chore(deps): lock file maintenance npm packages

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
		lockFileMaintenance	All locks refreshed
@types/node (source)	devDependencies	minor	24.2.1 -> 24.3.0
esbuild	devDependencies	patch	0.25.8 -> 0.25.9
oxc-minify (source)	devDependencies	minor	^0.81.0 -> ^0.82.0
oxlint (source)	devDependencies	minor	1.11.1 -> 1.12.0
vitepress (source)	devDependencies	patch	2.0.0-alpha.9 -> 2.0.0-alpha.11
vitepress-plugin-group-icons	devDependencies	patch	1.6.2 -> 1.6.3

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

evanw/esbuild (esbuild)

v0.25.9

Compare Source

• Better support building projects that use Yarn on Windows (#​3131, #​3663)

  With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

  1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
  2. Some developers put their projects on the D: drive
  3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
  4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
  5. I didn't have access to a Windows machine for testing this edge case

  Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

• Preserve parentheses around function expressions (#​4252)

  The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

  Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

  // Original code
  const fn0 = () => 0
  const fn1 = (() => 1)
  console.log(fn0, function() { return fn1() }())
  
  // Old output
  const fn0 = () => 0;
  const fn1 = () => 1;
  console.log(fn0, function() {
    return fn1();
  }());
  
  // New output
  const fn0 = () => 0;
  const fn1 = (() => 1);
  console.log(fn0, (function() {
    return fn1();
  })());

  Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

• Update Go from 1.23.10 to 1.23.12 (#​4257, #​4258)

  This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

oxc-project/oxc (oxc-minify)

v0.82.2

🚜 Refactor

• 5223562 codegen: Adjust some source mappings (#​13084) (Boshen)

v0.82.1

🚀 Features

• 993db89 minifier: .minify and .dce methods; run dce in loop (#​13026) (Boshen)

oxc-project/oxc (oxlint)

v1.12.0: oxlint v1.12.0

Compare Source

[1.12.0] - 2025-08-17

Announcing Oxlint Type-Aware Preview

🚀 Features

• 09b597f linter: Handle help message from tsgolint (#​13143) (Boshen)
• aecacae linter: Support ignorePatterns for nested configs (#​12210) (Sysix)
• c661bac linter: Add eslint/prefer-template rule (#​13117) (yefan)
• 920e06f linter: Implement fixer for jsx_curly_brace_presence (#​13005) (RoelGo)
• 1c79d02 linter: Add react/jsx-fragments rule (#​12988) (Peter Cardenas)
• a799982 linter/consistent-type-specifier-style: Add fixer for top-level style config (#​13023) (Li Wei)
• 61112a3 linter: Add 36 new TypeScript ESLint rules with comprehensive test fixtures (#​12893) (Copilot)
• 4ce252c linter: Add dangerous suggestion for jsx-a11y/tabindex-no-positive (#​12963) (Sysix)

🐛 Bug Fixes

• 66a350e oxlint: Should type linting files after ignore (#​13149) (Boshen)
• 81b0162 linter: Preserve json key order for oxlint --init (#​13121) (Boshen)
• f97791a linter/no-this-alias: Update NoThisAliasConfig default config (#​13095) (camc314)
• 43b1c5a linter: Do not count type-aware rules, when not enabled (#​13062) (Sysix)
• 618ee87 linter/array-callback-return: Fix handling of default case in switch statements for array-callback-return rule (#​13081) (Li Wei)
• c211d32 linter: Fix whitespace handling in disable directives (#​13083) (Li Wei)
• a0ccada tsgolint: Handle non-zero exit status from tsgolint process (#​13087) (camc314)
• b0558a4 linter: Prevent unsound use of Allocator across threads (#​13032) (overlookmotel)
• 2d287d0 linter/no-unused-private-class-members: False positive with private member in compound assignments (#​13053) (yefan)

🚜 Refactor

• 700b412 linter: Add impl for TsGoLintDiagnostic into Message (#​13144) (Sysix)
• 437a63d linter: message_to_message_with_position helper function (#​13140) (Sysix)
• 8459a12 linter: Pass paths to TsGoLintState.lint method (#​13131) (Sysix)
• 0dd7908 linter: Fix dead code warnings when compiling napi/oxlint2 (#​13132) (overlookmotel)
• f0a517f linter: Pass cwd instead of LintServiceOptions into TsGoLintState (#​13127) (Sysix)
• b638371 language_server: Do not check twice for supported extension (#​13130) (Sysix)
• 34ae2f0 linter: Move tsgolint.rs to oxc_linter crate (#​13126) (Sysix)
• 9f924f6 linter: Always explicitly initialize Rayon thread pool (#​13122) (overlookmotel)
• 6c5b8be linter: Create AllocatorPool in Runtime::new (#​13106) (overlookmotel)
• cc2a85b linter: Remove CliRunResult from TsGoLintState (#​13119) (Sysix)
• 23e5642 linter: Move TsGoLintInput creation into own function (#​13118) (Sysix)
• 0453ee3 linter: Rename var for consistency (#​13074) (overlookmotel)
• 5783df2 linter: Dereference Allocator from AllocatorGuard (#​13073) (overlookmotel)
• 1d77d92 linter: Avoid unnecessary var initialization (#​13072) (overlookmotel)
• 1c15288 linter: Extract duplicated is_jsx_fragment function to shared utils (#​13093) (Copilot)
• 0b61338 linter/jsx-curly-brace-presence: Iter over chars rather than using regex (#​13094) (Copilot)
• 74fb6c9 linter: Reduce repeated code (#​13070) (overlookmotel)

⚡ Performance

• 3bfb235 linter: Implement streaming diagnostics for tsgolint instead of waiting for output to finish (#​13098) (copilot-swe-agent)

v1.11.2: oxlint v1.11.2

Compare Source

[1.11.2] - 2025-08-12

🐛 Bug Fixes

• c461a86 oxlint: Fix type-aware linting crash when Vue files are present (#​13007) (Copilot)
• 42de3d1 linter: Update warn_correctness to correctly warn when using vitest plugin (#​12991) (camc314)
• 1b0136e linter/exhaustive-deps: Use codegen in fixer rather than manual string manipulation (#​12987) (camc314)
• 2936545 linter/tsgolint: Report an error if tsgolint executable failed to spawn (#​12984) (camc314)
• 166f5cc linter: Fix no-fallthrough rule, when the default condition is not last (#​12927) (Li Wei)
• d7e1ddb linter/config: Ensure that overrides correctly replace base rules (#​12941) (camc314)
• a13b3ee oxlint: Run tsgolint.CMD under windows (#​12932) (Sysix)

🚜 Refactor

• 69303de oxlint: Pass DiagnosticService as a parameter for TsGoLintState.lint() (#​13004) (Sysix)

🧪 Testing

• fb8cbbf oxlint: Enable tsgolint test with config parameter for windows (#​13001) (Alexander S.)
• d59f3bb oxlint: Match x.ys when replacing var (#​12990) (camc314)
• 6b054b6 linter/expect-expect: Add test case for calling expect as return arg (#​12983) (camc314)
• d7cca12 linter: Add test for extended configs and overrides for tsgolint (#​12924) (camchenry)

vuejs/vitepress (vitepress)

v2.0.0-alpha.11

Compare Source

Bug Fixes

• hmr working only once for markdown files (8d8a5ac), closes #​4909
• html entities encoded twice in toc plugin (8abbe29), closes #​4908

v2.0.0-alpha.10

Compare Source

Bug Fixes

• client: base not stripped from relativePath in 404 pages (b840877), closes #​4850
• hmr of style blocks in dynamic routes (#​4903) (3d0fafb)
• make paths in watchedFiles absolute as mentioned in the docs (318c14f)
• module graph causing unnecessary route regeneration on every update (fc267ae)
• preserve externally added dynamic routes and pages (fc267ae)
• search: input placeholder being cut off in smaller viewports (162c6a6)
• search: style tweaks for when searches are empty (8b23217)
• types: externalize markdown-it types (5bf835b)
• types: pass generics deeply to user config (777e2ca)

Features

• add source param to the deadlink check fn (#​4870) (8c027c2)
• theme: add rel="me" to social links by default (#​4873) (34886c6)

yuyinws/vitepress-plugin-group-icons (vitepress-plugin-group-icons)

v1.6.3

Compare Source

   🚀 Features

• Support Ember  -  by @​gossi in https://github.com/yuyinws/vitepress-plugin-group-icons/issues/25 (60d83)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for oxc-project ready!

Name	Link
🔨 Latest commit	9a2204f
🔍 Latest deploy log	https://app.netlify.com/projects/oxc-project/deploys/68a20c841890ae0008ca5618
😎 Deploy Preview	https://deploy-preview-456--oxc-project.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.