⬆️ deps: Update dependencies (non-major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	24.10.13 → 24.12.0
pnpm (source)	10.30.2 → 10.32.1
rolldown (source)	1.0.0-rc.5 → 1.0.0-rc.10
vitest (source)	4.0.18 → 4.1.0

---

Release Notes

pnpm/pnpm (pnpm)

v10.32.1: pnpm 10.32.1

Compare Source

Patch Changes

• Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #​10909.

Platinum Sponsors

Gold Sponsors

v10.32.0: pnpm 10.32

Compare Source

Minor Changes

• Added --all flag to pnpm approve-builds that approves all pending builds without interactive prompts #​10136.

Patch Changes

• Reverted change related to setting explicitly the npm config file path, which caused regressions.
• Reverted fix related to lockfile-include-tarball-url. Fixes #​10915.

Platinum Sponsors

Gold Sponsors

v10.31.0

Compare Source

v10.30.3

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-rc.10

Compare Source

🚀 Features

• add indentExclusionRanges property to MagicString (#​8746) by @​IWANABETHATGUY
• expose oxcRuntimePlugin (#​8654) by @​sapphi-red
• rust: make bundler generic over FileSystem for in-memory benchmarks (#​8652) by @​Boshen

🐛 Bug Fixes

• rolldown_plugin_vite_dynamic_import_vars: align dynamic import fast check with Vite (#​8760) by @​shulaoda
• renamer: handle existing bindings in nested scopes when finding unique names (#​8741) by @​drewolson
• pass yarn_pnp option where needed (#​8736) by @​sapphi-red
• preserve optional chaining in namespace member expr rewrite (#​8712) by @​Copilot
• correct UTF-16 index handling in native MagicString (#​8693) by @​IWANABETHATGUY
• mark failing doctests as ignore (#​8700) by @​Boshen
• prevent may_partial_namespace from leaking through include_module (#​8682) by @​IWANABETHATGUY
• ci: bump native-build cache key to invalidate stale napi-rs artifacts (#​8678) by @​Boshen
• comments.annotation: false breaking tree-shaking (#​8657) by @​IWANABETHATGUY
• validate filenames for NUL bytes from chunkFileNames/entryFileNames (#​8644) by @​IWANABETHATGUY
• dce-only minify should not set NODE_ENV to production (#​8651) by @​IWANABETHATGUY

🚜 Refactor

• rust: remove dead CrossModuleOptimizationConfig::side_effects_free_function_optimization (#​8673) by @​Dunqing
• rust: simplify cross_module_optimization by removing redundant scope tracking (#​8672) by @​Dunqing
• simplify string repeat in guess_indentor (#​8753) by @​IWANABETHATGUY
• consolidate custom magic-string tests into one file (#​8696) by @​IWANABETHATGUY
• extract CJS bailout checks from include_symbol (#​8683) by @​IWANABETHATGUY
• rust: remove BindingIdentifierExt to use BindingIdentifier::symbol_id() instead (#​8667) by @​Dunqing
• bench: add bench_preset helper and inline presets (#​8658) by @​Boshen
• rust: filter external modules from entries instead of mapping bit positions (#​8637) by @​Dunqing

📚 Documentation

• clarify watch mode behavior and its limitations (#​8751) by @​sapphi-red
• add external link icon to GitHub button in Hero section (#​8731) by @​thisisnkc
• guide: clarify that inject option is only conceptually similar to esbuild's one (#​8743) by @​sapphi-red
• meta/design: add devtools.md (#​8663) by @​hyf0
• add viteplus alpha announcement banner (#​8668) by @​shulaoda

⚡ Performance

• rolldown: some minor perf optimization found by autoresearch (#​8730) by @​Brooooooklyn
• replace Vec allocation with lazy iterator in find_hash_placeholders (#​8703) by @​Boshen
• replace TypedDashMap with TypedMap in CustomField (#​8708) by @​Boshen
• bench: remove scan benchmark binary to halve LTO link time (#​8694) by @​Boshen

🧪 Testing

• watch: increase timeout for error output (#​8766) by @​sapphi-red
• vite-tests: remove JS plugin tests (#​8767) by @​sapphi-red
• watch: add CLI exit code test (#​8752) by @​sapphi-red
• normalize paths on Windows even if resolve.symlinks is false (#​8483) by @​sapphi-red

⚙️ Miscellaneous Tasks

• correct comment in bundle-analyzer-plugin.ts (#​8770) by @​origami-z
• upgrade oxc to 0.120.0 (#​8764) by @​Boshen
• enable all test for reset category in MagicString.test.ts (#​8749) by @​IWANABETHATGUY
• deps: update test262 submodule for tests (#​8742) by @​sapphi-red
• deps: update oxc apps (#​8734) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.1 (#​8724) by @​renovate[bot]
• deps: update npm packages (major) (#​8722) by @​renovate[bot]
• deps: update github-actions (major) (#​8721) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.0 (#​8720) by @​renovate[bot]
• deps: update npm packages (#​8718) by @​renovate[bot]
• deps: update rust crates (#​8717) by @​renovate[bot]
• deps: update github-actions (#​8716) by @​renovate[bot]
• deps: update dependency oxlint-tsgolint to v0.17.0 (#​8713) by @​renovate[bot]
• deps: bump cargo-shear to v1.11.2 (#​8711) by @​Boshen
• use org level CODE_OF_CONDUCT.md (#​8706) by @​sapphi-red
• fix cache key mismatch and remove redundant cache saves (#​8695) by @​Boshen
• deps: update oxc apps (#​8692) by @​renovate[bot]
• deps: update oxc apps (#​8649) by @​renovate[bot]
• should do matrix out side of reusable workflows 2 (#​8691) by @​hyf0
• should do matrix out side of reusable workflows (#​8690) by @​hyf0
• deps: update dependency rolldown-plugin-dts to v0.22.5 (#​8689) by @​renovate[bot]
• upgrade oxc to 0.119.0 and oxc_resolver to 11.19.1 (#​8686) by @​Boshen
• correct if condition of type-check job (#​8677) by @​hyf0
• Gate CI type-check job on node changes (#​8669) by @​Copilot
• benchmark: improve codspeed build (#​8665) by @​Boshen
• deps: update oxc to v0.118.0 (#​8650) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.44.0 (#​8647) by @​renovate[bot]
• deps: update oxc resolver to v11.19.1 (#​8646) by @​renovate[bot]
• deps: update dependency rust to v1.94.0 (#​8648) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.22.4 (#​8645) by @​renovate[bot]

◀️ Revert

• Revert "ci: Gate CI type-check job on node changes" (#​8674) by @​hyf0
• "chore(deps): update dependency rust to v1.94.0 (#​8648)" (#​8660) by @​shulaoda

❤️ New Contributors

• @​origami-z made their first contribution in #​8770
• @​drewolson made their first contribution in #​8741
• @​thisisnkc made their first contribution in #​8731

v1.0.0-rc.9

Compare Source

💥 BREAKING CHANGES

• rename exported BindingMagicString to RolldownMagicString (#​8626) by @​IWANABETHATGUY

🚀 Features

• rolldown: add isRolldownMagicString property for reliable native detection (#​8614) by @​IWANABETHATGUY
• cli: align object type with rollup (#​8598) by @​h-a-n-a

🐛 Bug Fixes

• rust: circular inter-chunk imports when external dynamic imports exist (#​8596) by @​Dunqing
• update minify default docs from false to 'dce-only' (#​8620) by @​shulaoda

💼 Other

• fix early exit in script build-node (#​8617) by @​h-a-n-a

🚜 Refactor

• binding: remove outdated TODO comment in MagicString to_string() (#​8613) by @​IWANABETHATGUY

📚 Documentation

• add viteplus alpha announcement banner (#​8615) by @​mdong1909
• update VitePress theme to 4.8.2 for narrow-screen layout regression (#​8612) by @​Copilot

⚡ Performance

• merge 4 integration test binaries into 1 (#​8610) by @​Boshen

🧪 Testing

• replace heavy filename_with_hash test with targeted hash fixtures (#​8597) by @​Boshen

⚙️ Miscellaneous Tasks

• ci: remove redundant --no-run build step from cargo-test (#​8623) by @​Boshen
• rust: use cargo-shear to toggle Cargo.toml [lib] test = bool (#​8622) by @​Boshen
• deps: update test262 submodule for tests (#​8611) by @​sapphi-red
• skip macOS CI jobs on pull requests (#​8608) by @​Copilot
• add rust cache to repo validation job (#​8607) by @​Boshen
• skip running empty bin test targets (#​8605) by @​Boshen
• skip building examples in cargo-test to reduce build time (#​8603) by @​Boshen
• switch plain workflow checkouts to taiki-e action (#​8601) by @​Boshen
• skip Windows CI jobs on PRs (#​8600) by @​Boshen
• remove unused asset module (#​8594) by @​shulaoda

