chore(deps): update npm packages by renovate[bot] · Pull Request #7206 · rolldown/rolldown

renovate · 2025-11-23T16:22:48Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
knip (source)	`5.69.0` -> `5.70.1`
lint-staged	`16.2.6` -> `16.2.7`
pnpm (source)	`10.22.0` -> `10.23.0`
rimraf	`6.1.0` -> `6.1.2`
rollup (source)	`4.53.2` -> `4.53.3`
vite (source)	`7.2.2` -> `7.2.4`
vitepress (source)	`2.0.0-alpha.12` -> `2.0.0-alpha.13`
vitepress-plugin-llms	`1.9.1` -> `1.9.3`
vitest (source)	`4.0.8` -> `4.0.12`

Release Notes

webpro-nl/knip (knip)

`v5.70.1`

Compare Source

chore: fix vitest node env recognition (#1360) (9a38e10) - thanks @jonathansamines!
Improve some export/import positions (f6f58fa)
Add some common hints/FAQs to plugin test template (da7cf84)

`v5.70.0`

Compare Source

Revert "Revive some tests in Bun" (f1406b5)
feat(plugins): Add Prisma plugin entry and Prisma schema compiler (#1340) (9f80aa4) - thanks @CHC383!
Improve some export/import positions (b19282b)
Move block to group top-level patterns (bba25f3)
Improve some naming around module graph (63d6117)
Minor refactors (a63b0dc)
Update auto-fix.mdx (#1356) (c64d905) - thanks @skvale!
Improve side-effects & opaque import call handling (resolve #1352) (e364589)
Add some unit tests for isIdentifierReferenced (f31eab4)
Add support for awaited import call promise (92cbcef)
Edit and dim tag hints title (e4affd2)
feat(plugins): Add taskfile plugin (#1357) (f64b72c) - thanks @elierotenberg!
Improve pragmas handling/setup (resolves #1358) (e0f497c)
Upgrade js-yaml + some others (resolve #1359) (5195888)
Clean up (da9440f)

`v5.69.1`

Compare Source

Release @knip/create-config 1.0.8 (8740516)
Edit docs (5eb8a69)
Apply Next.js page extensions to app directory (#1351) (f9cf9dc) - thanks @remcohaszing!
Refactor fixes & consistently use issue.fixes (d7b45cf)
Revive some tests in Bun (74a0bd8)
Fix import identifier/specifier pos (95d2c04)
Fix namespace import pos (6b6b80b)
Improve some export/import positions (9b87b1a)
Rely on absolute paths with formatly (npx acts weird) (6653f35)

lint-staged/lint-staged (lint-staged)

`v16.2.7`

Compare Source

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

pnpm/pnpm (pnpm)

`v10.23.0`: pnpm 10.23

Compare Source

Minor Changes

Added --lockfile-only option to pnpm list #10020.

Patch Changes

pnpm self-update should download pnpm from the configured npm registry #10205.
pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #10190.
Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #10209.
The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #10208.
pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #8660.
Don't add an extra slash to the Node.js mirror URL #10204.
pnpm store prune should not fail if the store contains Node.js packages #10131.

Platinum Sponsors

Gold Sponsors

isaacs/rimraf (rimraf)

`v6.1.2`

Compare Source

`v6.1.1`

Compare Source

rollup/rollup (rollup)

`v4.53.3`

Compare Source

2025-11-19

Bug Fixes

Fix an error where too many modules where flagged for having an unused external import (#6182)
Fix an error where an assignment was wrongly tree-shaken when mutating it (#6183)

Pull Requests

#6171: Add test-install CI job to test packaging, installation and importing of rollup package (@antoninkriz, @lukastaegert)
#6174: Re-enable TypeScript test (@lukastaegert)
#6180: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6182: Tracing the importers chain for exported variables in external module (@TrickyPi, @lukastaegert)
#6183: Check if left side is included when checking if assigning to an assignment has side effects (@lukastaegert)

vitejs/vite (vite)

`v7.2.4`

Compare Source

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

`v7.2.3`

Compare Source

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)
deps: update all non-major dependencies (#21096) (6a34ac3)
deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

deps: update dependency @rollup/plugin-commonjs to v29 (#21099) (02ceaec)
deps: update rolldown-related dependencies (#21095) (39a0a15)
deps: update rolldown-related dependencies (#21127) (5029720)

vuejs/vitepress (vitepress)

`v2.0.0-alpha.13`

Compare Source

Bug Fixes

client,a11y: improve focus handling and scrolling behavior in router (#4943) (d46107f)
disable markdown-it-attrs for fenced code blocks (0899618)
git log parsing when there are empty commits in history (#4965) (612c458)
print full path in dead links check (2b77fb3), closes #4919
rename markdown.cjkFriendly to markdown.cjkFriendlyEmphasis (bce0b53), closes #4952
respect markdown.cache = false on build too (6d7422f)
simplify lang extraction logic; use markdown-it plugins in type-safe manner; bump deps (4e548f5)
theme: add lang and dir attributes to language picker (f0b29d7)
theme: adjust margin of code blocks inside containers (82fac5d), closes #4921
theme: avoid use of :where in selector list for now (c2eaccd), closes #4923
theme: disable whitespace wrapping for VPBadge (#4968) (113d230)
theme: use nav height css var for curtain top in sidebar (#4993) (be260fd)

Features

export cacheAllGitTimestamps and getGitTimestamp (31d87e2)
i18n,a11y: change last update logic (#4935) (187bf25)
markdown: support custom display-name for fenced code blocks (#4960) (3d61619)
prevent $ symbol selection in shell code (#5025) (bf2715e)
theme: allow passing functions for nav links (#4963) (34cfa91)

Performance Improvements

make a single git call for timestamps instead of calling it for each file (#4958) (6dfcdd3)

BREAKING CHANGES

markdown-it-attrs is disabled for fenced code blocks. For most users no change is required. If you want to add classes to code blocks, do it using shiki transformers instead.
Rename cjkFriendly to cjkFriendlyEmphasis in your vitepress config. Most people should be unaffected unless they want to disable the CJK emphasis behavior added v2.0.0-alpha.12.

okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

`v1.9.3`

Compare Source

🩹 Fixes

Fix vitepress-components export (#104) - by @ruan-cat (b210c)

Fixed a mistake in the builder configuration that prevented Vue components from being copied to the vitepress-components folder

💖 Contributors

@ruan-cat

View changes on GitHub

`v1.9.2`

Compare Source

🩹 Fixes

Use Code node for code snippets instead of Html and fix stripping frontmatter from files in  - by @okineadev (488f0)

Fixed missing Code Snippets in files for LLMs when using stripHtml: true option (which is enabled by default)

Also found and fixed a bug where when using  the frontmatter of the file was also inserted, which should not be there

💖 Contributors

@okineadev

View changes on GitHub

vitest-dev/vitest (vitest)

`v4.0.12`

Compare Source

🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in #9063 (9a8bc)
Don't import from @opentelemetry/api in public types - by @sheremet-va in #9066 (e944a)

View changes on GitHub

View changes on GitHub

`v4.0.10`

Compare Source

🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in #9033 (6d7f0)
browser:
- Don't scale the iframe if UI is disabled - by @sheremet-va in #9018 (5406e)
- Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in #9016 and #9003 (57ae5)
bun:
- Parsing of stack trace for bun runtime - by @nazarhussain in #9032 (f3ec6)
core:
- Prevent starting new run when cancelling - by @AriPerkkio in #8991 (eb98d)
pool:
- Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in #9023 (042c6)
reporters:
- Report correct test run duration at the end - by @sheremet-va in #8969 (bc3a6)
ui:
- Use execution time from ws reporter (onFinished) - by @userquin in #8975 (f56dc)

View changes on GitHub

`v4.0.9`

Compare Source

🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in #8906 (a415d)

🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in #8972 (353ee)
forks: Increase worker start timeout - by @AriPerkkio in #9027 (5e750)
jsdom: Cloned request is an instance of Request - by @sheremet-va in #8985 (506a9)
ui: Collect file/suite/test duration correctly - by @userquin in #8976 (8016d)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-11-23T16:22:50Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 34 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 35, reused 0, downloaded 0, added 0
Progress: resolved 60, reused 0, downloaded 0, added 0
Progress: resolved 90, reused 0, downloaded 0, added 0
Progress: resolved 96, reused 0, downloaded 0, added 0
Progress: resolved 97, reused 0, downloaded 0, added 0
Progress: resolved 162, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/rolldown/rolldown/examples/par-plugin:
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "[email protected]" (possible package takeover)

This error happened while installing the dependencies of @babel/[email protected]

Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.

graphite-app · 2025-11-23T16:22:56Z

How to use the Graphite Merge Queue

Add the label graphite: merge to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

netlify · 2025-11-23T16:23:00Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`c5ffa6b`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/69233e26360e3500084a23a5

@shulaoda

## [1.0.0-beta.52] - 2025-11-26 💥 Breaking Change - Change `output.generatedCode.profilerNames` default to `false` 🔧 Vite-Style TypeScript Configuration - Rolldown now supports Vite-style automatic tsconfig resolution. Use `tsconfig: true` to enable auto-discovery mode where each module finds its nearest `tsconfig.json`. See more details [here](https://rolldown.rs/options/tsconfig) ⚙️ Upgraded to oxc v0.99.0 - Add `TSGlobalDeclaration` type - More details: https://github.com/oxc-project/oxc/releases/tag/crates_v0.99.0 ### 💥 BREAKING CHANGES - change `output.generatedCode.profilerNames` default to false (#7139) by @Copilot ### 🚀 Features - support vite-style tsconfig resolution (#6873) by @shulaoda - rolldown: oxc v0.99.0 (#7165) by @camc314 - browser: export `plugins` (#7210) by @sxzz - rolldown_plugin_vite_css_post: add `inline` parameter to `cssMinify` callback (#7191) by @shulaoda - rolldown_plugin_vite_build_import_analysis: implement `render_chunk` to replace `__VITE_IS_MODERN__` flag (#7178) by @shulaoda - rolldown_plugin_utils: optimize SVG data URL encoding (#7156) by @shulaoda - dev: replace `DevEngine::hasLatestBuildOutput` with `DevEngine::getBundleState` (#7145) by @sapphi-red - rolldown_plugin_vite_asset_import_meta_url: support `@vite-ignore` comment (#7141) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: implement static URL processing (#7140) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: align `asset_resolver` logic (#7137) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: align `try_fs_resolve` logic (#7136) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: validate relative paths (#7120) by @shulaoda - export `viteAssetImportMetaUrlPlugin` and add dynamic URL tests (#7119) by @shulaoda ### 🐛 Bug Fixes - watch overwrite rename event on linux (#7201) by @sapphi-red - preserve name for parenthesized anonymous default exports and arrow functions with keepNames (#7159) by @Copilot - rolldown_plugin_vite_html: add missing async attribute for inlined entry scripts (#7202) by @shulaoda - respect target setting in DCE to prevent modern syntax generation (#7128) by @Copilot - rolldown_plugin_vite_html: add semicolon to import statement in CSS removal (#7200) by @shulaoda - rolldown_plugin_vite_html: use correct CSS asset filename in HTML injection (#7199) by @shulaoda - rolldown_plugin_vite_css_post: handle scoped package names in lib CSS filename (#7198) by @shulaoda - rolldown_plugin_vite_html: use patched `html5gum` with correct span tracking (#7193) by @shulaoda - rolldown_plugin_vite_html: handle HTML strings in script tags correctly (#7192) by @shulaoda - handle JSON import namespace property access correctly (#7190) by @IWANABETHATGUY - only include runtime helpers from included modules (#7183) by @IWANABETHATGUY - rolldown_plugin_vite_html: normalize paths to use forward slashes in `original_file_name` (#7175) by @shulaoda - rolldown_plugin_vite_css_post: use `filename` instead of `reference_id` for imported assets (#7174) by @shulaoda - rolldown_plugin_vite_css_post: correct regex escaping in pure CSS chunk pruning (#7173) by @shulaoda - rolldown_plugin_vite_html: use correct dependency path for modulepreload links (#7172) by @shulaoda - update cur_stmt_index when processing top level statements (#7157) by @IWANABETHATGUY - rolldown_plugin_utils: strip leading character from public asset URL (#7170) by @shulaoda - rolldown_plugin_vite_html: use correct `public_base` for `html_result_map` key (#7169) by @shulaoda - rolldown_plugin_utils: correct runtime handling and escape single quotes in asset paths (#7168) by @shulaoda - rolldown_plugin_utils: prevent data race in `file_to_url` cache (#7166) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: correct glob pattern and query string handling in dynamic URLs (#7162) by @shulaoda - rolldown_plugin_vite_css_post: use correct start position in magic string updates (#7158) by @shulaoda - data race in `FileEmitter::emit_file` causing duplicate asset emissions (#7164) by @shulaoda - dev: watch files even if the build failed (#7149) by @sapphi-red - rolldown_plugin_utils: always use base64 encoding for data URLs (#7148) by @shulaoda - preserve "default" name for anonymous default exports with keepNames (#7151) by @Copilot - correctly handle cjs json module as entry point (#7147) by @IWANABETHATGUY - rolldown_plugin_utils: correct `reference_id` parsing in `render_asset_url_in_js` (#7143) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: exclude quotes from URL span (#7142) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: use template literal for glob result indexing (#7134) by @shulaoda - tree shake unused dynamic entry when `inlineDynamicImports` is enabled (#7129) by @IWANABETHATGUY - correct return value of `parse` / `parseSync` functions (#7127) by @sapphi-red ### 🚜 Refactor - rolldown_plugin_vite_transform: use `oxc_resolver` for tsconfig discovery (#7220) by @shulaoda - rolldown_plugin_vite_resolve: use `resolve_file` for tsconfig discovery (#7216) by @shulaoda - rolldown_plugin_utils: remove redundant `ViteMetadata::get_or_insert_default()` (#7189) by @shulaoda - rolldown_plugin_utils: simplify `ViteMetadata::get()` to always return a value (#7188) by @shulaoda - rolldown_utils: add `guess_mime_skip_utf8_check` for binary assets (#7161) by @shulaoda - rolldown_plugin_utils: extract asset URL parsing into `AssetUrlIter` (#7144) by @shulaoda - store pattern name in FilenameTemplate (#7132) by @IWANABETHATGUY ### 📚 Documentation - tsconfig: document auto-discovery mode and improve structure (#7228) by @shulaoda - add plugin hook filter compatibility and fallback guide (#7138) by @Copilot - update top level navigation (#7092) by @mdong1909 ### 🧪 Testing - add tsconfig include/exclude/files matching test cases (#6899) by @shulaoda - vite-tests: run `playwright install` in case playwright binary is missing (#7226) by @sapphi-red - watch: close watcher when an error occured in the test cases (#7225) by @sapphi-red - watch: reject `waitBuildFinished` if `ERROR` event occurs (#7224) by @sapphi-red ### ⚙️ Miscellaneous Tasks - example: revert accidental changes to basic-typescript (#7227) by @shulaoda - deps: update oxc apps (#7212) by @renovate[bot] - deps: update rust crates (#7204) by @renovate[bot] - deps: update `oxc_resolver_napi` to 11.14.0 (#7217) by @shulaoda - deps: update oxc_resolver (#6909) by @shulaoda - deps: update dependency glob to v13 (#7208) by @renovate[bot] - deps: update actions/checkout action to v6 (#7207) by @renovate[bot] - deps: update npm packages (#7206) by @renovate[bot] - deps: update github-actions (#7205) by @renovate[bot] - add missing status code comment (#7185) by @iiio2 - deps: update dependency oxlint-tsgolint to v0.8.1 (#7197) by @renovate[bot] - rust: add more tracing log for hmr + dev logic (#7179) by @hyf0 - deps: update dependency oxlint-tsgolint to v0.8.0 (#7167) by @renovate[bot] - deps: update dependency oxlint-tsgolint to v0.7.3 (#7133) by @renovate[bot] - merge similar inlineDynamicImports test case (#7131) by @IWANABETHATGUY - deps: update `rolldown-plugin-dts` to 0.18.0 (#7125) by @shulaoda Co-authored-by: shulaoda <[email protected]>

