chore(deps): update oxc to v0.106.0 by renovate[bot] · Pull Request #7512 · rolldown/rolldown

renovate · 2025-12-15T12:33:19Z

No description provided.

netlify · 2025-12-15T12:34:08Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`0f6065d`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/6952b1b60ddf4700086e3223

github-actions · 2025-12-18T08:20:28Z

Benchmarks Rust

target: main(938617b)
pr: renovate/oxc(8e7d08d)

group                                                        pr                                     target
-----                                                        --                                     ------
bundle/bundle@multi-duplicated-top-level-symbol              1.00     66.6±1.69ms        ? ?/sec    1.04     69.2±3.67ms        ? ?/sec
bundle/bundle@multi-duplicated-top-level-symbol-sourcemap    1.00     74.2±1.88ms        ? ?/sec    1.05     78.0±2.77ms        ? ?/sec
bundle/bundle@rome_ts                                        1.02    111.9±3.24ms        ? ?/sec    1.00    109.8±1.75ms        ? ?/sec
bundle/bundle@rome_ts-sourcemap                              1.03    126.2±4.99ms        ? ?/sec    1.00    123.0±2.02ms        ? ?/sec
bundle/bundle@threejs                                        1.05     42.3±1.35ms        ? ?/sec    1.00     40.5±2.10ms        ? ?/sec
bundle/bundle@threejs-sourcemap                              1.02     45.3±0.89ms        ? ?/sec    1.00     44.2±0.76ms        ? ?/sec
bundle/bundle@threejs10x                                     1.00    401.8±6.08ms        ? ?/sec    1.03    412.6±8.86ms        ? ?/sec
bundle/bundle@threejs10x-sourcemap                           1.00    463.6±5.95ms        ? ?/sec    1.01    467.9±8.33ms        ? ?/sec
scan/scan@rome_ts                                            1.00     88.0±2.39ms        ? ?/sec    1.02     89.3±2.25ms        ? ?/sec
scan/scan@threejs                                            1.00     30.0±0.79ms        ? ?/sec    1.00     30.1±1.76ms        ? ?/sec
scan/scan@threejs10x                                         1.00    303.2±4.61ms        ? ?/sec    1.03    312.9±6.71ms        ? ?/sec

socket-security · 2025-12-19T02:29:21Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Quality	Maintenance
@oxc-project/types@0.103.0 ⏵ 0.106.0		⁺¹
@oxc-project/runtime@0.103.0 ⏵ 0.106.0		⁺¹
remeda@2.32.0
rollup-plugin-esbuild@6.2.1
remark-parse@11.0.0
react@19.2.3
rimraf@6.1.2
remove-unused-vars@0.0.11
rollup@4.54.0
serve-static@2.2.1
react-dom@19.2.3
oxc-minify@0.103.0 ⏵ 0.106.0	⁺¹
oxc-parser@0.103.0 ⏵ 0.106.0	⁺¹	⁺¹
oxc-transform@0.103.0 ⏵ 0.106.0		⁺¹
rolldown-plugin-dts@0.20.0

View full report

Added a new option (`invalid_import_side_effects`) to disable #16797 as it requires a new assumptions. refs rolldown/rolldown#7512 (comment)

socket-security · 2025-12-29T14:46:02Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `rolldown-vite` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: pnpm-lock.yaml → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Copilot

Pull request overview

This PR updates oxc dependencies from v0.103.0 to v0.106.0, bringing in upstream improvements and adapting to breaking API changes in the oxc ecosystem.

Key Changes:

Updated all oxc-related dependencies (runtime, types, parser, transform, minify) to v0.106.0
Migrated from the old BindingPattern.kind API to direct BindingPattern enum matching
Updated AST builder methods to use new binding_pattern_binding_identifier helper
Added invalidImportSideEffects option to TreeShakeOptions
Test snapshots updated to reflect improved tree-shaking and minification from oxc