◀️ Revert

• "docs: add viteplus alpha announcement banner (#​8615)" (#​8616) by @​shulaoda

v1.0.0-rc.8

Compare Source

🚀 Features

• watch: enable full functional fs watcher in wasm (#​8575) by @​hyf0
• watch: expose debounce related options (#​8572) by @​hyf0

🐛 Bug Fixes

• detect new URL(…, import.meta.url) with no-sub template literal (#​8565) by @​char
• devtools: trace dynamic imports in devtools (#​8581) by @​cal-gooo
• watch: rebuild when a previously missing file is created (#​8562) by @​hyf0-agent
• watch: filter out Access events to prevent infinite rebuild loop on Linux (#​8557) by @​hyf0-agent

🚜 Refactor

• watch: remove auto watch for fail imports (#​8585) by @​hyf0
• fs_watcher: unify the way of constructing watcher (#​8571) by @​hyf0
• cli: migrate CLI to CAC (#​8551) by @​h-a-n-a
• switch asset module support from hard-code to builtin plugin (#​8546) by @​hyf0

📚 Documentation

• fix subject-verb agreement in why-bundlers.md (#​8591) by @​brandonzylstra
• maintenance: align release and canary workflow guide (#​8538) by @​minsoo-web
• add format option to directives example config (#​8590) by @​shulaoda
• fix: change twitter to x logo in team (#​8552) by @​mdong1909
• correct composable filter support explanation (#​8550) by @​sapphi-red

⚡ Performance

• testing: share tokio runtime across fixture tests (#​8567) by @​Boshen

🧪 Testing

• hmr: fix infinite loop in dev server test retry logic (#​8576) by @​hyf0-agent
• cli: add more cli-e2e test cases (#​8548) by @​h-a-n-a

⚙️ Miscellaneous Tasks

• docs: update in-depth/directives for output.strict option (#​8535) by @​minsoo-web
• add PNPM_HOME Dev Drive mapping to Windows CI workflows (#​8589) by @​Boshen
• deps: update github-actions (#​8588) by @​renovate[bot]
• move Windows cargo target dir to Dev Drive (#​8586) by @​Boshen
• optimize cache keys to fix race conditions and reduce usage (#​8578) by @​Boshen
• remove WASI build & test pipeline (#​8580) by @​Boshen
• remove unnecessary submodule checkouts (#​8577) by @​Boshen
• use Dev Drive for Windows CI jobs (#​8574) by @​Boshen
• skip redundant native binding build for browser and remove standalone job (#​8573) by @​Boshen
• parallelize Node tests on ubuntu, single Node 24 on macOS/windows (#​8570) by @​Boshen
• docs: bump @​voidzero-dev/vitepress-theme to 4.8.0 (#​8558) by @​crusty-voidzero
• dedupe type-check from dev server workflow (#​8554) by @​Boshen

❤️ New Contributors

• @​brandonzylstra made their first contribution in #​8591
• @​char made their first contribution in #​8565
• @​cal-gooo made their first contribution in #​8581
• @​hyf0-agent made their first contribution in #​8562
• @​h-a-n-a made their first contribution in #​8551

v1.0.0-rc.7

Compare Source

💥 BREAKING CHANGES

• enable minify: 'dce-only' by default (#​8465) by @​IWANABETHATGUY
• settings inlineConst: { mode: 'smart', pass: 1} by default (#​8444) by @​IWANABETHATGUY

🚀 Features

• binding: add original getter to BindingMagicString (#​8533) by @​IWANABETHATGUY
• native-magic-string: add offset property support (#​8531) by @​IWANABETHATGUY
• add output.strict option to control "use strict" directive emission (#​8489) by @​Copilot
• watch: expose watcher.compareContentsForPolling (#​8526) by @​hyf0
• watch: use new watcher to support watch mode (#​8475) by @​hyf0
• rust/watch: handle bulk-change (#​8466) by @​hyf0
• add LLM-friendly markdown output format to bundle analyzer plugin (#​8242) by @​IWANABETHATGUY