renovate bot enabled auto-merge (squash) November 23, 2025 16:22

renovate-approve bot approved these changes Nov 23, 2025

View reviewed changes

shulaoda self-assigned this Nov 23, 2025

chore(deps): update npm packages

c5ffa6b

renovate bot force-pushed the renovate/npm-packages branch from 9e8d68c to c5ffa6b Compare November 23, 2025 17:02

renovate bot merged commit b5cd86c into main Nov 23, 2025
44 of 45 checks passed

renovate bot deleted the renovate/npm-packages branch November 23, 2025 17:20

This was referenced Nov 26, 2025

release: v1.0.0-beta.52 #7223

Closed

release: v1.0.0-beta.52 #7229

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

chore(deps): update npm packages#7206

chore(deps): update npm packages#7206
renovate[bot] merged 1 commit intomainfrom
renovate/npm-packages

renovate bot commented Nov 23, 2025

Uh oh!

renovate bot commented Nov 23, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented Nov 23, 2025

Uh oh!

netlify bot commented Nov 23, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

renovate bot commented Nov 23, 2025

Release Notes

Patch Changes

v10.23.0: pnpm 10.23

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

Bug Fixes

Pull Requests

Bug Fixes

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Features

Performance Improvements

BREAKING CHANGES

🩹 Fixes

💖 Contributors

🩹 Fixes

💖 Contributors

🐞 Bug Fixes

🚀 Experimental Features

🏎 Performance

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

Configuration

Uh oh!

renovate bot commented Nov 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

graphite-app bot commented Nov 23, 2025

How to use the Graphite Merge Queue

Uh oh!

netlify bot commented Nov 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v10.23.0`: pnpm 10.23

renovate bot commented Nov 23, 2025 •

edited

Loading

netlify bot commented Nov 23, 2025 •

edited

Loading