Reviewed changes

Copilot reviewed 35 out of 38 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pnpm-workspace.yaml	Updated oxc package versions from 0.103.0 to 0.106.0
pnpm-lock.yaml	Lockfile updates for oxc packages and new platform bindings (arm-eabi, arm-musleabihf, ppc64, riscv64-musl, ia32)
packages/rolldown/src/binding.d.cts	Added `invalidImportSideEffects` option to TypeScript TreeShakeOptions interface
crates/rolldown_plugin_vite_import_glob/src/utils.rs	Updated to use new `binding_pattern_binding_identifier` builder method and added initializer parameter to `formal_parameter`
crates/rolldown_plugin_vite_build_import_analysis/src/ast_visit.rs	Migrated from `BindingPatternKind` to direct `BindingPattern` enum matching
crates/rolldown_plugin_vite_build_import_analysis/src/ast_utils.rs	Updated to use new binding pattern builder methods and direct enum matching
crates/rolldown_plugin_oxc_runtime/src/generated/embedded_helpers.rs	Updated runtime helper prefix version string
crates/rolldown_ecmascript_utils/src/extensions/ast_ext/function.rs	Updated pattern matching from `.kind` field access to direct enum matching, improved initializer side-effect checking
crates/rolldown_ecmascript_utils/src/extensions/ast_ext/binding_property_ext.rs	Changed from `BindingPatternKind` to `BindingPattern` enum
crates/rolldown_ecmascript_utils/src/extensions/ast_ext/binding_pattern_ext.rs	Comprehensive migration from `.kind` pattern access to direct pattern matching
crates/rolldown_ecmascript_utils/src/ast_snippet.rs	Updated AST builder calls to use new `binding_pattern_binding_identifier` helper and added initializer parameter
crates/rolldown_common/src/inner_bundler_options/types/treeshake.rs	Added `invalid_import_side_effects: true` to oxc TreeShakeOptions conversion
crates/rolldown/src/utils/tweak_ast_for_scanning.rs	Updated to use `BindingPattern` instead of `BindingPatternKind`
crates/rolldown/src/stages/link_stage/cross_module_optimization.rs	Changed pattern matching from `.kind` to direct enum
crates/rolldown/src/module_finalizers/*.rs	Multiple files updated to use new binding pattern APIs
crates/rolldown/src/hmr/*.rs	Updated HMR code to use new formal_parameter signature with initializer
crates/rolldown/src/ast_scanner/*.rs	Migrated all binding pattern usage to new API
Cargo.toml & Cargo.lock	Updated oxc Rust crate versions to 0.106.0
Test snapshots	Multiple test output files updated reflecting improved oxc minification (better IIFE elimination, Symbol handling, etc.)

Files not reviewed (1)

pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

crates/rolldown_common/src/inner_bundler_options/types/treeshake.rs

Boshen · 2025-12-29T16:51:08Z

I'm going to merge this because I spent a whole day playing whack a mole with CI.

@sapphi-red and @IWANABETHATGUY please take a look at the esbuild diffs and raise issues accordingly.

Boshen · 2025-12-29T16:51:48Z

Merge activity

Dec 29, 4:51 PM UTC: The merge label 'graphite: merge-when-ready' was detected. This PR will be added to the Graphite merge queue once it meets the requirements.
Dec 29, 4:51 PM UTC: Boshen added this pull request to the Graphite merge queue.
Dec 29, 5:03 PM UTC: Merged by the Graphite merge queue.

