Skip to content

feat(deps): upgrade upstream dependencies - #2311

Merged
fengmk2 merged 11 commits into
mainfrom
deps/upstream-update
Aug 3, 2026
Merged

feat(deps): upgrade upstream dependencies#2311
fengmk2 merged 11 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

@voidzero-guard voidzero-guard Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Automated upgrade of upstream dependencies.
  • Bumps rolldown to v1.2.2 (872b98a).
  • Bumps catalog rolldown-plugin-dts (^0.27.0 -> ^0.28.0) and @napi-rs/* tooling.
  • Syncs the rolldown-plugin-dts dts() option in packages/core/build.ts (oxc: true -> generator: 'oxc') for the new plugin major.

Dependency updates

Package From To
rolldown 93c535d v1.2.2 (872b98a)
rolldown-plugin-dts ^0.27.0 ^0.28.0
@napi-rs/cli ^3.8.0 ^3.8.2
@napi-rs/wasm-runtime ^1.2.0 ^1.2.2

Code changes

  • packages/core/build.ts: update the dts() plugin option from oxc: true to generator: 'oxc' to match rolldown-plugin-dts v0.28.
  • pnpm-workspace.yaml: bump rolldown-plugin-dts, @napi-rs/cli, and @napi-rs/wasm-runtime catalog entries; add @napi-rs/wasm-runtime to minimumReleaseAgeExclude.
  • packages/core/package.json: update bundledVersions.rolldown from 1.2.1 to 1.2.2.
  • Lockfile-only churn in Cargo.lock and pnpm-lock.yaml; upstream version pin updated in packages/tools/.upstream-versions.json.

Build status

  • sync-remote-and-build: success
  • build-upstream: failure

- rolldown: 93c535d -> v1.2.2 (872b98a)

Code changes:
- packages/core/build.ts: sync rolldown-plugin-dts dts() option `oxc: true` -> `generator: 'oxc'` for plugin v0.28
- pnpm-workspace.yaml: bump catalog `rolldown-plugin-dts` ^0.27.0 -> ^0.28.0, `@napi-rs/cli` ^3.8.0 -> ^3.8.2, `@napi-rs/wasm-runtime` ^1.2.0 -> ^1.2.2, and add `@napi-rs/wasm-runtime` to minimumReleaseAgeExclude
- packages/core/package.json: bundledVersions.rolldown 1.2.1 -> 1.2.2
@netlify

netlify Bot commented Aug 3, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit 70216ab
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a70b1b145c4a3000863f7a2

@socket-security

socket-security Bot commented Aug 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​rolldown-plugin-dts@​0.28.09910010096100

View full report

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Native binary sizes (70216ab)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.38 MiB 10.38 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.45 MiB 4.45 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.44 MiB 33.48 MiB +44.00 KiB (+0.13%)
NAPI (Linux x64) gzip -9 12.90 MiB 12.93 MiB +23.05 KiB (+0.17%)
vp (macOS ARM64) Binary 7.70 MiB 7.70 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.86 MiB 3.86 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.75 MiB 40.79 MiB +48.47 KiB (+0.12%)
NAPI (macOS ARM64) gzip -9 17.13 MiB 17.15 MiB +20.03 KiB (+0.11%)
vp (Windows x64) Binary 8.42 MiB 8.42 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.66 MiB 3.66 MiB -1 B (-0.00%)
NAPI (Windows x64) Binary 27.72 MiB 27.76 MiB +49.00 KiB (+0.17%)
NAPI (Windows x64) gzip -9 10.84 MiB 10.86 MiB +21.70 KiB (+0.20%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB -1 B (-0.00%)
Installer (Windows x64) Binary 4.47 MiB 4.47 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.09 MiB 2.09 MiB -2 B (-0.00%)

fengmk2 added 2 commits August 3, 2026 20:59
The upstream update missed the regenerated index.d.cts. rolldown v1.2.2
adds the pluginTimings input option and the BindingPluginTiming types to
the binding surface, so the CLI E2E git-clean check failed after build.
The vinext suite already used ~90% of the 15-minute budget before the
rolldown v1.2.2 bump; the run on the upstream-update PR was cancelled
mid-suite with tests still passing.
@fengmk2 fengmk2 self-assigned this Aug 3, 2026
fengmk2 added 4 commits August 3, 2026 21:32
Moves the pin from 48e932e to 7d786e0 (665 commits). Both e2e patch
anchors (minimumReleaseAge in pnpm-workspace.yaml, testTimeout: 30000
in vite.config.ts) still exist at the new commit.
Node v24.19.0 released today and the unofficial-builds musl channel
lists it before the linux-x64-musl tarball exists, so every test that
resolves a floating version (default, lts/*, invalid-pin fallback)
fails with HashNotFound on the musl leg. Extend the existing musl
ignore (test_download_runtime_for_project_with_latest_alias_in_node_version)
to the seven sibling tests that hit the same race. They still run on
gnu, macOS, and Windows legs.
fengmk2 added 3 commits August 3, 2026 22:39
The previous bump landed on 7d786e0, where vinext's own CI fails
(app-rsc-handler.ts calls runMiddleware without two required
RunAppMiddlewareOptions properties), so vp check failed the e2e job.
Pin aec4421 instead, the newest commit with a green upstream CI run
(2026-08-03). Both e2e patch anchors still exist there.
vp run test:unit runs the parallel unit project; the serial
integration project pushed the full suite past the job budget and is
covered by vinext's own CI.
Run vp test run --project unit --shard=1/3 directly instead of the
test:unit script so the job exercises one shard of the parallel unit
project; the rest of the suite is covered by vinext's own CI.
@fengmk2
fengmk2 merged commit 4e64087 into main Aug 3, 2026
100 of 101 checks passed
@fengmk2
fengmk2 deleted the deps/upstream-update branch August 3, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant