chore(deps): update npm packages by renovate[bot] · Pull Request #8851 · rolldown/rolldown

renovate · 2026-03-22T16:53:33Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/preset-env (source)	`7.29.0` → `7.29.2`
@oxlint/plugins (source)	`1.55.0` → `1.56.0`
@voidzero-dev/vitepress-theme	`4.8.3` → `4.8.4`
knip (source)	`5.86.0` → `5.88.1`
terser (source)	`5.46.0` → `5.46.1`
typedoc-plugin-markdown (source)	`4.10.0` → `4.11.0`
valibot (source)	`1.2.0` → `1.3.1`
vite (source)	`8.0.0` → `8.0.1`
vitepress-plugin-llms	`1.11.0` → `1.11.1`
vue-router (source)	`5.0.3` → `5.0.4`
web-tree-sitter (source)	`0.26.6` → `0.26.7`

Release Notes

babel/babel (@babel/preset-env)

`v7.29.2`

Compare Source

webpro-nl/knip (knip)

`v5.88.1`: Release 5.88.1

Compare Source

Bump GitHub actions to their latest versions (#1624) (bf2ffca) - thanks @deining!
Prettier config for other formatters (e.g. unified-prettier) (e034cbd)
Fix module/namespace regression (resolve #1603) (394bcba)
Fix counter type and --fix exit code (37b6f60)
Restore all ecosystem tests (4d2cd9b)
Release knip@5.88.1 (8c25e4b)

`v5.88.0`: Release 5.88.0

Compare Source

Add Sanity plugin (#1608) (f777834) - thanks @jonahsnider!
feat: detect duplicated package.json dependencies (#1611) (dec15a7) - thanks @Zamiell!
fix: docusaurus faster (#1616) (c7a0128) - thanks @Zamiell!
feat: raycast plugin (#1619) (52c77ee) - thanks @TkDodo!
fix: docusaurus scripts and stylesheets (#1618) (9fa485f) - thanks @Zamiell!
Improve getPackageNameFromModuleSpecifier performance (817180e)
Mark Nuxt extends entries as dependencies (96f178f)
Simplify devDependency duplicate detection logic (99a7c9b)
Add patch for argos (cecab21)
Fix conflict and iterate on docusaurus plugin (d3d8cae)
Iterate on raycast plugin (4948bf8)
Oxfmt now supports .ts config files (#1621) (27a4813) - thanks @DaniFoldi!
Fix typos (#1622) (386b477) - thanks @deining!
docs: bump astro to newly released version 6 (#1623) (f941db9) - thanks @deining!
pnpm dedupe (d1a9089)
Release knip@5.88.0 (7aeb857)

`v5.87.0`

Compare Source

terser/terser (terser)

`v5.46.1`

Compare Source

Fix extremely slow (seemed like a freeze) evaluate of method chains
Parse extremely large floating-point number literals as Infinity
Remove parens from comma expressions in computed property access (foo[(1, 2)])

typedoc2md/typedoc-plugin-markdown (typedoc-plugin-markdown)

`v4.11.0`

Compare Source

Minor Changes

Improved rendering of union types when documented type details are present (#857).
Improved rendering of union types used in parameter declarations.
When a function returns another function, full documentation for the returned function is now only shown when meaningful comments are present, aligning with the default theme.
Index signature declarations are now rendered as blockquotes for improved consistency.

Patch Changes

Added locale translations for grouped @example headings (#858).
Function-typed properties are now rendered without parentheses in headings. This avoids implying that the member is a method and more accurately reflects that it is a property whose type is a function.
Optional properties are now indicated with ? in the property name, making the optionality explicit.
All pipe characters (|) in union type output are now escaped.

open-circle/valibot (valibot)

`v1.3.1`

Compare Source

Change MAC48_REGEX, MAC64_REGEX and MAC_REGEX to drop the i flag for better JSON Schema compatibility (pull request #1430)
Change hash action to use case-expanded character classes instead of the i flag (pull request #1430)

`v1.3.0`

Compare Source

Many thanks to @EskiMojo14, @yslpn, @alexilyaev, @idleberg, @BerkliumBirb and @frenzzy for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

Add guard transformation action to narrow types using type predicates (pull request #1204)
Add parseBoolean transformation action to parse boolean values from strings and other types (pull request #1251)
Add isrc validation action to validate ISRC codes (pull request #1373)
Add cache method for caching schema output by input (pull request #1170)
Add domain validation action to validate domain names (pull request #1284)
Add jwsCompact validation action to validate JWS compact strings (pull request #1348)
Fix creditCard validation action to allow 13-digit Visa card numbers (pull request #1347)
Fix isoTimestamp validation action to allow optional space before UTC offset for PostgreSQL timestamptz compatibility (pull request #1195)
Fix types for deeply readonly default and fallback values

vitejs/vite (vite)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script (#21835) (efef073)
deps: bump required @vitejs/devtools version to 0.1+ (#21925) (12932f5)
deps: update rolldown-related dependencies (#21787) (1af1d3a)
rearrange 8.0 changelog (8e05b61)
rearrange 8.0 changelog (#21834) (86edeee)

okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

`v1.11.1`

Compare Source

🩹 Fixes

Resolve build failure when generateLLMFriendlyDocsForEachPage is false (#121) - by @brick-pixel (73499)

💖 Contributors

@brick-pixel

View changes on GitHub

vuejs/router (vue-router)

`v5.0.4`

Compare Source

🐞 Bug Fixes

Avoid iterator helpers for Node 20 compat - by @cwandev in #2635 (47130)
Escape backslahes in string literals - by @posva (71fdb)
Avoid false duplicate route warning for named views - by @posva (72012)
Allow pushing to auto routes - by @posva (47f03)
loaders: Restore context in sequential awaits - by @posva (fce5d)

View changes on GitHub

tree-sitter/tree-sitter (web-tree-sitter)

`v0.26.7`

Compare Source

Notable Changes

A regression in v0.26.6 with quantified alternations was fixed.
Release artifacts for the tree-sitter CLI are now published as zip archives (in addition to gzipped executables, which are planned for removal in a future minor release).

What's Changed

fix: skip missing Makefile in version command by @tree-sitter-ci-bot[bot] in #5386
fix(wasm): pass target triple to clang (#5385) by @clason in #5390
chore(parser): return NULL, not false, for incomplete parse by @tree-sitter-ci-bot[bot] in #5398
fix(loader): link with libc on OpenBSD to compile parser by @tree-sitter-ci-bot[bot] in #5399
refactor(query): remove alternative_is_immediate by @tree-sitter-ci-bot[bot] in #5412
fix(query): don't add copies for quantifier steps outside alternations by @tree-sitter-ci-bot[bot] in #5414
revert allowing dashes in parser name by @tree-sitter-ci-bot[bot] in #5433
ci(release): publish zip archives by @clason in #5434
release v0.26.7 by @clason in #5435

Full Changelog: tree-sitter/tree-sitter@v0.26.6...v0.26.7

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-03-22T16:53:53Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`448b73c`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/69c01e90bd290700088be036

socket-security · 2026-03-22T16:54:29Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@voidzero-dev/vitepress-theme@4.8.3 ⏵ 4.8.4
@babel/preset-env@7.29.0 ⏵ 7.29.2
@oxlint/plugins@1.55.0 ⏵ 1.56.0	⁺¹	⁺¹	⁺¹
pathe@2.0.3
peggy@5.0.6
knip@5.86.0 ⏵ 5.88.1	⁺¹	⁺¹	⁺¹

View full report

@IWANABETHATGUY

## [1.0.0-rc.11] - 2026-03-23 ### 🚀 Features - magicString replace with regex (#8802) by @IWANABETHATGUY - support `output.sourcemapExcludeSources` option (#8828) by @sapphi-red - support `getIndentString` in MagicString (#8775) by @IWANABETHATGUY - MagicString ignoreList support (#8773) by @IWANABETHATGUY ### 🐛 Bug Fixes - types: remove `pluginName` from `MinimalPluginContext` (#8864) by @sapphi-red - do not report eval?.() as direct eval (#8860) by @IWANABETHATGUY - handle negative indices, overlapping ranges, and moved content in MagicString remove (#8829) by @IWANABETHATGUY - enable arbitrary_precision for serde_json to fix JSON float parsing (#8848) by @elderapo - resolve TypeScript lint errors (#8841) by @Boshen - avoid panic on multi-byte UTF-8 chars in hash placeholder iterator (#8790) by @shulaoda - ci: skip failing vite build watch raw query test (#8840) by @Boshen - ci: use step-level env override to unset VITE_PLUS_CLI_BIN in vite tests (#8838) by @Boshen - ci: move vite tests into CI workflow by @Boshen - ci: unset all VITE_PLUS_* env vars in vite-tests workflow (#8837) by @Boshen - test: skip watch CLI tests on Windows (#8830) by @Boshen - ci: unset VITE_PLUS_CLI_BIN in vite-tests workflow (#8832) by @Boshen - remove redundant bare side-effect imports in entry/facade chunks (#8804) by @h-a-n-a - magicString prepend issues (#8797) by @IWANABETHATGUY - ci: use `vpx` instead of `vp exec` for `pkg-pr-new` (#8827) by @Boshen - set `order` for callable plugins (#8815) by @sapphi-red - handle reversed slice ranges with moved content (#8750) by @IWANABETHATGUY - update emnapi to latest to avoid version mismatch (#8781) by @sapphi-red - external.md on Windows OS (#8780) by @bddjr - align MagicString length/isEmpty with reference magic-string (#8776) by @IWANABETHATGUY ### 🚜 Refactor - extract canonical_ref_resolving_namespace helper (#8836) by @Boshen ### 📚 Documentation - improve external examples for cross-platform correctness (#8786) by @hyf0-agent - update reference to transform function in plugin API documentation (#8778) by @zOadT ### ⚡ Performance - reduce timing of `dervie_entries_aware_chunk_name` (#8847) by @AliceLanniste - bench: remove redundant sourcemap benchmark cases (#8825) by @Boshen - reduce intermediate allocations in `collapse_sourcemaps` (#8821) by @Boshen - enable parallel AST cloning on macOS (#8814) by @Boshen ### 🧪 Testing - watch: use polling watcher and retry for watch error test (#8772) by @sapphi-red ### ⚙️ Miscellaneous Tasks - justfile: skip setup-vite-plus if vp is already installed (#8862) by @Boshen - add expectWarning option to test config (#8861) by @IWANABETHATGUY - justfile: support windows for `just setup` (#8846) by @AliceLanniste - deps: update rust crates (#8852) by @renovate[bot] - deps: update endbug/version-check action to v3 (#8855) by @renovate[bot] - deps: update github-actions (#8853) by @renovate[bot] - deps: update dependency vitepress to v2.0.0-alpha.17 (#8854) by @renovate[bot] - deps: update npm packages (#8851) by @renovate[bot] - bench: use mimalloc as global allocator in bench crate (#8844) by @IWANABETHATGUY - reuse native build artifact in node-validation job (#8826) by @Boshen - speed up CodSpeed benchmark build by disabling LTO (#8824) by @Boshen - remove redundant critcmp benchmark job (#8823) by @Boshen - deps: update rust crate oxc_sourcemap to v6.1.0 (#8785) by @renovate[bot] - node: migrate oxlint and oxfmt to Vite+ (#8813) by @Boshen - revert namespace runners for release build jobs (#8820) by @Boshen - migrate runners to namespace (#8819) by @Boshen - test: relax test utils path assertion to support git worktrees (#8816) by @younggglcy - rename `examples/lazy` to `examples/lazy-compilation` (#8789) by @shulaoda - improve "needs reproduction" wording by @Boshen - deps: update dependency oxlint-tsgolint to v0.17.1 (#8807) by @renovate[bot] - enable 7 previously-skipped MagicString tests (#8771) by @IWANABETHATGUY - upgrade oxc to 0.121.0 (#8784) by @shulaoda - increase Windows dev drive size from 12GB to 20GB (#8779) by @Copilot ### ❤️ New Contributors * @elderapo made their first contribution in [#8848](#8848) * @younggglcy made their first contribution in [#8816](#8816) * @bddjr made their first contribution in [#8780](#8780) * @zOadT made their first contribution in [#8778](#8778) Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>

@IWANABETHATGUY

## [1.0.0-rc.11] - 2026-03-23 ### 🚀 Features - magicString replace with regex (#8802) by @IWANABETHATGUY - support `output.sourcemapExcludeSources` option (#8828) by @sapphi-red - support `getIndentString` in MagicString (#8775) by @IWANABETHATGUY - MagicString ignoreList support (#8773) by @IWANABETHATGUY ### 🐛 Bug Fixes - forward test filters through vp run (#8870) by @younggglcy - types: remove `pluginName` from `MinimalPluginContext` (#8864) by @sapphi-red - do not report eval?.() as direct eval (#8860) by @IWANABETHATGUY - handle negative indices, overlapping ranges, and moved content in MagicString remove (#8829) by @IWANABETHATGUY - enable arbitrary_precision for serde_json to fix JSON float parsing (#8848) by @elderapo - resolve TypeScript lint errors (#8841) by @Boshen - avoid panic on multi-byte UTF-8 chars in hash placeholder iterator (#8790) by @shulaoda - ci: skip failing vite build watch raw query test (#8840) by @Boshen - ci: use step-level env override to unset VITE_PLUS_CLI_BIN in vite tests (#8838) by @Boshen - ci: move vite tests into CI workflow by @Boshen - ci: unset all VITE_PLUS_* env vars in vite-tests workflow (#8837) by @Boshen - test: skip watch CLI tests on Windows (#8830) by @Boshen - ci: unset VITE_PLUS_CLI_BIN in vite-tests workflow (#8832) by @Boshen - remove redundant bare side-effect imports in entry/facade chunks (#8804) by @h-a-n-a - magicString prepend issues (#8797) by @IWANABETHATGUY - ci: use `vpx` instead of `vp exec` for `pkg-pr-new` (#8827) by @Boshen - set `order` for callable plugins (#8815) by @sapphi-red - handle reversed slice ranges with moved content (#8750) by @IWANABETHATGUY - update emnapi to latest to avoid version mismatch (#8781) by @sapphi-red - external.md on Windows OS (#8780) by @bddjr - align MagicString length/isEmpty with reference magic-string (#8776) by @IWANABETHATGUY ### 🚜 Refactor - extract canonical_ref_resolving_namespace helper (#8836) by @Boshen ### 📚 Documentation - improve external examples for cross-platform correctness (#8786) by @hyf0-agent - update reference to transform function in plugin API documentation (#8778) by @zOadT ### ⚡ Performance - reduce timing of `dervie_entries_aware_chunk_name` (#8847) by @AliceLanniste - bench: remove redundant sourcemap benchmark cases (#8825) by @Boshen - reduce intermediate allocations in `collapse_sourcemaps` (#8821) by @Boshen - enable parallel AST cloning on macOS (#8814) by @Boshen ### 🧪 Testing - watch: use polling watcher and retry for watch error test (#8772) by @sapphi-red ### ⚙️ Miscellaneous Tasks - deps: update dependency @oxc-project/types to v0.122.0 (#8873) by @renovate[bot] - publish-to-npm: use correct vp pm publish (#8871) by @shulaoda - justfile: skip setup-vite-plus if vp is already installed (#8862) by @Boshen - add expectWarning option to test config (#8861) by @IWANABETHATGUY - justfile: support windows for `just setup` (#8846) by @AliceLanniste - deps: update rust crates (#8852) by @renovate[bot] - deps: update endbug/version-check action to v3 (#8855) by @renovate[bot] - deps: update github-actions (#8853) by @renovate[bot] - deps: update dependency vitepress to v2.0.0-alpha.17 (#8854) by @renovate[bot] - deps: update npm packages (#8851) by @renovate[bot] - bench: use mimalloc as global allocator in bench crate (#8844) by @IWANABETHATGUY - reuse native build artifact in node-validation job (#8826) by @Boshen - speed up CodSpeed benchmark build by disabling LTO (#8824) by @Boshen - remove redundant critcmp benchmark job (#8823) by @Boshen - deps: update rust crate oxc_sourcemap to v6.1.0 (#8785) by @renovate[bot] - node: migrate oxlint and oxfmt to Vite+ (#8813) by @Boshen - revert namespace runners for release build jobs (#8820) by @Boshen - migrate runners to namespace (#8819) by @Boshen - test: relax test utils path assertion to support git worktrees (#8816) by @younggglcy - rename `examples/lazy` to `examples/lazy-compilation` (#8789) by @shulaoda - improve "needs reproduction" wording by @Boshen - deps: update dependency oxlint-tsgolint to v0.17.1 (#8807) by @renovate[bot] - enable 7 previously-skipped MagicString tests (#8771) by @IWANABETHATGUY - upgrade oxc to 0.121.0 (#8784) by @shulaoda - increase Windows dev drive size from 12GB to 20GB (#8779) by @Copilot ### ❤️ New Contributors * @younggglcy made their first contribution in [#8870](#8870) * @elderapo made their first contribution in [#8848](#8848) * @bddjr made their first contribution in [#8780](#8780) * @zOadT made their first contribution in [#8778](#8778) --------- Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>

chore(deps): update npm packages

448b73c

renovate bot enabled auto-merge (squash) March 22, 2026 16:53

renovate-approve bot approved these changes Mar 22, 2026

View reviewed changes

renovate bot merged commit 457d79f into main Mar 22, 2026
53 of 54 checks passed

renovate bot deleted the renovate/npm-packages branch March 22, 2026 16:56

github-actions bot mentioned this pull request Mar 23, 2026

release: v1.0.0-rc.11 #8868

Merged

This was referenced Mar 23, 2026

release: v1.0.0-rc.11 #8872

Closed

release: v1.0.0-rc.11 #8876

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update npm packages#8851

chore(deps): update npm packages#8851
renovate[bot] merged 1 commit intomainfrom
renovate/npm-packages

renovate bot commented Mar 22, 2026

Uh oh!

netlify bot commented Mar 22, 2026

Uh oh!

socket-security bot commented Mar 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 22, 2026

Release Notes

v5.88.1: Release 5.88.1

v5.88.0: Release 5.88.0

Minor Changes

Patch Changes

Features

Bug Fixes

Miscellaneous Chores

🩹 Fixes

💖 Contributors

🐞 Bug Fixes

Notable Changes

What's Changed

Configuration

Uh oh!

netlify bot commented Mar 22, 2026

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

socket-security bot commented Mar 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v5.88.1`: Release 5.88.1

`v5.88.0`: Release 5.88.0