chore(deps): update all non-major dependencies #76

renovate · 2026-01-26T01:45:15Z

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	`^7.4.5` → `^7.5.1`
@types/node (source)	`^25.0.9` → `^25.0.10`
pnpm (source)	`10.28.0` → `10.28.1`
prettier (source)	`^3.8.0` → `^3.8.1`
rolldown (source)	`1.0.0-beta.60` → `1.0.0-rc.1`
rollup (source)	`^4.55.1` → `^4.56.0`
tsdown (source)	`^0.19.0` → `^0.20.1`
vitest (source)	`^4.0.17` → `^4.0.18`

Release Notes

sxzz/eslint-config (@sxzz/eslint-config)

`v7.5.1`

Compare Source

🐞 Bug Fixes

Move import condition before require - by @sxzz (c3ca1)

View changes on GitHub

`v7.5.0`

Compare Source

🚀 Features

Upgrade yaml plugin - by @sxzz (5516e)

View changes on GitHub

pnpm/pnpm (pnpm)

`v10.28.1`

Compare Source

prettier/prettier (prettier)

`v3.8.1`

Compare Source

rolldown/rolldown (rolldown)

`v1.0.0-rc.1`

🚀 Features

debug_info: add facade chunk elimination reason (#7980) by @IWANABETHATGUY
support lazy barrel optimization (#7933) by @shulaoda
add experimental.lazyBarrel option (#7908) by @shulaoda
skip unused external modules from IIFE parameter list (#7978) by @sapphi-red
add custom panic hook for better crash reporting (#7752) by @shulaoda
treeshake: add invalidImportSideEffects option (#7958) by @shulaoda
merge allow-extension emitted chunks (#7940) by @IWANABETHATGUY
nativeMagicString generateMap (#7944) by @IWANABETHATGUY
Include meta.magicString in RenderChunkMeta (#7943) by @IWANABETHATGUY
debug_info: add debug info for eliminated facade chunks (#7946) by @IWANABETHATGUY
stablize strictExecutionOrder and move to output.strictExecutionOrder from experimental.strictExecutionOrder (#7901) by @sapphi-red
add documentation link to require() error message (#7898) by @Copilot
add codeSplitting: boolean and deprecate inlineDynamicImports (#7870) by @hyf0
dev: change lazy module URL to /@vite/lazy from /lazy (#7884) by @sapphi-red

🐛 Bug Fixes

transform JS files containing </script> to escape template literals (#7987) by @IWANABETHATGUY
apply avoid-breaking-exported-api = false to clippy.toml and fix clippy errors (#7982) by @Boshen
pass kind from this.resolve (#7981) by @sapphi-red
rolldown_plugin_vite_resolve: ignore yarn resolution errors and fallback to other resolvers (#7968) by @sapphi-red
renamer: prevent renaming symbols when there no conflicts (#7936) by @Dunqing
correct minifyInterExports when emitted chunk got merged (#7941) by @IWANABETHATGUY
deduplicate entry points when module is both emitted and dynamically imported (#7885) by @IWANABETHATGUY
dev: add @vite-ignore to lazy compilation proxy module import (#7883) by @sapphi-red

🚜 Refactor

rust: enable clippy nursery lint group (#8002) by @Boshen
rust: fix inconsistent_struct_constructor clippy lint (#7999) by @Boshen
rust: fix needless_pass_by_ref_mut clippy lint (#7994) by @Boshen
rust: fix unnecessary_wraps clippy lint (#7993) by @Boshen
rust: fix enum_variant_names clippy lint (#7992) by @Boshen
fix single_match clippy lint (#7997) by @Boshen
rust: fix redundant_clone clippy lint (#7996) by @Boshen
rust: rename CJS to Cjs to follow upper_case_acronyms lint (#7991) by @Boshen
rust: remove unnecessary Box wrapper around Vec in MemberExprRef (#7990) by @Boshen
import_record: make resolved_module optional (#7907) by @shulaoda
remove unnecessary .parse (#7966) by @sapphi-red
remove unused ImportRecordMeta::IsPlainImport (#7948) by @shulaoda
proper set chunk meta (#7939) by @IWANABETHATGUY
module_loader: remove try_spawn_with_cache (#7920) by @shulaoda
link_stage: simplify ImportStatus::NoMatch to unit variant (#7909) by @shulaoda
improve global scope symbol reservation in chunk deconfliction (#7906) by @IWANABETHATGUY
simplify ast unwrapping in generate stage (#7900) by @IWANABETHATGUY
generate_stage: optimize cross-chunk imports computation (#7889) by @shulaoda
link_stage: move runtime require logic into match branch (#7892) by @shulaoda
link_stage: simplify runtime require reference conditions (#7891) by @shulaoda
link_stage: inline and simplify external dynamic import check (#7890) by @shulaoda
generate_stage: simplify external module import collection logic (#7887) by @shulaoda
avoid redundant module lookup in TLA computation (#7886) by @shulaoda
dev: devEngine.compileEntry does not return null (#7882) by @sapphi-red
dev: fix type errors for test HMR runtime (#7881) by @sapphi-red
dev: move clientId property to DevRuntime base class (#7880) by @sapphi-red
dev: generate client id in browser (#7878) by @hyf0

📚 Documentation

apis: organize hook filters documentation and add composable filters section (#8003) by @sapphi-red
update vitepress-plugin-group-icons (#7947) by @yuyinws
add in-depth documentation for lazy barrel optimization (#7969) by @shulaoda
bump theme & update activeMatch for reference (#7963) by @mdong1909
mark build() API as experimental (#7954) by @sapphi-red
enhance search functionality with improved scoring and filtering logic (#7935) by @hyf0
add minor comments to multiple types (#7930) by @sapphi-red
refactor advanedChunks related content to adapt manual code splitting concept (#7925) by @hyf0
apis: add content to Bundler API page (#7926) by @sapphi-red
apis: restructure plugin API related docs (#7924) by @sapphi-red
add plugin API docs (#7923) by @sapphi-red
apis: add docs to important APIs (#7913) by @sapphi-red
move the important APIs to the top of the sidebar (#7912) by @sapphi-red
apis: add more content to CLI documentation (#7911) by @sapphi-red
apis: generate CLI docs from --help output (#7910) by @sapphi-red
add fathom analytics (#7896) by @mdong1909

⚡ Performance

use u32 for string indices in string_wizard and rolldown to reduce memory usage (#7989) by @IWANABETHATGUY
rust: remove all usages of with_scope_tree_child_ids(true) for SemanticBuilder (#7995) by @Dunqing
renamer: skip unnecessary nested scope symbol processing (#7899) by @Dunqing
module_loader: use ArcStr for importer_id to avoid string copy (#7922) by @shulaoda
module_loader: defer ModuleTaskOwner construction until needed (#7921) by @shulaoda
renamer: optimize symbol renaming by eliminating rename_non_root_symbol pass (#7867) by @Dunqing

🧪 Testing

add lazy barrel optimization test cases (#7967) by @shulaoda

⚙️ Miscellaneous Tasks

remove lazy barrel option (#8010) by @shulaoda
mark watch API as experimental (#8004) by @sapphi-red
deps: update dependency lodash-es to v4.17.23 [security] (#8001) by @renovate[bot]
git ignore zed local config (#7988) by @IWANABETHATGUY
setup publint for published packages (#7972) by @Copilot
enable tagged_template_transform uncondionally (#7975) by @IWANABETHATGUY
deps: update oxc to v0.110.0 (#7964) by @renovate[bot]
deps: update oxc apps (#7962) by @renovate[bot]
ai: add upgrade-oxc Claude skill (#7957) by @Boshen
deps: update rollup submodule for tests to v4.55.2 (#7959) by @sapphi-red
deps: update test262 submodule for tests (#7960) by @sapphi-red
deps: update crate-ci/typos action to v1.42.1 (#7961) by @renovate[bot]
deps: update rust crates (#7951) by @renovate[bot]
deps: update npm packages (#7953) by @renovate[bot]
deps: update github-actions (#7952) by @renovate[bot]
deps: update npm packages (#7950) by @renovate[bot]
format magic-string test before write to disk (#7945) by @IWANABETHATGUY
deps: update dependency rolldown-plugin-dts to ^0.21.0 (#7915) by @renovate[bot]
deps: update dependency oxlint-tsgolint to v0.11.1 (#7914) by @renovate[bot]
deps: update dependency diff to v8.0.3 [security] (#7904) by @renovate[bot]
remove outdated TODO comment in collect_depended_symbols (#7888) by @shulaoda
deps: update oxc resolver to v11.16.3 (#7876) by @renovate[bot]

`v1.0.0-beta.29-commit.fe1bea3`

`v1.0.0-beta.28-commit.cd50e5f`

`v1.0.0-beta.28-commit.aaef991`

rollup/rollup (rollup)

`v4.56.0`

Compare Source

2026-01-22

Features

Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

#6230: Refine namespace handling (@lukastaegert)

`v4.55.3`

Compare Source

2026-01-21

Bug Fixes

Fix JSX semicolon insert position in variable declarations (#6241)

Pull Requests

#6241: Fix JSX semicolon insertion (@lukastaegert)

`v4.55.2`

Compare Source

2026-01-19

Bug Fixes

Sort manual chunks by execution order to reduce circular dependency issues (#6240)

Pull Requests

#6234: chore(deps): pin cross-platform-actions/action action to 492b0c8 (@renovate[bot])
#6235: chore(deps): update dependency globals to v17 (@renovate[bot], @lukastaegert)
#6236: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])
#6237: chore(deps): lock file maintenance (@renovate[bot])
#6239: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6240: Sort manual chunks by module execution order (@TrickyPi)

rolldown/tsdown (tsdown)

`v0.20.1`

Compare Source

🚀 Features

inline-only: Show warnings if bundled deps - by @sxzz (1e0e7)

View changes on GitHub

`v0.20.0`

Compare Source

🚨 Breaking Changes

Upgrade dts plugin, remove dts.resolve option - by @sxzz (16655)

🚀 Features

Add option to disable legacy CJS warning - by @sxzz (9fada)
Apply inlineOnly option for dts files - by @sxzz (7d89d)
Upgrade rolldown to 1.0.0-beta.60 - by @sxzz (bb3ee)
Upgrade rolldown to rc 1 - by @sxzz (1959f)
entry: Support mixed array and object entries - by @sxzz (a8083)

🐞 Bug Fixes

Optional parseEnv - by @sxzz (be1b6)
Reload config on restart - by @sxzz (1756b)
Config extensions typo - by @aryaemami59 in #722 (d2bb7)
windows: Normalize path separators in build output - by @ryuapp in #719 (c4525)

🏎 Performance

Native filter for external plugin - by @sxzz (8764e)

View changes on GitHub

vitest-dev/vitest (vitest)

`v4.0.18`

Compare Source

🚀 Experimental Features

experimental: Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (ea837)

🐞 Bug Fixes

Use meta.url in createRequire - by @sheremet-va in #9441 (e0572)
browser: Hide injected data-testid attributes - by @sheremet-va in #9503 (f8989)
ui: Process artifact attachments when generating HTML reporter - by @macarie in #9472 (22543)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2026-01-26T01:45:18Z

Run & review this pull request in StackBlitz Codeflow.

socket-security · 2026-01-26T01:45:36Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
rolldown@1.0.0-beta.60 ⏵ 1.0.0-rc.1		⁺¹
vitest@4.0.17 ⏵ 4.0.18	⁺¹	⁺¹	⁺¹
@types/node@25.0.9 ⏵ 25.0.10	⁺¹	⁺¹
@sxzz/eslint-config@7.4.5 ⏵ 7.5.1	⁺¹
rollup@4.55.1 ⏵ 4.56.0	⁺¹
prettier@3.8.0 ⏵ 3.8.1		⁺¹
tsdown@0.19.0 ⏵ 0.20.1	⁺¹	⁺¹	⁺¹

View full report

pkg-pr-new · 2026-01-26T01:45:41Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-replace@76

commit: d7bae6b

chore(deps): update all non-major dependencies

d7bae6b

renovate bot added the dependencies label Jan 26, 2026

renovate bot merged commit 5c5be0e into main Jan 26, 2026
14 checks passed

renovate bot deleted the renovate/all-minor-patch branch January 26, 2026 06:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #76

chore(deps): update all non-major dependencies #76

Uh oh!

renovate bot commented Jan 26, 2026

Uh oh!

bolt-new-by-stackblitz bot commented Jan 26, 2026

Uh oh!

socket-security bot commented Jan 26, 2026

Uh oh!

pkg-pr-new bot commented Jan 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

chore(deps): update all non-major dependencies #76

chore(deps): update all non-major dependencies #76

Uh oh!

Conversation

renovate bot commented Jan 26, 2026

Release Notes

🐞 Bug Fixes

🚀 Features

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

Features

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

🚀 Features

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

🚀 Experimental Features

🐞 Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Jan 26, 2026

Uh oh!

socket-security bot commented Jan 26, 2026

Uh oh!

pkg-pr-new bot commented Jan 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants