin (closes #1202) (1e112d8)
Don't show success message for config errors (resolves #1200) (7dfd836)
Consider subpath import dependencies as referenced (resolves #1198) (05767f1)
Add support for binaries with all positionals as scripts (resolves #1183) (feb0f1b)
Edit debug output label + test title (28ac5ac)
Fix isConsiderReferencedNS for TypeQuery nodes (resolves #1211) (bf29535)
Binaries don't contain asterisks (e.g. script name wildcard) (1ddb096)
Rspack plugin: add mts and cts file extension support (#1207) (abdd3ae) - thanks @newswim!
[react-router] mark routes and entries as production entries (#1188) (8d96f3e) - thanks @rossipedia!
Minor refactor (cfa693f)
Simplify monorepro template (67184d4)
Remove links to discord server (4550d3d)
Update issue templates (875e7f5)
Add plugins + compiler matcher and a tailwind test (#1176) (ffd4187)
Clean up plugin template (1d3b846)
Add rslib plugin (placeholder) (resolve #870) (7e12ea7)
Fix up rsbuild plugin (resolve #1141) (69decda)
Edit docs (3aa2074)
Partition negated glob patterns into fast-glob ignore option (520caec)
Add test for export pattern with --include-libs (close #1199) (938b906)
feat: node-modules-inspector plugin (#1215) (439afa6) - thanks @lishaduck!
rm polar (0cd0aa9)
Add "Relative paths across workspaces" (close #1214) (1396eec)
Add package-entry config hint (resolve #1159) (4f4eefb)
Fix issue with git ignore pattern conversion (9671319)
Update PR template (3905e90)
Knip it before you ship it (ad30f82)
fix: resolve reporter and preprocessor absolute paths properly (#1216) (eefd4cf) - thanks @scandar!
Add Knip article (19aa7ba)
Fix #1224 (#1225) (e789b1b) - thanks @VanTanev!
Fix related-tooling.md link (#1223) (cf87068) - thanks @raulrpearson!
Fix lint issues (975a1bb)
Update linter config (98999c9)
Improve table cell width calc (45d0600)
Tune config hints output (3a909ca)
Update oxc-resolver & astro (5ffb87e)

pnpm/pnpm (pnpm)

`v10.15.0`

Compare Source

Minor Changes

Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
pnpm config get now prints an INI string for an object value #9797.
pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
The standalone exe version of pnpm works with glibc 2.26 again #9734.
Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

rollup/rollup (rollup)

`v4.48.0`

Compare Source

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

Bug Fixes

Ensure variables referenced in non-removed import attributes are included (#6071)

Pull Requests

#6071: Keep attributes for external dynamic imports (@TrickyPi)
#6079: fix(deps): update swc monorepo (major) (@renovate[bot])
#6080: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

`v4.47.1`

Compare Source

2025-08-21

Bug Fixes

Revert build process changes to investigate issues (#6077)

Pull Requests

#6077: Revert "build: aggressively optimize wasm build, improve pipeline (#6053)" (@lukastaegert)

`v4.47.0`

Compare Source

2025-08-21

Features

Aggressively reduce WASM build size (#6053)

Bug Fixes

Fix illegal instruction error on Android ARM platforms (#6072)
Allow to pass explicit undefined for optional fields in Rollup types (#6061)

Pull Requests

#6053: build: aggressively optimize wasm build, improve pipeline (@cyyynthia)
#6061: fix(types): add support for exactOptionalPropertyTypes (@remcohaszing, @lukastaegert)
#6072: build(rust): mimalloc-safe/no_opt_arch on aarch64 (@cyyynthia)

`v4.46.4`

Compare Source

2025-08-20

Bug Fixes

Do not omit synthetic namespaces when only accessed via in operator (#6052)

Pull Requests

#6052: fix: don't optimize in with syntheticNamedExports (@hi-ogawa)
#6074: Update transitive dependency to fix audit (@lukastaegert)

`v4.46.3`

Compare Source

2025-08-18

Bug Fixes

Resolve illegal instruction error on arm64 architectures (#6055)
Resolve sourcemap generation performance regression (#6057)

