fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/vite-plugin (source)	^1.9.4 -> ^1.10.0
@rolldown/pluginutils (source)	1.0.0-beta.27 -> 1.0.0-beta.29
@types/node (source)	^22.16.3 -> ^22.16.5
rolldown (source)	1.0.0-beta.27 -> 1.0.0-beta.29
tsdown	^0.12.9 -> ^0.13.0
typescript-eslint (source)	^8.37.0 -> ^8.38.0
vite (source)	^7.0.9 -> ^7.0.10
vite (source)	^7.0.4 -> ^7.0.5
wrangler (source)	^4.24.3 -> ^4.25.1

---

Release Notes

cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.10.0

Compare Source

Minor Changes

• #​10001 5796ca9 Thanks @​jamesopstad! - We now automatically inject the following HMR code into your Worker entry file:

  if (import.meta.hot) {
  	import.meta.hot.accept();
  }

  This prevents file changes from invalidating the full module graph and improves HMR performance in development.

Patch Changes

• #​10038 a355327 Thanks @​emily-shen! - Resolve containers.image (if it is a path to a Dockerfile) to an absolute path in the deploy config.

• #​9891 dd416e9 Thanks @​hi-ogawa! - set build.rollupOptions.platform: "neutral" on rolldown-vite to prevent Rolldown's node:module based require polyfill from breaking the build.

• #​9819 0c4008c Thanks @​CarmenPopoviciu! - feat(vite-plugin): Add containers support in vite dev

  Adds support for Cloudflare Containers in vite dev. Please note that at the time of this PR a container image can only specify the path to a Dockerfile. Support for registry links will be added in a later version, as will containers support in vite preview.

• Updated dependencies [189fe23, c02b067, 7e5585d, b0217f9, e87198a, ad02ad3, 0c4008c]:

  • @​cloudflare/unenv-preset@​2.4.0
  • [email protected]
  • [email protected]

v1.9.6

Compare Source

Patch Changes

• Updated dependencies [6cc24c0, 9f0c175]:
  • [email protected]

v1.9.5

Compare Source

Patch Changes

• #​9847 14ce577 Thanks @​penalosa! - Upgrade Undici

• Updated dependencies [ac08e68, 4ba9f25, 17b1e5a, 3bb69fa, 274a826, 77d1cb2, d6a1b9b, e2672c5, a5d7b35, 5b0fc9e, bf4c9ab, 14ce577, f73da0d]:

  • [email protected]
  • [email protected]

rolldown/rolldown (@​rolldown/pluginutils)

v1.0.0-beta.29

Compare Source

🚀 Features

• rolldown_plugin_chunk_import_map: support custom file name (#​5383) by @​shulaoda
• rolldown_plugin_chunk_import_map: emit standard import map (#​5382) by @​shulaoda
• rolldown_plugin_chunk_import_map: support custom base url (#​5381) by @​shulaoda
• support plugin context meta for native plugins (#​5371) by @​shulaoda
• rolldown: oxc v0.77.3 (#​5367) by @​Boshen
• rolldown_plugin_transform: align sourcemap enable logic (#​5348) by @​shulaoda
• plugin_driver: use hook usage for close_bundle (#​5361) by @​shulaoda
• hmr: attach region comments for hmr patch (#​5358) by @​hyf0
• rolldown: add transformHiresSourcemap option (#​5346) by @​Brooooooklyn
• rolldown_plugin_web_worker_post: align transform_ast hook metadata order to post (#​5339) by @​shulaoda

🐛 Bug Fixes

• when preserveEntrySignatures: false is set, output includes a circular import (#​5365) by @​IWANABETHATGUY
• do not normalize iife global names (#​5228) by @​redstonekasi
• hmr: should not panic for editing modules that contain import(..) (#​5351) by @​hyf0
• sync ast for newly added modules (#​5354) by @​IWANABETHATGUY
• used exports from dynamic imported module are removed incorrectly (#​5341) by @​IWANABETHATGUY
• keep top level variables for non-esm format when minify is enabled (#​5332) by @​sapphi-red
• rust: correctly return watch option (#​5334) by @​HigherOrderLogic

🚜 Refactor

• rolldown_plugin_chunk_import_map: clarify import map paths and output filename (#​5376) by @​shulaoda
• rolldown: collapse_sourcemaps does not need to own a Vec (#​5352) by @​Boshen
• rolldown_plugin_asset: improve readability for easier maintenance (#​5359) by @​shulaoda
• ecmascript: remove unnecessary allocator.alloc(program) call (#​5350) by @​Boshen
• store ast with same shape as module_table (#​5345) by @​IWANABETHATGUY
• simplify is_dynamic_entry_alive (#​5342) by @​IWANABETHATGUY
• rolldown_plugin_web_worker_post: tweak code organization (#​5338) by @​shulaoda
• store ScopeFlags instead of ScopeId when traverse ast (#​5330) by @​IWANABETHATGUY
• simplify keep_names VarDeclaration rewrite (#​5325) by @​IWANABETHATGUY

📚 Documentation

• experimental: update the description of chunkImportMap (#​5384) by @​shulaoda
• experiment: add usage documentation for chunkImportMap (#​5379) by @​shulaoda

⚡ Performance

• plugin_driver: skip unused hooks early based on hook usage meta (#​5363) by @​shulaoda
• rolldown: box TransformOptions (#​5353) by @​Boshen

🧪 Testing

• rust: hide runtime module output in snapshots to improve clarity (#​5366) by @​hyf0
• node: put minify related tests in a single directory (#​5333) by @​sapphi-red

⚙️ Miscellaneous Tasks

• examples: update chunk-import-map (#​5385) by @​shulaoda
• add examples/chunk-import-map (#​5380) by @​shulaoda
• deps: lock file maintenance (#​5373) by @​renovate[bot]
• deps: lock file maintenance rust crates (#​5372) by @​renovate[bot]
• deps: lock file maintenance npm packages (#​5370) by @​renovate[bot]
• deps: update dependency @​napi-rs/wasm-runtime to v1 (#​5369) by @​renovate[bot]
• deps: update taiki-e/install-action action to v2.56.19 (#​5368) by @​renovate[bot]
• extract HookOrderIndicates logic (#​5362) by @​shulaoda
• rust: remove unnecessary #[allow(unused)] (#​5360) by @​shulaoda
• deps: update dependency rolldown-plugin-dts to v0.14.1 (#​5357) by @​renovate[bot]
• use debug=1 for profile.dev and profile.test (#​5355) by @​IWANABETHATGUY
• deps: update dependency rolldown-plugin-dts to ^0.14.0 (#​5349) by @​renovate[bot]
• remove packages/rolldown/npm/* from workspace config (#​5347) by @​Brooooooklyn
• pnpm,justfile: enable pnpm verifyDepsBeforeRun: install (#​5331) by @​Boshen
• update build-js-glue script (#​5335) by @​btea

◀️ Revert

• test(rust): prevent meaningless snapshot change from bumping oxc runtime versions #​5312 (#​5336) by @​hyf0

❤️ New Contributors

• @​redstonekasi made their first contribution in #​5228
• @​HigherOrderLogic made their first contribution in #​5334

v1.0.0-beta.28

Compare Source

🚀 Features

• rolldown: oxc v0.77.2 (#​5328) by @​Boshen
• hmr: add module and exports parameters to CJS initializer functions (#​5322) by @​hyf0
• rolldown_plugin_transform: align with vitejs/rolldown-vite#318 (#​5318) by @​shulaoda
• rolldown_plugin_transform: align with vitejs/rolldown-vite#315 (#​5315) by @​shulaoda
• hmr: automatically disable treeshaking in hmr (#​5311) by @​hyf0
• hmr: use trait HmrAstBuilder to unify ast construction (#​5310) by @​hyf0
• rolldown_plugin_chunk_import_map: basic implementation (#​5307) by @​shulaoda
• add watch.onInvalidate (#​5239) by @​situ2001
• rolldown_plugin_chunk_import_map: implement initial render_chunk logic (#​5306) by @​shulaoda
• rolldown: oxc v0.77.1 (#​5304) by @​Boshen
• js: expose experimental.incrementalBuild option (#​5300) by @​IWANABETHATGUY
• js: support experimental.onDemandWrapping option (#​5299) by @​IWANABETHATGUY
• support on demand wrapping for entry chunk (#​5291) by @​IWANABETHATGUY
• rolldown_plugin_chunk_import_map: initialize (#​5289) by @​shulaoda
• show owner module id for "canonical name not found for" errors (#​5288) by @​sapphi-red

🐛 Bug Fixes

• only transform VarDeclaration when enable keepNames (#​5323) by @​IWANABETHATGUY
• keepNames with special Ifstmt (#​5320) by @​IWANABETHATGUY
• incremental watch panic when adding dynamic import (#​5309) by @​IWANABETHATGUY
• make leaf module wrapping optimization opt-in (#​5305) by @​IWANABETHATGUY
• keepNames should consider exportNamed function declaration (#​5298) by @​IWANABETHATGUY
• undefined process.versions for browser build (#​5295) by @​sxzz
• sanitizeFileName: entry name should be sanitized (#​5283) by @​shulaoda
• minify-internal-exports: ensure minifying internal exports stably (#​5281) by @​hyf0
• keep legal and annotation comments for minify: 'dce-only' (#​5280) by @​sapphi-red
• unstable chunk generation when preserveEntrySignatures: false is used (#​5274) by @​IWANABETHATGUY

🚜 Refactor

• pass the while CodegenOptions to EcmaCompiler::minify (#​5279) by @​sapphi-red
• avoid iterate canonical_exports twice (#​5276) by @​IWANABETHATGUY

📚 Documentation

• pluginutils: add README file (#​5262) by @​TheAlexLichter

⚡ Performance

• inline function expression when rewriting name property with keepNames enabled (#​5321) by @​IWANABETHATGUY
• rolldown_sourcemap: cache source id -> source text mapping (#​5285) by @​Boshen
• rolldown_sourcemap: disable rayon (#​5284) by @​Boshen

🧪 Testing

• rust: prevent meaningless snapshot change from bumping oxc runtime versions (#​5312) by @​hyf0

⚙️ Miscellaneous Tasks

• upgrade to NAPI-RS 3.0 stable (#​5324) by @​Brooooooklyn
• infra: add onlyBuiltDependencies (#​5287) by @​situ2001
• improve the order of import keys in the exports field (#​5314) by @​btea
• deps: update dependency rolldown-plugin-dts to v0.13.14 (#​5293) by @​renovate[bot]
• deps: lock file maintenance rust crates (#​5267) by @​renovate[bot]
• deps: lock file maintenance npm packages (#​5266) by @​renovate[bot]
• deps: update github-actions (#​5265) by @​renovate[bot]

❤️ New Contributors

• @​situ2001 made their first contribution in #​5287

rolldown/tsdown (tsdown)

v0.13.0

Compare Source

   🚨 Breaking Changes

• Drop node 18, require node 20.19+  -  by @​sxzz (d80f7)
• Reuse generated dts by default  -  by @​sxzz (81f21)

   🚀 Features

• Add banner & footer options  -  by @​gwansikk and @​sxzz in https://github.com/rolldown/tsdown/issues/338 (54e21)
• Add cjsDts to input/output options context  -  by @​sxzz (3c4b3)
• Export types  -  by @​sxzz (f13bc)

   🐞 Bug Fixes

• Don't external shim file  -  by @​sxzz (8ee20)
• report: Path separator  -  by @​sxzz (6e11a)
• types: Keep type of options  -  by @​posva in https://github.com/rolldown/tsdown/issues/381 (00b5d)
• workspace: Normalize windows path  -  by @​RSS1102 in https://github.com/rolldown/tsdown/issues/376 (375d9)

    View changes on GitHub

typescript-eslint/typescript-eslint (typescript-eslint)

v8.38.0

Compare Source

🩹 Fixes

• typescript-eslint: error on nested extends in tseslint.config() (#​11361)
• typescript-eslint: infer tsconfigRootDir with v8 API (#​11412)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

vitejs/rolldown-vite (vite)

v7.0.10

Compare Source

Features

• update rolldown (2bbf424)
• warn when esbuild: false is set but oxc: false is not set (24c0417)

Bug Fixes

• deps: update all non-major dependencies (#​20406) (1a1cc8a)
• remove special handling for Accept: text/html (#​20376) (c9614b9)
• watch assets referenced by new URL(, import.meta.url) (#​20382) (6bc8bf6)

Miscellaneous Chores

• deps: update dependency rolldown to ^1.0.0-beta.27 (#​20405) (1165667)

Code Refactoring

• use foo.endsWith("bar") instead of /bar$/.test(foo) (#​20413) (862e192)
• use environment transform request (#​20430) (24e6a0c)

vitejs/vite (vite)

v7.0.5

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​20406) (1a1cc8a)
• remove special handling for Accept: text/html (#​20376) (c9614b9)
• watch assets referenced by new URL(, import.meta.url) (#​20382) (6bc8bf6)

Miscellaneous Chores

• deps: update dependency rolldown to ^1.0.0-beta.27 (#​20405) (1165667)

Code Refactoring

• use foo.endsWith("bar") instead of /bar$/.test(foo) (#​20413) (862e192)

cloudflare/workers-sdk (wrangler)

v4.25.1

Compare Source

Patch Changes

• #​10000 c02b067 Thanks @​emily-shen! - Include more (sanitised) user errors in telemetry.

  We manually vet and sanitised error messages before including them in our telemetry collection - this PR just includes a couple more.

• #​9996 b0217f9 Thanks @​nikitassharma! - Disallow users from pushing images with unsupported platforms to the container image registry

• #​10009 e87198a Thanks @​gpanders! - Fix containers diff output when using JSONC config files

• #​9976 ad02ad3 Thanks @​dario-piotrowicz! - add warning for when users run wrangler dev --remote with (enabled) containers

• #​9819 0c4008c Thanks @​CarmenPopoviciu! - feat(vite-plugin): Add containers support in vite dev

  Adds support for Cloudflare Containers in vite dev. Please note that at the time of this PR a container image can only specify the path to a Dockerfile. Support for registry links will be added in a later version, as will containers support in vite preview.

• Updated dependencies [189fe23, 7e5585d]:

  • @​cloudflare/unenv-preset@​2.4.0
  • [email protected]

v4.25.0

Compare Source

Minor Changes

• #​9835 9f0c175 Thanks @​thomasgauvin! - Added rename namespace command to Workers KV

Patch Changes

• #​9934 6cc24c0 Thanks @​emily-shen! - Add more thorough validation to containers configuration

v4.24.4

Compare Source

Patch Changes

• #​9905 4ba9f25 Thanks @​dom96! - Support for Python packages in python_modules dir

• #​9886 17b1e5a Thanks @​dom96! - Python packages are now read from cf-requirements.txt instead of requirements.txt by default

• #​9899 d6a1b9b Thanks @​simonabadoiu! - Print local mode when running a browser binding in local mode

• #​9951 e2672c5 Thanks @​penalosa! - Recommend remote bindings when wrangler dev --remote is used

• #​9875 a5d7b35 Thanks @​gpanders! - Show expected format in error message for "containers images delete"

• #​9954 bf4c9ab Thanks @​penalosa! - Support Images binding in getPlatformProxy()

• #​9847 14ce577 Thanks @​penalosa! - Upgrade Undici

• #​9974 f73da0d Thanks @​penalosa! - Pass worker name & compliance region through correctly when starting a remote bindings session

• Updated dependencies [ac08e68, 3bb69fa, 274a826, 77d1cb2, 5b0fc9e, bf4c9ab, 14ce577]:

  • [email protected]

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.