🐛 Bug Fixes

• expose plugins on NormalizedInputOptions for buildStart hook (#​8521) by @​Copilot
• only uppercase facade symbols in JSX preserve mode (#​8519) by @​IWANABETHATGUY
• binding: export BindingResult in generated dts header (#​8537) by @​minsoo-web
• pre-resolve paths option to avoid invoke_sync deadlock (#​8518) by @​IWANABETHATGUY
• remove debug-only jsx_preset and UntranspiledSyntaxError (#​8511) by @​IWANABETHATGUY
• apply topLevelVar to exported const/let declarations (#​8507) by @​IWANABETHATGUY
• rolldown_plugin_vite_web_worker_post: avoid replacing new.target (#​8488) by @​sapphi-red
• update copyright year to 2026 (#​8486) by @​maciekzygmunt

🚜 Refactor

• rust: use Oxc's SymbolFlags::ConstVariable instead of custom IsConst flag (#​8543) by @​Dunqing
• rust: remove FacadeScoping, use Scoping::create_symbol for facade symbols (#​8540) by @​Dunqing
• rust/watch: remove hacky reset_closed_for_watch_mode (#​8530) by @​hyf0
• binding: return &str instead of String in filename() getter (#​8534) by @​IWANABETHATGUY
• rust: remove old watch mode implementation (#​8525) by @​hyf0
• rust/watch: simply watch logic in the binding layer (#​8516) by @​hyf0
• rust/watch: tweak struct/function names (#​8464) by @​hyf0

📚 Documentation

• explain how external modules work in rolldown (#​8457) by @​sapphi-red
• add some diagrams using graphviz (#​8499) by @​sapphi-red
• use vitepress-plugin-graphviz (#​8498) by @​sapphi-red
• list s390x/ppc64le prebuilt binaries (#​8495) by @​crusty-voidzero
• fix error type for RolldownBuild.generate and others (#​8490) by @​sapphi-red

⚡ Performance

• string_wizard: reduce allocations and add ASCII fast paths (#​8541) by @​IWANABETHATGUY
• use IndexBitSet to replace IndexVec<XXXIdx, bool> for module/stmt inclusion tracking (#​8503) by @​IWANABETHATGUY
• plugin: use IndexBitSet to optimize skipped plugins checking (#​8497) by @​ShroXd
• rust/tla: skip compute_tla if there is no module use TLA (#​8487) by @​ShroXd

🧪 Testing

• node/watch: make watch tests run in concurrent and retry-able (#​8512) by @​hyf0
• add test case for static flag tree-shaking (#​8476) by @​IWANABETHATGUY
• migrate post-banner sourcemap-with-shebang to Rust (#​8477) by @​Copilot

⚙️ Miscellaneous Tasks

• vscode: formatOnSave for markdown files using oxc formatter (#​8536) by @​minsoo-web
• deps: update test262 submodule for tests (#​8528) by @​sapphi-red
• remove retry workaround from output paths test fixtures (#​8520) by @​Copilot
• docs: add Shuyuan Wang (h-a-n-a) and remove from acknowledgements (#​8509) by @​Copilot
• consolidate top_level_var test cases using configVariants (#​8508) by @​IWANABETHATGUY
• add s390x and ppc64le linux gnu targets (#​8493) by @​Brooooooklyn

◀️ Revert

• fix(rolldown): increase tokio blocking threads size for watch mode (#​8517) by @​hyf0

❤️ New Contributors

• @​minsoo-web made their first contribution in #​8536
• @​crusty-voidzero made their first contribution in #​8495
• @​maciekzygmunt made their first contribution in #​8486

v1.0.0-rc.6

Compare Source

💥 BREAKING CHANGES

• css: remove css_entry_filenames , css_chunk_filenames and related code (#​8402) by @​hyf0
• css: drop builtin CSS bundling to explore alternative solutions (#​8399) by @​hyf0

🚀 Features

• rust/data-url: use hash as id for data url modules to prevent long string overhead (#​8420) by @​hyf0
• validate bundle stays within output dir (#​8441) by @​sapphi-red
• rust: support PluginOrder::PinPost (#​8417) by @​hyf0
• support ModuleType:Copy (#​8407) by @​hyf0
• expose ESTree types from rolldown/utils (#​8400) by @​sapphi-red