Pull Requests

#6043: Avoid generated by comment diff on Windows (@sapphi-red)
#6048: chore(deps): update dependency cross-env to v10 (@renovate[bot], @lukastaegert)
#6049: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])
#6055: Fix illegal instruction error on arm64 by enabling no_opt_arch feature for mimalloc-safe (@sapphi-red)
#6057: fix: tweak the fallback logic for tracing segment (@TrickyPi, @lukastaegert)
#6062: docs: update Rust toolchain instructions (@situ2001, @lukastaegert)
#6063: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6067: chore(deps): update actions/checkout action to v5 (@renovate[bot], @lukastaegert)
#6068: chore(deps): update actions/download-artifact action to v5 (@renovate[bot])
#6069: fix(deps): update rust crate swc_compiler_base to v31 (@renovate[bot], @lukastaegert)

tinylibs/tinybench (tinybench)

`v5.0.1`

Compare Source

🐞 Bug Fixes

Ensure median() implementation does not sort array in place - by @jerome-benoit (943db)

View changes on GitHub

privatenumber/tsx (tsx)

`v4.20.5`

Compare Source

Bug Fixes

handle ambiguous packages (796053a)

This release is also available on:

npm package (@latest dist-tag)

vitejs/vite (vite)

`v7.1.3`

Compare Source

Features

cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)
generate code frame for parse errors thrown by terser (#20642) (a9ba017)
support long lines in generateCodeFrame (#20640) (1559577)

Bug Fixes

deps: update all non-major dependencies (#20634) (4851cab)
optimizer: incorrect incompatible error (#20439) (446fe83)
support multiline new URL(..., import.meta.url) expressions (#20644) (9ccf142)

Performance Improvements

cli: dynamically import resolveConfig (#20646) (f691f57)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20633) (98b92e8)

Code Refactoring

replace startsWith with strict equality (#20603) (42816de)
use import in worker threads (#20641) (530687a)

Tests

remove checkNodeVersion test (#20647) (731d3e6)

vuejs/core (vue)

`v3.5.19`

Compare Source

Bug Fixes

compiler-core: adjacent v-else should cause a compiler error (#13699) (911e670), closes #13698
compiler-core: prevent cached array children from retaining detached dom nodes (#13691) (7f60ef8), closes element-plus/element-plus#21408 #13211
compiler-sfc: improve type inference for generic type aliases types (#12876) (d9dd628), closes #12872
compiler-sfc: throw mismatched script langs error before invoking babel (#13194) (0562548), closes #13193
compiler-ssr: disable v-memo transform in ssr vdom fallback branch (#13725) (0a202d8), closes #13724
devtools: clear performance measures (#13701) (c875019), closes #13700
hmr: prevent updating unmounting component during HMR rerender (#13775) (6e5143d), closes #13771 #13772
hydration: also set vShow name if __FEATURE_PROD_HYDRATION_MISMATCH_DETAILS__ flag is enabled (#13777) (439e1a5), closes #13744
reactivity: warn on nested readonly ref update during unwrapping (#12141) (1498821)
runtime-core: avoid setting direct ref of useTemplateRef in dev (#13449) (4a2953f)
runtime-core: improve consistency of PublicInstanceProxyHandlers.has (#13507) (d7283f3)
suspense: don't immediately resolve suspense on last dep unmount (#13456) (a871315), closes #13453
transition: handle KeepAlive + transition leaving edge case (#13152) (3190b17), closes #13153

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-24T16:50:07Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@types/react@19.1.10 ⏵ 19.1.11	⁺¹	⁺¹
knip@5.62.0 ⏵ 5.63.0	⁺¹		⁺⁵
rollup@4.46.2 ⏵ 4.48.0	⁺¹		⁺¹

View full report

netlify · 2025-08-24T16:50:08Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`ff33e27`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/68ab43eda5e13800080cc96b

