Skip to content

chore(deps): update npm packages#9614

Merged
shulaoda merged 3 commits into
mainfrom
renovate/npm-packages
Jun 3, 2026
Merged

chore(deps): update npm packages#9614
shulaoda merged 3 commits into
mainfrom
renovate/npm-packages

Conversation

@renovate

@renovate renovate Bot commented May 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/core (source) 7.29.0 → 7.29.7 age adoption passing confidence
@babel/preset-env (source) 7.29.5 → 7.29.7 age adoption passing confidence
@babel/preset-typescript (source) 7.28.5 → 7.29.7 age adoption passing confidence
@oxlint/plugins (source) 1.66.0 → 1.67.0 age adoption passing confidence
@rolldown/pluginutils (source) 1.0.0 → 1.0.1 age adoption passing confidence
knip (source) 6.14.1 → 6.14.2 age adoption passing confidence
mocha (source) 11.7.5 → 11.7.6 age adoption passing confidence
remeda (source) 2.34.1 → 2.37.0 age adoption passing confidence
terser (source) 5.47.1 → 5.48.0 age adoption passing confidence
tinybench 6.0.1 → 6.0.2 age adoption passing confidence
tinyexec 1.1.2 → 1.2.2 age adoption passing confidence
tsx (source) 4.22.1 → 4.22.3 age adoption passing confidence
valibot (source) 1.4.0 → 1.4.1 age adoption passing confidence
vite (source) 8.0.11 → 8.0.14 age adoption passing confidence
vitepress-plugin-llms 1.12.2 → 1.13.1 age adoption passing confidence
vitest (source) 4.1.6 → 4.1.7 age adoption passing confidence
void (source) ^0.8.0 → ^0.9.0 age adoption passing confidence
vue (source) 3.5.34 → 3.5.35 age adoption passing confidence
vue-router (source) 5.0.6 → 5.1.0 age adoption passing confidence
web-tree-sitter (source) 0.26.8 → 0.26.9 age adoption passing confidence
ws 8.20.1 → 8.21.0 age adoption passing confidence

Release Notes

babel/babel (@​babel/core)

v7.29.7

Compare Source

v7.29.6

Compare Source

babel/babel (@​babel/preset-env)

v7.29.7

Compare Source

babel/babel (@​babel/preset-typescript)

v7.29.7

Compare Source

rolldown/plugins (@​rolldown/pluginutils)

v1.0.1

webpro-nl/knip (knip)

v6.14.2: Release 6.14.2

Compare Source

mochajs/mocha (mocha)

v11.7.6

Compare Source

🩹 Fixes
  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#​5694) (73ebdfa)
🧹 Chores
remeda/remeda (remeda)

v2.37.0

Compare Source

Bug Fixes
  • splice: move data-last inference to curried data param (#​1358) (16338d8)

v2.36.0

Compare Source

Bug Fixes
  • sample: typechecking perf issue with large literal tuples (#​1355) (542185d)

v2.35.0

Compare Source

Bug Fixes
terser/terser (terser)

v5.48.0

Compare Source

  • Support import source ... and import defer ... (#​1682)
tinylibs/tinybench (tinybench)

v6.0.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
tinylibs/tinyexec (tinyexec)

v1.2.2

Compare Source

What's Changed

Full Changelog: tinylibs/tinyexec@1.2.1...1.2.2

v1.2.1

Compare Source

What's Changed

Full Changelog: tinylibs/tinyexec@1.2.0...1.2.1

v1.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: tinylibs/tinyexec@1.1.2...1.2.0

privatenumber/tsx (tsx)

v4.22.3

Compare Source

v4.22.2

Compare Source

open-circle/valibot (valibot)

v1.4.1

Compare Source

  • Fix intersect schema to infer correct input and output types for non-tuple array options instead of never (pull request #​1478)
vitejs/vite (vite)

v8.0.14

Compare Source

Features
Bug Fixes
Miscellaneous Chores
  • deps: update rolldown-related dependencies (#​22470) (7cb728e)
  • remove irrelevant commits from changelog (2c69495)
Code Refactoring
Tests

v8.0.13

Compare Source

Features
Bug Fixes
Miscellaneous Chores

v8.0.12

Compare Source

Features
Bug Fixes
  • create-vite: pass react framework to TanStack CLI (#​22397) (18f0f90)
  • deps: update all non-major dependencies (#​22420) (2be6000)
  • module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#​22369) (f5a22e6)
  • refer to rolldownOptions instead of deprecated rollupOptions in messages (#​22400) (b675c7b)
  • worker: apply build.target to worker bundle (#​22404) (3c93fde)
  • worker: forward define to worker bundle transform (#​22408) (d4838a0)
Miscellaneous Chores
okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

v1.13.1

Compare Source

No significant changes

     View changes on GitHub

v1.13.0

Compare Source

    🚀 Enhancements

You can now build a completely custom UI for the "Copy / Download as Markdown"
buttons without touching the bundled Vue component. 🥞

The new useCopyOrDownloadAsMarkdownButtons composable is exported directly
from vitepress-plugin-llms/vitepress-components and gives you full access to the underlying
reactive state and action handlers - copied, downloaded, copyAsMarkdown,
downloadMarkdown, viewAsMarkdown, openInAI, so you can wire them up to
any markup you want.

The list of AI providers is also now configurable via the aiProviders option,
and the default providers (ChatGPT and Claude) are exported separately as
defaultAiProviders so you can extend rather than replace them.

   💖 Contributors
     View changes on GitHub
vitest-dev/vitest (vitest)

v4.1.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
voidzero-dev/void (void)

v0.9.0

Compare Source

vuejs/core (vue)

v3.5.35

Compare Source

Bug Fixes
Performance Improvements
vuejs/router (vue-router)

v5.1.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v5.0.7

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
tree-sitter/tree-sitter (web-tree-sitter)

v0.26.9

Compare Source

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.8...v0.26.9

websockets/ws (ws)

v8.21.0

Compare Source

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • "before 10am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented May 31, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Scope: all 38 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 65, reused 0, downloaded 0, added 0
packages/rollup-tests                    | [WARN] deprecated [email protected]
/tmp/renovate/repos/github/rolldown/rolldown/packages/vite-tests:
[ERR_PNPM_TRUST_DOWNGRADE] High-risk trust downgrade for "[email protected]" (possible package takeover)

This error happened while installing a direct dependency of /tmp/renovate/repos/github/rolldown/rolldown/packages/vite-tests

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had trusted publisher, but this version has provenance attestation. A trust downgrade may indicate a supply chain incident.

@netlify

netlify Bot commented May 31, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for rolldown-rs ready!

Name Link
🔨 Latest commit 0af9304
🔍 Latest deploy log https://app.netlify.com/projects/rolldown-rs/deploys/6a1f7a710c9f8200084e82fd
😎 Deploy Preview https://deploy-preview-9614--rolldown-rs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@shulaoda shulaoda self-assigned this Jun 1, 2026
@renovate

renovate Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@socket-security

socket-security Bot commented Jun 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​void@​0.9.0791009797100
Addednpm/​valibot@​1.4.1981009989100

View full report

@shulaoda shulaoda merged commit 0ac035c into main Jun 3, 2026
56 checks passed
@shulaoda shulaoda deleted the renovate/npm-packages branch June 3, 2026 01:00
@rolldown-guard rolldown-guard Bot mentioned this pull request Jun 3, 2026
Merged
shulaoda added a commit that referenced this pull request Jun 3, 2026
@rolldown-guard @shulaoda
release: v1.1.0 (#9637)
c462c7c 
> [!IMPORTANT]
> **This is a minor release.** Two changes alter default behavior compared to `1.0.3`. Please read this section before upgrading. Everything else is additive (new features, fixes, deps).

## ⚠️ Notable behavior changes

### 1. `experimental.lazyBarrel` is now enabled by default (#9632)

**What changed.** `experimental.lazyBarrel` now defaults to `true`. When a barrel module is recognized as side-effect-free, Rolldown skips compiling the re-exported modules that are never actually used.

**Impact.** For codebases with large barrel files (component libraries such as Ant Design, `@mui/icons-material`, etc.) this is a meaningful build-time speedup, and for the vast majority of projects the emitted output is unchanged. In rare cases where a barrel is *incorrectly* treated as side-effect-free, the optimization could drop a module that was being relied on for its side effects.

**How to opt out (backward compatible).**

```js
// rolldown.config.js
export default {
  experimental: { lazyBarrel: false },
}
```

> Note: this opt-out flag is planned to be removed in a future release. If you have a case where you must turn it off, please open an issue so we can fix the underlying detection instead.

---

### 2. `tsconfig` project-reference resolution now aligns with TypeScript

Upgrading `oxc_resolver` (`11.19.1` → `11.20.0` in #9549, then `→ 11.21.0` in #9634) changes how a *solution-style* `tsconfig.json` (one that only lists `references` and delegates the real settings to `tsconfig.app.json` / `tsconfig.node.json`, as Vite scaffolds) is resolved, bringing it **in line with how TypeScript (`tsc`) itself behaves**:

- **Reference match priority** (oxc-resolver [#1151](oxc-project/oxc-resolver#1151)): when the root has `references`, a referenced project that includes the file now **takes precedence over the root**, instead of the root matching it first (this is what TypeScript already does). So that project's `compilerOptions.paths` now apply.
- **`allowJs`** (oxc-resolver [#1198](oxc-project/oxc-resolver#1198)): whether a `.js`/`.jsx`/`.mjs`/`.cjs` file is included is now decided by **each referenced project's own** `allowJs`, not the root's (again matching TypeScript). So `tsconfig.app.json` with `allowJs: true` + `paths` now resolves aliases for `.js` files even when the root doesn't set `allowJs`.

For most projects this is a fix (the standard Vite `paths` aliases now resolve, closes #8468), but it **is** a behavior change if you relied on the previous behavior, where the root's `paths` / `allowJs` took precedence.

**If you relied on the old "root wins" behavior.** There is no exact toggle back, because the old behavior was the bug being fixed. The recommended path is to align your config with TypeScript: declare the `paths` / `allowJs` on the referenced project that actually owns the files.

If you must keep the old precedence while still using `references`: a referenced project's match wins, and **the first matching `references` entry takes priority** (the root is only a fallback when no reference claims the file). So extract the old root settings into their own config and list it **first**:

```jsonc
// tsconfig.json (solution root)
{
  "files": [],
  "references": [
    { "path": "./tsconfig.base.json" }, // old root paths/allowJs — listed first, so it wins
    { "path": "./tsconfig.app.json" },
    { "path": "./tsconfig.node.json" }
  ]
}
```

`tsconfig.base.json` should carry the `paths` you previously declared on the root, plus `allowJs: true` if it needs to claim `.js` files (the extension is checked against each config's own `allowJs`). With no `include`, it defaults to `**/*` under its directory and claims every file first.

Alternatively, bypass reference resolution entirely by pointing the top-level `tsconfig` option at a single config: `export default { tsconfig: './tsconfig.app.json' }`.

---

## [1.1.0] - 2026-06-03

### 🚀 Features

- enable `experimental.lazyBarrel` by default (#9632) by @shulaoda
- `import.meta.glob` support `caseSensitive` option (#9594) by @btea
- add `SOURCEMAP_BROKEN` warning for renderChunk hook (#9601) by @sapphi-red
- add `SOURCEMAP_BROKEN` warning for transform hook (#9600) by @sapphi-red
- add `@__NO_SIDE_EFFECTS__` hint for invalid `@__PURE__` before function declarations (#9505) by @Copilot
- code-splitting: support group-local `includeDependenciesRecursively` (#9587) by @hyf0

### 🐛 Bug Fixes

- report TSCONFIG_ERROR instead of UNHANDLEABLE_ERROR for a missing tsconfig file (#9633) by @shulaoda
- browser: add missing exports and ensure consistency with `rolldown` package (#9629) by @sapphi-red
- should build test-dev-server when test-node (#9610) by @situ2001
- chunk-optimizer: refuse asymmetric merge for cyclic dynamic entries (#9320) (#9322) by @aminpaks
- dev: handle the remaining errors in dev (#9570) by @h-a-n-a
- handle slash-normalized ids with preserveModulesRoot (#9595) by @IWANABETHATGUY
- json: preserve .default access on JSON default imports (#9568) by @IWANABETHATGUY
- testing: remove unintended trigger_full_build from test harness (#9573) by @hyf0

### 🚜 Refactor

- js-regex: use regress native replace/replace_all (#9607) by @IWANABETHATGUY
- remove never-constructed `ImportStatus` variants (#9606) by @Boshen

### 📚 Documentation

- clarify that `RolldownBuild::close` method should be called in most cases (#9619) by @sapphi-red

### ⚡ Performance

- avoid unnecessary intermediate sourcemaps (#9599) by @sapphi-red

### 🧪 Testing

- add unit test for collapsing module sourcemap (#9626) by @sapphi-red
- cover vite-alias regex capture-group expansion (#9602) (#9608) by @IWANABETHATGUY

### ⚙️ Miscellaneous Tasks

- deps: update oxc_resolver to 11.21.0 (#9634) by @shulaoda
- update invalid option diagnostic link to point to Rolldown docs (#9631) by @sapphi-red
- deps: update vite+ to v0.1.24 (#9628) by @renovate[bot]
- deps: update oxc resolver to v11.20.0 (#9549) by @renovate[bot]
- deps: update dependency vite-plus to v0.1.24 (#9470) by @renovate[bot]
- deps: update npm packages (#9614) by @renovate[bot]
- deps: upgrade oxc to 0.134.0 (#9625) by @shulaoda
- deps: update crate-ci/typos action to v1.47.0 (#9620) by @renovate[bot]
- deps: update rollup submodule for tests to v4.61.0 (#9623) by @rolldown-guard[bot]
- deps: update github actions (#9613) by @renovate[bot]
- deps: update pnpm to v11.4.0 (#9616) by @renovate[bot]
- deps: update rust crates (#9615) by @renovate[bot]
- deps: update test262 submodule for tests (#9624) by @rolldown-guard[bot]
- deps: update dependency @napi-rs/cli to v3.7.0 (#9588) by @renovate[bot]
- deps: update dependency rust to v1.96.0 (#9596) by @renovate[bot]
- re-enable WASI testing with proper infrastructure (#9397) by @Boshen

### ❤️ New Contributors

* @aminpaks made their first contribution in [#9322](#9322)

Co-authored-by: shulaoda <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@shulaoda shulaoda shulaoda approved these changes

Assignees

@shulaoda shulaoda

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@shulaoda