🐛 Bug Fixes

• incorrect sourcemap when postBanner/postFooter is used with shebang (#​8459) by @​Copilot
• resolver: disable node_path option to align ESM resolver behavior (#​8472) by @​sapphi-red
• parse .js within "type": "commonjs" as ESM for now (#​8470) by @​sapphi-red
• case-insensitive filename conflict detection for chunk deduplication (#​8458) by @​Copilot
• prevent inlining CJS exports that are mutated by importers (#​8456) by @​IWANABETHATGUY
• parse .cjs / .cts / .js within "type": "commonjs" as CommonJS (#​8455) by @​sapphi-red
• plugin/copy-module: correct hooks' priority (#​8423) by @​hyf0
• plugin/chunk-import-map: ensure render_chunk_meta run after users plugin (#​8422) by @​hyf0
• rust: correct hooks order of DataUriPlugin (#​8418) by @​hyf0
• jsx.preserve should also considering tsconfig json preserve (#​8324) by @​IWANABETHATGUY
• deferred_scan_data.rs "Should have resolved id: NotFound" error (#​8379) by @​sapphi-red
• cli: require value for --dir/-d and --file/-o (#​8378) by @​Copilot
• dev: avoid mutex deadlock caused by inconsistent lock order (#​8370) by @​sapphi-red

🚜 Refactor

• watch: rename TaskStart/TaskEnd to BundleStart/BundleEnd (#​8463) by @​hyf0
• rust: rename rolldown_plugin_data_uri to rolldown_plugin_data_url (#​8421) by @​hyf0
• bindingify-build-hook: extract helper for PluginContextImpl (#​8438) by @​ShroXd
• give source loading a proper name (#​8436) by @​IWANABETHATGUY
• ban holding DashMap refs across awaits (#​8362) by @​sapphi-red

📚 Documentation

• add glob pattern usage example to input option (#​8469) by @​IWANABETHATGUY
• remove https://rolldown.rs from links in reference docs (#​8454) by @​sapphi-red
• mention execution order issue in output.codeSplitting docs (#​8452) by @​sapphi-red
• clarify output.comments behavior a bit (#​8451) by @​sapphi-red
• replace npmjs package links with npmx.dev (#​8439) by @​Boshen
• reference: add Exported from for values / types exported from subpath exports (#​8394) by @​sapphi-red
• add JSDocs for APIs exposed from subpath exports (#​8393) by @​sapphi-red
• reference: generate reference pages for APIs exposed from subpath exports (#​8392) by @​sapphi-red
• avoid pipe character in codeSplitting example to fix broken rendering (#​8391) by @​IWANABETHATGUY

⚡ Performance

• avoid redundant PathBuf allocations in resolve paths (#​8435) by @​Brooooooklyn
• bump to sugar_path@2 (#​8432) by @​hyf0
• use flag-based convergence detection in include_statements (#​8412) by @​Brooooooklyn

🧪 Testing

• execute _test.mjs even if executeOutput is false (#​8398) by @​sapphi-red
• add retry to tree-shake/module-side-effects-proxy4 as it is flaky (#​8397) by @​sapphi-red
• avoid expect.assertions() as it is not concurrent test friendly (#​8383) by @​sapphi-red
• disable mockReset option (#​8382) by @​sapphi-red
• fix flaky failure caused by concurrent resolveId calls (#​8381) by @​sapphi-red

⚙️ Miscellaneous Tasks

• deps: update dependency rollup to v4.59.0 [security] (#​8471) by @​renovate[bot]
• ai/design: add design doc about watch mode (#​8453) by @​hyf0
• deps: update oxc resolver to v11.19.0 (#​8461) by @​renovate[bot]
• ai: introduce progressive spec-driven development pattern (#​8446) by @​hyf0
• deprecate output.legalComments (#​8450) by @​sapphi-red
• deps: update dependency oxlint-tsgolint to v0.15.0 (#​8448) by @​renovate[bot]
• ai: make CLAUDE.md a symlink of AGENTS.md (#​8445) by @​hyf0
• deps: update rollup submodule for tests to v4.59.0 (#​8433) by @​sapphi-red
• deps: update test262 submodule for tests (#​8434) by @​sapphi-red
• deps: update oxc to v0.115.0 (#​8430) by [@​renovate](https:

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.