@shulaoda

## [1.0.0-beta.34] - 2025-08-25 ### 💥 BREAKING CHANGES - improve merging of top-level `transform` option with `tsconfig` (#5882) by @shulaoda - support top-level `tsconfig` (#5842) by @shulaoda ### 🚀 Features - rolldown_plugin_esm_external_require: export namespace directly for Node builtin modules (#5885) by @shulaoda - rolldown_plugin_dynamic_import_vars: warn by default when errors occur (#5866) by @shulaoda - support adding note for diagnostic (#5864) by @IWANABETHATGUY - rolldown_plugin_vite_css_post: align partial css chunk logic (#5861) by @shulaoda - setup `rolldown_binding_watcher` (#5859) by @hyf0 - rolldown_plugin_vite_css_post: align css url replace logic (#5857) by @shulaoda - node/dev: binding for `DevEngine` (#5852) by @hyf0 - dev: introduce `DevEngine` to support build for devlopement scenario (#5808) by @hyf0 - Show a information log to tell built-in features if a plugin covered by built-in features are used (#5845) by @IWANABETHATGUY - rolldown_plugin_vite_css_post: align partial css url replace logic (#5837) by @shulaoda - rolldown_plugin_vite_css_post: align CSS chunk concatenation logic (#5836) by @shulaoda - rolldown_plugin_transform: support `useDefineForClassFields=false` with `target>=es2022` (#5841) by @sapphi-red - expose `esmExternalRequirePlugin` (#5810) by @shulaoda - rolldown_plugin_esm_external_require: basic implementation (#5809) by @shulaoda - rolldown: oxc v0.82.3 (#5807) by @Boshen - expose `oxc_minifier` options (#5804) by @IWANABETHATGUY - rolldown_plugin_require_to_import: initialize (#5797) by @shulaoda - adjust codegen `initial_indent` for concatenateWrappedModule (#5779) by @IWANABETHATGUY - rolldown: align default value of `option.context` (#5745) by @situ2001 ### 🐛 Bug Fixes - topLevelVar option removes class name, causing a TypeError in static block (#5888) by @IWANABETHATGUY - a esm module required by other module can't be a inner module of concatenateModuleGroup (#5875) by @IWANABETHATGUY - rolldown_plugin_transform: align `lang` logic correctly (#5874) by @shulaoda - Runtime error occurs depending on the lazy import order. (#5873) by @IWANABETHATGUY - when importee is ts or tsx adding potential false positive note for `missing_export` diagnostic (#5862) by @IWANABETHATGUY - hmr: boundary and accept_via was reversed (#5843) by @sapphi-red - returning result of this.resolve in resolveId hook impacts bundle size (#5851) by @IWANABETHATGUY - rolldown_plugin_transform: set `typescript.removeClassFieldsWithoutInitializer` for `useDefineForClassFields=false` (#5840) by @sapphi-red - hmr: `import.meta.hot.accept` in patch file should work (#5823) by @sapphi-red - proper handle pife and profiler_names for concatenate_wrapped_modules (#5835) by @IWANABETHATGUY - jsx preserve break component which is default export (#5751) by @shulaoda - hmr: ensure patch file name to be unique (#5825) by @sapphi-red - hmr: re-execute the boundary module rather than the accepted module (#5822) by @sapphi-red - Rolldown cannot treeshake unused branch (#5829) by @IWANABETHATGUY - `inlineConst` with constant propagation (#5826) by @IWANABETHATGUY - don't mangle variable names when `minify: 'dce-only'` is used (#5830) by @sapphi-red - return actual normalized minify options (#5818) by @IWANABETHATGUY - plugin/vite-resolve: try non-prefixed index before prefixed index (#5801) by @sapphi-red - throw a semantic error message instead of panic (#5796) by @AliceLanniste - rolldown: run DCE on chunk when `minify: dce-only` (#5792) by @Boshen - the import attribute has been removed. (#5794) by @IWANABETHATGUY - don't match CRLF for `/./` (#5790) by @IWANABETHATGUY - node: allow `output.topLevelVar` by options validator (#5789) by @sapphi-red - node: allow `transform.jsx: 'preserve'` by options validator (#5781) by @sapphi-red - preserve default export for `preserveModules` (#5780) by @shulaoda - browser: sync exports (#5776) by @sxzz - rolldown_plugin_transform: skip builtin transform for module id with null byte (#5775) by @hi-ogawa ### 🚜 Refactor - move common transform types into rolldown_common (#5876) by @shulaoda - rolldown_plugin_vite_css_post: extract `finalize_vite_css_urls` (#5860) by @shulaoda - rust: make `NotifyWatcher` WASM-compatible (#5855) by @hyf0 - rust/dev: remove improper deref for `BuildDriver` (#5854) by @hyf0 - incremental: use `clone_in_with_semantic_ids` for program cloning (#5853) by @shulaoda - rolldown_plugin_esm_external_require: tweak code (#5824) by @shulaoda - improve `resolve_dependencies` (#5795) by @shulaoda - simplify method calls in `PluginContext` (#5785) by @situ2001 ### 📚 Documentation - builtin-plugins: clarify behavior of `esmExternalRequirePlugin` (#5886) by @sapphi-red - builtin-plugins: add documentation for `esmExternalRequirePlugin` (#5813) by @shulaoda - support extracting doc for reference type (#5834) by @IWANABETHATGUY - optimization.inlineConst (#5831) by @IWANABETHATGUY - update description for output.minify (#5816) by @IWANABETHATGUY - plugins: extract plugins into a separate section (#5812) by @shulaoda ### ⚡ Performance - string_wizard: reduce allocation (#5793) by @Brooooooklyn ### 🧪 Testing - hmr: import.meta.hot.accept cases (#5821) by @sapphi-red - hmr: static import cases (#5820) by @sapphi-red - hmr: no boundary full reload case (#5819) by @sapphi-red ### ⚙️ Miscellaneous Tasks - deps: update `oxc-resolver` to v11.7.0 (#5889) by @shulaoda - deps: lock file maintenance (#5880) by @renovate[bot] - deps: lock file maintenance rust crates (#5881) by @renovate[bot] - deps: update github-actions (#5877) by @renovate[bot] - deps: lock file maintenance rust crates (#5879) by @renovate[bot] - deps: lock file maintenance npm packages (#5878) by @renovate[bot] - bump rolldown-ariadne (#5863) by @IWANABETHATGUY - remove usage of `quote_expr`, `quote_stmt` (#5858) by @IWANABETHATGUY - vite-tests: run all test suites even if some test suites failed (#5828) by @sapphi-red - vite-tests: set `_VITE_TEST_JS_PLUGIN` instead of `_VITE_TEST_NATIVE_PLUGIN` (#5827) by @sapphi-red - deps: use `vitepress@^2.0.0-alpha.12` instead (#5811) by @shulaoda - deps: update dependency rolldown-plugin-dts to v0.15.7 (#5814) by @renovate[bot] - add example with oxc transform styled components plugin (#5800) by @IWANABETHATGUY - deprecate top-level `jsx` option in favor of `transform.jsx` (#5783) by @shulaoda - deps: update crate-ci/typos action to v1.35.5 (#5786) by @renovate[bot] - update default value of options.context (#5777) by @IWANABETHATGUY ### ◀️ Revert - "fix: jsx preserve break component which is default export (#5764)" (#5856) by @shulaoda Co-authored-by: shulaoda <[email protected]>

renovate bot enabled auto-merge August 24, 2025 16:49

renovate-approve bot approved these changes Aug 24, 2025

View reviewed changes

chore(deps): lock file maintenance npm packages

ff33e27

renovate bot force-pushed the renovate/npm-packages branch from a2222d0 to ff33e27 Compare August 24, 2025 16:55

renovate bot added this pull request to the merge queue Aug 24, 2025

Merged via the queue into main with commit a918275 Aug 24, 2025
31 checks passed

renovate bot deleted the renovate/npm-packages branch August 24, 2025 17:16

github-actions bot mentioned this pull request Aug 25, 2025

release: v1.0.0-beta.34 #5891

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

chore(deps): lock file maintenance npm packages#5878

chore(deps): lock file maintenance npm packages#5878
renovate[bot] merged 1 commit intomainfrom
renovate/npm-packages

renovate bot commented Aug 24, 2025

Uh oh!

socket-security bot commented Aug 24, 2025 •

edited

Loading

Uh oh!

netlify bot commented Aug 24, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

renovate bot commented Aug 24, 2025

Release Notes

v8.8.1: — Turbo Flush

Featfixes

Enhancements

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

Minor Changes

Patch Changes

Features

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Features

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

🐞 Bug Fixes

Bug Fixes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Configuration

Uh oh!

socket-security bot commented Aug 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify bot commented Aug 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v8.8.1`: — Turbo Flush

socket-security bot commented Aug 24, 2025 •

edited

Loading

netlify bot commented Aug 24, 2025 •

edited

Loading