chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
node	uses-with	patch	24.14.0 → 24.14.1
oxfmt (source)	devDependencies	minor	^0.41.0 → ^0.42.0
oxlint (source)	devDependencies	minor	^1.56.0 → ^1.57.0
rolldown (source)	devDependencies	patch	^1.0.0-rc.10 → ^1.0.0-rc.12
vitest (source)	devDependencies	patch	^4.1.0 → ^4.1.2

---

Release Notes

actions/node-versions (node)

v24.14.1: 24.14.1

Compare Source

Node.js 24.14.1

oxc-project/oxc (oxfmt)

v0.42.0

Compare Source

🚀 Features

• 416865a formatter,oxfmt: Add doc comments for JsdocConfig (#​20644) (leaysgur)
• 4fec907 formatter: Add JSDoc comment formatting support (#​19828) (Dunqing)

oxc-project/oxc (oxlint)

v1.57.0

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-rc.12

Compare Source

🚀 Features

• chunk-optimizer: skip circular dependency check when strict execution order is enabled (#​8886) by @​hyf0

🐛 Bug Fixes

• emit build warnings during watch mode rebuilds (#​8897) by @​IWANABETHATGUY
• lazy-barrel: load import-then-export specifiers when barrel has local exports (#​8895) by @​shulaoda
• correct execution order of transferred CJS init calls (#​8877) by @​IWANABETHATGUY
• mcs: entriesAware should calculate sizes without duplication (#​8887) by @​hyf0
• non-deterministic chunk generation (#​8882) by @​sapphi-red
• is_top_level incorrectly treats strict-mode scopes as top-level (#​8878) by @​Dunqing

🚜 Refactor

• treeshake: migrate SideEffectDetector to Oxc's MayHaveSideEffects trait (#​8624) by @​Dunqing

🧪 Testing

• make dev server tests deterministic by replacing fixed sleeps with event-driven polling (#​8561) by @​Boshen

⚙️ Miscellaneous Tasks

• deps: update dependency vite-plus to v0.1.14 (#​8902) by @​camc314
• deps: update dependency oxfmt to ^0.42.0 (#​8891) by @​renovate[bot]
• deps: update rust crate oxc_sourcemap to v6.1.1 (#​8890) by @​renovate[bot]
• remove Rolldown MF plan (#​8883) by @​shulaoda
• deps: update rollup submodule for tests to v4.60.0 (#​8881) by @​sapphi-red
• deps: update test262 submodule for tests (#​8880) by @​sapphi-red
• deps: upgrade oxc crates to 0.122.0 (#​8879) by @​shulaoda

v1.0.0-rc.11

Compare Source

🚀 Features

• magicString replace with regex (#​8802) by @​IWANABETHATGUY
• support output.sourcemapExcludeSources option (#​8828) by @​sapphi-red
• support getIndentString in MagicString (#​8775) by @​IWANABETHATGUY
• MagicString ignoreList support (#​8773) by @​IWANABETHATGUY

🐛 Bug Fixes

• forward test filters through vp run (#​8870) by @​younggglcy
• types: remove pluginName from MinimalPluginContext (#​8864) by @​sapphi-red
• do not report eval?.() as direct eval (#​8860) by @​IWANABETHATGUY
• handle negative indices, overlapping ranges, and moved content in MagicString remove (#​8829) by @​IWANABETHATGUY
• enable arbitrary_precision for serde_json to fix JSON float parsing (#​8848) by @​elderapo
• resolve TypeScript lint errors (#​8841) by @​Boshen
• avoid panic on multi-byte UTF-8 chars in hash placeholder iterator (#​8790) by @​shulaoda
• ci: skip failing vite build watch raw query test (#​8840) by @​Boshen
• ci: use step-level env override to unset VITE_PLUS_CLI_BIN in vite tests (#​8838) by @​Boshen
• ci: move vite tests into CI workflow by @​Boshen
• ci: unset all VITE_PLUS_* env vars in vite-tests workflow (#​8837) by @​Boshen
• test: skip watch CLI tests on Windows (#​8830) by @​Boshen
• ci: unset VITE_PLUS_CLI_BIN in vite-tests workflow (#​8832) by @​Boshen
• remove redundant bare side-effect imports in entry/facade chunks (#​8804) by @​h-a-n-a
• magicString prepend issues (#​8797) by @​IWANABETHATGUY
• ci: use vpx instead of vp exec for pkg-pr-new (#​8827) by @​Boshen
• set order for callable plugins (#​8815) by @​sapphi-red
• handle reversed slice ranges with moved content (#​8750) by @​IWANABETHATGUY
• update emnapi to latest to avoid version mismatch (#​8781) by @​sapphi-red
• external.md on Windows OS (#​8780) by @​bddjr
• align MagicString length/isEmpty with reference magic-string (#​8776) by @​IWANABETHATGUY

