Update build deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
rolldown (source)	1.0.0-rc.9 → 1.0.0-rc.15
tsdown (source)	0.21.2 → 0.21.7

---

Release Notes

rolldown/rolldown (rolldown)

v1.0.0-rc.15

Compare Source

🐛 Bug Fixes

• prevent stack overflow in generate_transitive_esm_init on circular dependencies (#​9041) by @​shulaoda

🚜 Refactor

• agents: rename Spec-Driven Development to Context Engineering (#​9036) by @​hyf0

v1.0.0-rc.14

Compare Source

🚀 Features

• rust: add disable_panic_hook feature to disable the panic hook (#​9023) by @​sapphi-red
• support inlineConst for CJS exports accessed through module.exports (#​8976) by @​h-a-n-a

🐛 Bug Fixes

• rolldown_plugin_vite_import_glob: normalize resolved alias path to prevent double slashes (#​9032) by @​shulaoda
• rolldown_plugin_vite_import_glob: follow symlinks in file scanning (#​9000) by @​Copilot
• wrap CJS entry modules for IIFE/UMD when using exports/module (#​8999) by @​IWANABETHATGUY
• emit separate __toESM bindings for mixed ESM/CJS external imports (#​8987) by @​IWANABETHATGUY
• tree-shake dead dynamic imports to side-effect-free CJS modules (#​8529) by @​sapphi-red
• skip inlining stale CJS export constants on module.exports reassignment (#​8990) by @​IWANABETHATGUY

🚜 Refactor

• generator: migrate ecma formatting from npx oxfmt to vp fmt (#​9022) by @​shulaoda
• generator: replace npx oxfmt with vp fmt for ecma formatting (#​9021) by @​shulaoda

📚 Documentation

• contrib-guide: mention that running tests on older Node.js version will have different stat results (#​8996) by @​Claude

⚙️ Miscellaneous Tasks

• deps: update npm packages (#​9002) by @​renovate[bot]
• deps: update dependency @​napi-rs/cli to v3.6.1 (#​9034) by @​renovate[bot]
• deps: upgrade oxc to 0.124.0 (#​9018) by @​shulaoda
• deps: update test262 submodule for tests (#​9010) by @​sapphi-red
• deps: update dependency oxfmt to ^0.44.0 (#​9012) by @​renovate[bot]
• deps: update dependency vite to v8.0.5 [security] (#​9009) by @​renovate[bot]
• deps: update dependency vite-plus to v0.1.16 (#​9008) by @​renovate[bot]
• deps: update rust crates (#​9003) by @​renovate[bot]
• deps: update github-actions (#​9004) by @​renovate[bot]
• deps: update dependency lodash-es to v4.18.1 [security] (#​8992) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.45.0 (#​8988) by @​renovate[bot]
• upgrade oxc npm packages to 0.123.0 (#​8985) by @​shulaoda

◀️ Revert

• "chore(deps): update dependency oxfmt to ^0.44.0 (#​9012)" (#​9019) by @​shulaoda

❤️ New Contributors

• @​Claude made their first contribution in #​8996

v1.0.0-rc.13

Compare Source

🚀 Features

• add friendly error for unloadable virtual modules (#​8955) by @​sapphi-red
• better error message for unsupported CSS error (#​8911) by @​sapphi-red

