chore(deps): update npm packages by renovate[bot] · Pull Request #9430 · rolldown/rolldown

renovate · 2026-05-17T16:44:58Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@oxlint/plugins (source)	`1.63.0` → `1.64.0`
@rolldown/pluginutils (source)	`1.0.0` → `1.0.1`
knip (source)	`6.12.1` → `6.13.1`
playwright (source)	`1.59.1` → `1.60.0`
playwright-chromium (source)	`1.59.1` → `1.60.0`
publint (source)	`0.3.19` → `0.3.21`
remeda (source)	`2.34.0` → `2.34.1`
rollup (source)	`4.60.3` → `4.60.4`
semver	`7.7.4` → `7.8.0`
tinybench	`6.0.1` → `6.0.2`
tsx (source)	`4.21.0` → `4.22.0`
vite (source)	`8.0.11` → `8.0.13`
vitest (source)	`4.1.5` → `4.1.6`
vue-router (source)	`5.0.6` → `5.0.7`
ws	`8.20.0` → `8.20.1`

Release Notes

rolldown/plugins (@rolldown/pluginutils)

`v1.0.1`

webpro-nl/knip (knip)

`v6.13.1`: Release 6.13.1

Compare Source

Add jest.config.{cts,mts} (#1743) (44738d6) - thanks @joshkel!
Update ecosystem tests (74420a6)
Fix export * as re-exported namespace case (5923af4)
Add .mts and .cts config files to some plugins (69d1e83)
Docusaurus: ignore @generated/*, handle local plugin paths (ce5f767)
Nx: expand {projectRoot} / {workspaceRoot} token variables (8715312)

`v6.13.0`: Release 6.13.0

Compare Source

Add mercurial (hg) to command constants (#1737) (abb08b0) - thanks @unrevised6419!
Expand wildcards in Jest projects (#1710) (7cb2d37) - thanks @joshkel!
Add knex visitor to scan source files for config (resolve #1736) (4c96fd2)
Refactor to a better split of ast helpers (6e726a2)
Handle package.json exports for outDir="." (resolve #1738) (42497c2)
Fix star re-exported namespace case (resolve #1739) (e566c4b)
Strip comments in scripts in compilers (resolve #1740) (a123d5c)
Update rolldown snapshot (edfee2b)
Source-map subpath imports + collect pairs from referenced tsconfigs (7c5acc4)
Tighten source-mapping utilities (0b68b81)
Update dependencies (8788c1a)
Remove obsolete internal jsdoc tag (0fed975)
Add @serhalp and @stevennevins to sponsors (thank you!) (999a5e3)
Fix astro config after bump (f63537a)

`v6.12.2`: Release 6.12.2

Compare Source

Fix symbol reporter file paths with --directory (#1733) (d54074d) - thanks @cyphercodes!
fix(webpack): reference TS loaders for .ts/.cts config (close #1732) (f37c5da)
fix(serverless-framework): skip functions without handler (close #1735) (616739d)
ci(integration): disable minimumReleaseAge for test installs (081dfc8)
ci(snapshots): query — add CreateQueriesOptions to unused types (5dd0b8a)

microsoft/playwright (playwright)

`v1.60.0`

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

Event browser.on('context') — fired when a new context is created on the browser.
BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

New webError.location() mirrors consoleMessage.location().
consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

HTML reporter:
- npx playwright show-report accepts .zip files directly — no need to unzip first.
- Steps that contain attachments inside nested children show an indicator on the parent step.
- The repeatEachIndex is shown in the test header when non-zero.
Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

Removed long-deprecated APIs:
- Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
- handle option on BrowserContext.exposeBinding and Page.exposeBinding.
- logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
- Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

Chromium 148.0.7778.96
Mozilla Firefox 150.0.2
WebKit 26.4

This version was also tested against the following stable channels:

Google Chrome 147
Microsoft Edge 147

publint/publint (publint)

`v0.3.21`

Compare Source

Patch Changes

Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#228)

`v0.3.20`

Compare Source

Patch Changes

Suggest adding engines.node when it is missing from detected Node.js packages (#226)
Loosen "breaking change" wording in lint messages (7bb3f4f)

remeda/remeda (remeda)

`v2.34.1`

Compare Source

Features

hasProp: add hasProp (#1344) (3c80f28), closes #515 #515 TS#31025

rollup/rollup (rollup)

`v4.60.4`

Compare Source

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)
#6370: fix(deps): update minor/patch updates (@renovate[bot])
#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)
#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])
#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
#6375: Resolve vulnerabilities (@lukastaegert)

npm/node-semver (semver)

`v7.8.0`

Compare Source

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)
37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)
937bc2c #860 [email protected] (@owlstronaut)
6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

tinylibs/tinybench (tinybench)

`v6.0.2`

Compare Source

🐞 Bug Fixes

lint: Add promise recommended config and jsdoc check-tag-names rule - by @jerome-benoit (124e4)

View changes on GitHub

privatenumber/tsx (tsx)

`v4.22.0`

Compare Source

`v4.21.1`

Compare Source

Bug Fixes

support Node 20.11/21.2 import.meta paths (acf3d8f)
support Node.js 24.15.0 (c1d2d45)
support Node.js 26.1.0 and 25.9.0 (1d7e528)

This release is also available on:

npm package (@latest dist-tag)

vitejs/vite (vite)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

vitest-dev/vitest (vitest)

`v4.1.6`

Compare Source

🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in #10138 (31882)
Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in #10196 (2847d)
browser: Simplify orchestrator otel carrier - by @hi-ogawa in #10285 (18af9)

🏎 Performance

Stringify diff objects only once - by @sheremet-va in #10276 (9f7b1)

View changes on GitHub

vuejs/router (vue-router)

`v5.0.7`

Compare Source

🚀 Features

Upgrade to babel 8 - by @posva (8d3e6)
Make defineParamParser() more intuitive - by @posva (8715b)
Upgrade @vue/devtools-api - by @posva (87c3a)
matcher: Hint at params: {} workaround in discarded params warning - by @posva and shanliuling in #2689 (c2b13)
param-parsers: Add include/exclude options - by @posva (91cde)

🐞 Bug Fixes

matcher:
- Finalize param token before processing escaped colon - by @babu-ch and @posva in #2654 (20521)
query:
- Use Object.create(null) to prevent prototype pollution - by @wdskuki, wdsmini and @posva in #2661 (be88c)
resolve:
- Omit empty optional params from resolved params - by @babu-ch and @posva in #2434 (1ef09)
types:
- Wire RouteNamedMap via generated routes.d.ts - by @posva in #2700 (aef99)
unplugin:
- Avoid generating empty routes - by @FrontEndDog and @posva in #2642 (10a8b)
- Apply definePage path-param parser overrides - by @posva in #2699 (c8074)
volar:
- Drop runtime @vue/language-core import - by @danielroe in #2710 (8af50)

View changes on GitHub

websockets/ws (ws)

`v8.20.1`

Compare Source

Bug fixes

Fixed an uninitialized memory disclosure issue in websocket.close()
(c0327ec).

Providing a TypedArray (e.g. Float32Array) as the reason argument for
websocket.close(), rather than the supported string or Buffer types, caused
uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';

const wss = new WebSocketServer(
  { port: 0, skipUTF8Validation: true },
  function () {
    const { port } = wss.address();
    const ws = new WebSocket(`ws://localhost:${port}`, {
      skipUTF8Validation: true
    });

    ws.on('close', function (code, reason) {
      deepStrictEqual(reason, Buffer.alloc(80));
    });
  }
);

wss.on('connection', function (ws) {
  ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-05-17T16:45:21Z

✅ Deploy Preview for rolldown-rs ready!

Name	Link
🔨 Latest commit	`cec1ea0`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/6a0ba2c5781cf40008a7477a
😎 Deploy Preview	https://deploy-preview-9430--rolldown-rs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

socket-security · 2026-05-17T16:46:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
npm/playwright-chromium@1.60.0
npm/@oxlint/plugins@1.64.0
npm/vitest@4.1.5 ⏵ 4.1.6	⁺¹	⁺¹
npm/playwright@1.60.0
npm/publint@0.3.21
npm/tsx@4.22.0
npm/remeda@2.34.1
npm/rollup@4.60.4
npm/semver@7.7.4 ⏵ 7.8.0	⁺¹	⁺¹
npm/vue-router@5.0.7
npm/tinybench@6.0.2
npm/ws@8.20.1
npm/knip@6.13.1
npm/@rolldown/pluginutils@1.0.1

View full report

renovate · 2026-05-18T23:36:34Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@IWANABETHATGUY

## [1.0.2] - 2026-05-20 ### 🚀 Features - devtools: emit package size in PackageGraphReady (#9434) by @IWANABETHATGUY - devtools: classify package dependency types (#9427) by @IWANABETHATGUY - devtools: map packages to modules and chunks (#9426) by @IWANABETHATGUY - devtools: mark used packages (#9423) by @IWANABETHATGUY - devtools: make duplicate packages discoverable (#9422) by @IWANABETHATGUY - devtools: emit package metadata (#9421) by @IWANABETHATGUY - update oxc to 0.132.0 (#9449) by @shulaoda - update oxc to 0.131.0 (#9424) by @shulaoda - allow checks.* to escalate emissions to hard errors (#9388) by @IWANABETHATGUY - dev: support watcher options `include` and `exclude` (#9395) by @h-a-n-a - emit warnings for invalid pure annotations (#9381) by @Kyujenius ### 🐛 Bug Fixes - hash: keep chunk file names stable when an unrelated entry is added (#9444) by @hyf0 - call `codeSplitting.groups[].name` in deterministic order (#9457) by @sapphi-red - dev/lazy: make `resolve_id` idempotent when the resolved id is already a lazy entry (#9439) by @h-a-n-a - chunk-optimization: publish absorbed dynamic-entry namespace cross-chunk (#9448) by @IWANABETHATGUY - treeshake: propagate pure annotation through compound exprs (#9431) by @Dunqing - finalizer: skip redundant init call when barrel executes in same chunk (#9354) by @IWANABETHATGUY - linking: initialize wrapped ESM re-export owners (#9353) by @IWANABETHATGUY - do not inherit __toESM across chunks for named-only external imports (#9333) (#9415) by @IWANABETHATGUY - watcher: don't write output or emit events after close() (#9328) by @situ2001 - chunk-optimization: avoid unsafe dynamic-only merges (#9398) by @IWANABETHATGUY - cjs: rename CJS-wrapped locals that would shadow chunk-scope names (#9392) by @hyf0 - dev/lazy: watch lazy modules added in rebuilds (#9391) by @h-a-n-a ### 🚜 Refactor - rolldown_dev: move dev example to break publish cycle (#9465) by @Boshen - binding: drop unsafe napi string helper, hoist transform ArcStr (#9456) by @hyf0 - ecmascript_utils: split rewrite_ident_reference off JsxExt trait (#9417) by @IWANABETHATGUY - use `ThreadsafeFunction::call_async_catch` (#9390) by @sapphi-red ### 📚 Documentation - devtools: document @rolldown/debug usage and package graph consumption (#9435) by @IWANABETHATGUY - replace `Inter` with system font stack in OG template SVG (#9240) by @yvbopeng - remove `output.comments` warning as all issues have been resolved (#9393) by @sapphi-red - in-depth: clarify @__PURE__ scope and document positions (#9389) by @Kyujenius - readme: remove release candidate notice (#9387) by @shulaoda ### ⚡ Performance - vite-resolve: cache importer existence checks (#9443) by @Brooooooklyn - binding: reduce plugin string clones (#9436) by @Brooooooklyn ### 🧪 Testing - enable `legal_comments_inline` test (#9394) by @sapphi-red ### ⚙️ Miscellaneous Tasks - bump pnpm to v11.1.2 (#9447) by @Boshen - deps: update rust crates (#9461) by @renovate[bot] - deps: update rollup submodule for tests to v4.60.4 (#9453) by @rolldown-guard[bot] - deps: update test262 submodule for tests (#9454) by @rolldown-guard[bot] - deps: update npm packages (#9430) by @renovate[bot] - deps: update github actions (#9429) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to v0.25.1 (#9452) by @renovate[bot] - deps: update rust crates (#9428) by @renovate[bot] - revert allow checks.* to escalate emissions to hard errors (#9388) (#9438) by @IWANABETHATGUY - update mimalloc-safe to 0.1.61 (#9413) by @shulaoda - deny `todo`, `unimplemented`, and `print_stderr` clippy lints (#9412) by @Boshen - deps: update mimalloc-safe to 0.1.60 (#9410) by @shulaoda - remove `pip install setuptools` workaround for node-gyp on macOS (#9370) by @sapphi-red - renovate: disable automerge to require manual approval (#9386) by @shulaoda - deps: update napi (#9385) by @renovate[bot] ### ❤️ New Contributors * @yvbopeng made their first contribution in [#9240](#9240) Co-authored-by: shulaoda <[email protected]>

@IWANABETHATGUY

## [1.0.2] - 2026-05-20 ### 🚀 Features - devtools: emit package size in PackageGraphReady (rolldown#9434) by @IWANABETHATGUY - devtools: classify package dependency types (rolldown#9427) by @IWANABETHATGUY - devtools: map packages to modules and chunks (rolldown#9426) by @IWANABETHATGUY - devtools: mark used packages (rolldown#9423) by @IWANABETHATGUY - devtools: make duplicate packages discoverable (rolldown#9422) by @IWANABETHATGUY - devtools: emit package metadata (rolldown#9421) by @IWANABETHATGUY - update oxc to 0.132.0 (rolldown#9449) by @shulaoda - update oxc to 0.131.0 (rolldown#9424) by @shulaoda - allow checks.* to escalate emissions to hard errors (rolldown#9388) by @IWANABETHATGUY - dev: support watcher options `include` and `exclude` (rolldown#9395) by @h-a-n-a - emit warnings for invalid pure annotations (rolldown#9381) by @Kyujenius ### 🐛 Bug Fixes - hash: keep chunk file names stable when an unrelated entry is added (rolldown#9444) by @hyf0 - call `codeSplitting.groups[].name` in deterministic order (rolldown#9457) by @sapphi-red - dev/lazy: make `resolve_id` idempotent when the resolved id is already a lazy entry (rolldown#9439) by @h-a-n-a - chunk-optimization: publish absorbed dynamic-entry namespace cross-chunk (rolldown#9448) by @IWANABETHATGUY - treeshake: propagate pure annotation through compound exprs (rolldown#9431) by @Dunqing - finalizer: skip redundant init call when barrel executes in same chunk (rolldown#9354) by @IWANABETHATGUY - linking: initialize wrapped ESM re-export owners (rolldown#9353) by @IWANABETHATGUY - do not inherit __toESM across chunks for named-only external imports (rolldown#9333) (rolldown#9415) by @IWANABETHATGUY - watcher: don't write output or emit events after close() (rolldown#9328) by @situ2001 - chunk-optimization: avoid unsafe dynamic-only merges (rolldown#9398) by @IWANABETHATGUY - cjs: rename CJS-wrapped locals that would shadow chunk-scope names (rolldown#9392) by @hyf0 - dev/lazy: watch lazy modules added in rebuilds (rolldown#9391) by @h-a-n-a ### 🚜 Refactor - rolldown_dev: move dev example to break publish cycle (rolldown#9465) by @Boshen - binding: drop unsafe napi string helper, hoist transform ArcStr (rolldown#9456) by @hyf0 - ecmascript_utils: split rewrite_ident_reference off JsxExt trait (rolldown#9417) by @IWANABETHATGUY - use `ThreadsafeFunction::call_async_catch` (rolldown#9390) by @sapphi-red ### 📚 Documentation - devtools: document @rolldown/debug usage and package graph consumption (rolldown#9435) by @IWANABETHATGUY - replace `Inter` with system font stack in OG template SVG (rolldown#9240) by @yvbopeng - remove `output.comments` warning as all issues have been resolved (rolldown#9393) by @sapphi-red - in-depth: clarify @__PURE__ scope and document positions (rolldown#9389) by @Kyujenius - readme: remove release candidate notice (rolldown#9387) by @shulaoda ### ⚡ Performance - vite-resolve: cache importer existence checks (rolldown#9443) by @Brooooooklyn - binding: reduce plugin string clones (rolldown#9436) by @Brooooooklyn ### 🧪 Testing - enable `legal_comments_inline` test (rolldown#9394) by @sapphi-red ### ⚙️ Miscellaneous Tasks - bump pnpm to v11.1.2 (rolldown#9447) by @Boshen - deps: update rust crates (rolldown#9461) by @renovate[bot] - deps: update rollup submodule for tests to v4.60.4 (rolldown#9453) by @rolldown-guard[bot] - deps: update test262 submodule for tests (rolldown#9454) by @rolldown-guard[bot] - deps: update npm packages (rolldown#9430) by @renovate[bot] - deps: update github actions (rolldown#9429) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to v0.25.1 (rolldown#9452) by @renovate[bot] - deps: update rust crates (rolldown#9428) by @renovate[bot] - revert allow checks.* to escalate emissions to hard errors (rolldown#9388) (rolldown#9438) by @IWANABETHATGUY - update mimalloc-safe to 0.1.61 (rolldown#9413) by @shulaoda - deny `todo`, `unimplemented`, and `print_stderr` clippy lints (rolldown#9412) by @Boshen - deps: update mimalloc-safe to 0.1.60 (rolldown#9410) by @shulaoda - remove `pip install setuptools` workaround for node-gyp on macOS (rolldown#9370) by @sapphi-red - renovate: disable automerge to require manual approval (rolldown#9386) by @shulaoda - deps: update napi (rolldown#9385) by @renovate[bot] ### ❤️ New Contributors * @yvbopeng made their first contribution in [rolldown#9240](rolldown#9240) Co-authored-by: shulaoda <[email protected]>

chore(deps): update npm packages

e6b6801

renovate Bot force-pushed the renovate/npm-packages branch from a7c3e11 to e6b6801 Compare May 17, 2026 20:55

shulaoda self-assigned this May 18, 2026

shulaoda added 2 commits May 19, 2026 07:34

u

cfb0aa2

Merge branch 'main' into renovate/npm-packages

cec1ea0

shulaoda approved these changes May 18, 2026

View reviewed changes

shulaoda merged commit ff45f0b into main May 18, 2026
52 checks passed

shulaoda deleted the renovate/npm-packages branch May 18, 2026 23:42

rolldown-guard Bot mentioned this pull request May 20, 2026

release: v1.0.2 #9478

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update npm packages#9430

chore(deps): update npm packages#9430
shulaoda merged 3 commits into
mainfrom
renovate/npm-packages

renovate Bot commented May 17, 2026 •

edited

Loading

Uh oh!

netlify Bot commented May 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 17, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v6.13.1: Release 6.13.1

v6.13.0: Release 6.13.0

v6.12.2: Release 6.12.2

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

Locators and Assertions

Network

Errors and Reporting

Test runner

🛠️ Other improvements

Breaking Changes ⚠️

Browser Versions

Patch Changes

Patch Changes

Features

Bug Fixes

Pull Requests

Features

Bug Fixes

Documentation

Chores

🐞 Bug Fixes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

🐞 Bug Fixes

🏎 Performance

🚀 Features

🐞 Bug Fixes

Bug fixes

Configuration

Uh oh!

netlify Bot commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs ready!

Uh oh!

socket-security Bot commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented May 18, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented May 17, 2026 •

edited

Loading

`v6.13.1`: Release 6.13.1

`v6.13.0`: Release 6.13.0

`v6.12.2`: Release 6.12.2

netlify Bot commented May 17, 2026 •

edited

Loading

socket-security Bot commented May 17, 2026 •

edited

Loading