fix(deps): update all non-major dependencies #188

renovate · 2025-08-04T03:31:43Z

This PR contains the following updates:

Package	Change	Age	Confidence
@farmfe/core	`2.0.0-nightly-20250411141103` -> `2.0.0-nightly-20250729025629`
@jridgewell/gen-mapping (source)	`^0.3.12` -> `^0.3.13`
@jridgewell/trace-mapping (source)	`^0.3.29` -> `^0.3.30`
@types/node (source)	`^24.2.0` -> `^24.2.1`
bumpp	`^10.2.2` -> `^10.2.3`
esbuild	`^0.25.8` -> `^0.25.9`
eslint (source)	`^9.32.0` -> `^9.33.0`
rolldown (source)	`1.0.0-beta.31` -> `1.0.0-beta.32`
sass	`^1.89.2` -> `^1.90.0`
tsdown	`^0.13.3` -> `^0.14.1`
unplugin-oxc	`^0.4.8` -> `^0.5.0`
vite (source)	`^7.0.6` -> `^7.1.2`
webpack	`^5.101.0` -> `^5.101.1`

Release Notes

farm-fe/farm (@farmfe/core)

`v2.0.0-nightly-20250729025629`

Compare Source

jridgewell/sourcemaps (@jridgewell/gen-mapping)

`v0.3.13`

Compare Source

Use default subpath export: jridgewell/sourcemaps@aab8d72
Transform export default into module.exports = in UMD plugin: jridgewell/sourcemaps@cf85c75

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.12...gen-mapping/0.3.13

jridgewell/sourcemaps (@jridgewell/trace-mapping)

`v0.3.30`

Compare Source

Use default subpath export: jridgewell/sourcemaps@aab8d72
Transform export default into module.exports = in UMD plugin: jridgewell/sourcemaps@cf85c75

Full Changelog: jridgewell/sourcemaps@trace-mapping/0.3.29...trace-mapping/0.3.30

antfu-collective/bumpp (bumpp)

`v10.2.3`

Compare Source

🐞 Bug Fixes

Add missing -a alias support for --all - by @kingyue737 in https://github.com/antfu-collective/bumpp/issues/93 (7c0bb)

View changes on GitHub

evanw/esbuild (esbuild)

`v0.25.9`

Compare Source

Better support building projects that use Yarn on Windows (#3131, #3663)

With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:
1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
2. Some developers put their projects on the D: drive
3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
5. I didn't have access to a Windows machine for testing this edge case
Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.
Preserve parentheses around function expressions (#4252)

The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:
```
// Original code
const fn0 = () => 0
const fn1 = (() => 1)
console.log(fn0, function() { return fn1() }())

// Old output
const fn0 = () => 0;
const fn1 = () => 1;
console.log(fn0, function() {
  return fn1();
}());

// New output
const fn0 = () => 0;
const fn1 = (() => 1);
console.log(fn0, (function() {
  return fn1();
})());
```
Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.
Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

eslint/eslint (eslint)

`v9.33.0`

Compare Source

sass/dart-sass (sass)

`v1.90.0`

Compare Source

Allow a @forwarded module to be loaded with a configuration when that module
has already been loaded with a different configuration and the module
doesn't define any variables that would have been configured anyway.

rolldown/tsdown (tsdown)

`v0.14.1`

Compare Source

🐞 Bug Fixes

Remove expandDirectories - by @Debbl in https://github.com/rolldown/tsdown/issues/427 (fb2d1)

View changes on GitHub

`v0.14.0`

Compare Source

🚨 Breaking Changes

Disable expandDirectories for matching fast-glob's behavior - by @sxzz (8171b)

View changes on GitHub

`v0.13.5`

Compare Source

🐞 Bug Fixes

Use latest rolldown - by @sxzz (8ae72)

View changes on GitHub

`v0.13.4`

Compare Source

🚀 Features

Add failOnWarn option - by @Gugustinette in https://github.com/rolldown/tsdown/issues/411 (d7d49)
Add cjsDefault option - by @sxzz (f503f)

🐞 Bug Fixes

Suppress mixed export warnings if cjsDefault is enabled - by @sxzz (3ffa9)

View changes on GitHub

unplugin/unplugin-oxc (unplugin-oxc)

`v0.5.0`

Compare Source

🚨 Breaking Changes

Wider oxc requirement - by @sxzz (cc132)
Require node 20.19 - by @sxzz (48d96)

🐞 Bug Fixes

deps: Update all non-major dependencies - in https://github.com/unplugin/unplugin-oxc/issues/19 (6cc1a)

View changes on GitHub

`v0.4.9`

Compare Source

🚀 Features

Upgrade oxc toolchains - by @sxzz (1ab38)

🐞 Bug Fixes

deps:
- Update all non-major dependencies - in https://github.com/unplugin/unplugin-oxc/issues/17 (a0330)
- Update all non-major dependencies - in https://github.com/unplugin/unplugin-oxc/issues/18 (0563b)

View changes on GitHub

vitejs/vite (vite)

`v7.1.2`

Compare Source

Bug Fixes

client: add [vite] prefixes to debug logs (#20595) (7cdef61)
config: make debugger work with bundle loader (#20573) (c583927)
deps: update all non-major dependencies (#20587) (20d4817)
don't consider ids with npm: prefix as a built-in module (#20558) (ab33803)
hmr: watch non-inlined assets referenced by CSS (#20581) (b7d494b)
module-runner: prevent crash when sourceMappingURL pattern appears in string literals (#20554) (2770478)

Miscellaneous Chores

deps: migrate to @jridgewell/remapping from @ampproject/remapping (#20577) (0a6048a)
deps: update rolldown-related dependencies (#20586) (77632c5)

`v7.1.1`

Compare Source

Bug Fixes

deps: update launch-editor-middleware (#20569) (826b394)

Miscellaneous Chores

fix changelog beta links (#20561) (2e0c21a)
update 7.1 changelog (#20560) (d8869b8)

`v7.1.0`

Compare Source

Features

support files with more than 1000 lines by generateCodeFrame (#20508) (e7d0b2a)

Bug Fixes

css: avoid warnings for image-set containing __VITE_ASSET__ (#20520) (f1a2635)
css: empty CSS entry points should generate CSS files, not JS files (#20518) (bac9f3e)
dev: denied request stalled when requested concurrently (#20503) (64a52e7)
manifest: initialize entryCssAssetFileNames as an empty Set (#20542) (6a46cda)
skip prepareOutDirPlugin in workers (#20556) (97d5111)

Tests

detect ts support via process.features (#20544) (856d3f0)
fix unimportant errors in test-unit (#20545) (1f23554)

webpack/webpack (webpack)

`v5.101.1`

Compare Source

Fixes

Filter deleted assets in processAdditionalAssets hook
HMR failure in defer module
Emit assets even if invalidation occurs again
Export types for serialization and deserialization in plugins and export the ModuleFactory class
Fixed the failure export of internal function for ES module chunk format
Fixed GetChunkFilename failure caused by dependOn entry
Fixed the import of missing dependency chunks
Fixed when entry chunk depends on the runtime chunk hash
Fixed module.exports bundle to ESM library
Adjusted the time of adding a group depending on the fragment of execution time
Fixed circle dependencies when require RawModule and condition of isDeferred
Tree-shakable module library should align preconditions of allowInlineStartup

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2025-08-04T03:31:46Z

Run & review this pull request in StackBlitz Codeflow.

pkg-pr-new · 2025-08-04T03:32:26Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-vue@188

commit: 75148a7

socket-security · 2025-08-08T05:13:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
esbuild@0.25.8 ⏵ 0.25.9			⁺³
@farmfe/core@2.0.0-nightly-20250411141103 ⏵ 2.0.0-nightly-20250729025629		⁺¹	⁺²
@types/node@24.2.0 ⏵ 24.2.1			⁺¹
bumpp@10.2.2 ⏵ 10.2.3	⁺¹		⁺³
@jridgewell/trace-mapping@0.3.29 ⏵ 0.3.30	⁺¹	⁺¹	⁺⁵
@jridgewell/gen-mapping@0.3.12 ⏵ 0.3.13	⁺¹	⁺¹	⁺⁵
sass@1.89.2 ⏵ 1.90.0
eslint@9.32.0 ⏵ 9.33.0	⁺¹		⁺²

View full report

renovate bot added the dependencies label Aug 4, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 7340f05 to 1f546ae Compare August 5, 2025 06:37

renovate bot changed the title ~~fix(deps): update all non-major dependencies~~ chore(deps): update dependency @farmfe/core to v2.0.0-nightly-20250729025629 Aug 5, 2025

renovate bot force-pushed the renovate/all-minor-patch branch from 1f546ae to 77445f6 Compare August 5, 2025 06:39

sxzz force-pushed the main branch from 8cbbbec to 106a187 Compare August 5, 2025 07:59

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 8437f2f to 7d3db18 Compare August 5, 2025 10:23

renovate bot changed the title ~~chore(deps): update dependency @farmfe/core to v2.0.0-nightly-20250729025629~~ chore(deps): update all non-major dependencies Aug 5, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d51daac to 594d842 Compare August 7, 2025 09:05

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Aug 7, 2025

renovate bot force-pushed the renovate/all-minor-patch branch from 594d842 to d6b2f11 Compare August 8, 2025 05:13

renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 5264693 to ebfd8b3 Compare August 13, 2025 03:02

fix(deps): update all non-major dependencies

75148a7

renovate bot force-pushed the renovate/all-minor-patch branch from ebfd8b3 to 75148a7 Compare August 13, 2025 15:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #188

fix(deps): update all non-major dependencies #188

renovate bot commented Aug 4, 2025 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Aug 4, 2025

Uh oh!

pkg-pr-new bot commented Aug 4, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Aug 8, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #188

Are you sure you want to change the base?

fix(deps): update all non-major dependencies #188

Conversation

renovate bot commented Aug 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐞 Bug Fixes

🐞 Bug Fixes

🚨 Breaking Changes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚨 Breaking Changes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Tests

Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Aug 4, 2025

Uh oh!

pkg-pr-new bot commented Aug 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Aug 4, 2025 •

edited

Loading

pkg-pr-new bot commented Aug 4, 2025 •

edited

Loading

socket-security bot commented Aug 8, 2025 •

edited

Loading