fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sxzz/eslint-config	^7.0.1 -> ^7.0.2
@types/node (source)	^22.15.21 -> ^22.15.29
esbuild	^0.25.4 -> ^0.25.5
eslint (source)	^9.27.0 -> ^9.28.0
tsdown	^0.12.3 -> ^0.12.6
unplugin (source)	^2.3.4 -> ^2.3.5

---

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.0.2

Compare Source

No significant changes

    View changes on GitHub

evanw/esbuild (esbuild)

v0.25.5

Compare Source

• Fix a regression with browser in package.json (#​4187)

  The fix to #​4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the [email protected] package. This regression has been fixed, and now has test coverage.

• Add support for certain keywords as TypeScript tuple labels (#​4192)

  Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:

  type Foo = [
    value: any,
    readonly?: boolean, // This is now parsed correctly
  ]

• Add CSS prefixes for the stretch sizing value (#​4184)

  This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:

  div {
    width: -webkit-fill-available;
    width: -moz-available;
    width: stretch;
  }

eslint/eslint (eslint)

v9.28.0

Compare Source

rolldown/tsdown (tsdown)

v0.12.6

Compare Source

   🚀 Features

• Integrate attw  -  by @​gaoachao and @​sxzz in https://github.com/rolldown/tsdown/issues/279 (9ea37)

   🐞 Bug Fixes

• Kill process signal  -  by @​sxzz (281e0)

    View changes on GitHub

v0.12.5

Compare Source

   🚀 Features

• Upgrade rolldown  -  by @​sxzz (1e50a)
• Add abort controller for onSuccess  -  by @​sebasptsch in https://github.com/rolldown/tsdown/issues/282 (4db20)

   🐞 Bug Fixes

• Remove node protocol for internal polyfill  -  by @​sxzz (5a618)
• hooks: Move pkg to options  -  by @​sxzz (faff9)

    View changes on GitHub

v0.12.4

Compare Source

   🚀 Features

• Upgrade rolldown  -  by @​sxzz (012b9)
• Defaults entry to src/index.ts if exists  -  by @​gaoachao and @​sxzz in https://github.com/rolldown/tsdown/issues/266 (0b3ea)

   🐞 Bug Fixes

• Set platform to node for CJS format  -  by @​sxzz (747f5)

    View changes on GitHub

unjs/unplugin (unplugin)

v2.3.5

Compare Source

   🐞 Bug Fixes

• rspack: Prevent vfs concurrency issues for parallel builds  -  by @​elbywan in https://github.com/unjs/unplugin/issues/510 (43e58)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	esbuild@​0.25.4 ⏵ 0.25.5
	rolldown@​1.0.0-beta.9-commit.d91dfb5 ⏵ 1.0.0-beta.10-commit.bf212da	+1
	@​types/​node@​22.15.21 ⏵ 22.15.29	+1		+1
	@​sxzz/​eslint-config@​7.0.1 ⏵ 7.0.2	-1		+1	+2
	unplugin@​2.3.4 ⏵ 2.3.5
	tsdown@​0.12.3 ⏵ 0.12.6	+1		+1	+1
	eslint@​9.27.0 ⏵ 9.28.0				+2

View full report