Follow up to #7512

@shulaoda

## [1.0.0-beta.58] - 2025-12-31 ### 💥 BREAKING CHANGES - experimental/devtools: rename InputOptions#debug to InputOptions#devtools (#7686) by @Copilot ### 🚀 Features - implement target feature check in `should_transform_js` for raw options (#7697) by @shulaoda - support `output.dynamicImportInCjs` option (#7677) by @shulaoda - types: expose `ChecksOptions` type (#7653) by @sapphi-red ### 🐛 Bug Fixes - export runtime helpers for cross-chunk access (#7658) by @shulaoda - cjs namespace merging regression (#7665) by @IWANABETHATGUY - replace panic with proper error handling for hash placeholder generation (#7661) by @shulaoda - remove the blank line between shebang and postBanner (#7643) by @btea - rolldown_plugin_vite_reporter: apply padding before ANSI coloring for proper size column alignment (#7649) by @shulaoda ### 🚜 Refactor - rust: use `StableModuleId` as the map key if possible (#7718) by @hyf0 - rust: return `StableModuleId` instead of `&str` from `Module#stable_id()` (#7717) by @hyf0 - rust: return correct stable id of external module from `Module#stable_id()` (#7716) by @hyf0 - rust: introduce `StableModuleId` type (#7715) by @hyf0 - rust: reduce unnecessary `id.as_arc_str().clone().into()` (#7714) by @hyf0 - rust: remove `ModuleId#resource_id` and use `as_arc_str` directly (#7710) by @hyf0 - rust: remove unused `Module#id_clone` (#7709) by @hyf0 - rust: remove `Module#id_as_str` and use `Module#id` directly (#7708) by @hyf0 - consolidate namespace call analysis into import analyzer (#7657) by @IWANABETHATGUY - rust: make `ExternalModule#id` have the type `ModuleId` (#7707) by @hyf0 - rust: rename `Module#id` to `Module#id_as_str` (#7706) by @hyf0 - rust: use `ModuleId` instead of raw `ArcStr` for `ScanStageCache` (#7701) by @hyf0 - simplify error propagation in cache merge (#7702) by @shulaoda - use `ModuleId` as the type of `ResolvedId#id` (#7694) by @hyf0 - types: rename `resolved_request_info.rs` to `resolved_id.rs` and move its contents (#7687) by @hyf0 - devtools: emit data to `<CWD>/node_modules/.rolldown` (#7692) by @hyf0 - use `InvalidOption` for hash placeholder generation errors (#7674) by @shulaoda - rolldown_error: remove dependency on rolldown_utils (#7672) by @shulaoda - use nodejs-built-in-modules v1.0.0 directly in callsites (#7667) by @Boshen ### 📚 Documentation - migrate input options content from options to auto gen docs (#7663) by @mdong1909 - create reference index page (#7659) by @mdong1909 - tweak auto-generated reference output (#7654) by @sapphi-red - initialize auto-gen docs (#7252) by @mdong1909 ### ⚙️ Miscellaneous Tasks - deps: update napi (#7705) by @renovate[bot] - pin Node.js version to 24.12.0 LTS in .node-version file (#7713) by @Copilot - update esbuild test reasons (#7703) by @sapphi-red - deps: update crate-ci/typos action to v1.40.1 (#7696) by @renovate[bot] - deps: update oxc to v0.106.0 (#7512) by @renovate[bot] - js: replace dprint with oxfmt (#7214) by @Boshen - deps: update dependency oxlint to v1.36.0 (#7691) by @renovate[bot] - deps: update github-actions (#7679) by @renovate[bot] - deps: update npm packages (#7680) by @renovate[bot] - deps: update rust crates (#7678) by @renovate[bot] - deps: update oxc resolver to v11.16.2 (#7668) by @renovate[bot] - add API reference files to knip entry points (#7669) by @Copilot - deps: update notify (#7651) by @sapphi-red - add `homepage` field to package.json (#7648) by @trivikr - deps: update oxc resolver to v11.16.1 (#7647) by @renovate[bot] - deps: update rolldown-plugin-dts to 0.20.0 (#7645) by @shulaoda Co-authored-by: shulaoda <[email protected]>

) These sideeffects are commonly ignored, so I think we should ignore them by default. - [Rollup REPL](https://rollupjs.org/repl/?version=4.57.1&shareable=eyJleGFtcGxlIjpudWxsLCJtb2R1bGVzIjpbeyJjb2RlIjoiaW1wb3J0IHsgZm9vIH0gZnJvbSAndW5rbm93bidcbmlmIChmYWxzZSkge1xuICBjb25zb2xlLmxvZyhmb28pXG59IiwiaXNFbnRyeSI6dHJ1ZSwibmFtZSI6Im1haW4uanMifV0sIm9wdGlvbnMiOnt9fQ==) - [esbuild try](https://esbuild.github.io/try/#dAAwLjI3LjIALS1taW5pZnkAaW1wb3J0IHsgZm9vIH0gZnJvbSAndW5rbm93bicKaWYgKGZhbHNlKSB7CiAgY29uc29sZS5sb2coZm9vKQp9) - [SWC playground](https://play.swc.rs/?version=1.15.11&code=H4sIAAAAAAAAAw3LMQ6AIBAEwP6S%2B8N2YOOfjOEMEW4NaCwIf9fpJ9eL7caAkZiwxorw%2BOl8PahkQ7St9LRgqAA7vbOktfCI%2F1hUpsoHV0iLrEQAAAA%3D&config=H4sIAAAAAAAAA41VS47bMAzd5xSB111MB0VR9ADd9QyCYlGOMrJoiFQ%2BGOTupRU7k5nQRjdBzKdHiuQj9b7ZbpsDtc3v7bv8lY%2FBZoJ8%2FxYLXRLbs1gaaHtLbQ4DN99m9EAj5G0kqKbrDWnY5g64suj15fXHxGgiIsHMmGx9SMFfHmO22A8ZiB5sYhWXpYfE9Jk%2FYRlPI8C5PNp3iBFsWkGMJRMSQwdZc9xijHYgMEebFS%2FjTW0OhFqIESwMzgwZBxVPLnDAJDGfUQfWmRYdKFDI0HI4gkaTWEJLJOkp%2BVTYwa50Xe3zFzYcbSyWlZhwri2R2ype9xiIjS9JK%2BENXKjBDZyK%2B5UZvMnAJadn3gFDWujJG4BUIFqiZHvQ%2FNYTXvS0xParzJC8SJYvCi761rJM0ElRTQheqexYGcgctG5mcKWFsbKtdp0JXigfBQcGvBetKK7pFLjda0H5MgB6BZD%2BWq%2Bp6gaY%2BxQu4ONArMB%2FJEvWBTad6C3vl1G69DuMKwF64D26lQPSCsZlOMuWOA%2FLeEkORBrg1COFKvC8BGQAGE2s%2B%2FJJGzIe4tF0EXcfa2I6cL3v4d6mrs77w75kHCIcIS7J%2BD9GZBWVux1HVc%2BT%2FTS98EsTpZXBC99fPj0bkspm%2Fq1JNT268pBQ1eTtOfnZfByaX465ak2gvzNRKv6W8JSazfUfly9ihugGAAA%3D) This was originally set to `true` (#17300) for Rolldown (rolldown/rolldown#7512 (comment)), but that should be instead handled on Rolldown side (rolldown/rolldown#8194).

renovate bot enabled auto-merge (squash) December 15, 2025 12:33

renovate-approve bot approved these changes Dec 15, 2025

View reviewed changes

renovate bot changed the title ~~chore(deps): update oxc to v0.103.0~~ chore(deps): update oxc to v0.103.0 - autoclosed Dec 15, 2025

renovate bot closed this Dec 15, 2025

auto-merge was automatically disabled December 15, 2025 14:01
Pull request was closed

renovate bot deleted the renovate/oxc branch December 15, 2025 14:01

renovate bot changed the title ~~chore(deps): update oxc to v0.103.0 - autoclosed~~ chore(deps): update oxc to v11.16.0 Dec 18, 2025

renovate bot reopened this Dec 18, 2025

renovate bot force-pushed the renovate/oxc branch 2 times, most recently from 566e180 to 6de569c Compare December 18, 2025 08:05

renovate bot enabled auto-merge (squash) December 18, 2025 08:28

renovate bot force-pushed the renovate/oxc branch from 6de569c to 5bcebf8 Compare December 18, 2025 08:58

shulaoda self-assigned this Dec 18, 2025

renovate bot force-pushed the renovate/oxc branch 2 times, most recently from 914d5f9 to 6f14867 Compare December 18, 2025 09:08

Boshen changed the title ~~chore(deps): update oxc to v11.16.0~~ chore(deps): update oxc_resolver to v11.16.0 Dec 18, 2025

renovate bot changed the title ~~chore(deps): update oxc_resolver to v11.16.0~~ chore(deps): update oxc to v11.16.0 Dec 18, 2025

renovate bot force-pushed the renovate/oxc branch from 6f14867 to 604e55f Compare December 18, 2025 10:18

renovate bot changed the title ~~chore(deps): update oxc to v11.16.0~~ chore(deps): update oxc to v11.16.0 - autoclosed Dec 18, 2025

renovate bot closed this Dec 18, 2025

auto-merge was automatically disabled December 18, 2025 10:36
Pull request was closed

renovate bot changed the title ~~chore(deps): update oxc to v11.16.0 - autoclosed~~ chore(deps): update dependency @oxc-project/runtime to v0.104.0 Dec 19, 2025

renovate bot reopened this Dec 19, 2025

renovate bot force-pushed the renovate/oxc branch 2 times, most recently from 604e55f to f876291 Compare December 19, 2025 02:28

renovate bot force-pushed the renovate/oxc branch from f876291 to a6dd645 Compare December 19, 2025 04:32

renovate bot enabled auto-merge (squash) December 19, 2025 04:32

shulaoda force-pushed the renovate/oxc branch from c625648 to 29e896d Compare December 28, 2025 23:20

Boshen force-pushed the renovate/oxc branch from 29e896d to 2bdc80e Compare December 29, 2025 09:32

Boshen changed the title ~~chore(deps): update oxc to v0.105.0~~ chore(deps): update oxc to v0.106.0 Dec 29, 2025

Boshen force-pushed the renovate/oxc branch 3 times, most recently from 19ab15c to 8e7d08d Compare December 29, 2025 14:45

Boshen marked this pull request as ready for review December 29, 2025 15:43

Copilot AI review requested due to automatic review settings December 29, 2025 15:43

Copilot started reviewing on behalf of Boshen December 29, 2025 15:43 View session

Copilot AI reviewed Dec 29, 2025

View reviewed changes

crates/rolldown_common/src/inner_bundler_options/types/treeshake.rs Show resolved Hide resolved

Boshen approved these changes Dec 29, 2025

View reviewed changes

Boshen added the graphite: merge-when-ready label Dec 29, 2025

chore(deps): update oxc to v0.106.0 (#7512)

0f6065d

graphite-app bot force-pushed the renovate/oxc branch from 8e7d08d to 0f6065d Compare December 29, 2025 16:52

graphite-app bot merged commit 0f6065d into main Dec 29, 2025
57 checks passed

graphite-app bot removed the graphite: merge-when-ready label Dec 29, 2025

This was referenced Dec 30, 2025

minifier: pure annotated iife call on unused variable initializer is not removed oxc-project/oxc#17480

Open

chore: update esbuild test reasons #7703

Merged

sapphi-red added a commit that referenced this pull request Dec 30, 2025

chore: update esbuild test reasons (#7703)

20f88bf

Follow up to #7512

IWANABETHATGUY pushed a commit that referenced this pull request Dec 30, 2025

chore(deps): update oxc to v0.106.0 (#7512)

87f294c

IWANABETHATGUY pushed a commit that referenced this pull request Dec 30, 2025

chore: update esbuild test reasons (#7703)

6348081

Follow up to #7512

This was referenced Dec 31, 2025

release: v1.0.0-beta.58 #7719

Closed

release: v1.0.0-beta.58 #7721

Merged

sapphi-red mentioned this pull request Feb 4, 2026

feat(minifier): default invalid_import_side_effects to false oxc-project/oxc#18916

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update oxc to v0.106.0#7512

chore(deps): update oxc to v0.106.0#7512
graphite-app[bot] merged 1 commit intomainfrom
renovate/oxc

renovate bot commented Dec 15, 2025 •

edited by Boshen

Loading

Uh oh!

netlify bot commented Dec 15, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 18, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 19, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 29, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Boshen commented Dec 29, 2025

Uh oh!

Boshen commented Dec 29, 2025 •

edited by graphite-app bot

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Comments

Conversation

renovate bot commented Dec 15, 2025 • edited by Boshen Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify bot commented Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

github-actions bot commented Dec 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks Rust

Uh oh!

socket-security bot commented Dec 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Boshen commented Dec 29, 2025

Uh oh!

Boshen commented Dec 29, 2025 • edited by graphite-app bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge activity

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Comments

renovate bot commented Dec 15, 2025 •

edited by Boshen

Loading

netlify bot commented Dec 15, 2025 •

edited

Loading

github-actions bot commented Dec 18, 2025 •

edited

Loading

socket-security bot commented Dec 19, 2025 •

edited

Loading

socket-security bot commented Dec 29, 2025 •

edited

Loading

Boshen commented Dec 29, 2025 •

edited by graphite-app bot

Loading