Skip to content

build(deps-dev): bump tsup from 8.5.1 to 9.0.0 - #1625

Merged
xiaolai merged 2 commits into
mainfrom
dependabot/npm_and_yarn/tsup-9.0.0
Nov 5, 2026
Merged

xiaolai merged 2 commits into
mainfrom
dependabot/npm_and_yarn/tsup-9.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026 •

Copy link
Copy Markdown
Contributor

Bumps tsup from 8.5.1 to 9.0.0.

Release notes

Sourced from tsup's releases.

v9.0.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 198479b chore: release v9.0.0
  • 3079ea3 feat(type): expose the Plugin type (#1264)
  • 13f68eb ci: enable npm stage publishing
  • 380e94e test: fix failing tests
  • b601adf chore: merge test lockfile into the root as a pnpm workspace
  • 00139a4 chore: cleanup lockfile
  • 6cec950 chore: build tsup with its own source via tsx
  • 6705d39 chore: upgrade deps, replace source-map with source-map-js
  • a2c0810 feat: upgrade esbuild & chokidar
  • 980525e fix: remove baseUrl in tsconfig (#1390)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tsup-9.0.0 branch 6 times, most recently from 16693ff to d142818 Compare November 3, 2026 01:06
@xiaolai
xiaolai force-pushed the dependabot/npm_and_yarn/tsup-9.0.0 branch from d142818 to 9799dd8 Compare November 5, 2026 02:14
dependabot Bot and others added 2 commits November 5, 2026 10:29
Bumps [tsup](https://github.com/egoist/tsup) from 8.5.1 to 9.0.0.
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.5.1...v9.0.0)

---
updated-dependencies:
- dependency-name: tsup
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
tsup 9 moves server/content onto esbuild 0.28, and pnpm folds the
remaining 0.27.7 consumers onto it, so the lockfile no longer holds
the version GHSA-g7r4-m6w7-qqqr names. check-npm-audit fails on an
acceptance that outlives its advisory, so the entry goes.
@xiaolai
xiaolai force-pushed the dependabot/npm_and_yarn/tsup-9.0.0 branch from 9799dd8 to 93053f8 Compare November 5, 2026 02:29
@xiaolai
xiaolai merged commit a516b18 into main Nov 5, 2026
16 checks passed
@xiaolai
xiaolai deleted the dependabot/npm_and_yarn/tsup-9.0.0 branch November 5, 2026 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant