chore(deps): update all patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@fastify/middie	^8.3.1 -> ^8.3.3
@rsbuild/core (source)	^1.0.1 -> ^1.0.4
@rsbuild/core (source)	1.0.1 -> 1.0.4
@rsbuild/plugin-react (source)	^1.0.1 -> ^1.0.2
@rsbuild/plugin-react (source)	1.0.1 -> 1.0.2
@rsbuild/plugin-umd	^1.0.1 -> ^1.0.2
@rspack/cli (source)	^1.0.3 -> ^1.0.5
@rspack/cli (source)	1.0.3 -> 1.0.5
@rspack/core (source)	^1.0.3 -> ^1.0.5
@rspack/core (source)	1.0.3 -> 1.0.5
@types/jest (source)	^29.5.12 -> ^29.5.13
@types/react (source)	^18.3.5 -> ^18.3.6
eslint (source)	^8.57.0 -> ^8.57.1
postcss (source)	8.4.45 -> 8.4.47
postcss (source)	^8.4.45 -> ^8.4.47
tailwindcss (source)	^3.4.10 -> ^3.4.11
tailwindcss (source)	4.0.0-alpha.23 -> 4.0.0-alpha.24

---

Release Notes

fastify/middie (@​fastify/middie)

v8.3.3

Compare Source

Security

• path-to-regexp is updated to 6.3.0 to prevent ReDOS attack, it is recommended to use the latest version of this package.

What's Changed

• fix(8.x): use path-to-regexp@6.3.0 by @​climba03003 in https://github.com/fastify/middie/pull/215

Full Changelog: fastify/middie@v8.3.2...v8.3.3

v8.3.2

Compare Source

Deprecated

This version includes too much breaking change due to security patch. Please upgrade to version 8.3.3 which includes the security patch with minimal breakages.

Security

• path-to-regexp is updated to 8.1.0 to prevent ReDOS attack, it is recommended to use the latest version of this package.

You may see some unexpected breaking due the security patch. Here is the workaround,

1. when you are using wildcard *, you must to provides a param name.

// before
fastify.use('*.css')
// after
fastify.use('*filename{.css}')

What's Changed

• chore(8.x): bump path-to-regexp to 8.1.0 by @​climba03003 in https://github.com/fastify/middie/pull/213

Full Changelog: fastify/middie@v8.3.1...v8.3.2

web-infra-dev/rsbuild (@​rsbuild/core)

v1.0.4

Compare Source

What's Changed

Bug Fixes 🐞

• fix: should format printed url when htmlPath startsWith ./ by @​9aoy in https://github.com/web-infra-dev/rsbuild/pull/3480

Full Changelog: web-infra-dev/rsbuild@v1.0.3...v1.0.4

v1.0.3

Compare Source

What's Changed

New Features 🎉

• feat(create-rsbuild): create an emptry public folder by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3454
• feat(core): warn leading slash for output.distPath.html and default to ./ by @​wjw99830 in https://github.com/web-infra-dev/rsbuild/pull/3462
• feat(deps): bump Rspack v1.0.5 by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3477

Bug Fixes 🐞

• fix: allow to configure dev.hmr in environments by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3446
• fix(plugin-react): allow configuring tools.swc to override react runtime by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3449
• fix: set resolve.tsConfig by rspack-chain by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3466
• fix(type): eco-ci fail of watching close callback type by @​SoonIter in https://github.com/web-infra-dev/rsbuild/pull/3470

Document 📖

• docs: correct public folder example by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3455
• docs: remove non-existent utils variable in rspack config by @​Draculabo in https://github.com/web-infra-dev/rsbuild/pull/3456
• docs: server open priority by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3459
• docs: update outdated glossary by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3464
• docs(guide): fix improper punctuation in Chinese guide by @​miownag in https://github.com/web-infra-dev/rsbuild/pull/3465
• docs(plugin-svgr): correct named export guide by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3469

Other Changes

• chore: fix type for eco CI by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3472
• chore(deps): update rspress to v1.31.0 by @​renovate in https://github.com/web-infra-dev/rsbuild/pull/3473

