chore(deps): lock file maintenance npm packages #229

renovate · 2025-08-10T21:23:45Z

This PR contains the following updates:

Package	Type	Update	Change
		lockFileMaintenance	All locks refreshed
@napi-rs/tar	devDependencies	patch	`1.0.0` -> `1.0.1`
@napi-rs/wasm-runtime (source)	devDependencies	patch	`1.0.1` -> `1.0.3`
@nestjs/common (source)	devDependencies	patch	`11.1.5` -> `11.1.6`
@nestjs/core (source)	devDependencies	patch	`11.1.5` -> `11.1.6`
@nestjs/platform-express (source)	devDependencies	patch	`11.1.5` -> `11.1.6`
@swc/core (source)	devDependencies	patch	`1.13.2` -> `1.13.3`
@types/node (source)	devDependencies	minor	`24.1.0` -> `24.2.1`
@types/react (source)	devDependencies	patch	`19.1.8` -> `19.1.9`
@types/react-dom (source)	devDependencies	patch	`19.1.6` -> `19.1.7`
core-js (source)	devDependencies	minor	`3.44.0` -> `3.45.0`
react (source)	devDependencies	patch	`19.1.0` -> `19.1.1`
react-dom (source)	devDependencies	patch	`19.1.0` -> `19.1.1`
lint-staged	devDependencies	patch	`16.1.2` -> `16.1.5`
oxlint (source)	devDependencies	minor	`1.8.0` -> `1.11.1`
rolldown (source)	devDependencies	patch	`1.0.0-beta.29` -> `1.0.0-beta.31`
typescript (source)	devDependencies	minor	`5.8.3` -> `5.9.2`
pnpm (source)	packageManager	minor	`10.13.1` -> `10.14.0`

🔧 This Pull Request updates lock files to use the latest dependency versions.

Release Notes

napi-rs/tar (@napi-rs/tar)

`v1.0.1`

Compare Source

What's Changed

chore: bump up @oxc-node/core version to ^0.0.30 by @renovate[bot] inhttps://github.com/napi-rs/tar/pull/833
ci: replace unmaintained goto-bus-stop/setup-zig with mlugg/setup-zig by @Copilot in https://github.com/napi-rs/tar/pull/85
chore: bump up actions/download-artifact action to v5 by @renovate[bot] inhttps://github.com/napi-rs/tar/pull/866
chore: bump up @oxc-node/core version to ^0.0.32 by @renovate[bot] inhttps://github.com/napi-rs/tar/pull/877
chore: upgrade deps by @Brooooooklyn in https://github.com/napi-rs/tar/pull/88

New Contributors

@Copilot made their first contribution in https://github.com/napi-rs/tar/pull/85

Full Changelog: napi-rs/tar@v1.0.0...v1.0.1

napi-rs/napi-rs (@napi-rs/wasm-runtime)

What's Changed

fix(wasm-runtime): add constructors for nested values in objects by @CPunisher in https://github.com/napi-rs/napi-rs/pull/2827
fix(wasm-runtime): avoid wasm-util from tree shaking by rollup by @Brooooooklyn in https://github.com/napi-rs/napi-rs/pull/2810

Full Changelog: https://github.com/napi-rs/napi-rs/compare/napi-v3.1.6...[@napi-rs/wasm-runtime](https://redirect.github.com/napi-rs/wasm-runtime)@1.0.2

nestjs/nest (@nestjs/common)

`v11.1.6`

Compare Source

v11.1.6 (2025-08-07)

Bug fixes

core
- #15504 fix(core): fix race condition in class dependency resolution from imported modules (@hajekjiri)
- #15469 fix(core): attach root inquirer for nested transient providers (@kamilmysliwiec)
microservices
- #15508 fix(microservices): report correct buffer length in exception (@kim-sung-jee)
- #15492 fix(microservices): fix kafka serilization of class instances (@LeonBiersch)

Dependencies

platform-fastify
- #15493 chore(deps): bump @fastify/cors from 11.0.1 to 11.1.0 (@dependabot[bot])

Committers: 6

Jiri Hajek (@hajekjiri)
Kamil Mysliwiec (@kamilmysliwiec)
Leon Biersch (@LeonBiersch)
Seongjee Kim (@kim-sung-jee)
@premierbell
pTr (@ptrgits)

swc-project/swc (@swc/core)

`v1.13.3`

Compare Source

Bug Fixes

(es/minifier) Check exported when optimize last expr (#10939) (f6f15f3)
(es/minifier) Disallow types (#10945) (63172ef)
(es/minifier) Don't optimize Number properties when Number is shadowed (#10947) (40a1e2e)
(es/minifier) Fix cycle detection (#10950) (212d8bc)
(es/parser) Correctly handle EOF position (#10934) (dd70fbd)

Performance

(es/minifier) Remove visitor of CharFreqAnalyzer (#10928) (65534ff)
(es/minifier) Remove pre-compress pass (#10932) (c7f0e4d)
(es/minifier) Use bitflag for var kind (#10940) (4317988)
(es/minifier) Remove needless clone (#10949) (b5e5e8c)
(es/parser) Reduce comparison (#10933) (e44fbd4)
(es/parser) Reduce comparison (#10941) (a262eeb)

zloirock/core-js (core-js)

`v3.45.0`

Compare Source

Changes v3.44.0...v3.45.0 (70 commits)
Uint8Array to / from base64 and hex proposal:
- Built-ins:
  - Uint8Array.fromBase64
  - Uint8Array.fromHex
  - Uint8Array.prototype.setFromBase64
  - Uint8Array.prototype.setFromHex
  - Uint8Array.prototype.toBase64
  - Uint8Array.prototype.toHex
- Moved to stable ES, July 2025 TC39 meeting
- Added es. namespace modules, /es/ and /stable/ namespaces entries
- Added detection of a Webkit bug: Uint8Array fromBase64 / setFromBase64 does not throw an error on incorrect length of base64 string
Math.sumPrecise proposal:
- Built-ins:
  - Math.sumPrecise
- Moved to stable ES, July 2025 TC39 meeting
- Added es. namespace module, /es/ and /stable/ namespaces entries
Iterator sequencing proposal:
- Built-ins:
  - Iterator.concat
- Moved to stage 3, July 2025 TC39 meeting
- Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
Map upsert proposal:
- Built-ins:
  - Map.prototype.getOrInsert
  - Map.prototype.getOrInsertComputed
  - WeakMap.prototype.getOrInsert
  - WeakMap.prototype.getOrInsertComputed
- Moved to stage 3, July 2025 TC39 meeting
- Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
Added missing dependencies to some entries of static Iterator methods
Fixed Joint Iteration proposal in /stage/ entries
Compat data improvements:
- Uint8Array to / from base64 and hex proposal features marked as supported from V8 ~ Chromium 140
- Uint8Array.{ fromBase64, prototype.setFromBase64 } marked as unsupported in Safari and supported only from Bun 1.2.20 because of a bug: it does not throw an error on incorrect length of base64 string
- %TypedArray%.prototype.with marked as fixed in Safari 26.0
- Updated Electron 38 compat data mapping
- Added Opera Android 91 compat data mapping

facebook/react (react)

`v19.1.1`

Compare Source

facebook/react (react-dom)

`v19.1.1`

Compare Source

lint-staged/lint-staged (lint-staged)

`v16.1.5`

Compare Source

Patch Changes

#1608 4e3ce22 Thanks @srsatt! - Detect the git repo's top-level directory correctly when in a worktree.

`v16.1.4`

Compare Source

Patch Changes

#1604 90b37b0 Thanks @iiroj! - Add another types field to package.json to make even more sure NPM detects that lint-staged includes built-in TypeScript type definitions.

`v16.1.3`

Compare Source

Patch Changes

#1602 7ea700b Thanks @dword-design! - Add the types field to package.json to make sure NPM detects lint-staged includes built-in TypeScript type definitions.

oxc-project/oxc (oxlint)

`v1.11.1`

Compare Source

🐛 Bug Fixes

8c57153 npm/oxlint: Fix oxlint-tsgolint version range for yarn (Boshen)

🚜 Refactor

238b183 linter: Use fast-glob instead of globset for GlobSet (#12870) (shulaoda)

`v1.11.0`

Compare Source

🚀 Features

ac46347 oxlint: Add tsgolint integration (#12485) (camchenry)

`v1.10.0`

Compare Source

🚀 Features

9b35600 linter/jsx-a11y: Add support for mapped attributes in label association checks (#12805) (camc314)

`v1.9.0`

Compare Source

🚜 Refactor

bea652f linter: Add vue and regex to BuiltinLintPlugins (#12542) (Sysix)

rolldown/rolldown (rolldown)

`v1.0.0-beta.31`

Compare Source

🚀 Features

support function for asset_inline_limit (#5453) by @AliceLanniste
hmr: generate initializer for export * from ... (#5577) by @hyf0
hmr: remove meaningless stmt instead of replacing with empty stmt (#5570) by @hyf0
option watch.clearScreen (#5518) by @situ2001
rolldown: oxc v0.80.0 (#5538) by @Boshen
plugin/generateBundle: add support for modifying chunk filename (#5564) by @shulaoda
assetFileNames: support name and originalFileName (#5555) by @shulaoda
add optional onInvalidate schema to validator (#5528) by @situ2001
don't throw resolve errors for dynamic import inside try block (#5537) by @shulaoda
rolldown: oxc v0.79.0 (#5512) by @Boshen
rolldown_plugin_asset: align render_chunk logic (#5511) by @shulaoda
rolldown_plugin_utls: finish render_asset_url_in_js (#5508) by @shulaoda
rolldown_plugin_utils: align replacement logic for __VITE_ASSET__ (#5507) by @shulaoda
rolldown_plugin_utils: add partial render_asset_url_in_js support (#5504) by @shulaoda
expose sourcemapBaseUrl from NormalizedOutputOptions (#5513) by @sapphi-red

🐛 Bug Fixes

modify output filename correctly in generateBundle and writeBundle (#5580) by @shulaoda
hmr: ensure correct runtime behavior for export * from ... (#5578) by @hyf0
hmr: repeated imports should point to the same binding (#5571) by @hyf0
hmr: handle export * from ... (#5566) by @hyf0
rolldown_plugin_web_worker_post: handle import.meta correctly (#5565) by @shulaoda
antd bundle output not correct (#5549) by @IWANABETHATGUY
hmr: module namespace object should be included via treeshaking mechanism normally (#5543) by @hyf0
plugin/vite-resolve: use import / require conditions for external modules resolution (#5540) by @sapphi-red
rolldown_plugin_asset: InvalidAsset#is should match InvalidAsset::True (#5529) by @AliceLanniste
__name lacks require('./chunk-containing-runtime') when format: 'cjs' + keepNames: true (#5526) by @IWANABETHATGUY
plugin/vite-resolve: resolve externalized packages with resolve.externalConditions (#5491) by @sapphi-red
optimization.inlineConst: true does not keep export names when output.minifyInternalExports: true is enabled (#5520) by @IWANABETHATGUY
scanner: identify module.exports.__esModule = true (#5503) by @overlookmotel
error instead of panic if sourcemapBaseUrl is an invalid URL (#5514) by @sapphi-red

🚜 Refactor

hmr: use __rolldown_exports__ as the name for esm module namespace object (#5579) by @hyf0
tests: rename _configName to _testName in configuration files and update variant formatting in snapshots (#5569) by @hyf0
rolldown: remove unnecessary comments (#5552) by @situ2001
rolldown: Remove rolldown_rstr crate and use CompactStr directly (#5542) by @Copilot
hide namespace statement index knowledge inside StmtInfos (#5545) by @sapphi-red
use pascal case when naming bitflags field for ImportRecordMeta (#5539) by @IWANABETHATGUY
use concat_string! to simplify string concatenation (#5527) by @IWANABETHATGUY
use combinator function handle sourcemap_base_url parsing (#5517) by @IWANABETHATGUY
rolldown_plugin_utils: improve to_output_file_path_in_js (#5505) by @shulaoda

📚 Documentation

wording nit (#5521) by @nullxone

🧪 Testing

rust: rename configName to _configName and add comments (#5568) by @hyf0
rust: re-organize rolldown_testing_config (#5567) by @hyf0

⚙️ Miscellaneous Tasks

deps: lock file maintenance npm packages (#5582) by @renovate[bot]
deps: lock file maintenance (#5581) by @renovate[bot]
deps: lock file maintenance rust crates (#5576) by @renovate[bot]
deps: lock file maintenance npm packages (#5574) by @renovate[bot]
deps: update github-actions (#5573) by @renovate[bot]
deps: update dependency rolldown-plugin-dts to v0.15.1 (#5572) by @renovate[bot]
deps: update dependency tsdown to v0.13.2 (#5562) by @renovate[bot]
deps: update dependency rolldown-plugin-dts to ^0.15.0 (#5563) by @renovate[bot]
ai: Add AGENTS.md and GitHub Copilot setup workflow (#5556) by @Copilot
deps: update dependency tsdown to v0.13.1 (#5551) by @renovate[bot]
deps: update dependency rolldown-plugin-dts to v0.14.3 (#5544) by @renovate[bot]
ensure all diagnostics in self.errors have Severity::Error (#5494) by @sapphi-red
vscode: remove code-spell-checker extension (#5530) by @shulaoda
deps: update dependency rolldown-plugin-dts to v0.14.2 (#5522) by @renovate[bot]
add link to the REPL in the reproduction field description (#5519) by @sapphi-red
enable some rollup tests (#5515) by @sapphi-red

❤️ New Contributors

@Copilot made their first contribution in #5556
@nullxone made their first contribution in #5521

`v1.0.0-beta.30`

Compare Source

💥 BREAKING CHANGES

rolldown: remove unfinished module federation support (#5471) by @Boshen
disable strictExecutionOrder by default (#5436) by @hyf0

🚀 Features

hmr: multiple changes should result to multiple updates (#5500) by @hyf0
binding: add memory adjustment hint in fn write (#5375) by @Brooooooklyn
store sideEffects information about global var access (#5495) by @IWANABETHATGUY
merge side effects detail (#5486) by @IWANABETHATGUY
plugin/vite-resolve: add warn / debug logs (#5476) by @sapphi-red
plugin/vite-resolve: avoid wrapping errors with napi errors (#5483) by @sapphi-red
add this.fs support (#5475) by @sapphi-red
rolldown_plugin_asset: align generate_bundle logic (#5480) by @shulaoda
hmr: prepare to launch that batched edits should result to multiple hmr output (#5458) by @hyf0
hmr: support import.meta.hot.invalidate (#5457) by @hyf0
mark all toESM as pure (#5461) by @IWANABETHATGUY
rolldown_plugin_asset: align load hook logic (#5452) by @shulaoda
rolldown_plugin_utils: align file_to_built_url (#5450) by @shulaoda
rolldown_plugin_utils: align should_inline logic (#5308) by @AliceLanniste
rolldown_plugin_asset: add partial file_to_built_url support (#5445) by @shulaoda
expose optimization.pifeForModuleWrappers option (#5433) by @sapphi-red
add optimization.pifeForModuleWrappers option (#5432) by @sapphi-red
use PIFE for callback passed to createCjsInitializer (#5427) by @sapphi-red
use PIFE for callbacks passed to __commonJSMin / _commonJS wrapper (#5426) by @sapphi-red
use PIFE for callback passed to createEsmInitializer (#5425) by @sapphi-red
use PIFE for callbacks passed to __esm wrapper (#5424) by @sapphi-red
use PIFE for callbacks passed to __esmMin wrapper (#5319) by @sapphi-red
rolldown: oxc v0.78.0 (#5421) by @Boshen
rolldown: support output.sourcemapBaseUrl (#5413) by @situ2001
mark all __commonJS CallExpression as Pure (#5419) by @IWANABETHATGUY
rolldown_plugin_alias: warn if alias resolves to non-absolute path (#5417) by @shulaoda
rolldown_plugin_asset: align encode_uri_path logic (#5410) by @shulaoda
add warning and conversion for import.meta for non-esm output format (#5378) by @7086cmd

