feat(deps): upgrade upstream dependencies

[Brooooooklyn]

Summary

• Automated daily upgrade of upstream dependencies.
• Bumps rolldown to v1.0.0-rc.16 and re-merges its Cargo workspace,
  pulling in oxc 0.126.0, jsonschema 0.46.0, and a new path-posix
  dependency while dropping the unused smallvec entry.
• Bumps tsdown to 0.21.9, oxlint-tsgolint to 0.21.1, and
  @vitejs/devtools to 0.1.14.
• Adapts packages/cli/src/pack-bin.ts to the new resolveUserConfig /
  buildWithConfigs signature.

Dependency updates

Package	From	To
rolldown	27cb729	v1.0.0-rc.16 (edec4fa)
tsdown	0.21.8	0.21.9
oxlint-tsgolint	0.21.0	0.21.1
@vitejs/devtools	0.1.13	0.1.14

Unchanged dependencies

• vite: v8.0.8 (6e585dc)
• vitest: 4.1.4
• @oxc-node/cli: 0.1.0
• @oxc-node/core: 0.1.0
• oxfmt: 0.45.0
• oxlint: 1.60.0

Code changes

• Cargo.toml: bump oxc workspace crates from 0.123.0 to 0.126.0,
  add oxc_str, bump jsonschema from 0.45.0 to 0.46.0, add
  path-posix = "0.0.1", and drop the unused smallvec entry (rolldown
  workspace re-merge).
• packages/cli/src/pack-bin.ts: switch from configFiles: string[] to
  configDeps: Set<string> and forward it to resolveUserConfig /
  buildWithConfigs to match the updated upstream signature.
• pnpm-workspace.yaml: add import-without-cache and logs-sdk to
  minimumReleaseAgeExclude.
• Cargo.lock and pnpm-lock.yaml regenerated to reflect the above.

Build status

• sync-remote-and-build: failure
• build-upstream: success

---

Note

Medium Risk
Medium risk due to broad upstream dependency upgrades (notably rolldown/oxc/jsonschema) that can change bundling/parsing behavior and introduce new transitive deps, plus a small CLI integration adjustment for updated config/build APIs.

Overview
Upgrades upstream Rust and JS toolchain dependencies, including bumping rolldown (pulling oxc to 0.126.0 and jsonschema to 0.46.0), adding new deps like path-posix/oxc_str, and refreshing lockfiles accordingly.

Updates the vp pack CLI (packages/cli/src/pack-bin.ts) to track config dependency paths via a Set and pass them into the updated resolveUserConfig/buildWithConfigs signatures. Also bumps @vitejs/devtools, tsdown, and oxlint-tsgolint, and adjusts workspace minimum-release-age exclusions for newly introduced packages.

^{Reviewed by Cursor Bugbot for commit 8518b66. Bugbot is set up for automated code reviews on this repo. Configure here.}

[netlify]

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	ae1bf60
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/69e1e6479e8bb20008d7b95b