Skip to content

chore(deps): update oxc to v0.118.0#8650

Merged
shulaoda merged 2 commits intomainfrom
renovate/oxc
Mar 12, 2026
Merged

chore(deps): update oxc to v0.118.0#8650
shulaoda merged 2 commits intomainfrom
renovate/oxc

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 12, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@oxc-project/runtime (source) =0.115.0=0.118.0 age adoption passing confidence pnpm.catalog.default minor
@oxc-project/types (source) =0.115.0=0.118.0 age adoption passing confidence pnpm.catalog.default minor
oxc (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc-minify (source) =0.115.0=0.118.0 age adoption passing confidence pnpm.catalog.default minor
oxc-parser (source) =0.115.0=0.118.0 age adoption passing confidence pnpm.catalog.default minor
oxc-transform (source) =0.115.0=0.118.0 age adoption passing confidence pnpm.catalog.default minor
oxc_allocator (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_ecmascript (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_minify_napi (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_napi (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_parser_napi (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_transform_napi (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor
oxc_traverse (source) 0.115.00.118.0 age adoption passing confidence workspace.dependencies minor

Release Notes

oxc-project/oxc (oxc-minify)

v0.118.0

v0.117.0

🐛 Bug Fixes
⚡ Performance
  • 2baa5fb napi: Unify build-test profile to coverage for cache sharing (#​20090) (Boshen)
oxc-project/oxc (oxc-parser)

v0.118.0

v0.117.0

🐛 Bug Fixes
  • 92cfb14 linter/plugins: Fix types for walkProgram and walkProgramWithCfg (#​20081) (overlookmotel)
  • ee0491e apps,napi: Explicitly specify libs in tsconfigs (#​20071) (camc314)

v0.116.0

⚡ Performance
📚 Documentation
oxc-project/oxc (oxc-transform)

v0.118.0

v0.117.0

🐛 Bug Fixes
⚡ Performance
  • 2baa5fb napi: Unify build-test profile to coverage for cache sharing (#​20090) (Boshen)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) March 12, 2026 05:33
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 12, 2026

Deploy Preview for rolldown-rs canceled.

Name Link
🔨 Latest commit 3061008
🔍 Latest deploy log https://app.netlify.com/projects/rolldown-rs/deploys/69b2fb998f27af0008382e76

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 12, 2026

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 12, 2026

Benchmarks Rust

group                                                        pr                                     target
-----                                                        --                                     ------
bundle/bundle@multi-duplicated-top-level-symbol              1.00     71.0±2.49ms        ? ?/sec    1.02     72.3±1.95ms        ? ?/sec
bundle/bundle@multi-duplicated-top-level-symbol-sourcemap    1.00     77.9±2.12ms        ? ?/sec    1.04     81.2±2.54ms        ? ?/sec
bundle/bundle@rome_ts                                        1.00    145.6±4.33ms        ? ?/sec    1.04    151.5±6.71ms        ? ?/sec
bundle/bundle@rome_ts-sourcemap                              1.00    168.9±4.52ms        ? ?/sec    1.06    179.8±4.36ms        ? ?/sec
bundle/bundle@threejs                                        1.02     63.1±3.47ms        ? ?/sec    1.00     62.0±1.32ms        ? ?/sec
bundle/bundle@threejs-sourcemap                              1.00     72.5±1.72ms        ? ?/sec    1.00     72.9±1.54ms        ? ?/sec
bundle/bundle@threejs10x                                     1.00    730.1±7.92ms        ? ?/sec    1.01    739.7±9.55ms        ? ?/sec
bundle/bundle@threejs10x-sourcemap                           1.00    840.6±8.00ms        ? ?/sec    1.00    836.8±9.79ms        ? ?/sec
scan/scan@rome_ts                                            1.04     72.3±1.36ms        ? ?/sec    1.00     69.3±1.60ms        ? ?/sec
scan/scan@threejs                                            1.05     25.8±1.88ms        ? ?/sec    1.00     24.6±0.34ms        ? ?/sec
scan/scan@threejs10x                                         1.03    251.7±3.96ms        ? ?/sec    1.00    243.6±2.98ms        ? ?/sec

@shulaoda shulaoda self-assigned this Mar 12, 2026
@renovate renovate bot changed the title chore(deps): update oxc to v0.117.0 chore(deps): update oxc to v0.118.0 Mar 12, 2026
@renovate renovate bot force-pushed the renovate/oxc branch 4 times, most recently from 1a8576b to f502288 Compare March 12, 2026 13:08
@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 12, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm markdown-it is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: pnpm-lock.yamlnpm/markdown-it@14.1.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/markdown-it@14.1.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@shulaoda shulaoda disabled auto-merge March 12, 2026 17:25
@shulaoda shulaoda merged commit 0fa4321 into main Mar 12, 2026
54 checks passed
@shulaoda shulaoda deleted the renovate/oxc branch March 12, 2026 17:50
This was referenced Mar 18, 2026
shulaoda added a commit that referenced this pull request Mar 18, 2026
## [1.0.0-rc.10] - 2026-03-18

### 🚀 Features

- add indentExclusionRanges property to MagicString (#8746) by @IWANABETHATGUY
- expose `oxcRuntimePlugin` (#8654) by @sapphi-red
- rust: make bundler generic over FileSystem for in-memory benchmarks (#8652) by @Boshen

### 🐛 Bug Fixes

- rolldown_plugin_vite_dynamic_import_vars: align dynamic import fast check with Vite (#8760) by @shulaoda
- renamer: handle existing bindings in nested scopes when finding unique names (#8741) by @drewolson
- pass `yarn_pnp` option where needed (#8736) by @sapphi-red
- preserve optional chaining in namespace member expr rewrite (#8712) by @Copilot
- correct UTF-16 index handling in native MagicString (#8693) by @IWANABETHATGUY
- mark failing doctests as ignore (#8700) by @Boshen
- prevent may_partial_namespace from leaking through include_module (#8682) by @IWANABETHATGUY
- ci: bump native-build cache key to invalidate stale napi-rs artifacts (#8678) by @Boshen
- `comments.annotation: false` breaking tree-shaking (#8657) by @IWANABETHATGUY
- validate filenames for NUL bytes from chunkFileNames/entryFileNames (#8644) by @IWANABETHATGUY
- dce-only minify should not set NODE_ENV to production (#8651) by @IWANABETHATGUY

### 🚜 Refactor

- rust: remove dead `CrossModuleOptimizationConfig::side_effects_free_function_optimization` (#8673) by @Dunqing
- rust: simplify `cross_module_optimization` by removing redundant scope tracking (#8672) by @Dunqing
- simplify string repeat in guess_indentor (#8753) by @IWANABETHATGUY
- consolidate custom magic-string tests into one file (#8696) by @IWANABETHATGUY
- extract CJS bailout checks from include_symbol (#8683) by @IWANABETHATGUY
- rust: remove `BindingIdentifierExt` to use `BindingIdentifier::symbol_id()` instead (#8667) by @Dunqing
- bench: add bench_preset helper and inline presets (#8658) by @Boshen
- rust: filter external modules from entries instead of mapping bit positions (#8637) by @Dunqing

### 📚 Documentation

- clarify watch mode behavior and its limitations (#8751) by @sapphi-red
- add external link icon to GitHub button in Hero section (#8731) by @thisisnkc
- guide: clarify that `inject` option is only conceptually similar to esbuild's one (#8743) by @sapphi-red
- meta/design: add `devtools.md` (#8663) by @hyf0
- add viteplus alpha announcement banner (#8668) by @shulaoda

### ⚡ Performance

- rolldown: some minor perf optimization found by autoresearch (#8730) by @Brooooooklyn
- replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @Boshen
- replace TypedDashMap with TypedMap in CustomField (#8708) by @Boshen
- bench: remove scan benchmark binary to halve LTO link time (#8694) by @Boshen

### 🧪 Testing

- watch: increase timeout for error output (#8766) by @sapphi-red
- vite-tests: remove JS plugin tests (#8767) by @sapphi-red
- watch: add CLI exit code test (#8752) by @sapphi-red
- normalize paths on Windows even if `resolve.symlinks` is false (#8483) by @sapphi-red

### ⚙️ Miscellaneous Tasks

- correct comment in bundle-analyzer-plugin.ts (#8770) by @origami-z
- upgrade oxc to 0.120.0 (#8764) by @Boshen
- enable all test for `reset` category in MagicString.test.ts (#8749) by @IWANABETHATGUY
- deps: update test262 submodule for tests (#8742) by @sapphi-red
- deps: update oxc apps (#8734) by @renovate[bot]
- deps: update softprops/action-gh-release action to v2.6.1 (#8724) by @renovate[bot]
- deps: update npm packages (major) (#8722) by @renovate[bot]
- deps: update github-actions (major) (#8721) by @renovate[bot]
- deps: update softprops/action-gh-release action to v2.6.0 (#8720) by @renovate[bot]
- deps: update npm packages (#8718) by @renovate[bot]
- deps: update rust crates (#8717) by @renovate[bot]
- deps: update github-actions (#8716) by @renovate[bot]
- deps: update dependency oxlint-tsgolint to v0.17.0 (#8713) by @renovate[bot]
- deps: bump cargo-shear to v1.11.2 (#8711) by @Boshen
- use org level `CODE_OF_CONDUCT.md` (#8706) by @sapphi-red
- fix cache key mismatch and remove redundant cache saves (#8695) by @Boshen
- deps: update oxc apps (#8692) by @renovate[bot]
- deps: update oxc apps (#8649) by @renovate[bot]
- should do matrix out side of reusable workflows 2 (#8691) by @hyf0
- should do matrix out side of reusable workflows (#8690) by @hyf0
- deps: update dependency rolldown-plugin-dts to v0.22.5 (#8689) by @renovate[bot]
- upgrade oxc to 0.119.0 and oxc_resolver to 11.19.1 (#8686) by @Boshen
- correct if condition of `type-check` job (#8677) by @hyf0
- Gate CI type-check job on node changes (#8669) by @Copilot
- benchmark: improve codspeed build (#8665) by @Boshen
- deps: update oxc to v0.118.0 (#8650) by @renovate[bot]
- deps: update crate-ci/typos action to v1.44.0 (#8647) by @renovate[bot]
- deps: update oxc resolver to v11.19.1 (#8646) by @renovate[bot]
- deps: update dependency rust to v1.94.0 (#8648) by @renovate[bot]
- deps: update dependency rolldown-plugin-dts to v0.22.4 (#8645) by @renovate[bot]

### ◀️ Revert

- Revert "ci: Gate CI type-check job on node changes" (#8674) by @hyf0
- "chore(deps): update dependency rust to v1.94.0 (#8648)" (#8660) by @shulaoda

### ❤️ New Contributors

* @origami-z made their first contribution in [#8770](#8770)
* @drewolson made their first contribution in [#8741](#8741)
* @thisisnkc made their first contribution in [#8731](#8731)

Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant