fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #42 · unplugin/unplugin-oxc

renovate · 2026-03-23T00:25:43Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	`^10.0.3` → `^10.1.0`
oxc-minify (source)	`>=0.119.0` → `>=0.121.0`
oxc-transform (source)	`>=0.119.0` → `>=0.121.0`
rollup (source)	`^4.59.0` → `^4.60.0`
tsdown (source)	`^0.21.3` → `^0.21.4`
vite (source)	`^8.0.0` → `^8.0.1`

Release Notes

eslint/eslint (eslint)

`v10.1.0`

Compare Source

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
7f10d84 docs: Update README (GitHub Actions Bot)
aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)
c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652) (renovate[bot])
cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
2ce4635 chore: update dependency @eslint/json to v1 (#20649) (renovate[bot])
f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
dbb4c95 chore: remove trunk (#20478) (sethamus)
c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

rollup/rollup (rollup)

`v4.60.0`

Compare Source

2026-03-22

Features

Support source phase imports as long as they are external (#6279)

Pull Requests

#6279: feat: external only Source Phase imports support (@guybedford, @lukastaegert)

`v4.59.1`

Compare Source

2026-03-21

Bug Fixes

Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

#6281: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6282: chore(deps): update github artifact actions (major) (@renovate[bot], @lukastaegert)
#6283: chore(deps): update dependency nyc to v18 (@renovate[bot], @lukastaegert)
#6284: fix(deps): update swc monorepo (major) (@renovate[bot])
#6285: chore(deps): lock file maintenance (@renovate[bot])
#6290: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6291: chore(deps): update dependency @shikijs/vitepress-twoslash to v4 (@renovate[bot])
#6292: chore(deps): lock file maintenance (@renovate[bot])
#6297: chore(deps): update minor/patch updates (@renovate[bot])
#6298: chore(deps): lock file maintenance (@renovate[bot])
#6299: chore(deps): lock file maintenance (@renovate[bot])
#6300: docs: update packagephobia link (@bluwy)
#6301: chore(deps): update dependency lint-staged to ^16.3.3 (@renovate[bot])
#6306: fix: fix chunk assignment for deoptimized module with dynamic import (@JoaoBrlt, @lukastaegert)
#6307: chore(deps): update minor/patch updates (@renovate[bot])
#6308: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6309: chore(deps): update dependency vite to v8 (@renovate[bot])
#6310: chore(deps): lock file maintenance (@renovate[bot])
#6311: chore(deps): lock file maintenance (@renovate[bot])
#6312: chore(deps): lock file maintenance (@renovate[bot])

rolldown/tsdown (tsdown)

`v0.21.4`

Compare Source

🚀 Features

css: Add CSS modules support - by @sxzz in #834 (2a88a)

🐞 Bug Fixes

exports: Preserve CRLF line endings in package.json - by @sxzz (a4d4e)

View changes on GitHub

vitejs/vite (vite)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script (#21835) (efef073)
deps: bump required @vitejs/devtools version to 0.1+ (#21925) (12932f5)
deps: update rolldown-related dependencies (#21787) (1af1d3a)
rearrange 8.0 changelog (8e05b61)
rearrange 8.0 changelog (#21834) (86edeee)

`v8.0.0`

Compare Source

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)
warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)

Bug Fixes

deps: update all non-major dependencies (#21786) (eaa4352)

`v8.0.0-beta.18`

Compare Source

Today, we're thrilled to announce the release of the next Vite major:

Vite 8.0 announcement blog post
Docs (translations: 简体中文, 日本語, Español, Português, 한국어, Deutsch, فارسی)
Migration Guide

⚠ BREAKING CHANGES

remove import.meta.hot.accept resolution fallback (#21382)
update default browser target (#21193)
the epic rolldown-vite merge (#21189)

