fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^22.14.1 -> ^22.15.3
oxc-minify (source)	^0.66.0 -> ^0.67.0
oxc-resolver (source)	^6.0.0 -> ^6.0.2
oxc-transform (source)	^0.66.0 -> ^0.67.0
pnpm (source)	10.9.0 -> 10.10.0
rollup (source)	^4.40.0 -> ^4.40.1
tsdown	^0.9.6 -> ^0.10.0

---

Release Notes

oxc-project/oxc-resolver (oxc-resolver)

v6.0.2

Compare Source

v6.0.1

Compare Source

Bug Fixes

• handle package.json and tsconfig.json with BOM (#​463)

Performance

• avoid double call to parse_package_specifier (#​465)

oxc-project/oxc (oxc-transform)

v0.67.0

Features

• b8414db napi/transform: Support enabling removeClassFieldsWithoutInitializer (#​10581) (Dunqing)
• 42ca96a transformer, napi/transform: Deprecate allowDeclareFields option (#​10584) (Dunqing)
• 6bff64e transformer/typescript: Support removeClassFieldsWithoutInitializer option (#​10576) (Dunqing)
• 1962bc6 transformer_plugins: Split out oxc_transformer_plugins crate (#​10617) (Boshen)

Documentation

• 73cd730 transformer: Add documentation for CompilerAssumptions::set_public_class_fields (#​10582) (Dunqing)

pnpm/pnpm (pnpm)

v10.10.0

Compare Source

Minor Changes

• Allow loading the preResolution, importPackage, and fetchers hooks from local pnpmfile.

Patch Changes

• Fix cd command, when shellEmulator is true #​7838.
• Sort keys in pnpm-workspace.yaml #​9453.
• Pass the npm_package_json environment variable to the executed scripts #​9452.
• Fixed a mistake in the description of the --reporter=silent option.

rollup/rollup (rollup)

v4.40.1

Compare Source

2025-04-28

Bug Fixes

• Limit hash size for asset file names to the supported 21 (#​5921)
• Do not inline user-defined entry chunks or chunks with explicit file name (#​5923)
• Avoid top-level-await cycles when non-entry chunks use top-level await (#​5930)
• Expose package.json via exports (#​5931)

Pull Requests

• #​5921: fix(assetFileNames): reduce max hash size to 21 (@​shulaoda)
• #​5923: fix: generate the separate chunk for the entry module with explicated chunk filename or name (@​TrickyPi)
• #​5926: fix(deps): update rust crate swc_compiler_base to v18 (@​renovate[bot])
• #​5927: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​5928: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​5930: Avoid chunks TLA dynamic import circular when TLA dynamic import used in non-entry modules (@​TrickyPi)
• #​5931: chore: add new ./package.json entry (@​JounQin, @​lukastaegert)
• #​5936: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])

rolldown/tsdown (tsdown)

v0.10.0

Compare Source

   🚨 Breaking Changes

• Clean output dir by default  -  by @​sxzz (cda6f)
• Enable dts based on typings field in package.json  -  by @​sxzz (c7109)

   🚀 Features

• Show migration guide link  -  by @​sxzz (0ff39)

    View changes on GitHub

v0.9.9

Compare Source

   🚀 Features

• Support declaration maps  -  by @​sxzz (10565)
• Support CSS syntax lowering  -  by @​ocavue and @​sxzz in https://github.com/rolldown/tsdown/issues/159 (8634d)

   🏎 Performance

• Disable report plugin when silent  -  by @​sxzz (46051)

    View changes on GitHub

v0.9.8

Compare Source

   🚀 Features

• Functional config  -  by @​sxzz (2680c)

    View changes on GitHub

v0.9.7

Compare Source

   🚀 Features

• Add --debug option  -  by @​btea and @​sxzz in https://github.com/rolldown/tsdown/issues/147 (1e6f2)
• cli: Support compile-time env option  -  by @​fu050409 in https://github.com/rolldown/tsdown/issues/152 (e7edf)

   🐞 Bug Fixes

• Watch directory cannot be an output directory  -  by @​btea and @​sxzz in https://github.com/rolldown/tsdown/issues/146 (e8471)

   🏎 Performance

• Enable compiler cache via module.enableCompileCache()  -  by @​btea in https://github.com/rolldown/tsdown/issues/153 (a60d9)
• watch: Defer chokidar import  -  by @​sxzz (516fa)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/unplugin/unplugin-oxc@9

commit: 8603614

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	oxc-minify@​0.66.0 ⏵ 0.67.0				+1
	@​types/​node@​22.14.1 ⏵ 22.15.3	+1		+1
	tsdown@​0.9.6 ⏵ 0.10.0			+1	+1
	oxc-transform@​0.65.0 ⏵ 0.67.0	+1		+1	+1
	oxc-resolver@​6.0.0 ⏵ 6.0.2			+20	+1
	rollup@​4.40.0 ⏵ 4.40.1	+1

View full report