perf(deps): replace debug with obug

[sxzz]

https://github.com/sxzz/obug is a newly developed project, forked from debug, the most popular npm library for debugging.

obug addresses several issues:

• Built-in TypeScript support—no need to install @types/debug (More accurate)
• Zero dependencies, achieved by dropping support for legacy browsers and older Node.js versions
  • Optimized for modern environments
  • Supports ES2015+ browsers
  • Compatible with Node.js 20.19 and above
• Pure ESM
• Extremely small footprint
  • Unpacked size: 21 KB vs 42 KB (including dependencies)
  • Production bundle size for browsers: only 3.22 kB, gzip: 1.5kB.
• Uses trusted publishing (although some consider this meaningless, this is simply to inform those who care about it; related discussions are outside the scope of this post)

Since Vite inlines debug into its bundle, users won't notice any difference, and it also reduces the installation size by 4.7 kB (gzipped).

See e18e/ecosystem-issues#217 for discussion

[sapphi-red]

It seems the package size gets slightly bigger 🤔

Before

npm notice name: vite
npm notice version: 7.2.2
npm notice filename: vite-7.2.2.tgz
npm notice package size: 546.2 kB
npm notice unpacked size: 2.3 MB
npm notice shasum: f1f10e937d6eb0dd83b26799ecc864a0a1d23038
npm notice integrity: sha512-eygGzQ9DwAdKM[...]6Vgr/lwA2lchA==
npm notice total files: 39

After

npm notice name: vite
npm notice version: 7.2.2
npm notice filename: vite-7.2.2.tgz
npm notice package size: 548.7 kB
npm notice unpacked size: 2.3 MB
npm notice shasum: 317bc74ee2cef38ea7ff6792ddb2cf5056d5d107
npm notice integrity: sha512-27C3Tg9WiObNw[...]v/eEC8KA/+lOw==
npm notice total files: 39

I took these by pnpm i && pnpm build && npm pack.

[bluwy]

I'm guessing other deps are using debug too, so it all gets deduped and this new package only adds on top of it.

[sxzz]

I replaced all versions of debug (including older versions) with obug. While older versions of debug share the same APIs, the main difference is their support for legacy Node.js.

npm notice package size: 542.8 kB
npm notice unpacked size: 2.2 MB

-rw-r--r--@ 1 kevin  staff  542803 Nov 12 22:02 after.tgz
-rw-r--r--@ 1 kevin  staff  547558 Nov 12 18:58 before.tgz

❯ dua before after --format bytes
   2351104 b after
   2367488 b before

Reduced by 4,766 bytes (gzipped), 16,384 bytes (decompressed)

[sxzz]

I'm currently using monkeypatch to require obug as a temporary workaround. We can remove this fix once rolldown/rolldown#4997 is resolved. /cc @sapphi-red

[sapphi-red]

@sxzz I haven't checked the reason, but I've reverted this PR as the CI failed: 2d66b7b

[sxzz]

You upgraded obug to v2 in this commit
a668014

[sapphi-red]

Hmm, true. It seems if I run pnpm i the lockfile that was committed is generated.