chore(deps): update bundlers

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@rsbuild/core (source)	2.0.6 → 2.0.7
vite (source)	8.0.13 → 8.0.14

---

Release Notes

web-infra-dev/rsbuild (@​rsbuild/core)

v2.0.7

Compare Source

Highlights

Web Worker Query Imports

Rsbuild now supports importing worker scripts with ?worker, ?worker&inline, and ?inline&worker:

import MyWorker from './worker.ts?worker';
import InlineWorker from './worker.ts?worker&inline';

const worker = new MyWorker();
const inlineWorker = new InlineWorker({ name: 'inline-worker' });

Automatic Dependency Externalization

output.autoExternal reads dependencies from the root package.json and generates output.externals rules for matching packages and subpath imports. This is useful for Node.js and SSR bundles where runtime dependencies should stay external.

export default {
  output: {
    target: 'node',
    autoExternal: true,
  },
};

What's Changed

New Features 🎉

• feat: add output.autoExternal for package dependency externalization by @​elecmonkey in #​7638
• feat(core): support worker query imports by @​chenjiahan in #​7675
• feat(core): support import.meta.env.SSR by @​chenjiahan in #​7700
• feat(deps): update @​rspack/core to 2.0.4 by @​chenjiahan in #​7706

Performance 🚀

• perf(CLI): remove process title update by @​chenjiahan in #​7657
• perf(core): reduce CLI startup work by @​chenjiahan in #​7658
• perf(core): skip resource hints when disabled by @​chenjiahan in #​7659
• perf(core): reuse base environment config by @​chenjiahan in #​7663

Bug Fixes 🐞

• fix(deps): update dependency svelte to v5.55.7 [security] by @​renovate[bot] in #​7645
• fix(create-rsbuild): list missing templates in help by @​chenjiahan in #​7654
• fix(deps): update all patch dependencies by @​renovate[bot] in #​7664
• fix(core): clone single merged config by @​chenjiahan in #​7674
• fix(core): inline dynamic imports in inline workers by @​chenjiahan in #​7677
• fix(core): respect worker output filenames by @​chenjiahan in #​7678
• fix(core): support worker query in SSR builds by @​chenjiahan in #​7681
• fix(core): downlevel inline worker wrapper syntax by @​chenjiahan in #​7690
• fix(core): revoke inline worker Blob URL before fallback by @​chenjiahan in #​7693
• fix(core): write rspack logger trace to file by default by @​chenjiahan in #​7707
• fix(core): align rspack trace output path by @​chenjiahan in #​7709

Refactor 🔨

• refactor(core): simplify worker template plugin usage by @​chenjiahan in #​7676

Document 📖

• docs: update agent instructions by @​chenjiahan in #​7646
• docs(plugin-vue): reflect integration with rspack-vue-loader by @​chenjiahan in #​7649
• docs: update JavaScript API references by @​chenjiahan in #​7650
• docs: improve plugin documentation by @​chenjiahan in #​7651
• docs: update create-rsbuild quick start options by @​chenjiahan in #​7652
• docs: correct manifest config type docs by @​chenjiahan in #​7653
• docs: update source include and exclude types by @​chenjiahan in #​7655
• docs: fix config references by @​chenjiahan in #​7656
• docs: improve html option references by @​chenjiahan in #​7661
• docs: correct compiler and server references by @​chenjiahan in #​7662
• docs: clarify JavaScript API behavior by @​chenjiahan in #​7668
• docs: update environment config limitations by @​chenjiahan in #​7670
• docs: update output hash examples by @​chenjiahan in #​7672
• docs: update default behavior references by @​chenjiahan in #​7673
• docs: update Babel exclude example by @​chenjiahan in #​7682
• docs: document worker constructor options by @​chenjiahan in #​7689
• docs: update GitHub Pages action versions by @​chenjiahan in #​7692
• docs: update Web Workers query docs by @​chenjiahan in #​7687
• docs: add Web Workers migration notes by @​chenjiahan in #​7695
• docs: clarify web worker query imports by @​chenjiahan in #​7697
• docs: clarify proxy changeOrigin default by @​chenjiahan in #​7698
• docs(blog): add author list to blog pages by @​elecmonkey in #​7686
• docs(blog): update author name by @​chenjiahan in #​7699
• docs: add import.meta.env.SSR by @​chenjiahan in #​7701
• docs: document custom manifest fields by @​chenjiahan in #​7703
• docs: align documentation anchor IDs by @​chenjiahan in #​7704
• docs: add anchor id skill by @​chenjiahan in #​7705

Other Changes

• chore: add draft release notes skill by @​chenjiahan in #​7642
• chore(deps): update playwright monorepo to v1.60.0 by @​renovate[bot] in #​7643
• test: add inline source map e2e case by @​chenjiahan in #​7644
• chore(deps): update dependency svelte to v5.55.7 [security] by @​renovate[bot] in #​7647
• docs add level option for compression configuration by @​chenjiahan in #​7648
• chore(deps): update dependency @​rstest/adapter-rsbuild to ^0.10.0 by @​renovate[bot] in #​7665
• chore(deps): group rstest renovate updates by @​chenjiahan in #​7669
• chore(deps): update rstest to ^0.10.0 by @​renovate[bot] in #​7671
• chore(skills): update e2e case skill guidance by @​chenjiahan in #​7679
• chore(security): replace issues helper action by @​chenjiahan in #​7683
• chore(security): scope GitHub Actions permissions by job by @​chenjiahan in #​7685
• chore(deps): bump rstack ecosystem ci action by @​chenjiahan in #​7688
• ci: align preview workflow setup-node config by @​chenjiahan in #​7691
• ci: allow ecosystem CI commit comments by @​chenjiahan in #​7694
• test: add public manifest html case by @​chenjiahan in #​7702
• chore(deps): reduce peer dependency installs by @​chenjiahan in #​7708

New Contributors

• @​elecmonkey made their first contribution in #​7638

Full Changelog: web-infra-dev/rsbuild@v2.0.6...v2.0.7

vitejs/vite (vite)

v8.0.14

Compare Source

Features

• update rolldown to 1.0.2 (#​22484) (96efc88)

Bug Fixes

• deps: update all non-major dependencies (#​22471) (98b8163)
• dev: handle errors when sending messages to vite server (#​22450) (e8e9a34)
• html: handle trailing slash paths in transformIndexHtml (#​22480) (5d94d1b)
• optimizer: pass oxc jsx options to transformSync in dependency scan (#​22342) (b3132da)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​22470) (7cb728e)
• remove irrelevant commits from changelog (2c69495)

Code Refactoring

• glob: do not rewrite import path for absolute base (#​22310) (0ae2844)

Tests

• css: sass does not use main field (#​22449) (ebf39a0)

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 11am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@​8.0.14
	@​rsbuild/​core@​2.0.7

View full report