chore(deps): lock file maintenance npm packages#6632
Merged
Conversation
Contributor
How to use the Graphite Merge QueueAdd the label graphite: merge to this PR to add it to the merge queue. You must have a Graphite account in order to use the merge queue. Sign up using this link. An organization admin has enabled the Graphite Merge Queue in this repository. Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
✅ Deploy Preview for rolldown-rs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
56131e5 to
1de0750
Compare
1de0750 to
e492ca5
Compare
e492ca5 to
0aaac33
Compare
shulaoda
added a commit
that referenced
this pull request
Oct 20, 2025
## [1.0.0-beta.44] - 2025-10-20
:boom: Breaking Changes
- Top-level `jsx` removed, use `transform.jsx` instead
- `output.minifyInternalExports` now enabled by default
:dart: Enhanced Tree-Shaking
- JSON default imports are now tree-shakeable
```js
// config.json
{
"apiUrl": "[https://api.example.com](https://api.example.com/)",
"timeout": 5000,
"retries": 3,
"debug": false
}
// main.js
// Before: Entire JSON was included in bundle
import config from './config.json';
console.log(config.apiUrl);
// After: Only the used property is included
// Bundle now contains just the apiUrl value
```
- Built-in typed array constructors (`new Uint8Array()`, `new Int32Array()`, etc.) marked as pure
:gear: Configuration Improvements
- Support `output.cleanDir` option
- Deprecated some top-level options
- `define` → `transform.define`
- `inject` → `transform.inject`
- `dropLabels` → `transform.dropLabels`
- `keepNames` → `output.keepNames`
- `profilerNames` → `output.generatedCode.profilerNames`
### 💥 BREAKING CHANGES
- enable `output.minifyInternalExports` for `format: 'es'` or `minify: true` (#6594) by @sapphi-red
- node/options: remove `InputOptions.jsx`, prefer `transform.jsx` always (#6548) by @hyf0
### 🚀 Features
- support jsx preset for `transform.jsx` (#6630) by @shulaoda
- rolldown_plugin_vite_html: align `inject_to_body` function (#6622) by @shulaoda
- rolldown_vite_css_post_plugin: tweak `is_legacy` field (#6620) by @shulaoda
- native-plugin: expose `viteHtmlPlugin` (#6609) by @shulaoda
- native-plugin: expose `viteCSSPostPlugin` (#6606) by @shulaoda
- builtin-plugin: expose `viteCSSPlugin` (#6605) by @shulaoda
- rolldown_plugin_vite_html: complete plugin binding (#6604) by @shulaoda
- rolldown_plugin_vite_css: support plugin binding (#6598) by @shulaoda
- add TypedArray constructors to side-effect free globals (#6592) by @IWANABETHATGUY
- rolldown_plugin_vite_html: align process src attr logic (#6572) by @shulaoda
- rolldown: support `output.clearDir` to clean up `dir` before build (#6486) by @aprosail
- dev: return `RolldownOutput` instead of `BindingOutputs` from `onOutput` (#6563) by @sapphi-red
- rolldown_plugin_vite_html: align process srcset logic (#6560) by @shulaoda
- rolldown_plugin_vite_html: align process src function (#6559) by @shulaoda
- rolldown_plugin_vite_html: align parse secset function (#6558) by @shulaoda
- node/options: deprecate `dropLabels` and add `transform.dropLabels` (#6557) by @hyf0
- node/options: deprecate `keepNames` and add `output.keepNames` (#6556) by @hyf0
- node/options: deprecate `profilerNames` and add `output.generatedCode.profilerNames` (#6555) by @hyf0
- node/options: deprecate top level `inject` and `define` and add `transform.define`, `transform.inject` (#6544) by @hyf0
- rolldown_plugin_vite_html: initialize attributes handle logic (#6543) by @shulaoda
- rolldown: oxc v0.95.0 (#6541) by @Boshen
- rolldown_plugin_vite_html: align inject css logic (#6528) by @shulaoda
- rolldown_plugin_vite_html: align modulepreload inject logic (#6526) by @shulaoda
- rolldown_plugin_vite_html: align css bundle output inject logic (#6524) by @shulaoda
- rolldown_plugin_vite_html: support inject_to_head function (#6522) by @shulaoda
- rolldown_plugin_vite_html: align emit and delete logic (#6521) by @shulaoda
- rolldown_vite_html: align handle html asset url logic (#6518) by @shulaoda
- add an example how to transform code and generate sourcemap with `experimental.nativeMagicString` (#6514) by @IWANABETHATGUY
