chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/coverage-v8 (source)	^4.1.1 → ^4.1.2
oxfmt (source)	^0.41.0 → ^0.43.0
oxlint (source)	^1.56.0 → ^1.58.0
pnpm (source)	10.32.1 → 10.33.0
rolldown (source)	1.0.0-rc.11 → 1.0.0-rc.13
vitest (source)	^4.1.1 → ^4.1.2

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

oxc-project/oxc (oxfmt)

v0.43.0

Compare Source

🚀 Features

• 6ef440a oxfmt: Support bool for object style options (#​20853) (leaysgur)

v0.42.0

Compare Source

🚀 Features

• 416865a formatter,oxfmt: Add doc comments for JsdocConfig (#​20644) (leaysgur)
• 4fec907 formatter: Add JSDoc comment formatting support (#​19828) (Dunqing)

oxc-project/oxc (oxlint)

v1.58.0

Compare Source

🚀 Features

• 16516de linter: Enhance types for DummyRule (#​20751) (camc314)

📚 Documentation

• be3dcc1 linter: Add note about node version + custom TS plugin (#​19381) (camc314)

v1.57.0

Compare Source

pnpm/pnpm (pnpm)

v10.33.0

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-rc.13

Compare Source

🚀 Features

• add friendly error for unloadable virtual modules (#​8955) by @​sapphi-red
• better error message for unsupported CSS error (#​8911) by @​sapphi-red

🐛 Bug Fixes

• prevent chunk merging from leaking entry side effects (#​8979) by @​IWANABETHATGUY
• correct inlining based on module's def format and esModule flag (#​8975) by @​h-a-n-a
• generate init calls for excluded re-exports in strict execution order (#​8858) by @​IWANABETHATGUY
• consistent order for meta.chunks in renderChunk hook (#​8956) by @​sapphi-red
• subpath imports in glob imports failing to find files (#​8885) by @​kalvenschraut
• browser: bundle binding types in dts output (#​8930) by @​nyan-left
• ci: guard artifact download step in vite-test-ubuntu when build is skipped (#​8934) by @​Copilot
• track CJS re-export import records to fix inline const and tree-shaking (#​8925) by @​h-a-n-a
• use ImportKind::Import for common-chunk root computation (#​8899) by @​IWANABETHATGUY
• watch: clear emitted_filenames between rebuilds (#​8914) by @​IWANABETHATGUY
• ci: cache esbuild snapshots to avoid 429 rate limiting (#​8921) by @​IWANABETHATGUY
• always check circular deps in chunk optimizer (#​8915) by @​IWANABETHATGUY
• don't mark calls to reassigned bindings as pure (#​8917) by @​IWANABETHATGUY
• magic-string: throw TypeError for non-string content args (#​8905) by @​IWANABETHATGUY
• magic-string: add split-point validation and overwrite/update options (#​8904) by @​IWANABETHATGUY

🚜 Refactor

• pre-compute has_side_effects on ChunkCandidate (#​8981) by @​IWANABETHATGUY
• cleanup and simplify in dynamic_import.rs (#​8927) by @​ulrichstark
• rename came_from_cjs to came_from_commonjs for consistency (#​8938) by @​IWANABETHATGUY
• inline create_ecma_view return destructuring and remove redundant binding (#​8932) by @​shulaoda

📚 Documentation

• document ensure_lazy_module_initialization_order in code-splitting design doc (#​8931) by @​IWANABETHATGUY

🧪 Testing

• add regression test for runtime helper circular dependency (#​8958) by @​h-a-n-a
• enable 8 previously-skipped MagicString remove tests (#​8945) by @​IWANABETHATGUY
• add test for why PureAnnotation is needed in execution order check (#​8933) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• add @emnapi/runtime and @emnapi/core as direct deps of @rolldown/browser (#​8978) by @​Copilot
• deps: update dependency vite-plus to v0.1.15 (#​8970) by @​renovate[bot]
• deps: update dependency oxfmt to ^0.43.0 (#​8969) by @​renovate[bot]
• deps: upgrade oxc to 0.123.0 (#​8967) by @​shulaoda
• justfile: deduplicate update-submodule as alias of setup-submodule (#​8968) by @​shulaoda
• deps: update rollup submodule for tests to v4.60.1 (#​8965) by @​sapphi-red
• deps: update test262 submodule for tests (#​8966) by @​sapphi-red
• remove unused type-check scripts (#​8957) by @​sapphi-red
• deps: update actions/cache action to v5 (#​8953) by @​renovate[bot]
• deps: update npm packages to v6 (major) (#​8954) by @​renovate[bot]
• deps: update npm packages (#​8948) by @​renovate[bot]
• deps: update rust crates (#​8949) by @​renovate[bot]
• deps: update github-actions (#​8947) by @​renovate[bot]
• deps: update napi (#​8943) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to ^0.23.0 (#​8944) by @​renovate[bot]
• regenerate testing snapshots (#​8928) by @​ulrichstark
• deps: update dependency rust to v1.94.1 (#​8923) by @​renovate[bot]

❤️ New Contributors

• @​kalvenschraut made their first contribution in #​8885
• @​nyan-left made their first contribution in #​8930

v1.0.0-rc.12

Compare Source

🚀 Features

• chunk-optimizer: skip circular dependency check when strict execution order is enabled (#​8886) by @​hyf0

🐛 Bug Fixes

• emit build warnings during watch mode rebuilds (#​8897) by @​IWANABETHATGUY
• lazy-barrel: load import-then-export specifiers when barrel has local exports (#​8895) by @​shulaoda
• correct execution order of transferred CJS init calls (#​8877) by @​IWANABETHATGUY
• mcs: entriesAware should calculate sizes without duplication (#​8887) by @​hyf0
• non-deterministic chunk generation (#​8882) by @​sapphi-red
• is_top_level incorrectly treats strict-mode scopes as top-level (#​8878) by @​Dunqing

🚜 Refactor

• treeshake: migrate SideEffectDetector to Oxc's MayHaveSideEffects trait (#​8624) by @​Dunqing

🧪 Testing

• make dev server tests deterministic by replacing fixed sleeps with event-driven polling (#​8561) by @​Boshen

⚙️ Miscellaneous Tasks

• deps: update dependency vite-plus to v0.1.14 (#​8902) by @​camc314
• deps: update dependency oxfmt to ^0.42.0 (#​8891) by @​renovate[bot]
• deps: update rust crate oxc_sourcemap to v6.1.1 (#​8890) by @​renovate[bot]
• remove Rolldown MF plan (#​8883) by @​shulaoda
• deps: update rollup submodule for tests to v4.60.0 (#​8881) by @​sapphi-red
• deps: update test262 submodule for tests (#​8880) by @​sapphi-red
• deps: upgrade oxc crates to 0.122.0 (#​8879) by @​shulaoda

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.