chore(deps): update github actions by renovate[bot] · Pull Request #9258 · rolldown/rolldown

renovate · 2026-04-29T05:48:21Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
CodSpeedHQ/action	action	minor	`v4.13.0` → `v4.14.0`	`v4.15.0`
actions/cache	action	patch	`v5.0.4` → `v5.0.5`
actions/upload-artifact	action	patch	`v7.0.0` → `v7.0.1`
autofix-ci/action	action	patch	`v1.3.3` → `v1.3.4`
oxc-project/security-action	action	patch	`v1.0.1` → `v1.0.2`	`v1.0.3`
peter-evans/create-pull-request	action	patch	`v8.1.0` → `v8.1.1`
softprops/action-gh-release	action	patch	`v2.6.1` → `v2.6.2`
taiki-e/install-action	action	minor	`v2.73.0` → `v2.75.22`	`v2.75.25` (+2)
voidzero-dev/setup-vp	action	minor	`v1.6.0` → `v1.8.0`

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

`v4.14.0`

Compare Source

Release Notes

We now collect buildtime and runtime environment data to warn users about differences in their runtime environment when comparing two runs against one another.

This data includes toolchain metadata like version and build options, as well as a list of dynamically loaded linked libraries.

Minimum integration versions

To support the runtime metadata collection, make sure to use at least the following versions:

🚀 Features

Stop panicking when parsing invalid perf file by @GuillaumeLagrange in #298
Make the basic run only 5 rounds to make logs not crash the github page by @GuillaumeLagrange
Represent the host OS as a SupportedOs enum with per-executor support gates by @GuillaumeLagrange
Bypass systemd-run usage on macos by @GuillaumeLagrange
Add aarch64-apple-darwin to the release targets by @GuillaumeLagrange
Collect cpu flags in system info by @GuillaumeLagrange in #281

🐛 Bug Fixes

Fix instropected_go's behavior on macos by @GuillaumeLagrange
Update rust crate git2 to 0.20.4 (#284) by @xtqqczze in #284

⚙️ Internals

chore: bump runner version to 4.14.0 by @github-actions[bot] in #203
Move the config schema check from pre-commit to ci-only check by @GuillaumeLagrange in #287
Skip tests that rely on linux behavior by @GuillaumeLagrange
Bump instrument-hooks submodule to include stubs improvement by @GuillaumeLagrange
Rerun exec harness build if instrument hooks sources change by @GuillaumeLagrange
Make update-bindings.sh PWD agnostic by @GuillaumeLagrange

Install codspeed-runner 4.14.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.14.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.14.0

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.13.1...v4.14.0

`v4.13.1`

Compare Source

What's Changed

build(deps)!: update actions to Node.js 24 runtime by @shaanmajid in #201

New Contributors

@shaanmajid made their first contribution in #201

Full Changelog: CodSpeedHQ/action@v4.13.0...v4.13.1

actions/cache (actions/cache)

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

autofix-ci/action (autofix-ci/action)

`v1.3.4`: autofix-ci/action 1.3.4

Compare Source

What's Changed

Update action to use Node 24

Full Changelog: autofix-ci/action@v1...v1.3.4

oxc-project/security-action (oxc-project/security-action)

`v1.0.2`

Compare Source

peter-evans/create-pull-request (peter-evans/create-pull-request)

`v8.1.1`: Create Pull Request v8.1.1

Compare Source

What's Changed

build(deps-dev): bump the npm group with 2 updates by @dependabot[bot] in #4305
build(deps): bump minimatch by @dependabot[bot] in #4311
build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #4316
build(deps): bump @tootallnate/once and jest-environment-jsdom by @dependabot[bot] in #4323
build(deps-dev): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in #4328
build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #4334
build(deps): bump picomatch by @dependabot[bot] in #4339
build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #4344
build(deps-dev): bump the npm group with 3 updates by @dependabot[bot] in #4349
fix: retry post-creation API calls on 422 eventual consistency errors by @peter-evans in #4356

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

softprops/action-gh-release (softprops/action-gh-release)

`v2.6.2`

Compare Source

What's Changed

Other Changes 🔄

chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #775
chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @dependabot[bot] in #777
chore(deps): bump vite from 8.0.0 to 8.0.5 by @dependabot[bot] in #781

Full Changelog: softprops/action-gh-release@v2...v2.6.2

taiki-e/install-action (taiki-e/install-action)

`v2.75.22`: 2.75.22

Compare Source

Update tombi@latest to 0.9.22.
Update biome@latest to 2.4.13.

`v2.75.21`: 2.75.21

Compare Source

Update mise@latest to 2026.4.19.
Update tombi@latest to 0.9.21.
Update syft@latest to 1.43.0.

`v2.75.20`: 2.75.20

Compare Source

Update prek@latest to 0.3.10.
Update cargo-xwin@latest to 0.22.0.

`v2.75.19`: 2.75.19

Compare Source

Update wasmtime@latest to 44.0.0.
Update tombi@latest to 0.9.20.
Update martin@latest to 1.6.0.
Update just@latest to 1.50.0.
Update mise@latest to 2026.4.18.
Update rclone@latest to 1.73.5.

`v2.75.18`: 2.75.18

Compare Source

Update vacuum@latest to 0.26.1.
Update wasm-tools@latest to 1.247.0.
Update mise@latest to 2026.4.16.
Update espup@latest to 0.17.1.
Update trivy@latest to 0.70.0.

`v2.75.17`

Compare Source

Initial release

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-04-29T05:48:37Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`fc4b674`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/69f19ba85ac49e00085419f9

codspeed-hq · 2026-04-29T05:54:13Z

Merging this PR will not alter performance

✅ 4 untouched benchmarks
⏩ 10 skipped benchmarks¹

_{Comparing renovate/github-actions (fc4b674) with main (5cf971a)²}

10 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩
No successful run was found on main (2b29337) during the generation of this report, so 5cf971a was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

@IWANABETHATGUY

## [1.0.0-rc.18] - 2026-04-29 ### 💥 BREAKING CHANGES - optimization: default unspecified inlineConst.mode to smart (#9248) by @IWANABETHATGUY ### 🐛 Bug Fixes - rolldown_plugin_vite_import_glob: return error instead of panicking when virtual module uses a relative glob (#9241) by @shulaoda - binding: treat empty inlineConst object as omitted (#9247) by @IWANABETHATGUY - rolldown: keep enum declaration for optional-chain access (#9229) by @Dunqing - link_stage: restore inline let-else in exports-kind filter (#9237) by @IWANABETHATGUY - dev/lazy: avoid module reinitialization in lazy compilation patches (#9179) by @h-a-n-a - dev: visit identifier references for runtime rewrites in HMR finalizer (#9191) by @h-a-n-a - chunk-optimizer: pick dominator for runtime placement to avoid cycles (#9164) by @IWANABETHATGUY - make `this.emitFile` chunk path synchronous to avoid deadlock (#9031) by @lazarv - use sentinel id for `browser: false` ignored modules (#9192) by @shulaoda - prevent chunk optimizer from creating import cycles (#9228) by @IWANABETHATGUY ### 🚜 Refactor - replace tokio::sync::Mutex with std::sync::Mutex for non-IO data (#9176) by @shulaoda - rolldown_plugin_vite_import_glob: do not rewrite import path for absolute base (#9195) by @shulaoda - runtime_helper: wrap DependedRuntimeHelperMap in a struct (#9215) by @IWANABETHATGUY - drop redundant clear() in determine_safely_merge_cjs_ns (#9206) by @IWANABETHATGUY - clean up generate_lazy_export (#9208) by @IWANABETHATGUY - bitset: return bool from set_bit to fuse guard-and-set (#9207) by @IWANABETHATGUY - link_stage: simplify exports-kind filter and clarify safety comments (#9205) by @IWANABETHATGUY ### 📚 Documentation - determine_module_exports_kind (#9252) by @IWANABETHATGUY - fix dead link to esbuild ESM/CJS interop tests (#9230) by @Copilot - remove CSS bundling references (#9234) by @shulaoda - correct IncrementalFullBuild row in BundleMode table (#9214) by @IWANABETHATGUY - design: add bundler data lifecycle design doc (#9212) by @hyf0 - remove minifier alpha status notices (#9202) by @sapphi-red ### ⚙️ Miscellaneous Tasks - upgrade oxc to 0.128.0 (#9260) by @shulaoda - deps: bump rolldown-ariadne to 0.6.0 (#9254) by @IWANABETHATGUY - deps: update github actions (#9259) by @renovate[bot] - deps: update github actions (#9258) by @renovate[bot] - remove renovate overrides (#9257) by @Boshen - use ubuntu-latest for security workflow (#9256) by @Boshen - notify Discord around release publish (#9251) by @Boshen - add release environment to npm publish workflow (#9250) by @Boshen - justfile: drop the `--` separator before forwarded args in `vp run` (#9246) by @shulaoda - deps: update test262 submodule for tests (#9243) by @sapphi-red - add more tracing instrumentations (#9220) by @sapphi-red - rolldown_plugin_vite_import_glob: remove outdated sourcemap doc comment (#9213) by @shulaoda - update security workflow (#9201) by @Boshen ### ❤️ New Contributors * @lazarv made their first contribution in [#9031](#9031) Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>

chore(deps): update github actions

fc4b674

renovate Bot enabled auto-merge (squash) April 29, 2026 05:48

renovate-approve Bot approved these changes Apr 29, 2026

View reviewed changes

renovate Bot merged commit d642d73 into main Apr 29, 2026
59 checks passed

renovate Bot deleted the renovate/github-actions branch April 29, 2026 05:51

rolldown-guard Bot mentioned this pull request Apr 29, 2026

release: v1.0.0-rc.18 #9266

Merged

rolldown-guard Bot mentioned this pull request Apr 29, 2026

release: v1.0.0-rc.19 #9268

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions#9258

chore(deps): update github actions#9258
renovate[bot] merged 1 commit intomainfrom
renovate/github-actions

renovate Bot commented Apr 29, 2026

Uh oh!

netlify Bot commented Apr 29, 2026

Uh oh!

Uh oh!

codspeed-hq Bot commented Apr 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 29, 2026

Release Notes

v4.14.0

Release Notes

Minimum integration versions

🚀 Features

🐛 Bug Fixes

⚙️ Internals

Install codspeed-runner 4.14.0

Install prebuilt binaries via shell script

Download codspeed-runner 4.14.0

v4.13.1

What's Changed

New Contributors

v5.0.5

What's Changed

v7.0.1

What's Changed

v1.3.4: autofix-ci/action 1.3.4

What's Changed

v1.0.2

v8.1.1: Create Pull Request v8.1.1

What's Changed

v2.6.2

What's Changed

Other Changes 🔄

v2.75.22: 2.75.22

v2.75.21: 2.75.21

v2.75.20: 2.75.20

v2.75.19: 2.75.19

v2.75.18: 2.75.18

v2.75.17

Configuration

Uh oh!

netlify Bot commented Apr 29, 2026

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

Uh oh!

codspeed-hq Bot commented Apr 29, 2026

Merging this PR will not alter performance

Footnotes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v4.14.0`

`v4.13.1`

`v5.0.5`

`v7.0.1`

`v1.3.4`: autofix-ci/action 1.3.4

`v1.0.2`

`v8.1.1`: Create Pull Request v8.1.1

`v2.6.2`

`v2.75.22`: 2.75.22

`v2.75.21`: 2.75.21

`v2.75.20`: 2.75.20

`v2.75.19`: 2.75.19

`v2.75.18`: 2.75.18

`v2.75.17`