🐛 Bug Fixes

• prevent chunk merging from leaking entry side effects (#​8979) by @​IWANABETHATGUY
• correct inlining based on module's def format and esModule flag (#​8975) by @​h-a-n-a
• generate init calls for excluded re-exports in strict execution order (#​8858) by @​IWANABETHATGUY
• consistent order for meta.chunks in renderChunk hook (#​8956) by @​sapphi-red
• subpath imports in glob imports failing to find files (#​8885) by @​kalvenschraut
• browser: bundle binding types in dts output (#​8930) by @​nyan-left
• ci: guard artifact download step in vite-test-ubuntu when build is skipped (#​8934) by @​Copilot
• track CJS re-export import records to fix inline const and tree-shaking (#​8925) by @​h-a-n-a
• use ImportKind::Import for common-chunk root computation (#​8899) by @​IWANABETHATGUY
• watch: clear emitted_filenames between rebuilds (#​8914) by @​IWANABETHATGUY
• ci: cache esbuild snapshots to avoid 429 rate limiting (#​8921) by @​IWANABETHATGUY
• always check circular deps in chunk optimizer (#​8915) by @​IWANABETHATGUY
• don't mark calls to reassigned bindings as pure (#​8917) by @​IWANABETHATGUY
• magic-string: throw TypeError for non-string content args (#​8905) by @​IWANABETHATGUY
• magic-string: add split-point validation and overwrite/update options (#​8904) by @​IWANABETHATGUY

🚜 Refactor

• pre-compute has_side_effects on ChunkCandidate (#​8981) by @​IWANABETHATGUY
• cleanup and simplify in dynamic_import.rs (#​8927) by @​ulrichstark
• rename came_from_cjs to came_from_commonjs for consistency (#​8938) by @​IWANABETHATGUY
• inline create_ecma_view return destructuring and remove redundant binding (#​8932) by @​shulaoda

📚 Documentation

• document ensure_lazy_module_initialization_order in code-splitting design doc (#​8931) by @​IWANABETHATGUY

🧪 Testing

• add regression test for runtime helper circular dependency (#​8958) by @​h-a-n-a
• enable 8 previously-skipped MagicString remove tests (#​8945) by @​IWANABETHATGUY
• add test for why PureAnnotation is needed in execution order check (#​8933) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• add @emnapi/runtime and @emnapi/core as direct deps of @rolldown/browser (#​8978) by @​Copilot
• deps: update dependency vite-plus to v0.1.15 (#​8970) by @​renovate[bot]
• deps: update dependency oxfmt to ^0.43.0 (#​8969) by @​renovate[bot]
• deps: upgrade oxc to 0.123.0 (#​8967) by @​shulaoda
• justfile: deduplicate update-submodule as alias of setup-submodule (#​8968) by @​shulaoda
• deps: update rollup submodule for tests to v4.60.1 (#​8965) by @​sapphi-red
• deps: update test262 submodule for tests (#​8966) by @​sapphi-red
• remove unused type-check scripts (#​8957) by @​sapphi-red
• deps: update actions/cache action to v5 (#​8953) by @​renovate[bot]
• deps: update npm packages to v6 (major) (#​8954) by @​renovate[bot]
• deps: update npm packages (#​8948) by @​renovate[bot]
• deps: update rust crates (#​8949) by @​renovate[bot]
• deps: update github-actions (#​8947) by @​renovate[bot]
• deps: update napi (#​8943) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to ^0.23.0 (#​8944) by @​renovate[bot]
• regenerate testing snapshots (#​8928) by @​ulrichstark
• deps: update dependency rust to v1.94.1 (#​8923) by @​renovate[bot]

❤️ New Contributors

• @​kalvenschraut made their first contribution in #​8885
• @​nyan-left made their first contribution in #​8930

v1.0.0-rc.12

Compare Source

🚀 Features

• chunk-optimizer: skip circular dependency check when strict execution order is enabled (#​8886) by @​hyf0

🐛 Bug Fixes

• emit build warnings during watch mode rebuilds (#​8897) by @​IWANABETHATGUY
• lazy-barrel: load import-then-export specifiers when barrel has local exports (#​8895) by @​shulaoda
• correct execution order of transferred CJS init calls (#​8877) by @​IWANABETHATGUY
• mcs: entriesAware should calculate sizes without duplication (#​8887) by @​hyf0
• non-deterministic chunk generation (#​8882) by @​sapphi-red
• is_top_level incorrectly treats strict-mode scopes as top-level (#​8878) by @​Dunqing

🚜 Refactor

• treeshake: migrate SideEffectDetector to Oxc's MayHaveSideEffects trait (#​8624) by @​Dunqing

🧪 Testing

• make dev server tests deterministic by replacing fixed sleeps with event-driven polling (#​8561) by @​Boshen

⚙️ Miscellaneous Tasks

• deps: update dependency vite-plus to v0.1.14 (#​8902) by @​camc314
• deps: update dependency oxfmt to ^0.42.0 (#​8891) by @​renovate[bot]
• deps: update rust crate oxc_sourcemap to v6.1.1 (#​8890) by @​renovate[bot]
• remove Rolldown MF plan (#​8883) by @​shulaoda
• deps: update rollup submodule for tests to v4.60.0 (#​8881) by @​sapphi-red
• deps: update test262 submodule for tests (#​8880) by @​sapphi-red
• deps: upgrade oxc crates to 0.122.0 (#​8879) by @​shulaoda

v1.0.0-rc.11

Compare Source

🚀 Features

• magicString replace with regex (#​8802) by @​IWANABETHATGUY
• support output.sourcemapExcludeSources option (#​8828) by @​sapphi-red
• support getIndentString in MagicString (#​8775) by @​IWANABETHATGUY
• MagicString ignoreList support (#​8773) by @​IWANABETHATGUY

🐛 Bug Fixes

• forward test filters through vp run (#​8870) by @​younggglcy
• types: remove pluginName from MinimalPluginContext (#​8864) by @​sapphi-red
• do not report eval?.() as direct eval (#​8860) by @​IWANABETHATGUY
• handle negative indices, overlapping ranges, and moved content in MagicString remove (#​8829) by @​IWANABETHATGUY
• enable arbitrary_precision for serde_json to fix JSON float parsing (#​8848) by @​elderapo
• resolve TypeScript lint errors (#​8841) by @​Boshen
• avoid panic on multi-byte UTF-8 chars in hash placeholder iterator (#​8790) by @​shulaoda
• ci: skip failing vite build watch raw query test (#​8840) by @​Boshen
• ci: use step-level env override to unset VITE_PLUS_CLI_BIN in vite tests (#​8838) by @​Boshen
• ci: move vite tests into CI workflow by @​Boshen
• ci: unset all VITE_PLUS_* env vars in vite-tests workflow (#​8837) by @​Boshen
• test: skip watch CLI tests on Windows (#​8830) by @​Boshen
• ci: unset VITE_PLUS_CLI_BIN in vite-tests workflow (#​8832) by @​Boshen
• remove redundant bare side-effect imports in entry/facade chunks (#​8804) by @​h-a-n-a
• magicString prepend issues (#​8797) by @​IWANABETHATGUY
• ci: use vpx instead of vp exec for pkg-pr-new (#​8827) by @​Boshen
• set order for callable plugins (#​8815) by @​sapphi-red
• handle reversed slice ranges with moved content (#​8750) by @​IWANABETHATGUY
• update emnapi to latest to avoid version mismatch (#​8781) by @​sapphi-red
• external.md on Windows OS (#​8780) by @​bddjr
• align MagicString length/isEmpty with reference magic-string (#​8776) by @​IWANABETHATGUY

🚜 Refactor

• extract canonical_ref_resolving_namespace helper (#​8836) by @​Boshen

📚 Documentation

• improve external examples for cross-platform correctness (#​8786) by @​hyf0-agent
• update reference to transform function in plugin API documentation (#​8778) by @​zOadT

⚡ Performance

• reduce timing of dervie_entries_aware_chunk_name (#​8847) by @​AliceLanniste
• bench: remove redundant sourcemap benchmark cases (#​8825) by @​Boshen
• reduce intermediate allocations in collapse_sourcemaps (#​8821) by @​Boshen
• enable parallel AST cloning on macOS (#​8814) by @​Boshen

🧪 Testing

• watch: use polling watcher and retry for watch error test (#​8772) by @​sapphi-red

⚙️ Miscellaneous Tasks

• deps: update dependency @​oxc-project/types to v0.122.0 (#​8873) by @​renovate[bot]
• publish-to-npm: use correct vp pm publish (#​8871) by @​shulaoda
• justfile: skip setup-vite-plus if vp is already installed (#​8862) by @​Boshen
• add expectWarning option to test config (#​8861) by @​IWANABETHATGUY
• justfile: support windows for just setup (#​8846) by @​AliceLanniste
• deps: update rust crates (#​8852) by @​renovate[bot]
• deps: update endbug/version-check action to v3 (#​8855) by @​renovate[bot]
• deps: update github-actions (#​8853) by @​renovate[bot]
• deps: update dependency vitepress to v2.0.0-alpha.17 (#​8854) by @​renovate[bot]
• deps: update npm packages (#​8851) by @​renovate[bot]
• bench: use mimalloc as global allocator in bench crate (#​8844) by @​IWANABETHATGUY
• reuse native build artifact in node-validation job (#​8826) by @​Boshen
• speed up CodSpeed benchmark build by disabling LTO (#​8824) by @​Boshen
• remove redundant critcmp benchmark job (#​8823) by @​Boshen
• deps: update rust crate oxc_sourcemap to v6.1.0 (#​8785) by @​renovate[bot]
• node: migrate oxlint and oxfmt to Vite+ (#​8813) by @​Boshen
• revert namespace runners for release build jobs (#​8820) by @​Boshen
• migrate runners to namespace (#​8819) by @​Boshen
• test: relax test utils path assertion to support git worktrees (#​8816) by @​younggglcy
• rename examples/lazy to examples/lazy-compilation (#​8789) by @​shulaoda
• improve "needs reproduction" wording by @​Boshen
• deps: update dependency oxlint-tsgolint to v0.17.1 (#​8807) by @​renovate[bot]
• enable 7 previously-skipped MagicString tests (#​8771) by @​IWANABETHATGUY
• upgrade oxc to 0.121.0 (#​8784) by @​shulaoda
• increase Windows dev drive size from 12GB to 20GB (#​8779) by @​Copilot

❤️ New Contributors

• @​younggglcy made their first contribution in #​8870
• @​elderapo made their first contribution in #​8848
• @​bddjr made their first contribution in #​8780
• @​zOadT made their first contribution in #​8778

v1.0.0-rc.10

Compare Source

🚀 Features

• add indentExclusionRanges property to MagicString (#​8746) by @​IWANABETHATGUY
• expose oxcRuntimePlugin (#​8654) by @​sapphi-red
• rust: make bundler generic over FileSystem for in-memory benchmarks (#​8652) by @​Boshen

🐛 Bug Fixes

• rolldown_plugin_vite_dynamic_import_vars: align dynamic import fast check with Vite (#​8760) by @​shulaoda
• renamer: handle existing bindings in nested scopes when finding unique names (#​8741) by @​drewolson
• pass yarn_pnp option where needed (#​8736) by @​sapphi-red
• preserve optional chaining in namespace member expr rewrite (#​8712) by @​Copilot
• correct UTF-16 index handling in native MagicString (#​8693) by @​IWANABETHATGUY
• mark failing doctests as ignore (#​8700) by @​Boshen
• prevent may_partial_namespace from leaking through include_module (#​8682) by @​IWANABETHATGUY
• ci: bump native-build cache key to invalidate stale napi-rs artifacts (#​8678) by @​Boshen
• comments.annotation: false breaking tree-shaking (#​8657) by @​IWANABETHATGUY
• validate filenames for NUL bytes from chunkFileNames/entryFileNames (#​8644) by @​IWANABETHATGUY
• dce-only minify should not set NODE_ENV to production (#​8651) by @​IWANABETHATGUY

🚜 Refactor

• rust: remove dead CrossModuleOptimizationConfig::side_effects_free_function_optimization (#​8673) by @​Dunqing
• rust: simplify cross_module_optimization by removing redundant scope tracking (#​8672) by @​Dunqing
• simplify string repeat in guess_indentor (#​8753) by @​IWANABETHATGUY
• consolidate custom magic-string tests into one file (#​8696) by @​IWANABETHATGUY
• extract CJS bailout checks from include_symbol (#​8683) by @​IWANABETHATGUY
• rust: remove BindingIdentifierExt to use BindingIdentifier::symbol_id() instead (#​8667) by @​Dunqing
• bench: add bench_preset helper and inline presets (#​8658) by @​Boshen
• rust: filter external modules from entries instead of mapping bit positions (#​8637) by @​Dunqing

📚 Documentation

• clarify watch mode behavior and its limitations (#​8751) by @​sapphi-red
• add external link icon to GitHub button in Hero section (#​8731) by @​thisisnkc
• guide: clarify that inject option is only conceptually similar to esbuild's one (#​8743) by @​sapphi-red
• meta/design: add devtools.md (#​8663) by @​hyf0
• add viteplus alpha announcement banner (#​8668) by @​shulaoda

⚡ Performance

• rolldown: some minor perf optimization found by autoresearch (#​8730) by @​Brooooooklyn
• replace Vec allocation with lazy iterator in find_hash_placeholders (#​8703) by @​Boshen
• replace TypedDashMap with TypedMap in CustomField (#​8708) by @​Boshen
• bench: remove scan benchmark binary to halve LTO link time (#​8694) by @​Boshen

🧪 Testing

• watch: increase timeout for error output (#​8766) by @​sapphi-red
• vite-tests: remove JS plugin tests (#​8767) by @​sapphi-red
• watch: add CLI exit code test (#​8752) by @​sapphi-red
• normalize paths on Windows even if resolve.symlinks is false (#​8483) by @​sapphi-red

⚙️ Miscellaneous Tasks

• correct comment in bundle-analyzer-plugin.ts (#​8770) by @​origami-z
• upgrade oxc to 0.120.0 (#​8764) by @​Boshen
• enable all test for reset category in MagicString.test.ts (#​8749) by @​IWANABETHATGUY
• deps: update test262 submodule for tests (#​8742) by @​sapphi-red
• deps: update oxc apps (#​8734) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.1 (#​8724) by @​renovate[bot]
• deps: update npm packages (major) (#​8722) by @​renovate[bot]
• deps: update github-actions (major) (#​8721) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.0 (#​8720) by @​renovate[bot]
• deps: update npm packages (#​8718) by @​renovate[bot]
• deps: update rust crates (#​8717) by @​renovate[bot]
• deps: update github-actions (#​8716) by @​renovate[bot]
• deps: update dependency oxlint-tsgolint to v0.17.0 (#​8713) by @​renovate[bot]
• deps: bump cargo-shear to v1.11.2 (#​8711) by @​Boshen
• use org level CODE_OF_CONDUCT.md (#​8706) by @​sapphi-red
• fix cache key mismatch and remove redundant cache saves (#​8695) by @​Boshen
• deps: update oxc apps (#​8692) by @​renovate[bot]
• deps: update oxc apps (#​8649) by @​renovate[bot]
• should do matrix out side of reusable workflows 2 (#​8691) by @​hyf0
• should do matrix out side of reusable workflows (#​8690) by @​hyf0
• deps: update dependency rolldown-plugin-dts to v0.22.5 (#​8689) by @​renovate[bot]
• upgrade oxc to 0.119.0 and oxc_resolver to 11.19.1 (#​8686) by @​Boshen
• correct if condition of type-check job (#​8677) by @​hyf0
• Gate CI type-check job on node changes (#​8669) by @​Copilot
• benchmark: improve codspeed build (#​8665) by @​Boshen
• deps: update oxc to v0.118.0 (#​8650) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.44.0 (#​8647) by @​renovate[bot]
• deps: update oxc resolver to v11.19.1 (#​8646) by @​renovate[bot]
• deps: update dependency rust to v1.94.0 (#​8648) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.22.4 (#​8645) by @​renovate[bot]

◀️ Revert

• Revert "ci: Gate CI type-check job on node changes" (#​8674) by @​hyf0
• "chore(deps): update dependency rust to v1.94.0 (#​8648)" (#​8660) by @​shulaoda

❤️ New Contributors

• @​origami-z made their first contribution in #​8770
• @​drewolson made their first contribution in #​8741
• @​thisisnkc made their first contribution in #​8731

rolldown/tsdown (tsdown)

v0.21.7

Compare Source

   🚀 Features

• Add module option for attw and publint to allow passing imported modules directly  -  by @​sxzz (31e90)

   🐞 Bug Fixes

• deps: Add skipNodeModulesBundle dep subpath e2e tests and fix docs  -  by @​sxzz (deff7)

    View changes on GitHub

v0.21.6

Compare Source

   🚀 Features

• Upgrade rolldown to v1.0.0-rc.12  -  by @​sxzz (51292)
• config:
  • Pass root config to workspace config functions  -  by @​sxzz (76169)
  • Use mergeConfig for workspace config merging and support variadic overrides  -  by @​sxzz (148aa)
• dts:
  • Add cjsReexport option to eliminate dual module type hazard  -  by @​mandarini and @​sxzz in #​856 (875c1)
• exports:
  • Add bin option to auto-generate package.json bin field  -  by @​sxzz in #​869 (7ebd6)

   🐞 Bug Fixes

• css:
  • Compile preprocessor langs in virtual CSS modules  -  by @​sxzz in #​865 (7b2e0)
  • Strip .module from CSS output filenames  -  by @​sxzz in #​866 (03ade)
  • Default splitting to true in unbundle mode for CSS inject  -  by @​sxzz in #​867 (a4da6)
  • Split CSS plugin into pre/post phases for scoped CSS support  -  by @​sxzz in #​870 (ff0c4)
• entry:
  • Correctly output relative paths in logger output  -  by @​sxzz (00050)

    View changes on GitHub

v0.21.5

Compare Source

   🚀 Features

• Update rolldown to 1.0.0-rc.10  -  by @​wChenonly in #​845 (41411)
• Support typescript v6  -  by @​ocavue in #​858 (bffc4)

   🐞 Bug Fixes

• css:
  • Run final minification on merged CSS output  -  by @​sxzz in #​853 (475df)
  • Don't override internal importer  -  by @​Laupetin in #​860 (af40e)
  • Use aliased exports for CSS module keys  -  by @​wChenonly and @​sxzz in #​840 (bb6de)
• deps:
  • External optionalDependencies by default  -  by @​sxzz (cd24d)
  • Resolve subpath extensions for packages without exports field  -  by @​sxzz in #​863 (c5150)
  • Correctly resolve root @types packages for dts deep imports  -  by @​brc-dd and @​sxzz in #​852 (0b276)

    View changes on GitHub

v0.21.4

Compare Source

   🚀 Features

• css: Add CSS modules support  -  by @​sxzz in #​834 (2a88a)

   🐞 Bug Fixes

• exports: Preserve CRLF line endings in package.json  -  by @​sxzz (a4d4e)

    View changes on GitHub

v0.21.3

Compare Source

   🚀 Features

• copy: Add support for watching copy source files  -  by @​schplitt in #​721 (7c23a)

   🐞 Bug Fixes

• css: Watch inline CSS files in watch mode  -  by @​sxzz (2051a)
• exports: Sort inlined dependencies by package name  -  by @​sxzz (0ec71)
• publint: Support Yarn v1  -  by @​sxzz (4a291)
• unbundle: Root should be lowest common ancestor of entry files  -  by @​sxzz (f1823)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.