chore(deps): lock file maintenance npm packages by renovate[bot] · Pull Request #6417 · rolldown/rolldown

renovate · 2025-10-05T21:49:23Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Type	Update	Change
		lockFileMaintenance	All locks refreshed
@napi-rs/cli	pnpm.catalog.default	minor	`3.2.0` -> `3.3.0`
@napi-rs/wasm-runtime (source)	pnpm.catalog.default	patch	`1.0.5` -> `1.0.6`
@rollup/plugin-node-resolve (source)	pnpm.catalog.default	patch	`16.0.1` -> `16.0.2`
@types/node (source)	pnpm.catalog.default	minor	`24.5.2` -> `24.7.0`
@types/react (source)	pnpm.catalog.default	minor	`19.1.15` -> `19.2.0`
@types/react-dom (source)	pnpm.catalog.default	minor	`19.1.9` -> `19.2.0`
@types/serve-static (source)	pnpm.catalog.default	patch	`1.15.8` -> `1.15.9`
mocha (source)	pnpm.catalog.default	patch	`11.7.2` -> `11.7.4`
react (source)	pnpm.catalog.default	minor	`19.1.1` -> `19.2.0`
react-dom (source)	pnpm.catalog.default	minor	`19.1.1` -> `19.2.0`
rollup (source)	pnpm.catalog.default	patch	`4.52.3` -> `4.52.4`
typescript (source)	pnpm.catalog.default	patch	`5.9.2` -> `5.9.3`
vite (source)	pnpm.catalog.default	patch	`7.1.7` -> `7.1.9`
vitepress-plugin-llms	pnpm.catalog.default	minor	`1.7.5` -> `1.8.0`
knip (source)	devDependencies	patch	`5.64.1` -> `5.64.2`
oxlint (source)	devDependencies	minor	`1.18.0` -> `1.19.0`
pnpm (source)	packageManager	minor	`10.17.1` -> `10.18.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

Release Notes

napi-rs/napi-rs (@napi-rs/cli)

`v3.3.0`

Compare Source

napi-rs/napi-rs (@napi-rs/wasm-runtime)

`v1.0.6`

Compare Source

rollup/plugins (@rollup/plugin-node-resolve)

`v16.0.2`

2025-10-04

Bugfixes

fix: error thrown with empty entry (#1893)

mochajs/mocha (mocha)

`v11.7.4`

Compare Source

🩹 Fixes

watch mode using chokidar v4 (#5379) (c2667c3)

📚 Documentation

migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

remove trailing spaces (#5475) (7f68e5c)

`v11.7.3`

Compare Source

🩹 Fixes

use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

add security escalation policy (#5466) (4122c7d)
fix duplicate global leak documentation (#5461) (1164b9d)
migrate third party UIs wiki page to docs (#5434) (6654704)
update maintainer release notes for release-please (#5453) (185ae1e)

🤖 Automation

deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

facebook/react (react)

`v19.2.0`

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.
useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:
- resume: to resume a prerender to a stream.
- resumeAndPrerender: to resume a prerender to HTML.
Added resume APIs for partial pre-rendering with Node Streams:
- resumeToPipeableStream: to resume a prerender to a stream.
- resumeAndPrerenderToNodeStream: to resume a prerender to HTML.
Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)
Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)
Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)
Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)
Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)
Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)
Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)
Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)
Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)
Add cacheSignal (@sebmarkbage #33557)

React DOM

Block on Suspensey Fonts during reveal of server-side-rendered content (@sebmarkbage #33342)
Use underscore instead of : for IDs generated by useId (@sebmarkbage, @eps1lon: #32001, #33342 #33099, #33422)
Stop warning when ARIA 1.3 attributes are used (@Abdul-Omira #34264)
Allow nonce to be used on hoistable styles (@Andarist #32461)
Warn for using a React owned node as a Container if it also has text content (@sebmarkbage #32774)
s/HTML/text for for error messages if text hydration mismatches (@rickhanlonii #32763)
Fix a bug with React.use inside React.lazy-ed Component (@hi-ogawa #33941)
Enable the progressiveChunkSize option for server-side-rendering APIs (@sebmarkbage #33027)
Fix a bug with deeply nested Suspense inside Suspense fallback when server-side-rendering (@gnoff #33467)
Avoid hanging when suspending after aborting while rendering (@gnoff #34192)
Add Node Web Streams to server-side-rendering APIs for Node.js (@sebmarkbage #33475)

React Server Components

Preload <img> and <link> using hints before they're rendered (@sebmarkbage #34604)
Log error if production elements are rendered during development (@eps1lon #34189)
Fix a bug when returning a Temporary reference (e.g. a Client Reference) from Server Functions (@sebmarkbage #34084, @denk0403 #33761)
Pass line/column to filterStackFrame (@eps1lon #33707)
Support Async Modules in Turbopack Server References (@lubieowoce #34531)
Add support for .mjs file extension in Webpack (@jennyscript #33028)
Fix a wrong missing key warning (@unstubbable #34350)
Make console log resolve in predictable order (@sebmarkbage #33665)

React Reconciler

createContainer and createHydrationContainer had their parameter order adjusted after on* handlers to account for upcoming experimental APIs

rollup/rollup (rollup)

`v4.52.4`

Compare Source

2025-10-03

Bug Fixes

Fix an issue where the wrong branch of nullish coalescing was picked (#6133)

Pull Requests

#6128: Enable npm OIDC publishing (@lukastaegert)
#6133: Correct nullish coalescing branch resolution for symbol left value (@TrickyPi)
#6134: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

microsoft/TypeScript (typescript)

`v5.9.3`

Compare Source

vitejs/vite (vite)

`v7.1.9`

Compare Source

Reverts

server: drain stdin when not interactive (#20885) (12d72b0)

`v7.1.8`

Compare Source

Bug Fixes

css: improve url escape characters handling (#20847) (24a61a3)
deps: update all non-major dependencies (#20855) (788a183)
deps: update artichokie to 0.4.2 (#20864) (e670799)
dev: skip JS responses for document requests (#20866) (6bc6c4d)
glob: fix HMR for array patterns with exclusions (#20872) (63e040f)
keep ids for virtual modules as-is (#20808) (d4eca98)
server: drain stdin when not interactive (#20837) (bb950e9)
server: improve malformed URL handling in middlewares (#20830) (d65a983)

Documentation

create-vite: provide deno example (#20747) (fdb758a)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20810) (ea68a88)
deps: update rolldown-related dependencies (#20854) (4dd06fd)
update url of create-react-app license (#20865) (166a178)

okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

`v1.8.0`

Compare Source

🚀 Features

Add support for markdown file inclusion and code snippets - by @okineadev and Claude (2da71)

Now the plugin will understand and process file Inclusions like  and code snippets like <<< @/snippets/snippet.js as proposed in #69

View changes on GitHub

webpro-nl/knip (knip)

`v5.64.2`

Compare Source

oxc-project/oxc (oxlint)

`v1.19.0`

Compare Source

🚀 Features

b4d716f linter/plugins: Move custom JS plugin config to jsPlugins (#14133) (overlookmotel)

🐛 Bug Fixes

8879b5a linter/plugins: Add types export to npm/oxlint (#14219) (overlookmotel)

pnpm/pnpm (pnpm)

`v10.18.0`

Compare Source

Minor Changes

Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

Related PR: #10025.

Patch Changes

Retry filesystem operations on EAGAIN errors #9959.
Outdated command respects minimumReleaseAge configuration #10030.
Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
Don't fail with a meaningless error when scriptShell is set to false #8748.
pnpm dlx should not fail when minimumReleaseAge is set #10037.

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

graphite-app · 2025-10-05T21:49:32Z

How to use the Graphite Merge Queue

Add the label graphite: merge to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

socket-security · 2025-10-05T21:49:58Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@types/serve-static@1.15.8 ⏵ 1.15.9			⁺⁸
@napi-rs/wasm-runtime@1.0.5 ⏵ 1.0.6			⁺³
@types/react-dom@19.1.9 ⏵ 19.2.0	⁺¹	⁺¹	⁺⁶
@types/react@19.1.15 ⏵ 19.2.0	⁺¹	⁺¹	⁺¹
@types/node@24.5.2 ⏵ 24.7.0	⁺¹	⁺¹
react@19.1.1 ⏵ 19.2.0	⁺¹	⁺¹
styled-components@6.1.19
oxlint@1.18.0 ⏵ 1.19.0	^-7	^-12	^-4
@rollup/plugin-node-resolve@16.0.1 ⏵ 16.0.2			⁺⁷
react-dom@19.1.1 ⏵ 19.2.0	⁺¹	⁺¹
knip@5.64.1 ⏵ 5.64.2	⁺¹	⁺¹	⁺²
mocha@11.7.2 ⏵ 11.7.4		⁺¹
rollup@4.52.3 ⏵ 4.52.4	⁺¹
@napi-rs/cli@3.2.0 ⏵ 3.3.0	⁺⁶	⁺¹⁷	⁺⁴

View full report

netlify · 2025-10-05T21:49:59Z

✅ Deploy Preview for rolldown-rs ready!

Name	Link
🔨 Latest commit	`2a6a5b8`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/68e38f586dff2500080161b4
😎 Deploy Preview	https://deploy-preview-6417--rolldown-rs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

renovate · 2025-10-06T09:45:01Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@Boshen

## [1.0.0-beta.42] - 2025-10-07 ### 🚀 Features - rolldown: oxc v0.94.0 (#6428) by @Boshen - add CLI environment flag (#6426) by @IWANABETHATGUY - dev: use `RebuildStrategy#Auto` by default (#6420) by @hyf0 - rolldown_plugin_vite_html: introduce html plugin state (#6413) by @shulaoda - dev: expose build errors via `DevOptions#on_output` (#6412) by @hyf0 - dev: add binding for `DevOptions#rebuild_strategy` (#6396) by @hyf0 - dev: add `RebuildStrategy::Auto` to issue rebuild automatically if detecting full reload hmr update (#6395) by @hyf0 - debug: inject `call_id` for `renderChunk` hook (#6392) by @hyf0 - node/dev: add `DevEngine#close` (#6377) by @hyf0 - rust/dev: add `DevEngine#close` (#6376) by @hyf0 ### 🐛 Bug Fixes - rolldown_plugin_react_refresh_wrapper: register exports in next microtask (#6423) by @sapphi-red - plugin/vite-resolve: try original extension before replacing with TS variants (#6421) by @sapphi-red - node/resolve: take custom package json path into account (#6419) by @hyf0 - dev: call `watchChange` hook (#6403) by @sapphi-red - use minify options for DCE for dce-only minify (#6402) by @sapphi-red - respect package.json type field in plugin-resolved modules (#6400) by @hyf0 - returning result of this.resolve in resolveDynamicImport hook impacts bundle size (#6397) by @sapphi-red - rolldown_plugin_json: avoid generating named exports for `eval` and `arguments` (#6381) by @sapphi-red - use static property for namespace object (#6383) by @sapphi-red ### 🚜 Refactor - rust: improve constuction of `PackageJson` and remove unused fields (#6418) by @hyf0 - introduce `BindingResult` to pass errors from rust to js (#6390) by @hyf0 - rust: rename eager_rebuild to rebuild_strategy with enum (#6394) by @hyf0 - rust/binding: use `BindingError` to cover `JsError` and `NativeError` (#6388) by @hyf0 - rust/binding: rename `BindingError` to `NativeError` (#6387) by @hyf0 ### 📚 Documentation - tweak built-in transforms section (#6384) by @sapphi-red ### ⚡ Performance - dev: avoid frequent `setTimeout` -> `clearTimeout` (#6375) by @sapphi-red ### 🧪 Testing - hmr: include generated bundle for full reloads in snapshots (#6374) by @sapphi-red - dev: add test about doing hmr with not being affected by not executed modules (#6360) by @hyf0 - hmr: hmr patch file generation for `this.addWatchFile` (#5219) by @sapphi-red ### ⚙️ Miscellaneous Tasks - deps: update crate-ci/typos action to v1.38.0 (#6431) by @renovate[bot] - deps: update crate-ci/typos action to v1.37.3 (#6429) by @renovate[bot] - deps: lock file maintenance npm packages (#6417) by @renovate[bot] - deps: update github-actions (#6414) by @renovate[bot] - rust/test: sensible heading level for build snapshot of config variant (#6408) by @hyf0 - rust/test: introduce `SnapshotSection` to organize snapshot content (#6407) by @hyf0 - rust/test: extract `ArtifactsSnapshot` and `BuildRoundOutput` into standalone files (#6406) by @hyf0 - rust/test: introduce `ArtifactsSnapshot` to make generating snapshot more clear (#6405) by @hyf0 - deps: update crate-ci/typos action to v1.37.2 (#6409) by @renovate[bot] - fix `GitHub` casing (#6401) by @iiio2 - rust: remove unused `rolldown_binding_watcher` crate (#6386) by @hyf0 - deps: update crate-ci/typos action to v1.37.1 (#6391) by @renovate[bot] - node: rename `normalizeErrors` into `aggregateBindingErrorsIntoError` (#6389) by @hyf0 - fix typos (#6382) by @sapphi-red - deps: update dependency tsdown to v0.15.6 (#6379) by @renovate[bot] - deps: update crate-ci/typos action to v1.37.0 (#6380) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to v0.16.11 (#6378) by @renovate[bot] - add comment to `add_watch_file` that the path should be a normalized absolute path (#6371) by @sapphi-red - deps: update dependency rolldown-plugin-dts to v0.16.10 (#6373) by @renovate[bot] Co-authored-by: sapphi-red <49056869+sapphi-red@users.noreply.github.com>

renovate bot enabled auto-merge (squash) October 5, 2025 21:49

renovate-approve bot approved these changes Oct 5, 2025

View reviewed changes

renovate bot force-pushed the renovate/npm-packages branch 3 times, most recently from 42ab543 to 15175d5 Compare October 6, 2025 08:25

chore(deps): lock file maintenance npm packages

6f28199

renovate bot force-pushed the renovate/npm-packages branch from 15175d5 to 6f28199 Compare October 6, 2025 08:44

shulaoda self-assigned this Oct 6, 2025

u

2a6a5b8

shulaoda force-pushed the renovate/npm-packages branch from adfda98 to 2a6a5b8 Compare October 6, 2025 09:43

renovate bot merged commit 39a6e7a into main Oct 6, 2025
41 checks passed

renovate bot deleted the renovate/npm-packages branch October 6, 2025 09:57

github-actions bot mentioned this pull request Oct 7, 2025

release: v1.0.0-beta.42 #6432

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): lock file maintenance npm packages#6417

chore(deps): lock file maintenance npm packages#6417
renovate[bot] merged 2 commits intomainfrom
renovate/npm-packages

renovate bot commented Oct 5, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented Oct 5, 2025

Uh oh!

socket-security bot commented Oct 5, 2025 •

edited

Loading

Uh oh!

netlify bot commented Oct 5, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 6, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Oct 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bugfixes

🩹 Fixes

📚 Documentation

🧹 Chores

🩹 Fixes

📚 Documentation

🤖 Automation

New React Features

New React DOM Features

Notable changes

All Changes

React

React DOM

React Server Components

React Reconciler

Bug Fixes

Pull Requests

Reverts

Bug Fixes

Documentation

Miscellaneous Chores

🚀 Features

🚀 Features

🐛 Bug Fixes

Minor Changes

Patch Changes

Configuration

Uh oh!

graphite-app bot commented Oct 5, 2025

How to use the Graphite Merge Queue

Uh oh!

socket-security bot commented Oct 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify bot commented Oct 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs ready!

Uh oh!

renovate bot commented Oct 6, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Oct 5, 2025 •

edited

Loading

socket-security bot commented Oct 5, 2025 •

edited

Loading

netlify bot commented Oct 5, 2025 •

edited

Loading