Merge remote-tracking branch 'origin/main' into feat/node-native-http-loader

ScriptedAlchemy · ScriptedAlchemy · commit f61310070c9d · 2026-07-06T02:46:03.000Z
# Conflicts:
#	pnpm-lock.yaml
diff --git a/.changeset/drop-resolve-extractor.md b/.changeset/drop-resolve-extractor.md
@@ -0,0 +1,5 @@
+---
+'@module-federation/third-party-dts-extractor': patch
+---
+
+chore(third-party-dts-extractor): replace `resolve` with `exsolve` (0 transitive deps, ~100KB smaller) for the single `package.json` lookup.
diff --git a/.changeset/node-esm-builtin-loader.md b/.changeset/node-esm-builtin-loader.md
@@ -0,0 +1,5 @@
+---
+"@module-federation/sdk": patch
+---
+
+Handle Node.js built-in imports in the Node ESM remote loader.
diff --git a/.changeset/small-deps-consolidated.md b/.changeset/small-deps-consolidated.md
@@ -0,0 +1,9 @@
+---
+'@module-federation/devtools': patch
+'@module-federation/treeshake-server': patch
+'@module-federation/rspress-plugin': patch
+'create-module-federation': patch
+'@module-federation/third-party-dts-extractor': patch
+---
+
+Bump runtime dependencies: echarts 6.1.0 (devtools), hono 4.12.26 and @hono/node-server 1.19.13 (treeshake-server), lodash-es 4.18.1 (rspress-plugin), handlebars 4.7.9 (create-module-federation), resolve 1.22.12 (third-party-dts-extractor).
diff --git a/apps/3000-home/package.json b/apps/3000-home/package.json
@@ -6,7 +6,7 @@
   "dependencies": {
     "@ant-design/cssinjs": "^1.21.0",
     "antd": "5.19.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "next": "14.2.35",
     "react": "18.3.1",
     "react-dom": "18.3.1"
diff --git a/apps/3001-shop/package.json b/apps/3001-shop/package.json
@@ -6,7 +6,7 @@
   "dependencies": {
     "@ant-design/cssinjs": "^1.21.0",
     "antd": "5.19.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "next": "14.2.35",
     "react": "18.3.1",
     "react-dom": "18.3.1"
diff --git a/apps/3002-checkout/package.json b/apps/3002-checkout/package.json
@@ -6,7 +6,7 @@
   "dependencies": {
     "@ant-design/cssinjs": "^1.21.0",
     "antd": "5.19.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "next": "14.2.35",
     "react": "18.3.1",
     "react-dom": "18.3.1"
diff --git a/apps/manifest-demo/3011-rspack-manifest-provider/package.json b/apps/manifest-demo/3011-rspack-manifest-provider/package.json
@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "antd": "4.24.15",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "react": "18.3.1",
     "react-dom": "18.3.1"
   },
diff --git a/apps/manifest-demo/3012-rspack-js-entry-provider/package.json b/apps/manifest-demo/3012-rspack-js-entry-provider/package.json
@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "antd": "4.24.15",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "react": "18.3.1",
     "react-dom": "18.3.1"
   },
diff --git a/apps/metro-example-host/e2e/flows/core.yaml b/apps/metro-example-host/e2e/flows/core.yaml
@@ -10,7 +10,7 @@ appId: com.mf.example.host
 - copyTextFrom:
     id: 'host-lodash'
 - assertTrue:
-    condition: ${maestro.copiedText === "4.17.23"}
+    condition: ${maestro.copiedText === "4.18.1"}
 
 # Check Mini App Info
 - assertNotVisible:
@@ -28,12 +28,12 @@ appId: com.mf.example.host
 - copyTextFrom:
     id: 'mini-lodash'
 - assertTrue:
-    condition: ${maestro.copiedText === "4.17.23"}
+    condition: ${maestro.copiedText === "4.18.1"}
 
 # Check Nested Mini App Info
 - assertVisible:
     id: 'nested-mini-info'
 - copyTextFrom:
     id: 'nested-mini-lodash'
 - assertTrue:
-    condition: ${maestro.copiedText === "4.17.23"}
+    condition: ${maestro.copiedText === "4.18.1"}
diff --git a/apps/metro-example-host/metro.config.js b/apps/metro-example-host/metro.config.js
@@ -47,8 +47,8 @@ module.exports = withModuleFederation(
       lodash: {
         singleton: false,
         eager: false,
-        requiredVersion: '4.17.23',
-        version: '4.17.23',
+        requiredVersion: '4.18.1',
+        version: '4.18.1',
       },
     },
     shareStrategy: 'loaded-first',
diff --git a/apps/metro-example-host/package.json b/apps/metro-example-host/package.json
@@ -21,7 +21,7 @@
     "e2e:run:android": "maestro --platform=android test e2e"
   },
   "dependencies": {
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "react": "19.1.0",
     "react-native": "0.80.0"
   },
@@ -46,7 +46,7 @@
     "@types/lodash": "^4",
     "@types/react": "^19.1.0",
     "@types/react-test-renderer": "^19.1.0",
-    "eslint": "^9.26.0",
+    "eslint": "^8.57.0",
     "jest": "^29.6.3",
     "nodemon": "^3.1.9",
     "prettier": "2.8.8",
diff --git a/apps/metro-example-host/rock.config.mjs b/apps/metro-example-host/rock.config.mjs
@@ -14,4 +14,18 @@ export default {
   },
   remoteCacheProvider: providerGitHub(),
   plugins: [pluginMetroModuleFederation()],
+  fingerprint: {
+    // The Release build embeds the JS bundle in the binary, so the remote
+    // build cache must be busted whenever the JS side changes (e.g. a lodash
+    // bump), not only when native sources change.
