chore(deps): update github actions by renovate[bot] · Pull Request #9341 · rolldown/rolldown

renovate · 2026-05-11T03:08:52Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
CodSpeedHQ/action	action	patch	`v4.15.0` → `v4.15.1`
benchmark-action/github-action-benchmark	action	patch	`v1.22.0` → `v1.22.1`
oxc-project/security-action	action	patch	`v1.0.3` → `v1.0.5`
taiki-e/install-action	action	minor	`v2.75.25` → `v2.77.1`	`v2.77.5` (+3)
voidzero-dev/setup-vp	action	minor	`v1.8.0` → `v1.9.0`	`v1.10.0`

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

`v4.15.1`

Compare Source

Release Notes

🚀 Features

Add a way to disable perf compression through env var by @GuillaumeLagrange in #334
Do not display the comparison nudge when not in an interactive terminal by @GuillaumeLagrange in #300
Display a warning when profiling generation failed by @GuillaumeLagrange
Detect and abort on ring buffer overflow by @not-matthias in #321
Grow ring buffer to 16 MiB by @not-matthias

⚙️ Internals

chore: bump runner version to 4.15.1 by @github-actions[bot] in #205
Increase stack sampling for python by @GuillaumeLagrange in #337
Replace hard coded lint job for a dedicated check action by @GuillaumeLagrange in #320
Bump cpp-linter-hooks to support darwin by @GuillaumeLagrange
Swap pre-commit action for prek by @GuillaumeLagrange
Fix unused clippy errors in test targets on macos by @GuillaumeLagrange
Run pre-commit hooks on macos and ubuntu-latest by @GuillaumeLagrange

Install codspeed-runner 4.15.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.15.1

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.15.0...v4.15.1

benchmark-action/github-action-benchmark (benchmark-action/github-action-benchmark)

`v1.22.1`

Compare Source

fix scope tsconfig.build.json to src/ for reproducibility (#352)
chore bump minimatch from 3.1.2 to 3.1.5 (#347)
chore bump uuid and @actions/core (#350)
chore bump flatted from 3.2.4 to 3.4.2 (#346)
chore bump js-yaml (#344)
chore bump picomatch from 2.3.0 to 2.3.2 (#342)

oxc-project/security-action (oxc-project/security-action)

`v1.0.5`

Compare Source

`v1.0.4`

Compare Source

taiki-e/install-action (taiki-e/install-action)

`v2.77.1`: 2.77.1

Compare Source

Support taiki-e/install-action@rust tag.
Update tombi@latest to 0.10.3.
Update martin@latest to 1.8.2.

`v2.77.0`: 2.77.0

Compare Source

Support rust. (#1779)

This installs rust using rustup.

If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

This also supports installing additional components at the same time by +<additional> syntax:
```
- uses: taiki-e/install-action@v2
  with:
    # Install rust stable with rustfmt component and wasm32-wasip1 target.
    tool: rust+rustfmt+wasm32-wasip1
    # When installing another rust version:
    # tool: rust@nightly + rustfmt + wasm32-wasip1
```
Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.
Update mise@latest to 2026.5.0.
Diagnostic improvements.

`v2.76.0`: 2.76.0

Compare Source

Support mdbook-d2. (#1737, thanks @nhu)
Support cargo-apple-runner. (#1731, thanks @madsmtm)
Support cargo-binstall on riscv64 Linux.
Update cargo-deb@latest to 3.7.0.
Update tombi@latest to 0.10.2.

`v2.75.30`: 2.75.30

Compare Source

Support cargo-spellcheck on AArch64 Linux/Windows.
Update cargo-spellcheck@latest to 0.15.7.
Update biome@latest to 2.4.14.

`v2.75.29`: 2.75.29

Compare Source

Update syft@latest to 1.44.0.
Update rclone@latest to 1.74.0.
Update osv-scanner@latest to 2.3.6.

`v2.75.28`: 2.75.28

Compare Source

Update wasmtime@latest to 44.0.1.
Update typos@latest to 1.46.0.
Update tombi@latest to 0.10.1.
Update sccache@latest to 0.15.0.
Update mise@latest to 2026.4.28.
Update gungraun-runner@latest to 0.18.2.
Update cyclonedx@latest to 0.31.0.

`v2.75.27`: 2.75.27

Compare Source

Update cargo-udeps@latest to 0.1.61.
Update wasm-tools@latest to 1.248.0.
Update cargo-deb@latest to 3.6.4.

`v2.75.26`: 2.75.26

Compare Source

Update wasm-bindgen@latest to 0.2.120.
Update mise@latest to 2026.4.25.
Update martin@latest to 1.8.0.
Update vacuum@latest to 0.26.4.

voidzero-dev/setup-vp (voidzero-dev/setup-vp)

`v1.9.0`

Compare Source

What's Changed

chore(deps): update pnpm to v10.33.1 by @renovate[bot] in #53
chore: add renovate preset by @Boshen in #56
chore: move renovate config by @Boshen in #57
chore: ignore @void-sdk/void in renovate by @Boshen in #58
ci: replace actions/checkout with taiki-e/checkout-action by @Boshen in #59
feat: export PNPM_CONFIG_USERCONFIG env var for pnpm 11+ by @siketyan in #65

New Contributors

@Boshen made their first contribution in #56
@siketyan made their first contribution in #65

Full Changelog: voidzero-dev/setup-vp@v1.8.0...v1.9.0

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-05-11T03:09:09Z

❌ Deploy Preview for rolldown-rs failed.

Name	Link
🔨 Latest commit	`ce9851d`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/6a0227fb5f3eb70008f9beeb

codspeed-hq · 2026-05-11T03:16:04Z

Merging this PR will not alter performance

✅ 4 untouched benchmarks
⏩ 10 skipped benchmarks¹

_{Comparing renovate/github-actions (ce9851d) with main (613f0b9)}

10 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

renovate · 2026-05-11T18:46:26Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@shulaoda

## [1.0.1] - 2026-05-13 ### 🚀 Features - experimental/lazy-barrel: advice on oversized barrel modules (#9236) by @shulaoda - rolldown: inline optional-chain enum access (#9379) by @Dunqing - chunk-optimization: dedupe already-loaded dynamic deps (#9305) by @IWANABETHATGUY - binding: call moduleParsed hook in ParallelJsPlugin (#9318) by @jaehafe ### 🐛 Bug Fixes - transform: enable `enum_eval` for `transformSync` and vite TS transform (#9325) by @Dunqing - error: remove severity prefix from diagnostic messages (#9262) by @Kyujenius - deps: pin pnpm to 10.23.0 to work around catalog mismatch on Netlify (#9364) by @shulaoda - ci: pin mimalloc-safe to 0.1.58 (#9361) by @shulaoda - dev/lazy: fix exports of lazy requests in lazy chunks (#9249) by @h-a-n-a - rolldown_plugin_vite_resolve: handle errors in `resolveSubpathImports` callback (#9355) by @sapphi-red - rolldown_plugin_lazy_compilation: use loadExports for fetched proxy to preserve original export names (#9132) by @h-a-n-a - common: include offending index in HybridIndexVec panic message (#9296) by @SAY-5 ### 🚜 Refactor - ecmascript: extract semantic_builder_for_transform helper (#9326) by @Dunqing - test: extract reusable static-import-cycle helper (#9332) by @IWANABETHATGUY ### 📚 Documentation - clarify scope of `topLevelVar` (#9380) by @IWANABETHATGUY - meta/design: add ast-mutation design doc (#9338) by @hyf0 - feat: add ai policy in contribution guide (#9315) by @mdong1909 ### ⚡ Performance - binding: enable mimalloc v3 to reduce idle memory (#9349) by @shulaoda ### 🧪 Testing - mcs: cover require() in `$initial` group (#9376) by @hyf0 - add regression for CJS facade chunk merge into entry (#9351) by @IWANABETHATGUY ### ⚙️ Miscellaneous Tasks - switch prepare-release to manual dispatch with version input (#9383) by @shulaoda - migrate `@rolldown/pluginutils` to `rolldown/plugins` (#9317) by @shulaoda - deps: pin libmimalloc-sys2 to 0.1.54 (#9372) by @shulaoda - replace `igorskyflyer/action-readfile` with `cat` (#9369) by @sapphi-red - deps: update test262 submodule for tests (#9371) by @rolldown-guard[bot] - use app token for test dep update PRs (#9368) by @sapphi-red - replace some actions with gh commands (#9367) by @sapphi-red - replace action-semantic-pull-request with inline regex (#9366) by @sapphi-red - remove pull_request_target workflows (#9188) by @Boshen - deps: upgrade oxc to 0.130.0 (#9360) by @shulaoda - deps: update github actions (major) (#9348) by @renovate[bot] - deps: update github actions (#9341) by @renovate[bot] - deps: update rust crates (#9344) by @renovate[bot] - deps: update crate-ci/typos action to v1.46.1 (#9357) by @renovate[bot] - deps: update npm packages (#9343) by @renovate[bot] - deps: update pnpm to v10.33.4 (#9347) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to ^0.25.0 (#9346) by @renovate[bot] - .claude: add rolldown-repl encoder, rename decode skill (#9352) by @IWANABETHATGUY - deps: update crate-ci/typos action to v1.46.0 (#9345) by @renovate[bot] - deps: update napi to v3.8.6 (#9342) by @renovate[bot] - deps: update dependency vite-plus to v0.1.20 (#9340) by @renovate[bot] - enable rollup chunking-form test (#9335) by @IWANABETHATGUY - typo: fix typo in watcher options comment (#9324) by @thescripted ### ❤️ New Contributors * @Kyujenius made their first contribution in [#9262](#9262) * @SAY-5 made their first contribution in [#9296](#9296) * @thescripted made their first contribution in [#9324](#9324) Co-authored-by: shulaoda <[email protected]>

@shulaoda

## [1.0.1] - 2026-05-13 ### 🚀 Features - experimental/lazy-barrel: advice on oversized barrel modules (#9236) by @shulaoda - rolldown: inline optional-chain enum access (#9379) by @Dunqing - chunk-optimization: dedupe already-loaded dynamic deps (#9305) by @IWANABETHATGUY - binding: call moduleParsed hook in ParallelJsPlugin (#9318) by @jaehafe ### 🐛 Bug Fixes - transform: enable `enum_eval` for `transformSync` and vite TS transform (#9325) by @Dunqing - error: remove severity prefix from diagnostic messages (#9262) by @Kyujenius - deps: pin pnpm to 10.23.0 to work around catalog mismatch on Netlify (#9364) by @shulaoda - ci: pin mimalloc-safe to 0.1.58 (#9361) by @shulaoda - dev/lazy: fix exports of lazy requests in lazy chunks (#9249) by @h-a-n-a - rolldown_plugin_vite_resolve: handle errors in `resolveSubpathImports` callback (#9355) by @sapphi-red - rolldown_plugin_lazy_compilation: use loadExports for fetched proxy to preserve original export names (#9132) by @h-a-n-a - common: include offending index in HybridIndexVec panic message (#9296) by @SAY-5 ### 🚜 Refactor - ecmascript: extract semantic_builder_for_transform helper (#9326) by @Dunqing - test: extract reusable static-import-cycle helper (#9332) by @IWANABETHATGUY ### 📚 Documentation - clarify scope of `topLevelVar` (#9380) by @IWANABETHATGUY - meta/design: add ast-mutation design doc (#9338) by @hyf0 - feat: add ai policy in contribution guide (#9315) by @mdong1909 ### ⚡ Performance - binding: enable mimalloc v3 to reduce idle memory (#9349) by @shulaoda ### 🧪 Testing - mcs: cover require() in `$initial` group (#9376) by @hyf0 - add regression for CJS facade chunk merge into entry (#9351) by @IWANABETHATGUY ### ⚙️ Miscellaneous Tasks - switch prepare-release to manual dispatch with version input (#9383) by @shulaoda - migrate `@rolldown/pluginutils` to `rolldown/plugins` (#9317) by @shulaoda - deps: pin libmimalloc-sys2 to 0.1.54 (#9372) by @shulaoda - replace `igorskyflyer/action-readfile` with `cat` (#9369) by @sapphi-red - deps: update test262 submodule for tests (#9371) by @rolldown-guard[bot] - use app token for test dep update PRs (#9368) by @sapphi-red - replace some actions with gh commands (#9367) by @sapphi-red - replace action-semantic-pull-request with inline regex (#9366) by @sapphi-red - remove pull_request_target workflows (#9188) by @Boshen - deps: upgrade oxc to 0.130.0 (#9360) by @shulaoda - deps: update github actions (major) (#9348) by @renovate[bot] - deps: update github actions (#9341) by @renovate[bot] - deps: update rust crates (#9344) by @renovate[bot] - deps: update crate-ci/typos action to v1.46.1 (#9357) by @renovate[bot] - deps: update npm packages (#9343) by @renovate[bot] - deps: update pnpm to v10.33.4 (#9347) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to ^0.25.0 (#9346) by @renovate[bot] - .claude: add rolldown-repl encoder, rename decode skill (#9352) by @IWANABETHATGUY - deps: update crate-ci/typos action to v1.46.0 (#9345) by @renovate[bot] - deps: update napi to v3.8.6 (#9342) by @renovate[bot] - deps: update dependency vite-plus to v0.1.20 (#9340) by @renovate[bot] - enable rollup chunking-form test (#9335) by @IWANABETHATGUY - typo: fix typo in watcher options comment (#9324) by @thescripted ### ❤️ New Contributors * @Kyujenius made their first contribution in [#9262](#9262) * @SAY-5 made their first contribution in [#9296](#9296) * @thescripted made their first contribution in [#9324](#9324) Co-authored-by: shulaoda <[email protected]>

chore(deps): update github actions

e533141

renovate Bot enabled auto-merge (squash) May 11, 2026 03:08

shulaoda self-assigned this May 11, 2026

shulaoda disabled auto-merge May 11, 2026 18:43

Merge branch 'main' into renovate/github-actions

32ac137

Merge branch 'main' into renovate/github-actions

ce9851d

shulaoda approved these changes May 11, 2026

View reviewed changes

shulaoda merged commit 92ec0a9 into main May 11, 2026
52 of 56 checks passed

shulaoda deleted the renovate/github-actions branch May 11, 2026 19:08

rolldown-guard Bot mentioned this pull request May 13, 2026

release: v1.0.1 #9384

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions#9341

chore(deps): update github actions#9341
shulaoda merged 3 commits into
mainfrom
renovate/github-actions

renovate Bot commented May 11, 2026

Uh oh!

netlify Bot commented May 11, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented May 11, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 11, 2026

Release Notes

v4.15.1

Release Notes

🚀 Features

⚙️ Internals

Install codspeed-runner 4.15.1

Install prebuilt binaries via shell script

Download codspeed-runner 4.15.1

v1.22.1

v1.0.5

v1.0.4

v2.77.1: 2.77.1

v2.77.0: 2.77.0

v2.76.0: 2.76.0

v2.75.30: 2.75.30

v2.75.29: 2.75.29

v2.75.28: 2.75.28

v2.75.27: 2.75.27

v2.75.26: 2.75.26

v1.9.0

What's Changed

New Contributors

Configuration

Uh oh!

netlify Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for rolldown-rs failed.

Uh oh!

codspeed-hq Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will not alter performance

Footnotes

Uh oh!

renovate Bot commented May 11, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v4.15.1`

`v1.22.1`

`v1.0.5`

`v1.0.4`

`v2.77.1`: 2.77.1

`v2.77.0`: 2.77.0

`v2.76.0`: 2.76.0

`v2.75.30`: 2.75.30

`v2.75.29`: 2.75.29

`v2.75.28`: 2.75.28

`v2.75.27`: 2.75.27

`v2.75.26`: 2.75.26

`v1.9.0`

netlify Bot commented May 11, 2026 •

edited

Loading

codspeed-hq Bot commented May 11, 2026 •

edited

Loading