🚜 Refactor

• extract canonical_ref_resolving_namespace helper (#​8836) by @​Boshen

📚 Documentation

• improve external examples for cross-platform correctness (#​8786) by @​hyf0-agent
• update reference to transform function in plugin API documentation (#​8778) by @​zOadT

⚡ Performance

• reduce timing of dervie_entries_aware_chunk_name (#​8847) by @​AliceLanniste
• bench: remove redundant sourcemap benchmark cases (#​8825) by @​Boshen
• reduce intermediate allocations in collapse_sourcemaps (#​8821) by @​Boshen
• enable parallel AST cloning on macOS (#​8814) by @​Boshen

🧪 Testing

• watch: use polling watcher and retry for watch error test (#​8772) by @​sapphi-red

⚙️ Miscellaneous Tasks

• deps: update dependency @​oxc-project/types to v0.122.0 (#​8873) by @​renovate[bot]
• publish-to-npm: use correct vp pm publish (#​8871) by @​shulaoda
• justfile: skip setup-vite-plus if vp is already installed (#​8862) by @​Boshen
• add expectWarning option to test config (#​8861) by @​IWANABETHATGUY
• justfile: support windows for just setup (#​8846) by @​AliceLanniste
• deps: update rust crates (#​8852) by @​renovate[bot]
• deps: update endbug/version-check action to v3 (#​8855) by @​renovate[bot]
• deps: update github-actions (#​8853) by @​renovate[bot]
• deps: update dependency vitepress to v2.0.0-alpha.17 (#​8854) by @​renovate[bot]
• deps: update npm packages (#​8851) by @​renovate[bot]
• bench: use mimalloc as global allocator in bench crate (#​8844) by @​IWANABETHATGUY
• reuse native build artifact in node-validation job (#​8826) by @​Boshen
• speed up CodSpeed benchmark build by disabling LTO (#​8824) by @​Boshen
• remove redundant critcmp benchmark job (#​8823) by @​Boshen
• deps: update rust crate oxc_sourcemap to v6.1.0 (#​8785) by @​renovate[bot]
• node: migrate oxlint and oxfmt to Vite+ (#​8813) by @​Boshen
• revert namespace runners for release build jobs (#​8820) by @​Boshen
• migrate runners to namespace (#​8819) by @​Boshen
• test: relax test utils path assertion to support git worktrees (#​8816) by @​younggglcy
• rename examples/lazy to examples/lazy-compilation (#​8789) by @​shulaoda
• improve "needs reproduction" wording by @​Boshen
• deps: update dependency oxlint-tsgolint to v0.17.1 (#​8807) by @​renovate[bot]
• enable 7 previously-skipped MagicString tests (#​8771) by @​IWANABETHATGUY
• upgrade oxc to 0.121.0 (#​8784) by @​shulaoda
• increase Windows dev drive size from 12GB to 20GB (#​8779) by @​Copilot

❤️ New Contributors

• @​younggglcy made their first contribution in #​8870
• @​elderapo made their first contribution in #​8848
• @​bddjr made their first contribution in #​8780
• @​zOadT made their first contribution in #​8778

vitest-dev/vitest (vitest)

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.