- rolldown_plugin_vite_html: align handle inline css logic (#6517) by @shulaoda
### 🐛 Bug Fixes
- native-plugin: use correct config for assetPlugin (#6638) by @shulaoda
- no_color not being respected on reporter (#6615) by @H4ad
- improve tree shaking for JSON default imports (#6626) by @IWANABETHATGUY
- cjs treeshaking removes used code (#6597) by @IWANABETHATGUY
- plugin/vite-resolve: return `package_json_path` from resolveId hook (#6434) by @sapphi-red
- dev: `should have idx` error happens with `deferSyncScanData` + incremental rebuild (#6568) by @sapphi-red
- rolldown: sync scoping properly in pre_process_ecma_ast (#6537) by @Boshen
- process CJS tree shaking bailout modules before eliminating unused dynamic entries (#6549) by @IWANABETHATGUY
- rust/dev: error of `bundler.scan`doesn't get handled (#6547) by @Copilot
- inline only self referenced json module properties (#6519) by @IWANABETHATGUY
- avoid processing native MagicString sourcemap when `sourcemap` is disabled (#6510) by @IWANABETHATGUY
### 🚜 Refactor
- rolldown_binding: unify `BindingAssetInlineLimit` (#6625) by @shulaoda
- rolldown_binding: tweak `BindingAssetPluginConfig` (#6624) by @shulaoda
- tweak `viteCSSPlugin` config (#6610) by @shulaoda
- rust/dev: remove unnecessary bundler cache management of dev engine (#6576) by @hyf0
- rust/dev: refactor `TaskInput` into enum to reduce invalid states (#6575) by @hyf0
- improve the error message of `ScanStageCache#merge` (#6564) by @IWANABETHATGUY
- rust/dev: use `client_id` to check if module is executed for test environment (#6566) by @hyf0
- rust/binding: mark napi object that won't be received from js side (#6531) by @hyf0
- rust/binding: mark napi object struct that won't be passed to js explicitly (#6525) by @hyf0
- rust/binding: use `&str` or `JsString` to avoid unnecessary clone (#6523) by @hyf0
- rust/binding: use `&str` to avoid unnecessary clone (#6520) by @hyf0
- rust: replace unwrap with expect for better error handling in message sending (#6509) by @hyf0
### 📚 Documentation
- add redirect from `/guide/in-depth/` to `/in-depth/` (#6554) by @Copilot
- guide: polish notable features page (#6535) by @sapphi-red
- builtin-plugins: add replace plugin docs (#6534) by @sapphi-red
- add `Additional Thanks` in `acknowledgements` page (#6507) by @hyf0
- polish doc for `experimental.nativeMagicString` (#6504) by @IWANABETHATGUY
### ⚡ Performance
- cli: advance `createTokioRuntime` (#6618) by @hyf0
- rolldown: reduce unnecessary Vec allocate (#6601) by @Brooooooklyn
- rolldown: make derived assets generation more parallel (#6600) by @Brooooooklyn
- rolldown: make chunks generation more parallel (#6599) by @Brooooooklyn
- rolldown_utils: only allocate HASH_PLACEHOLDER_LEFT once (#6595) by @Brooooooklyn
- rolldown: use oxc-resolver with simd-json (#6591) by @Boshen
- rolldown: avoid allocate the sourcemap sources on non Windows os (#6590) by @Brooooooklyn
- resolver: use optimized fs.read_to_string impl (#6589) by @Brooooooklyn
- deps: upgrade json-escape-simd and add simdutf8 dependency (#6579) by @Brooooooklyn
- rust/dev: remove unncessary clone for `ClientInput` (#6565) by @hyf0
- visit ast in `cross_module_optimization` stage parallel (#6552) by @IWANABETHATGUY
### 🧪 Testing
- json module prop conflict with normal module declaration binding (#6540) by @IWANABETHATGUY
- vite-tests: fix rolldown overrides (#6532) by @sapphi-red
### ⚙️ Miscellaneous Tasks
- remove string conversion warning in `replacePlugin` to compatible with rollup (#6639) by @IWANABETHATGUY
- deps: update dependency dprint-json to v0.21.0 (#6637) by @renovate[bot]
- deps: lock file maintenance (#6635) by @renovate[bot]
- deps: lock file maintenance npm packages (#6632) by @renovate[bot]
- node: use built-in styleText (#6340) by @dumbmatter
- deps: update actions/setup-node action to v6 (#6629) by @renovate[bot]
- deps: update github-actions (#6628) by @renovate[bot]
- deps: update dependency dprint-markdown to v0.20.0 (#6627) by @renovate[bot]
- Switch color dependencies (ansis and picocolors) to built-in styleText (#6619) by @IWANABETHATGUY
- native-plugin: tweak assetPlugin (#6623) by @shulaoda
- remove deprecated warning in `build.ts` (#6621) by @IWANABETHATGUY
- deps: update dependency tsdown to v0.15.8 (#6617) by @renovate[bot]
- rolldown_binding: rename vite css plugin config field (#6611) by @shulaoda
- add colored deprecation warnings for top-level options (#6612) by @IWANABETHATGUY
- rust: make `cargo publish --workspace` work (#6287) by @Boshen
- deps: update dependency rolldown-plugin-dts to v0.16.12 (#6608) by @renovate[bot]
- test: add `opposite_minify_internal_exports` and remove `minify_internal_exports` extend test (#6596) by @hyf0
- test: render snapshot for build and dev independently (#6584) by @hyf0
- test: split test logic for normal build and dev engine (#6580) by @hyf0
- fix rolldown build self warning (#6578) by @IWANABETHATGUY
- tweak `BindingBuiltinPluginName` (#6574) by @shulaoda
- rust: use forked `notify` crate (#6573) by @Boshen
- add `.len()` and `.is_empty()` to `HybridIndexVec` (#6570) by @sapphi-red
- ai: improve `AGENT.md` with verified prompts (#6533) by @hyf0
- clippy: set `too-many-lines-threshold` to 200 (#6530) by @shulaoda
- clean up examples/basic-vue (#6515) by @IWANABETHATGUY
- deps: update dependency tsdown to v0.15.7 (#6512) by @renovate[bot]
- add shulaoda to release PR assignees (#6505) by @shulaoda
### ❤️ New Contributors
* @dumbmatter made their first contribution in [#6340](#6340)
* @H4ad made their first contribution in [#6615](#6615)
* @aprosail made their first contribution in [#6486](#6486)
Co-authored-by: shulaoda <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
28.0.6->28.0.816.0.2->16.0.324.7.2->24.8.119.2.1->19.2.20.25.10->0.25.114.52.4->4.52.57.1.9->7.1.101.6.3->1.6.48.8.4->8.8.55.64.3->5.66.11.22.0->1.23.010.18.2->10.18.34.5.1->4.6.3🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
rollup/plugins (@rollup/plugin-commonjs)
v28.0.82025-10-16
Bugfixes
v28.0.72025-10-14
Bugfixes
rollup/plugins (@rollup/plugin-node-resolve)
v16.0.32025-10-13
Bugfixes
evanw/esbuild (esbuild)
v0.25.11Compare Source
Add support for
with { type: 'bytes' }imports (#4292)The import bytes proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by Deno and Webpack. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing
binaryloader. Here's an example:Lower CSS media query range syntax (#3748, #4293)
With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using
min-/max-prefixes for older browsers. For example, the following CSS:will be transformed like this with a target such as
--target=chrome100(or more specifically with--supported:media-range=falseif desired):rollup/rollup (rollup)
v4.52.5Compare Source
2025-10-18
Bug Fixes
Pull Requests
vitejs/vite (vite)
v7.1.10Compare Source
Bug Fixes
//(#20760) (b95fa2a)fileToBuiltUrl(#20898) (73b6d24)Documentation
WebSocketspelling (#20890) (29e98dc)Miscellaneous Chores
yuyinws/vitepress-plugin-group-icons (vitepress-plugin-group-icons)
v1.6.4Compare Source
🐞 Bug Fixes
View changes on GitHub
google/zx (zx)
v8.8.5: — Temporary ReservoirCompare Source
This release fixes the issue, when zx flushes external
node_moduleson linking #1348 #1349 #1355Also
[email protected]arrives here.webpro-nl/knip (knip)
v5.66.1Compare Source
20690d1)SymbolTypeand reuseSYMBOL_TYPE(resolves #1306) (d7c1c83)3143c4e)defineNuxtConfigwritable and deletable (resolves #1307) (c31a77f)c761a9d)fb3ff4e)661440e)9b96730)7776ae8)v5.66.0Compare Source
ignoreFilesfeat (87ca476)ed2acec) - thanks @hoardinghopes!d9e969d) - thanks @what1s1ove!673893a) - thanks @rfalke-rtl!83ca88f)cb926ca)ignoreIssuesto JSON Schema (9005691)b4b8929)b153f93)0ccfda6)v5.65.0Compare Source
157ae94)f7ce7d7)715d7cc) - thanks @jdufresne!8b91d08)4a3025d)fac5613)ignoreFilesconfig option (c9ab3c9)bfe7a0e)b39832d)strip-json-commentsa tad (7172653)9b3981b)2d261f5)oxc-project/oxc (oxlint)
v1.23.0: oxlint v1.23.0Compare Source
[1.23.0] - 2025-10-13
🚀 Features
452d128linter: Node/no_process_env (#14536) (Kenneth Skovhus)a9e1261linter: Implement react-refresh/only-export-components (#14122) (Rintaro Itokawa)a8d542blinter/no-duplicate-imports: SupportallowSeparateTypeImportsoption (#14527) (camc314)75a529clinter: Add run info about what functions rules implement (#13839) (camchenry)4fbdef2language_server: Supportfmt.configPathconfiguration (#14502) (Sysix)4d3ce2elanguage_server: Autodetect root.oxfmtrc.json(#14466) (Sysix)🐛 Bug Fixes
fb4a20dlanguage_server: Add whitespace for// oxlint-disable-next-linefix (#14356) (Sysix)6fce7f4oxlint/changelog: Remove duplicate changelog entries (#14528) (camc314)74e52f3linter/plugins: Resolve JS plugins with ESM condition names (#14541) (magic-akari)9965676linter/exhaustive-deps: Ignore empty strings passed toadditionalHooksoption (#14464) (Redas)d0a8e3elinter:vue/no_required_prop_with_defaultcalledOption::unwrap()on aNonevalue (#14491) (Sysix)1192ea2linter: Correctnextjs/no-typospath handling (#14480) (shulaoda)2796b16tsgolint: Pipe tsgolints stderr (#14477) (camc314)🚜 Refactor
6440cdelinter: Remove lifetime ofMessage(#14481) (Sysix)f599beflanguage_server: MoveMessagetoDiagnosticReporttransformation to one place (#14447) (Sysix)4f301denapi/parser, linter/plugins: Improve formatting of generated code (#14554) (overlookmotel)68c0252napi/parser, linter/plugins: Shorten generated raw transfer deserializer code (#14553) (overlookmotel)20e884elinter: StoreLintServiceinLintRunner(#14471) (Sysix)9e9c5balinter: Simplify built-in lint plugin checks (#14518) (camchenry)1986e0flinter/no-ex-assign: Use let-else chain (#14526) (camc314)ce9bcf0linter/no-func-assign: Use let-else chain (#14525) (camc314)a9cea7clanguage_server: UseFxHashSetforServerLinter::extended_paths(#14517) (Sysix)ea5838elinter/no-import-assign: Use let-else chain (#14524) (camc314)f977700language_server: PassLintOptionstoWorker::refresh_server_linter(#14510) (Sysix)54b001flinter/no-new-require: Improve diagnostic message clarity (#14511) (shulaoda)650ea68linter: Improve nextjs/no-typos rule (#14476) (shulaoda)📚 Documentation
198f2e9linter: Fix code example forbranches-sharing-code(#14514) (camc314)d776a17linter: Improvenextjs/no-typosrule documentation (#14470) (shulaoda)⚡ Performance
b44a30elanguage_server: TransformMessagetoDiagnosticReportwith one call (#14448) (Sysix)31766fdlinter/plugins: Providelocvia prototype (#14552) (overlookmotel)aec0c08linter: Allow analyzing node types in match blocks with guards (#14459) (camchenry)9044187linter: Skip running node-specific rule if file contains no relevant nodes (#14457) (camchenry)422f54elinter: Only run rule run functions if implemented (#14454) (camchenry)2c228aeliner: Use top-level match forno_obj_calls(#14523) (camchenry)c49d891linter: Use match forno_negated_condition(#14522) (camchenry)e222fc2linter: Use match forno_multi_assign(#14521) (camchenry)4440516linter: Refactor rules to take advantage of node type skipping (#14519) (camchenry)78261d6linter: Refactorno-invalid-fetch-optionsto be more easily analyzed (#14458) (camchenry)🧪 Testing
8d8881dlinter/plugins: Expand tests for module resolution of plugins (#14559) (overlookmotel)33b6cdelanguage_server: Add basic tests forWorkspaceWorker::did_change_configuration(#14531) (Sysix)bfe1ecdlanguage_server: Add tests forWorkspaceWorker::init_watchers(#14516) (Sysix)💼 Other
0082cdaoxlint: V1.23.0 (#14560) (Boshen)pnpm/pnpm (pnpm)
v10.18.3Compare Source
Patch Changes
verifyDepsBeforeInstall: installand pre/post install scripts that called other pnpm scripts #10060.@scope:registry) being parsed as property paths inpnpm config getwhen--location=projectis used #9362.pnpm config set --location=projectincorrectly handling keys with slashes (auth tokens, registry settings) #9884.pnpm-workspace.yamland.npmrcexist,pnpm config set --location=projectnow writes topnpm-workspace.yaml(matching read priority) #10072.pnpm outdated --long#10040.vuejs/router (vue-router)
v4.6.3Compare Source
Please refer to CHANGELOG.md for details.
v4.6.2Compare Source
Please refer to CHANGELOG.md for details.
v4.6.1Compare Source
Please refer to CHANGELOG.md for details.
v4.6.0Compare Source
Please refer to CHANGELOG.md for details.
Configuration
📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.