New Contributors

• @​Draculabo made their first contribution in https://github.com/web-infra-dev/rsbuild/pull/3456
• @​miownag made their first contribution in https://github.com/web-infra-dev/rsbuild/pull/3465
• @​wjw99830 made their first contribution in https://github.com/web-infra-dev/rsbuild/pull/3462

Full Changelog: web-infra-dev/rsbuild@v1.0.2...v1.0.3

v1.0.2

Compare Source

What's Changed

New Features 🎉

• feat(deps): bump Rspack v1.0.4 by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3443
• feat(plugin-stylus): support define option by @​shulaoda in https://github.com/web-infra-dev/rsbuild/pull/3434

Bug Fixes 🐞

• fix(plugin-webpack-swc): @​swc/helpers version requires at least 0.5.13 by @​9aoy in https://github.com/web-infra-dev/rsbuild/pull/3436
• fix(create-rsbuild): eslint-plugin-react-hooks version conflict by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3441

Document 📖

• docs: fix typo in 1.0 announcement by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3432
• docs: add example for merging Rspack config by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3437
• docs(plugin-stylus): update StylusOptions by @​shulaoda in https://github.com/web-infra-dev/rsbuild/pull/3439
• docs: add recommended PostCSS plugins when not using Lightning CSS by @​chenjiahan in https://github.com/web-infra-dev/rsbuild/pull/3442

New Contributors

• @​shulaoda made their first contribution in https://github.com/web-infra-dev/rsbuild/pull/3434

Full Changelog: web-infra-dev/rsbuild@v1.0.1...v1.0.2

rspack-contrib/rsbuild-plugin-umd (@​rsbuild/plugin-umd)

v1.0.2

Compare Source

What's Changed

• feat: support register umd plugin as environment plugin by @​9aoy in https://github.com/rspack-contrib/rsbuild-plugin-umd/pull/6
• chore(CI): add release workflow by @​chenjiahan in https://github.com/rspack-contrib/rsbuild-plugin-umd/pull/7

New Contributors

• @​9aoy made their first contribution in https://github.com/rspack-contrib/rsbuild-plugin-umd/pull/6

Full Changelog: rstackjs/rsbuild-plugin-umd@v1.0.1...v1.0.2

web-infra-dev/rspack (@​rspack/cli)

v1.0.5

Compare Source

What's Changed

Bug Fixes 🐞

• fix(external_module): use "const" if supported when concatenation by @​fi3ework in https://github.com/web-infra-dev/rspack/pull/7836
• fix(create-rspack): eslint-plugin-react-hooks version conflict by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7854
• fix: remove LightningCssMinimizerRspackPlugin exclude option default value by @​noshower in https://github.com/web-infra-dev/rspack/pull/7811
• fix: trusted type with devtool eval by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7866
• fix: do not use affected for side-effects-flag-plugin by @​JSerFeng in https://github.com/web-infra-dev/rspack/pull/7865
• fix: should forward sourcemaps for refresh loaders by @​h-a-n-a in https://github.com/web-infra-dev/rspack/pull/7872
• fix: should provide full error message with error name when hideStack is set to true by @​h-a-n-a in https://github.com/web-infra-dev/rspack/pull/7867

Document Updates 📖

• docs: add NIO logo at built with rspack by @​littleVege in https://github.com/web-infra-dev/rspack/pull/7856
• docs: add clarification to loader this.callback usage by @​h-a-n-a in https://github.com/web-infra-dev/rspack/pull/7855
• docs: remove disableTransformByDefault by @​9aoy in https://github.com/web-infra-dev/rspack/pull/7863
• docs: add sources JavaScript API by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7876
• docs: update slogan for who is using by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7881
• docs: add ABB logo at built with rspack by @​VugarAhmadov in https://github.com/web-infra-dev/rspack/pull/7880
• docs: add sequoia logo at who is using by @​ibuli in https://github.com/web-infra-dev/rspack/pull/7882
• docs: add getaround logo at who is using by @​CPatchane in https://github.com/web-infra-dev/rspack/pull/7883

Other Changes

• ci: remove firefox by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7857
• refactor(types): remove @​ts-expect-error in Compiler and MultiCompiler by @​SoonIter in https://github.com/web-infra-dev/rspack/pull/7824
• test(dev-server): enable dev server test cases by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7861
• test(dev-sever): add e2e test cases part 2 by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7829
• test(dev-sever): add e2e test cases part 3 by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7833
• chore: remove "rust-analyzer.checkOnSave" of VS Code by @​fi3ework in https://github.com/web-infra-dev/rspack/pull/7874
• test: disable unstable dev server snapshot case by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7877
• refactor: css-extract using parseMeta to store css info by @​JSerFeng in https://github.com/web-infra-dev/rspack/pull/7878

New Contributors

• @​littleVege made their first contribution in https://github.com/web-infra-dev/rspack/pull/7856
• @​VugarAhmadov made their first contribution in https://github.com/web-infra-dev/rspack/pull/7880
• @​ibuli made their first contribution in https://github.com/web-infra-dev/rspack/pull/7882
• @​CPatchane made their first contribution in https://github.com/web-infra-dev/rspack/pull/7883

Full Changelog: web-infra-dev/rspack@v1.0.4...v1.0.5

v1.0.4

Compare Source

What's Changed

Exciting New Features 🎉

• feat(modern-module): make dynamic import runtime-less by @​fi3ework in https://github.com/web-infra-dev/rspack/pull/7759
• feat(core): use dyn output_filesystem by @​hardfist in https://github.com/web-infra-dev/rspack/pull/7817
• feat: remove ErrorSpan in dependency trait by @​shulaoda in https://github.com/web-infra-dev/rspack/pull/7841
• feat: support context for resolve and resolveWeak by @​inottn in https://github.com/web-infra-dev/rspack/pull/7832
• feat: make namedChunkGroups iterable by @​inottn in https://github.com/web-infra-dev/rspack/pull/7840

Bug Fixes 🐞

• fix(core): try fix EBUSY problem in windows ci by @​hardfist in https://github.com/web-infra-dev/rspack/pull/7803
• fix(core): fix resolve faild when do recursive symbol link by @​hardfist in https://github.com/web-infra-dev/rspack/pull/7744
• fix: overflow panic when shifting left value greater then 31 by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7792
• fix: remove HotUpdateChunk in chunks by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7810
• fix: should not transform source to buffer by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7821
• fix: change javascript parser options in child compiler by @​ahabhgk in https://github.com/web-infra-dev/rspack/pull/7812
• fix(loader-runner): remove legacy Node compatible code by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7818
• fix: improve stats string for match resource with long data url by @​ahabhgk in https://github.com/web-infra-dev/rspack/pull/7823
• fix: duplicate emit source map from child compiler by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7847
• fix: loader intermediate data should be overridden between loaders by @​h-a-n-a in https://github.com/web-infra-dev/rspack/pull/7846

Document Updates 📖

• docs: add tip for import.meta.webpackContext literal by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7815
• docs: fix typo in zh docs by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7820

Other Changes

• ci: clean node_modules and target by @​SyMind in https://github.com/web-infra-dev/rspack/pull/7299
• chore(workflow): correct rspack action scope by @​chenjiahan in https://github.com/web-infra-dev/rspack/pull/7825
• test: ignore snapshot obsolete warnings while using -t by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7835
• chore(infra): remove eslint configs by @​shulaoda in https://github.com/web-infra-dev/rspack/pull/7842
• test(dev-sever): add e2e test cases part 1 by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7809
• chore(infra/biome): enable noImplicitAnyLet and noArrayIndexKey rules by @​shulaoda in https://github.com/web-infra-dev/rspack/pull/7843
• ci: disable dev server test cases by @​LingyuCoder in https://github.com/web-infra-dev/rspack/pull/7851

Full Changelog: web-infra-dev/rspack@v1.0.3...v1.0.4

eslint/eslint (eslint)

v8.57.1

Compare Source

postcss/postcss (postcss)

v8.4.47

Compare Source

• Removed debug code.

v8.4.46

Compare Source

• Fixed Cannot read properties of undefined (reading 'before').

tailwindlabs/tailwindcss (tailwindcss)

v3.4.11

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.