fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/types (source)	^7.28.2 -> ^7.28.4
@types/node (source)	^22.17.2 -> ^22.18.1
eslint (source)	^9.34.0 -> ^9.35.0
pnpm (source)	10.15.0 -> 10.15.1
rollup (source)	^4.48.0 -> ^4.50.1
tsdown	^0.14.1 -> ^0.14.2
unplugin (source)	^2.3.8 -> ^2.3.10
vite (source)	^7.1.3 -> ^7.1.4

---

Release Notes

babel/babel (@​babel/types)

v7.28.4

Compare Source

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #​17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #​17474 Switch to @​jridgewell/remapping (@​mrginglymus)

eslint/eslint (eslint)

v9.35.0

Compare Source

pnpm/pnpm (pnpm)

v10.15.1

Compare Source

Patch Changes

• Fix .pnp.cjs crash when importing subpath #​9904.
• When resolving peer dependencies, pnpm looks whether the peer dependency is present in the root workspace project's dependencies. This change makes it so that the peer dependency is correctly resolved even from aliased npm-hosted dependencies or other types of dependencies #​9913.

rollup/rollup (rollup)

v4.50.1

Compare Source

2025-09-07

Bug Fixes

• Resolve a situation where a destructuring default value was removed (#​6090)

Pull Requests

• #​6088: feat(www): shorter repl shareables (@​cyyynthia, @​lukastaegert)
• #​6090: Call includeNode for self or children nodes in includeDestructuredIfNecessary (@​TrickyPi)
• #​6091: fix(deps): update rust crate swc_compiler_base to v33 (@​renovate[bot])
• #​6092: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6094: perf: replace startsWith with strict equality (@​btea)

v4.50.0

Compare Source

2025-08-31

Features

• Support openharmony-arm64 platform (#​6081)

Bug Fixes

• Fix loading of extensionless imports in config files (#​6084)

Pull Requests

• #​6081: Add support for openharmony-arm64 platform (@​hqzing, @​lukastaegert)
• #​6084: Return null to defer to the default resolution behavior (@​TrickyPi)

v4.49.0

Compare Source

2025-08-27

Features

• Allow config plugins to resolve imports first before deciding whether to treat them as external (#​6038)

Pull Requests

• #​6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@​stazz, @​TrickyPi)
• #​6082: Improve build pipeline performance (@​lukastaegert)

v4.48.1

Compare Source

2025-08-25

Bug Fixes

• Correctly ignore white-space in JSX strings around line-breaks (#​6051)

Pull Requests

• #​6051: fix: handle whitespace according to JSX common practice (@​cyyynthia)
• #​6078: build: optimize pipeline take two (@​cyyynthia)

rolldown/tsdown (tsdown)

v0.14.2

Compare Source

   🚀 Features

• Enable dts if exports.types exists  -  by @​ronantakizawa and @​sxzz in #​440 (98eb1)
• Support rolldown 1.0.0-beta.34  -  by @​9romise and @​sxzz in #​458 (a25d7)
• migrate: Detect indentation of package.json  -  by @​Cherry in #​438 (d40e9)

    View changes on GitHub

unjs/unplugin (unplugin)

v2.3.10

Compare Source

   🐞 Bug Fixes

• Native filter detection  -  by @​sxzz (98398)

    View changes on GitHub

v2.3.9

Compare Source

   🚀 Features

• rspack: Use native virtual plugin  -  by @​elbywan in #​542 (36518)

   🐞 Bug Fixes

• rspack: Remove virtual plugin cleanup signal handlers  -  by @​elbywan in #​541 (ca420)

    View changes on GitHub

vitejs/vite (vite)

v7.1.4

Compare Source

Bug Fixes

• add missing awaits (#​20697) (79d10ed)
• deps: update all non-major dependencies (#​20676) (5a274b2)
• deps: update all non-major dependencies (#​20709) (0401feb)
• pass rollup watch options when building in watch mode (#​20674) (f367453)

Miscellaneous Chores

• remove unused constants entry from rolldown.config.ts (#​20710) (537fcf9)

Code Refactoring

• remove unnecessary minify parameter from finalizeCss (#​20701) (8099582)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​babel/​types@​7.28.2 ⏵ 7.28.4				+5
	@​types/​node@​22.17.2 ⏵ 22.18.1	+1		+1	+2
	vite@​7.1.3 ⏵ 7.1.4	+6		+1	+2
	unplugin@​2.3.8 ⏵ 2.3.10	+7		+1	+1
	tsdown@​0.14.1 ⏵ 0.14.2	+1		+5
	eslint@​9.34.0 ⏵ 9.35.0	+1			+2
	rollup@​4.48.0 ⏵ 4.50.1

View full report