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)
warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)
css: support es2025 build target for lightningcss (#21769) (08906e7)
forward browser console logs and errors to dev server terminal (#20916) (2540ed0)
update rolldown to 1.0.0-rc.8 (#21790) (a0c950e)
export Visitor and ESTree from rolldown/utils (#21664) (45de31e)
update rolldown to 1.0.0-rc.6 (#21714) (37a65f8)
use util.inspect for CLI error display (#21668) (5f425a9)
update rolldown to 1.0.0-rc.5 (#21660) (b3ddbc5)
update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)
wasm: add SSR support for .wasm?init (#21102) (216a3b5)
integrate devtools (#21331) (acbf507)
update rolldown to 1.0.0-rc.3 (#21554) (43358e9)
manifest: add assets field for standalone CSS entry points (#21015) (f289b9b)
update rolldown to 1.0.0-rc.2 (#21512) (fa136a9)
bundled-dev: support worker in initial bundle (#21415) (f3d3149)
dev: detect port conflicts on wildcard hosts (#21381) (b0dd5a9)
shortcuts case insensitive (#21224) (7796ade)
update rolldown to 1.0.0-rc.1 (#21463) (ff9dd7f)
warn if envPrefix contains spaces (#21292) (9fcde3c)
update rolldown to 1.0.0-beta.60 (#21408) (c33aa7c)
update rolldown to 1.0.0-beta.59 (#21374) (0037943)
add ignoreOutdatedRequests option to optimizeDeps (#21364) (b2e75aa)
add ios to default esbuild targets (#21342) (daae6e9)
update rolldown to 1.0.0-beta.58 (#21354) (ba40cef)
update rolldown to 1.0.0-beta.57 (#21335) (d5412ef)
css: support es2024 build target for lightningcss (#21294) (bd33b8e)
update rolldown to 1.0.0-beta.56 (#21323) (9847a63)
introduce v2 native plugins and enable it by default (#21268) (42f2ab3)
ssr: avoid errors when rewriting already rewritten stacktrace (#21269) (98d9a33)
update rolldown to 1.0.0-beta.55 (#21300) (2c8db85)
update rolldown to 1.0.0-beta.54 (#21267) (c751172)
add a warning that is output when a plugin sets esbuild related options (#21218) (200646b)
highly experimental full bundle mode (#21235) (83d8c99)
print esbuild options when both esbuild and oxc options are set (#21216) (08ae87b)
update default browser target (#21193) (8c3dd06)
the epic rolldown-vite merge (#21189) (4a7f8d4)

Bug Fixes

deps: update all non-major dependencies (#21786) (eaa4352)
use watch.watcher instead of watch.notify (#21793) (88953b3)
css: apply server.origin to public file URLs in CSS (fix #18457) (#21697) (c967f48)
deps: update all non-major dependencies (#21732) (5c921ca)
dev: disable extglobs for consistency (#21745) (1958eeb)
lib: keep annotation comments for es output (#21740) (dd3c4f4)
optimizer: avoid error happening with a package with asset entrypoint (#21766) (f7e1d07)
ssr: throw friendly error when calling ssrLoadModule with non-runnable ssr env (#21739) (1fa736e)
types: remove extends ImportMeta from ModuleRunnerImportMeta (#21710) (0176d45)
wasm: reset assetUrlRE.lastIndex before .test() in SSR builds (#21780) (3a0d8d9)
deps: update all non-major dependencies (#21691) (521fdc0)
optimizer: avoid duplicate modules when preserveSymlinks is enabled (#21720) (72165e0)
dev: only treat EADDRINUSE as port conflict in wildcard pre-check (#21642) (e54e25f)
dev: prevent concurrent server restarts (#21636) (8ce23a3)
dev: return "502 Bad Gateway" on proxy failures instead of 500 (#21652) (e240df2)
clear tsconfig cache only when tsconfig.json is cached (#21622) (50c9675)
deps: update all non-major dependencies (#21594) (becdc5d)
lib: CSS injection point error with nested name IIFE output (#21606) (5003de6)
module-runner: incorrect column with sourcemapInterceptor: "prepareStackTrace" (#21562) (416c095)
module-runner: prevent crash on negative column in stacktrace (#21585) (a075590)
rolldownOptions/rollupOptions merging at environment level (#21612) (db2ecc7)
scanner: respect tsconfig.json (#21547) (c6c04db)
avoid registering customization hook for import meta resolver multiple times (#21518) (8bb3203)
config: avoid watching rolldown runtime virtual module (#21545) (d18b139)
deps: update all non-major dependencies (#21540) (9ebaeaa)
populate originalFileNames when resolving CSS asset paths (#21542) (8b47ff7)
deps: update all non-major dependencies (#21488) (2b32ca2)
disable tsconfig option when loading config (#21517) (5025c35)
optimizer: map relative new URL paths to correct relative file location (#21434) (ca96cbc)
avoid using deprecated output.inlineDynamicImport option (#21464) (471ce62)
use separate hook object for each environment (#21472) (66347f6)
deps: update all non-major dependencies (#21440) (1835995)
dev: avoid event emitter leak caused by server.listen callback (#21451) (602d786)
lazy hook filter should work (#21443) (bc0c207)
optimizer: skip rolldownCjsExternalPlugin for platform: neutral (#21452) (d2fc4be)
deps: update all non-major dependencies (#21389) (30f48df)
deps: update esbuild peerDependency version (#21398) (4266c97)
hmr: trigger prune event when last import is removed (#20781) (#21093) (7576735)
module-runner: use process.getBuiltinModule instead of import('node:module') (#21402) (6633bcb)
support .env file mounts (FIFOs) (#21365) (6e6f82a)
css: stylus Evaluator support (#21376) (cf9ace1)
deps: update all non-major dependencies (#21321) (9bc7c2e)
import-analysis: avoid cjs interop for built browser external module (#21333) (dc5a2fb)
worker: handle new Worker(..., new URL(import.meta.url)) with trailing comma (#21325) (4a47241)
detect import.meta.resolve when formatted across multiple lines (#21312) (130e718)
allow no-cors requests for non-script tag requests (#21299) (ef3d596)
deps: update all non-major dependencies (#21285) (4635b2e)
unreachable error when building with experimental.bundledDev is enabled (#21296) (e81c183)
deps: update all non-major dependencies (#21231) (859789c)
don't strip base from imports (#21221) (7da742b)
allow exiting process before optimizer cleanup is done (#21170) (55ceffc)
plugin shortcut support (#21211) (6a3aca0)

Performance Improvements

ssr: skip circular import check for already-evaluated modules (#21632) (235140b)
use tsconfig cache for oxc transform in dev (#21643) (57ff177)

Documentation

bulk of typo fixes (#21507) (80755da)
update build.dynamicImportVarsOptions (#21477) (54ce2ed)
clarify the pronunciation of vite in IPA symbols (#21238) (9b1d4d6)
ensure https links (#21266) (2eb259a)

Miscellaneous Chores

deps-dev: bump rollup from 4.57.1 to 4.59.0 (#21717) (25227bb)
deps: update dependency cac to v7 (#21788) (44e33ae)
deps: update dependency rolldown-plugin-dts to ^0.22.2 (#21731) (d8ea652)
deps: remove fdir and @rollup/plugin-commonjs (#21639) (5abffd5)
deps: update dependency @rollup/plugin-alias to v6 (#21097) (44b5bdf)
fix broken link for future deprecations (#21603) (25f4501)
update customResolver deprecation message to mention enforce: 'pre' (#21576) (2ce34d5)
update rolldown-plugin-dts to 0.22.1 (#21559) (77aab4b)
deps: update dependency rolldown-plugin-dts to ^0.21.8 (#21539) (33881cb)
add missing versions to changelog (#21515) (4bfb239)
deps: update rolldown-related dependencies (#21487) (5863e51)
deps: update rolldown-related dependencies (#21390) (be9dd4e)
fix typo in plugin.ts comment (#21435) (d31fc66)
replace caniuse link for ES2024 (#21355) (2ba4e99)
cleanup changelog (#21202) (8c8c56e)
deps: update rolldown-related dependencies (#21230) (9349446)
fix spelling error (#21223) (cc10e20)

Code Refactoring

don't add optimization.inlineConst: { mode: 'smart' } as it's enabled by default (#21794) (22b3d11)
enable some native plugins even with enable native plugin false (#21744) (fc46c79)
avoid deprecated legalComments option (#21721) (e06496e)
use ESTree types from rolldown/utils (#21719) (9239750)
deprecate customResolver in resolve.alias (#21476) (81275c9)
remove unnecessary @rolldown/pluginutils (#21560) (c367b62)
enable some native plugins even with enable native plugin false (#21608) (5a4f692)
use rolldown/utils (#21577) (e56103f)
use internal devtools config (#21609) (9aea20f)
use parseEnv (#21586) (f859d2c)
wasm: remove native wasm helper plugin usage (#21566) (71a86be)
enable some native plugins even with enable native plugin false (#21511) (b40292c)
remove experimental.enableNativePlugin: 'resolver' (#21510) (f9d9213)
use import.meta.dirname everywhere (#21509) (7becf5f)
optimizer: simplify rolldownCjsExternalPlugin (#21450) (ebda8fd)
remove import.meta.hot.accept resolution fallback (#21382) (71d0797)
optimizer: remove dead code (#21334) (e9a2cdb)

Tests

ssr: incorrect handleInvoke was called in server-worker-runner.invoke test (#21751) (b95ca22)
add more type tests for defineConfig (#21698) (4fedbbd)
test case for catching invalid package resolution error (#21601) (c9b9359)
bundled-dev: add worker test cases (#21557) (569bc98)

Beta Changelogs

Today, we're thrilled to announce the release of the next Vite major:

Vite 8.0 announcement blog post
Docs (translations: 简体中文, 日本語, Español, Português, 한국어, Deutsch, فارسی)
Migration Guide

⚠ BREAKING CHANGES

remove import.meta.hot.accept resolution fallback (#21382)
update default browser target (#21193)
the epic rolldown-vite merge (#21189)

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)
warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)
css: support es2025 build target for lightningcss (#21769) (08906e7)
forward browser console logs and errors to dev server terminal ([#

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2026-03-23T00:25:47Z

Run & review this pull request in StackBlitz Codeflow.

pkg-pr-new · 2026-03-23T00:26:17Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-oxc@42

commit: d272fca

socket-security · 2026-03-23T00:26:24Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
rollup@4.59.0 ⏵ 4.60.0
tsdown@0.21.3 ⏵ 0.21.4	⁺¹	⁺¹	⁺¹
eslint@10.0.3 ⏵ 10.1.0	⁺¹		⁺²
oxc-minify@0.119.0 ⏵ 0.121.0			⁺¹
oxc-transform@0.119.0 ⏵ 0.121.0	⁺⁵		⁺¹

View full report

fix(deps): update all non-major dependencies

d272fca

renovate bot added the dependencies label Mar 23, 2026

renovate bot merged commit e4dc39b into main Mar 23, 2026
14 checks passed

renovate bot deleted the renovate/all-minor-patch branch March 23, 2026 01:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#42

fix(deps): update all non-major dependencies#42
renovate[bot] merged 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Mar 23, 2026

Uh oh!

bolt-new-by-stackblitz bot commented Mar 23, 2026

Uh oh!

pkg-pr-new bot commented Mar 23, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Mar 23, 2026

Release Notes

Features

Bug Fixes

Documentation

Chores

Features

Pull Requests

Bug Fixes

Pull Requests

🚀 Features

🐞 Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.0.0-beta.18 (2026-03-09)

8.0.0-beta.17 (2026-03-09)

8.0.0-beta.16 (2026-02-27)

8.0.0-beta.15 (2026-02-19)

8.0.0-beta.14 (2026-02-12)

8.0.0-beta.13 (2026-02-05)

8.0.0-beta.12 (2026-02-03)

8.0.0-beta.11 (2026-01-29)

8.0.0-beta.10 (2026-01-24)

8.0.0-beta.9 (2026-01-22)

8.0.0-beta.8 (2026-01-15)

8.0.0-beta.7 (2026-01-08)

8.0.0-beta.6 (2026-01-07)

8.0.0-beta.5 (2025-12-25)

8.0.0-beta.4 (2025-12-22)

8.0.0-beta.3 (2025-12-18)

8.0.0-beta.2 (2025-12-12)

8.0.0-beta.1 (2025-12-08)

8.0.0-beta.0 (2025-12-03)

Rolldown-Vite changelogs

⚠ BREAKING CHANGES

Features

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Mar 23, 2026

Uh oh!

pkg-pr-new bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Mar 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

pkg-pr-new bot commented Mar 23, 2026 •

edited

Loading