Skip to content

feat(deps): upgrade upstream dependencies#1757

Closed
voidzero-guard[bot] wants to merge 1 commit into
mainfrom
deps/upstream-update
Closed

feat(deps): upgrade upstream dependencies#1757
voidzero-guard[bot] wants to merge 1 commit into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

@voidzero-guard voidzero-guard Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Automated daily upgrade of upstream dependencies.
  • Bumps rolldown to v1.1.0 (c462c7c) and updates the bundled rolldown version in @voidzero-dev/vite-plus-core to 1.1.0.
  • Bumps the oxc Rust crates from 0.133.0 to 0.134.0, along with oxc_resolver (11.19.1 -> 11.21.0) and oxc_sourcemap (6 -> 7).
  • Bumps the valibot catalog entry to 1.4.1 and adds 0.134.0 oxc packages to minimumReleaseAgeExclude in pnpm-workspace.yaml.

Dependency updates

Package From To
rolldown a287faa v1.1.0 (c462c7c)
oxc (Rust crates) 0.133.0 0.134.0
oxc_resolver 11.19.1 11.21.0
oxc_sourcemap 6 7
valibot 1.4.0 1.4.1
Unchanged dependencies
  • vite: v8.0.16 (f94df87)
  • vitest: 4.1.8
  • tsdown: 0.22.1
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0
  • oxfmt: 0.53.0
  • oxlint: 1.68.0
  • oxlint-tsgolint: 0.23.0
  • @oxc-project/runtime: 0.134.0
  • @oxc-project/types: 0.134.0
  • oxc-minify: 0.134.0
  • oxc-parser: 0.134.0
  • oxc-transform: 0.134.0
  • @vitejs/devtools: 0.3.1

Code changes

  • Cargo.toml: bump oxc and related crates to 0.134.0, oxc_resolver to 11.21.0, oxc_sourcemap to 7.
  • Cargo.lock: regenerate for the oxc/oxc_resolver/oxc_sourcemap updates (drops fancy-regex 0.17.0).
  • packages/core/package.json: bump bundledVersions.rolldown from 1.0.3 to 1.1.0.
  • packages/tools/.upstream-versions.json: bump tracked rolldown hash to c462c7c.
  • pnpm-workspace.yaml: bump valibot catalog entry to 1.4.1 and add oxc-minify/oxc-parser/oxc-transform/@oxc-project/* 0.134.0 packages to minimumReleaseAgeExclude.
  • pnpm-lock.yaml: regenerate for the valibot catalog bump.

Build status

  • sync-remote-and-build: success
  • build-upstream: failure

- rolldown: a287faa -> v1.1.0 (c462c7c)
- oxc Rust crates: 0.133.0 -> 0.134.0
- oxc_resolver: 11.19.1 -> 11.21.0
- oxc_sourcemap: 6 -> 7
- valibot: 1.4.0 -> 1.4.1

Code changes:
- Cargo.toml: bump oxc, oxc_resolver, oxc_sourcemap versions
- Cargo.lock: regenerate for oxc/oxc_resolver/oxc_sourcemap updates (drops fancy-regex 0.17.0)
- packages/core/package.json: bump bundledVersions.rolldown 1.0.3 -> 1.1.0
- packages/tools/.upstream-versions.json: bump rolldown hash to c462c7c
- pnpm-workspace.yaml: bump valibot catalog entry and add oxc 0.134.0 packages to minimumReleaseAgeExclude
- pnpm-lock.yaml: regenerate for valibot bump
@netlify

netlify Bot commented Jun 4, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit ed2764d
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a20dfb4df8c40000827f04f

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​oxc_allocator@​0.133.0 ⏵ 0.134.010010093100100
Updatedcargo/​oxc_ast@​0.133.0 ⏵ 0.134.010010093100100
Updatedcargo/​oxc_parser@​0.133.0 ⏵ 0.134.010010093100100
Updatedcargo/​oxc_resolver@​11.19.1 ⏵ 11.21.097 +110093100100
Updatedcargo/​oxc_span@​0.133.0 ⏵ 0.134.010010093100100

View full report

@fengmk2 fengmk2 self-assigned this Jun 4, 2026
@voidzero-guard voidzero-guard Bot closed this Jun 4, 2026
@voidzero-guard voidzero-guard Bot deleted the deps/upstream-update branch June 4, 2026 08:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant