fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	^9.33.0 -> ^9.34.0
magic-string	^0.30.17 -> ^0.30.18
pnpm (source)	10.14.0 -> 10.15.0
rollup (source)	^4.46.3 -> ^4.48.0
tsx (source)	^4.20.4 -> ^4.20.5
unplugin (source)	^2.3.6 -> ^2.3.8
unplugin-utils	^0.2.5 -> ^0.3.0
vite (source)	^7.1.2 -> ^7.1.3

---

Release Notes

eslint/eslint (eslint)

v9.34.0

Compare Source

rich-harris/magic-string (magic-string)

v0.30.18

Compare Source

Bug Fixes

• prevent infinite loop on empty input (#​302) (0fd6253)

pnpm/pnpm (pnpm)

v10.15.0

Compare Source

Minor Changes

• Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #​9793.
• Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #​9780.
• pnpm config get now prints an INI string for an object value #​9797.
• pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
• pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

• Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #​9835.
• When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #​9775.
• When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #​9862.
• The standalone exe version of pnpm works with glibc 2.26 again #​9734.
• Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #​9823.

rollup/rollup (rollup)

v4.48.0

Compare Source

2025-08-23

Features

• If configured, also keep unparseable import attributes of external dynamic imports in the output(#​6071)

Bug Fixes

• Ensure variables referenced in non-removed import attributes are included (#​6071)

Pull Requests

• #​6071: Keep attributes for external dynamic imports (@​TrickyPi)
• #​6079: fix(deps): update swc monorepo (major) (@​renovate[bot])
• #​6080: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])

v4.47.1

Compare Source

2025-08-21

Bug Fixes

• Revert build process changes to investigate issues (#​6077)

Pull Requests

• #​6077: Revert "build: aggressively optimize wasm build, improve pipeline (#​6053)" (@​lukastaegert)

v4.47.0

Compare Source

2025-08-21

Features

• Aggressively reduce WASM build size (#​6053)

Bug Fixes

• Fix illegal instruction error on Android ARM platforms (#​6072)
• Allow to pass explicit undefined for optional fields in Rollup types (#​6061)

Pull Requests

• #​6053: build: aggressively optimize wasm build, improve pipeline (@​cyyynthia)
• #​6061: fix(types): add support for exactOptionalPropertyTypes (@​remcohaszing, @​lukastaegert)
• #​6072: build(rust): mimalloc-safe/no_opt_arch on aarch64 (@​cyyynthia)

v4.46.4

Compare Source

2025-08-20

Bug Fixes

• Do not omit synthetic namespaces when only accessed via in operator (#​6052)

Pull Requests

• #​6052: fix: don't optimize in with syntheticNamedExports (@​hi-ogawa)
• #​6074: Update transitive dependency to fix audit (@​lukastaegert)

privatenumber/tsx (tsx)

v4.20.5

Compare Source

Bug Fixes

• handle ambiguous packages (796053a)

---

This release is also available on:

• npm package (@​latest dist-tag)

unjs/unplugin (unplugin)

v2.3.8

Compare Source

   🐞 Bug Fixes

• rspack: Gate virtual folder behind process pid  -  by @​elbywan in #​538 (417a6)

    View changes on GitHub

v2.3.7

Compare Source

   🐞 Bug Fixes

• rspack: Prevents an unhandled promise rejection when throwing in the async loader  -  by @​elbywan in #​536 (cfbc2)

    View changes on GitHub

sxzz/unplugin-utils (unplugin-utils)

v0.3.0

Compare Source

   🚨 Breaking Changes

• Drop cjs build  -  by @​sxzz (f0285)
• Drop node18 support  -  by @​sxzz (760f7)

    View changes on GitHub

vitejs/vite (vite)

v7.1.3

Compare Source

Features

• cli: add Node.js version warning for unsupported versions (#​20638) (a1be1bf)
• generate code frame for parse errors thrown by terser (#​20642) (a9ba017)
• support long lines in generateCodeFrame (#​20640) (1559577)

Bug Fixes

• deps: update all non-major dependencies (#​20634) (4851cab)
• optimizer: incorrect incompatible error (#​20439) (446fe83)
• support multiline new URL(..., import.meta.url) expressions (#​20644) (9ccf142)

Performance Improvements

• cli: dynamically import resolveConfig (#​20646) (f691f57)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20633) (98b92e8)

Code Refactoring

• replace startsWith with strict equality (#​20603) (42816de)
• use import in worker threads (#​20641) (530687a)

Tests

• remove checkNodeVersion test (#​20647) (731d3e6)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.