Skip to content

chore(deps): update npm packages#9002

Merged
shulaoda merged 1 commit into
mainfrom
renovate/npm-packages
Apr 8, 2026
Merged

chore(deps): update npm packages#9002
shulaoda merged 1 commit into
mainfrom
renovate/npm-packages

Conversation

@renovate

@renovate renovate Bot commented Apr 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@oxc-node/cli (source) ^0.0.35 → ^0.1.0 age adoption passing confidence
@oxc-node/core ^0.0.35 → ^0.1.0 age adoption passing confidence
@oxlint/plugins (source) 1.57.0 → 1.58.0 age adoption passing confidence
@types/picomatch (source) 4.0.2 → 4.0.3 age adoption passing confidence
esbuild ^0.27.0 → ^0.28.0 age adoption passing confidence
knip (source) 6.1.0 → 6.3.0 age adoption passing confidence
playwright (source) 1.58.2 → 1.59.1 age adoption passing confidence
playwright-chromium (source) 1.58.2 → 1.59.1 age adoption passing confidence
remeda (source) 2.33.6 → 2.33.7 age adoption passing confidence
rollup (source) 4.60.0 → 4.60.1 age adoption passing confidence
vue (source) 3.5.31 → 3.5.32 age adoption passing confidence
web-tree-sitter (source) 0.26.7 → 0.26.8 age adoption passing confidence

Release Notes

oxc-project/oxc-node (@​oxc-node/cli)

v0.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: oxc-project/oxc-node@v0.0.35...v0.1.0

evanw/esbuild (esbuild)

v0.28.0

Compare Source

  • Add support for with { type: 'text' } imports (#​4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
console.log(string)

  • Add integrity checks to fallback download path (#​4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

v0.27.7

Compare Source

  • Fix lowering of define semantics for TypeScript parameter properties (#​4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}

// Old output (with --loader=ts --target=es2021)
class Foo {
  constructor(x = 1) {
    this.x = x;
    __publicField(this, "y", 2);
  }
  x;
}

// New output (with --loader=ts --target=es2021)
class Foo {
  constructor(x = 1) {
    __publicField(this, "x", x);
    __publicField(this, "y", 2);
  }
}

v0.27.5

Compare Source

  • Fix for an async generator edge case (#​4401, #​4417)

    Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

    async function* inner() { yield 1; yield 2 }
async function* outer() { yield* inner() }
let gen = outer()
for await (let x of [gen.next(), gen.next()]) console.log(x)

    Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

    This fix was contributed by @​2767mr.

  • Fix a regression when metafile is enabled (#​4420, #​4418)

    This release fixes a regression introduced by the previous release. When metafile: true was enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.

  • Use define semantics for TypeScript parameter properties (#​4421)

    Parameter properties are a TypeScript-specific code generation feature that converts constructor parameters into class fields when they are prefixed by certain keywords. When "useDefineForClassFields": true is present in tsconfig.json, the TypeScript compiler automatically generates class field declarations for parameter properties. Previously esbuild didn't do this, but esbuild will now do this starting with this release:

    // Original code
class Foo {
  constructor(public x: number) {}
}

// Old output (with --loader=ts)
class Foo {
  constructor(x) {
    this.x = x;
  }
}

// New output (with --loader=ts)
class Foo {
  constructor(x) {
    this.x = x;
  }
  x;
}

  • Allow es2025 as a target in tsconfig.json (#​4432)

    TypeScript recently added es2025 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
  "compilerOptions": {
    "target": "ES2025"
  }
}

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

webpro-nl/knip (knip)

v6.3.0: Release 6.3.0

Compare Source

  • Re-gen sponsorships chart (83ee489)
  • Add testimonial (be16c54)
  • Add deferred resolve entries as direct entry paths to avoid ws exclusion (91a1835)
  • Add rolldown plugin (resolve #​1661) (44bfd62)
  • Housekeep plugins a bit (dc69868)
  • Improve module.register handling (b9e36ea)
  • Housekeep release script (f81bd0f)

v6.2.0: Release 6.2.0

Compare Source

v6.1.1: Release 6.1.1

Compare Source

microsoft/playwright (playwright)

v1.59.1

Compare Source

v1.59.0

Compare Source

remeda/remeda (remeda)

v2.33.7

Compare Source

Bug Fixes
rollup/rollup (rollup)

v4.60.1

Compare Source

2026-03-30

Bug Fixes
  • Resolve a situation where side effect imports could be dropped due to a caching issue (#​6286)
Pull Requests
vuejs/core (vue)

v3.5.32

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) April 5, 2026 16:58
@netlify

netlify Bot commented Apr 5, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for rolldown-rs canceled.

Name Link
🔨 Latest commit e082af8
🔍 Latest deploy log https://app.netlify.com/projects/rolldown-rs/deploys/69d62b0c8ad1c100086220e0

@socket-security

socket-security Bot commented Apr 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedesbuild@​0.28.0911007394100
Updated@​types/​picomatch@​4.0.2 ⏵ 4.0.31001007488 +7100
Updated@​oxc-node/​core@​0.0.35 ⏵ 0.1.093 +610076 +192 -2100
Updated@​oxlint/​plugins@​1.57.0 ⏵ 1.58.078 +110099 +194 +1100
Updated@​oxc-node/​cli@​0.0.35 ⏵ 0.1.081 +410079 +192 -2100
Updatedknip@​6.1.0 ⏵ 6.3.099 +110095 +196 +1100

View full report

@renovate renovate Bot force-pushed the renovate/npm-packages branch from bda0968 to a5dc209 Compare April 5, 2026 21:02
@shulaoda shulaoda disabled auto-merge April 6, 2026 00:22
@renovate

renovate Bot commented Apr 6, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@shulaoda shulaoda self-assigned this Apr 6, 2026
@shulaoda shulaoda force-pushed the renovate/npm-packages branch from 22ac4bf to a5dc209 Compare April 8, 2026 10:14
@renovate renovate Bot force-pushed the renovate/npm-packages branch from a5dc209 to e082af8 Compare April 8, 2026 10:16
@renovate renovate Bot enabled auto-merge (squash) April 8, 2026 10:16
@shulaoda shulaoda disabled auto-merge April 8, 2026 10:17
@shulaoda shulaoda merged commit b5b01b8 into main Apr 8, 2026
53 checks passed
@shulaoda shulaoda deleted the renovate/npm-packages branch April 8, 2026 10:22
@github-actions github-actions Bot mentioned this pull request Apr 8, 2026
Merged
shulaoda added a commit that referenced this pull request Apr 8, 2026
@github-actions @shulaoda
release: v1.0.0-rc.14 (#9035)
b7a66e0 
## [1.0.0-rc.14] - 2026-04-08

### 🚀 Features

- rust: add `disable_panic_hook` feature to disable the panic hook (#9023) by @sapphi-red
- support inlineConst for CJS exports accessed through module.exports (#8976) by @h-a-n-a

### 🐛 Bug Fixes

- rolldown_plugin_vite_import_glob: normalize resolved alias path to prevent double slashes (#9032) by @shulaoda
- rolldown_plugin_vite_import_glob: follow symlinks in file scanning (#9000) by @Copilot
- wrap CJS entry modules for IIFE/UMD when using exports/module (#8999) by @IWANABETHATGUY
- emit separate __toESM bindings for mixed ESM/CJS external imports (#8987) by @IWANABETHATGUY
- tree-shake dead dynamic imports to side-effect-free CJS modules (#8529) by @sapphi-red
- skip inlining stale CJS export constants on module.exports reassignment (#8990) by @IWANABETHATGUY

### 🚜 Refactor

- generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @shulaoda
- generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @shulaoda

### 📚 Documentation

- contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @claude

### ⚙️ Miscellaneous Tasks

- deps: update npm packages (#9002) by @renovate[bot]
- deps: update dependency @napi-rs/cli to v3.6.1 (#9034) by @renovate[bot]
- deps: upgrade oxc to 0.124.0 (#9018) by @shulaoda
- deps: update test262 submodule for tests (#9010) by @sapphi-red
- deps: update dependency oxfmt to ^0.44.0 (#9012) by @renovate[bot]
- deps: update dependency vite to v8.0.5 [security] (#9009) by @renovate[bot]
- deps: update dependency vite-plus to v0.1.16 (#9008) by @renovate[bot]
- deps: update rust crates (#9003) by @renovate[bot]
- deps: update github-actions (#9004) by @renovate[bot]
- deps: update dependency lodash-es to v4.18.1 [security] (#8992) by @renovate[bot]
- deps: update crate-ci/typos action to v1.45.0 (#8988) by @renovate[bot]
- upgrade oxc npm packages to 0.123.0 (#8985) by @shulaoda

### ◀️ Revert

- "chore(deps): update dependency oxfmt to ^0.44.0 (#9012)" (#9019) by @shulaoda

Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

@shulaoda shulaoda

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@shulaoda