+    extraSources: [
+      'package.json',
+      'metro.config.js',
+      'babel.config.js',
+      'app.json',
+      'index.js',
+      'runtime-plugin.ts',
+      'src',
+    ],
+  },
 };
diff --git a/apps/metro-example-mini/metro.config.js b/apps/metro-example-mini/metro.config.js
@@ -48,7 +48,7 @@ module.exports = withModuleFederation(
       lodash: {
         singleton: false,
         eager: false,
-        version: '4.17.23',
+        version: '4.18.1',
       },
     },
     shareStrategy: 'version-first',
diff --git a/apps/metro-example-mini/package.json b/apps/metro-example-mini/package.json
@@ -19,7 +19,7 @@
     "adbreverse": "adb reverse tcp:8082 tcp:8082"
   },
   "dependencies": {
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "react": "19.1.0",
     "react-native": "0.80.0"
   },
@@ -44,7 +44,7 @@
     "@types/lodash": "^4",
     "@types/react": "^19.1.0",
     "@types/react-test-renderer": "^19.1.0",
-    "eslint": "^9.26.0",
+    "eslint": "^8.57.0",
     "jest": "^29.6.3",
     "nodemon": "^3.1.9",
     "prettier": "2.8.8",
diff --git a/apps/metro-example-nested-mini/metro.config.js b/apps/metro-example-nested-mini/metro.config.js
@@ -51,8 +51,8 @@ module.exports = withModuleFederation(
       lodash: {
         singleton: false,
         eager: false,
-        requiredVersion: '4.17.23',
-        version: '4.17.23',
+        requiredVersion: '4.18.1',
+        version: '4.18.1',
       },
     },
     shareStrategy: 'version-first',
diff --git a/apps/metro-example-nested-mini/package.json b/apps/metro-example-nested-mini/package.json
@@ -19,7 +19,7 @@
     "adbreverse": "adb reverse tcp:8083 tcp:8083"
   },
   "dependencies": {
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "react": "19.1.0",
     "react-native": "0.80.0"
   },
@@ -43,7 +43,7 @@
     "@types/lodash": "^4",
     "@types/react": "^19.1.0",
     "@types/react-test-renderer": "^19.1.0",
-    "eslint": "^9.26.0",
+    "eslint": "^8.57.0",
     "jest": "^29.6.3",
     "nodemon": "^3.1.9",
     "prettier": "2.8.8",
diff --git a/apps/next-app-router/next-app-router-4000/package.json b/apps/next-app-router/next-app-router-4000/package.json
@@ -24,7 +24,7 @@
     "*": "prettier --write --ignore-unknown"
   },
   "dependencies": {
-    "@heroicons/react": "2.1.3",
+    "@heroicons/react": "2.2.0",
     "@module-federation/nextjs-mf": "workspace:*",
     "clsx": "2.1.1",
     "date-fns": "3.6.0",
diff --git a/apps/next-app-router/next-app-router-4001/package.json b/apps/next-app-router/next-app-router-4001/package.json
@@ -24,7 +24,7 @@
     "*": "prettier --write --ignore-unknown"
   },
   "dependencies": {
-    "@heroicons/react": "2.1.3",
+    "@heroicons/react": "2.2.0",
     "@module-federation/nextjs-mf": "workspace:*",
     "clsx": "2.1.1",
     "date-fns": "3.6.0",
@@ -50,7 +50,7 @@
     "eslint": "9.26.0",
     "eslint-config-next": "16.0.10",
     "lint-staged": "15.2.2",
-    "postcss": "8.4.38",
+    "postcss": "8.5.10",
     "prettier": "3.2.5",
     "prettier-plugin-tailwindcss": "0.5.14",
     "tailwindcss": "3.4.3",
diff --git a/apps/node-dynamic-remote-new-version/package.json b/apps/node-dynamic-remote-new-version/package.json
@@ -4,7 +4,7 @@
   "description": "Federation example for node-dynamic-remote-new-version",
   "dependencies": {
     "@module-federation/node": "workspace:*",
-    "lodash": "4.17.23"
+    "lodash": "4.18.1"
   },
   "version": "1.0.12",
   "scripts": {
diff --git a/apps/node-dynamic-remote/package.json b/apps/node-dynamic-remote/package.json
@@ -4,7 +4,7 @@
   "description": "Federation example for node-dynamic-remote",
   "dependencies": {
     "@module-federation/node": "workspace:*",
-    "lodash": "4.17.23"
+    "lodash": "4.18.1"
   },
   "version": "1.0.12",
   "scripts": {
diff --git a/apps/router-demo/router-host-2000/cypress/e2e/memory-router.cy.ts b/apps/router-demo/router-host-2000/cypress/e2e/memory-router.cy.ts
@@ -15,8 +15,6 @@ describe('router-host-2000/memory-router', () => {
   });
 
   describe('memory-router', () => {
-    Cypress.on('uncaught:exception', () => false);
-
     it('remote1', () => {
       cy.verifyContent('Remote1 home page');
       cy.clickByClass('.self-remote1-detail-link');
diff --git a/package.json b/package.json
@@ -294,7 +294,7 @@
     "tsdown": "0.20.3",
     "tslib": "2.8.1",
     "tsup": "7.3.0",
-    "turbo": "^2.5.8",
+    "turbo": "^2.9.14",
     "typescript": "5.9.3",
     "url-loader": "4.1.1",
     "vite": "7.3.5",
diff --git a/packages/bridge/bridge-react/package.json b/packages/bridge/bridge-react/package.json
@@ -181,7 +181,7 @@
     "vite-plugin-dts": "^4.3.0",
     "@module-federation/runtime": "workspace:*",
     "@module-federation/runtime-core": "workspace:*",
-    "hono": "4.12.25",
+    "hono": "4.12.26",
     "vitest": "1.6.0"
   }
 }
diff --git a/packages/rsbuild-plugin/package.json b/packages/rsbuild-plugin/package.json
@@ -56,7 +56,7 @@
   "devDependencies": {
     "@rslib/core": "^0.12.4",
     "@rsbuild/core": "2.0.0-beta.2",
-    "vitest": "1.6.0"
+    "vitest": "1.6.1"
   },
   "peerDependencies": {
     "@rsbuild/core": "^1.3.21 || ^2.0.0-0"
diff --git a/packages/rspress-plugin/package.json b/packages/rspress-plugin/package.json
@@ -46,7 +46,7 @@
     "cheerio": "1.0.0-rc.12",
     "@module-federation/sdk": "workspace:*",
     "html-to-text": "9.0.5",
-    "lodash-es": "4.17.21",
+    "lodash-es": "4.18.1",
     "@module-federation/enhanced": "workspace:*",
     "@module-federation/rsbuild-plugin": "workspace:*",
     "@module-federation/error-codes": "workspace:*",
diff --git a/packages/sdk/__tests__/node-builtin-esm.spec.ts b/packages/sdk/__tests__/node-builtin-esm.spec.ts
diff --git a/packages/sdk/package.json b/packages/sdk/package.json
diff --git a/packages/sdk/src/node.ts b/packages/sdk/src/node.ts
diff --git a/packages/third-party-dts-extractor/package.json b/packages/third-party-dts-extractor/package.json
diff --git a/packages/third-party-dts-extractor/src/ThirdPartyExtractor.ts b/packages/third-party-dts-extractor/src/ThirdPartyExtractor.ts
diff --git a/packages/third-party-dts-extractor/tsup.config.ts b/packages/third-party-dts-extractor/tsup.config.ts
diff --git a/packages/treeshake-frontend/package.json b/packages/treeshake-frontend/package.json
diff --git a/packages/treeshake-server/package.json b/packages/treeshake-server/package.json
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +'@module-federation/third-party-dts-extractor': patch
 +---
++
 +chore(third-party-dts-extractor): replace `resolve` with `exsolve` (0 transitive deps, ~100KB smaller) for the single `package.json` lookup.