🐛 Bug Fixes

use uuid_v4 to generate unique id for hook calls (#5501) by @hyf0
modules that are sideeffect free but relies on the execution order is not wrapped (#5498) by @IWANABETHATGUY
missing_export warning should not be an hard error (#5493) by @sapphi-red
cli: remove unnecessary await (#5487) by @situ2001
browser: stub fs/promises for browser build (#5484) by @sapphi-red
indirect requiring external module is not wrapped by __toESM in cjs format (#5454) by @IWANABETHATGUY
Panic on reexport external module in CJS format (#5430) by @IWANABETHATGUY
handle top-level return statements in CommonJS modules (#5437) by @hyf0
panic when using preserveModules: true and certain dependencies (#5415) by @IWANABETHATGUY
rolldown_plugin_alias: only replace the first matched alias (#5412) by @shulaoda
canonical name not found panic happens with treeshake.commonjs=true (#5409) by @IWANABETHATGUY
hmr: shouldn't consider self-accepting module as hmr boundary for its importee (#5405) by @hyf0
hmr: should detect hmr boundary correctly (#5400) by @hyf0
optimization.inlineConst: true generates invalid code when importing a module statically and dynamically (#5398) by @IWANABETHATGUY
top level VarDeclaration is not hoisted when wrapped in __esm (#5396) by @IWANABETHATGUY

🚜 Refactor

use pascal case when naming bitflags field (#5497) by @IWANABETHATGUY
test/hmr: use sensible time to wait (#5490) by @hyf0
hmr: update message types to use 'hmr:update' (#5489) by @hyf0
hmr: replace HmrOutput with HmrUpdate (#5488) by @hyf0
node/hmr: re-organize file structures (#5485) by @hyf0
rolldown_plugin_utils: improve asset_to_data_url (#5481) by @shulaoda
replace pattern match for SideEffectsDetail with bitflags api (#5479) by @IWANABETHATGUY
rename stmtSideEffect to SideEffectDetail (#5478) by @IWANABETHATGUY
use bitflags store more details about side effects (#5477) by @IWANABETHATGUY
node/hmr: tweak package test-dev-server (#5462) by @hyf0
hmr: tweak naming and add comments (#5459) by @hyf0
test/hmr: remove hard-code edited content (#5189) by @hyf0
rust: make Log#code an Option (#5416) by @shulaoda
hmr: should mark self-accept module correctly (#5406) by @hyf0
hmr: remove unnecessary data during propagate_update (#5402) by @hyf0
hmr: make hmr patch output less changeable (#5401) by @hyf0
__esm top level bindings hoisted (#5397) by @IWANABETHATGUY
skip fast in esm format when transform import.meta (#5395) by @IWANABETHATGUY

📚 Documentation

clarify rolldown-rollup behavior difference around output generation (#5439) by @sapphi-red

⚡ Performance

reduce runtime symbol memory usage and hashtable lookup (#5460) by @IWANABETHATGUY

🧪 Testing

hmr: support to run mutiple test fixtures (#5456) by @hyf0
basic tests for optimization.pifeForModuleWrappers (#5435) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update github-actions (#5509) by @renovate[bot]
debug: update default session ID to meaningful unknown-session (#5502) by @hyf0
deps: update dependency rolldown-plugin-dts to v0.14.2 (#5492) by @renovate[bot]
auto generated runtime_helper bitflags (#5474) by @IWANABETHATGUY
fix wasi build failed (#5470) by @IWANABETHATGUY
deps: lock file maintenance (#5467) by @renovate[bot]
deps: lock file maintenance (#5466) by @renovate[bot]
deps: lock file maintenance rust crates (#5465) by [@renovate](https://redirect.g

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): lock file maintenance npm packages

ca1b3ad

renovate bot enabled auto-merge (squash) August 10, 2025 21:23

renovate bot merged commit 0567f7e into main Aug 10, 2025
57 checks passed

renovate bot deleted the renovate/npm-packages branch August 10, 2025 21:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): lock file maintenance npm packages #229

chore(deps): lock file maintenance npm packages #229

Uh oh!

renovate bot commented Aug 10, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): lock file maintenance npm packages #229

chore(deps): lock file maintenance npm packages #229

Uh oh!

Conversation

renovate bot commented Aug 10, 2025

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v11.1.6 (2025-08-07)

Bug fixes

Dependencies

Committers: 6

Bug Fixes

Performance

Patch Changes

Patch Changes

Patch Changes

🐛 Bug Fixes

🚜 Refactor

🚀 Features

🚀 Features

🚜 Refactor

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant