[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@oxc-project/types (source)	^0.154.0 → ^0.155.0
oxc-parser (source)	^0.154.0 → ^0.155.0
rolldown (source)	^1.2.14 → ^1.2.15
tsdown (source)	^0.23.1 → ^0.23.2
vite (source)	^8.3.4 → ^8.3.5

---

Release Notes

rolldown/rolldown (rolldown)

v1.2.15

Compare Source

🚀 Features

• rolldown_plugin_vite_resolve: add isBundled to pick the browser-external stub format (#​11260) by @​h-a-n-a
• dev: mark entry modules in the HMR module graph (#​11252) by @​h-a-n-a
• mark module starts with // <id> comments instead of #region pairs (#​11235) by @​IWANABETHATGUY

🐛 Bug Fixes

• plugin: stop this.resolve recursion between plugins with skipSelf: true (#​11181) by @​anzal1
• rolldown_plugin_vite_resolve: handle external require for ssr.target: 'webworker' (#​11205) by @​sapphi-red
• rolldown_plugin_vite_build_import_analysis: only wrap dynamic imports with static specifiers in __vitePreload (#​10879) by @​smeng9
• strict-execution-order: wrap eager modules that forward wrapped definers (#​11186) by @​hyfdev
• chunk-import-map: keep common chunk keys unique when enabling inline common chunks (#​11230) by @​hyfdev
• only register signal-exit handler when a trace subscriber is active (#​11208) by @​DaniilIsupov

🧪 Testing

• fold hand-unrolled Rust test tables (#​11212) by @​Brooooooklyn

⚙️ Miscellaneous Tasks

• deps: upgrade oxc to 0.155.0 (#​11228) by @​Dunqing
• rollup-tests: retriage failed tests (#​11251) by @​sapphi-red
• deps: update rollup submodule for tests to v4.64.12 (#​11249) by @​rolldown-guard[bot]
• deps: update test262 submodule for tests (#​11242) by @​rolldown-guard[bot]

❤️ New Contributors

• @​anzal1 made their first contribution in #​11181
• @​smeng9 made their first contribution in #​10879
• @​DaniilIsupov made their first contribution in #​11208

rolldown/tsdown (tsdown)

v0.23.2

Compare Source

   🚀 Features

• Add JSON schema for config  -  by @​Sandbye and @​sxzz in #​1074 (2410e)

   🐞 Bug Fixes

• css: Respect Lightning CSS modules options  -  by @​sxzz in #​1103 (490ec)

    View changes on GitHub

vitejs/vite (vite)

v8.3.5

Compare Source

Bug Fixes

• build: handle missing chunk import maps (#​23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#​23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#​23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#​23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#​23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#​23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#​23741) (11fe1e4)
• bundled-dev: normalize served output files (#​23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#​23839) (7471e8c)
• css: don't fail on a literal % in url() (#​23676) (50b382d)
• deps: update all non-major dependencies (#​23731) (cf80aa5)
• deps: update all non-major dependencies (#​23826) (77d8373)
• deps: update rolldown-related dependencies (#​23733) (43f0d05)
• deps: update rolldown-related dependencies (#​23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#​23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#​23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#​23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#​23761) (a7d5696)
• resolve: support subpath imports with multiple # (#​23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#​23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#​23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#​23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#​23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#​23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#​23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#​23828) (df7b40e)
• dev: separate import resolution from URL conversion (#​23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#​23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#​23815) (a162990)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​oxc-project/​types@​0.154.0 ⏵ 0.155.0
	rolldown@​1.2.14 ⏵ 1.2.15
	vite@​8.3.4 ⏵ 8.3.5	+1		+1
	tsdown@​0.23.1 ⏵ 0.23.2				+1
	oxc-parser@​0.154.0 ⏵ 0.155.0			+1	+2

View full report