chore(deps): update npm packages by renovate[bot] · Pull Request #8426 · rolldown/rolldown

renovate · 2026-02-22T18:05:33Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@oxlint/plugins (source)	`1.48.0` → `1.49.0`
acorn	`8.15.0` → `8.16.0`
glob	`13.0.3` → `13.0.6`
knip (source)	`5.83.1` → `5.84.1`
rimraf	`6.1.2` → `6.1.3`
typedoc (source)	`0.28.16` → `0.28.17`
vue-router (source)	`5.0.2` → `5.0.3`

Release Notes

acornjs/acorn (acorn)

`v8.16.0`

Compare Source

isaacs/node-glob (glob)

webpro-nl/knip (knip)

`v5.84.1`: Release 5.84.1

Compare Source

Fix false positives for arrow-wrapped dynamic imports assigned to variables (#1544) (75a42c3) - thanks @jantimon!
Improve pnpm arg handling (df8c353)
Ignore module.register if 2nd arg is not import.meta.url (#1535) (970fdb1)

`v5.84.0`: Release 5.84.0

Compare Source

Post-release shenanigans (e7965cb)
Move most compilers to plugins & register from there (61beafe)
Minor refactor (e20a682)
Fix lint issues (d2bbc13)
Add missing catalog property to rules in JSON schema (#1518) (5d49dea) - thanks @Mohmdev!
feat(plugins): add @typescript/native-preview (tsgo) support (#1513) (babfb10) - thanks @jgoux!
Fix up quoting for spaced args (resolve #1515) (2b735cb)
Switch to tsconfig-aware module resolver in input handler (634d0f6)
Use bun test positionals as entry points (resolve #1521) (da94725)
Edit docs (327726f)
Minor refactor while at it (dc87e8e)
Add config hints for unused ignore and ignoreFiles items (a4989ee)
Accept known bins only behind double-dash (resolve #1524) (b9214e3)
feat(plugins): add support for bun test preloaded files (#1525) (14ee32a) - thanks @jgoux!
Add date to IGNORED_GLOBAL_BINARIES (#1476) (f08f92b) - thanks @duci9y!
Fix edge case for binaries in scripts (82331ee)
Report ignore/files config hints only if sure & relevant (4c3bd08)
Add consistent repository fields (781a0fd)
Add language-server bin (13d7845)
Use --stdio if no transport provided (bedb21a)
Refactor from "enabled" to "deferSession" (resolve #1499) (15e3360)
Use initializationOptions.config or default fallback config obj (resolve #1503) (0abe568)
Also publish ls + mcp with pkg-pr-new (7806526)
Auto-format (51b7dc1)
Remove chdir shenanigans (close #1516) (0cbee8f)
Bind console.* to distinguish internal↔ external logs (3eac278)
Add early bail-outs for changed files we can ignore (36c2dd5)
Avoid unnecessary module graph updates for unmodified files (f94c41f)
Fix typo in pkg-pr-new-pkg-dir (7e7a8b0)
Add .DS_Store to .gitignore (#1530) (40fe5cc) - thanks @wojtekmaj!
Ignore RNC CLI and metro internals in react-native projects (#1528) (0f892ae) - thanks @wojtekmaj!
Support nested _generated dirs in Convex plugin (#1531) (bd75e9f) - thanks @kvnwolf!
Housekeep cli help output (c24e746)
Fix up gitignore test (6bc640c)
Introduce isFilterTransitiveDependencies flag (close #1507, close #1101) (8678df2)
Housekeep webpack plugin (2cc1306)
Move up plugin.setup & tear down plugin.teardown (4dbf23d)
Skip config file loading if only external re-exports (ab775b1)
Improve & optimize ignore pattern handling (c3d3912)
Housekeep compiler registration (2aaf9fc)
Edit docs re. config file location (79bfb35)
Register visitors from plugins (9b059f8)
importMetaGlobCall visitor for Vite plugin (1874b19)
Extend registerVisitors with script visitor support (728c814)
Move execa script visitor to execa plugin (71c739a)
Move zx script visitor to zx plugin (5ac24c7)
Add require.context visitor to webpack plugin (100f174)
Add module.register() visitor for Node.js loader API (resolve #1535) (742407c)
Add .DS_Store in fixtures to .gitignore (#1534) (90fa677) - thanks @wojtekmaj!
Mention that depcheck recommends knip (#1536) (75d00ff) - thanks @ArtskydJ!
Remove @source matcher from tailwind plugin (resolve #1537) (b7149b6)
Fix -w → -W flag for Yarn (f305250)
Update AGENTS.md (ec83887)
Extract and extend react-native plugin (#1538) (9fd04a8)
Add pm2 plugin (#1540) (3bb4203) - thanks @wojtekmaj!
Fix Yarn (Berry) plugins and binaries reported as unused (#1523) (4f0a307) - thanks @wojtekmaj!
Update docs (ed23dd2)
Minor refactor while at it (4115b97)
Add @knip/create-config to release script (1135b82)

isaacs/rimraf (rimraf)

`v6.1.3`

Compare Source

TypeStrong/TypeDoc (typedoc)

`v0.28.17`

Compare Source

Bug Fixes

Improved handling of comments for type aliases which have been declaration merged with functions, #3064.
Fixed anchor link generation to members named $, #3065.
Corrected typing of the plugin option to permit functions, #3066.
Warnings about unused @param tags will now be properly suppressed when they come from declaration files and
the suppressCommentWarningsInDeclarationFiles option is enabled, #3070.
Fixed conversion of types referencing type parameters on functions, #3071.

Thanks!

@pjeby

vuejs/router (vue-router)

`v5.0.3`

Compare Source

🚨 Breaking Changes

experimental:
- Make miss() throw internally and return never - by @posva (077e1)
- Add reroute() and deprecate NavigationResult - by @posva (308db)
- Remove selectNavigationResult - by @posva (9e88a)

🚀 Features

Support _parent in nested folders - by @posva (0a37f)
Warn on _parent conflict - by @posva (182fe)
Set _parent as non matchable by default - by @posva (8f91c)
Warn on conflicting components for routes - by @posva (34ace)
Use type module - by @posva (dc9ff)
Add deprecation warning for next() callback in navigation guards - by @posva (797f5)
Extract alias from definePage - by @posva (835df)
Display aliases in logs - by @posva (7aa60)
Deprecate new NavigationResult(to) in favor of reroute(to) - by @posva (382e3)
experimental:
- Handle aliasOf in resolvers - by @posva (8fe45)
- Generate aliases from override in resolver - by @posva (a00ac)
- Warn against non absolute aliases - by @posva (476c6)

🐞 Bug Fixes

Avoid non matchable routes in auto-routes - by @posva (48649)
Handle quotes in d.ts - by @posva (d7764)
Avoid route entry in map for _parent - by @posva (1dfcc)
Handle nested groups - by @posva (4a4be)
Stable route ordering for group folders with same path - by @posva (1db94)
Correct route ordering for group nodes with inflated scores - by @posva (515f4)
Cleanup old route overrides - by @posva (b28a7)
Remove name from _parent.vue files - by @posva (6e8f1)
ci:
- Format sponsor files before change detection - by @posva (f68d6)
- Use manual git commit in update-sponsors - by @posva (8ee99)
experimental:
- Resolve TS errors in resolver/router type hierarchy - by @posva (a86f1)
types:
- Relax RouteMapGeneric constraint for interface-based RouteNamedMap - by @YevheniiKotyrlo in #2624 (cdf7b)
volar:
- Use ts.getTokenPosOfNode instead of node.getStart - by @KazariEX in #2630 (0b050)

🏎 Performance

Avoid merging empty object in record - by @posva (4213e)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-02-22T18:05:53Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`9240fa0`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/699c63012fc8f80008b2d203

socket-security · 2026-02-22T18:06:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@oxlint/plugins@1.48.0 ⏵ 1.49.0		⁺¹	⁺²
acorn@8.15.0 ⏵ 8.16.0	⁺¹
glob@13.0.3 ⏵ 13.0.6	⁺¹	⁺¹
knip@5.83.1 ⏵ 5.84.1	⁺¹	⁺¹	⁺²

View full report

@hyf0

## [1.0.0-rc.6] - 2026-02-26 ### 💥 BREAKING CHANGES - css: remove `css_entry_filenames` , `css_chunk_filenames` and related code (#8402) by @hyf0 - css: drop builtin CSS bundling to explore alternative solutions (#8399) by @hyf0 ### 🚀 Features - rust/data-url: use hash as id for data url modules to prevent long string overhead (#8420) by @hyf0 - validate bundle stays within output dir (#8441) by @sapphi-red - rust: support `PluginOrder::PinPost` (#8417) by @hyf0 - support `ModuleType:Copy` (#8407) by @hyf0 - expose `ESTree` types from `rolldown/utils` (#8400) by @sapphi-red ### 🐛 Bug Fixes - incorrect sourcemap when postBanner/postFooter is used with shebang (#8459) by @Copilot - resolver: disable node_path option to align ESM resolver behavior (#8472) by @sapphi-red - parse `.js` within `"type": "commonjs"` as ESM for now (#8470) by @sapphi-red - case-insensitive filename conflict detection for chunk deduplication (#8458) by @Copilot - prevent inlining CJS exports that are mutated by importers (#8456) by @IWANABETHATGUY - parse `.cjs` / `.cts` / `.js` within `"type": "commonjs"` as CommonJS (#8455) by @sapphi-red - plugin/copy-module: correct hooks' priority (#8423) by @hyf0 - plugin/chunk-import-map: ensure `render_chunk_meta` run after users plugin (#8422) by @hyf0 - rust: correct hooks order of `DataUriPlugin` (#8418) by @hyf0 - `jsx.preserve` should also considering tsconfig json preserve (#8324) by @IWANABETHATGUY - `deferred_scan_data.rs "Should have resolved id: NotFound"` error (#8379) by @sapphi-red - cli: require value for `--dir`/`-d` and `--file`/`-o` (#8378) by @Copilot - dev: avoid mutex deadlock caused by inconsistent lock order (#8370) by @sapphi-red ### 🚜 Refactor - watch: rename TaskStart/TaskEnd to BundleStart/BundleEnd (#8463) by @hyf0 - rust: rename `rolldown_plugin_data_uri` to `rolldown_plugin_data_url` (#8421) by @hyf0 - bindingify-build-hook: extract helper for PluginContextImpl (#8438) by @ShroXd - give source loading a proper name (#8436) by @IWANABETHATGUY - ban holding DashMap refs across awaits (#8362) by @sapphi-red ### 📚 Documentation - add glob pattern usage example to input option (#8469) by @IWANABETHATGUY - remove `https://rolldown.rs` from links in reference docs (#8454) by @sapphi-red - mention execution order issue in `output.codeSplitting` docs (#8452) by @sapphi-red - clarify `output.comments` behavior a bit (#8451) by @sapphi-red - replace npmjs package links with npmx.dev (#8439) by @Boshen - reference: add `Exported from` for values / types exported from subpath exports (#8394) by @sapphi-red - add JSDocs for APIs exposed from subpath exports (#8393) by @sapphi-red - reference: generate reference pages for APIs exposed from subpath exports (#8392) by @sapphi-red - avoid pipe character in codeSplitting example to fix broken rendering (#8391) by @IWANABETHATGUY ### ⚡ Performance - avoid redundant PathBuf allocations in resolve paths (#8435) by @Brooooooklyn - bump to `sugar_path@2` (#8432) by @hyf0 - use flag-based convergence detection in include_statements (#8412) by @Brooooooklyn ### 🧪 Testing - execute `_test.mjs` even if `executeOutput` is false (#8398) by @sapphi-red - add retry to tree-shake/module-side-effects-proxy4 as it is flaky (#8397) by @sapphi-red - avoid `expect.assertions()` as it is not concurrent test friendly (#8383) by @sapphi-red - disable `mockReset` option (#8382) by @sapphi-red - fix flaky failure caused by concurrent resolveId calls (#8381) by @sapphi-red ### ⚙️ Miscellaneous Tasks - deps: update dependency rollup to v4.59.0 [security] (#8471) by @renovate[bot] - ai/design: add design doc about watch mode (#8453) by @hyf0 - deps: update oxc resolver to v11.19.0 (#8461) by @renovate[bot] - ai: introduce progressive spec-driven development pattern (#8446) by @hyf0 - deprecate output.legalComments (#8450) by @sapphi-red - deps: update dependency oxlint-tsgolint to v0.15.0 (#8448) by @renovate[bot] - ai: make CLAUDE.md a symlink of AGENTS.md (#8445) by @hyf0 - deps: update rollup submodule for tests to v4.59.0 (#8433) by @sapphi-red - deps: update test262 submodule for tests (#8434) by @sapphi-red - deps: update oxc to v0.115.0 (#8430) by @renovate[bot] - deps: update oxc apps (#8429) by @renovate[bot] - deps: update npm packages (#8426) by @renovate[bot] - deps: update rust crate owo-colors to v4.3.0 (#8428) by @renovate[bot] - deps: update github-actions (#8424) by @renovate[bot] - deps: update rust crates (#8425) by @renovate[bot] - deps: update oxc resolver to v11.18.0 (#8406) by @renovate[bot] - deps: update dependency oxlint-tsgolint to v0.14.2 (#8405) by @renovate[bot] - ban `expect.assertions` in all fixture tests (#8395) by @sapphi-red - deps: update oxc apps (#8389) by @renovate[bot] - ban `expect.assertions` in fixture tests (#8387) by @sapphi-red - enable lint for `_config.ts` files (#8386) by @sapphi-red - deps: update dependency oxlint-tsgolint to v0.14.1 (#8385) by @renovate[bot] Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>

renovate bot enabled auto-merge (squash) February 22, 2026 18:05

renovate-approve bot approved these changes Feb 22, 2026

View reviewed changes

renovate bot force-pushed the renovate/npm-packages branch from 6ae5b00 to 7402c4f Compare February 22, 2026 20:49

chore(deps): update npm packages

29964b6

renovate bot force-pushed the renovate/npm-packages branch from 7402c4f to 29964b6 Compare February 23, 2026 01:42

Merge branch 'main' into renovate/npm-packages

9240fa0

shulaoda disabled auto-merge February 23, 2026 14:24

shulaoda self-assigned this Feb 23, 2026

shulaoda merged commit b00151e into main Feb 23, 2026
54 checks passed

shulaoda deleted the renovate/npm-packages branch February 23, 2026 14:52

This was referenced Feb 25, 2026

release: v1.0.0-rc.6 #8449

Closed

release: v1.0.0-rc.6 #8473

Closed

release: v1.0.0-rc.6 #8474

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update npm packages#8426

chore(deps): update npm packages#8426
shulaoda merged 2 commits intomainfrom
renovate/npm-packages

renovate bot commented Feb 22, 2026 •

edited

Loading

Uh oh!

netlify bot commented Feb 22, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Feb 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Feb 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v5.84.1: Release 5.84.1

v5.84.0: Release 5.84.0

Bug Fixes

Thanks!

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

Configuration

Uh oh!

netlify bot commented Feb 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

socket-security bot commented Feb 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Feb 22, 2026 •

edited

Loading

`v5.84.1`: Release 5.84.1

`v5.84.0`: Release 5.84.0

netlify bot commented Feb 22, 2026 •

edited

Loading

socket-security bot commented Feb 22, 2026 •

edited

Loading