feat(deps): upgrade upstream dependencies#2202
Conversation
- rolldown: f09947a -> v1.2.0 (03e1e34) - vite: a477454 -> v8.1.5 (5e7fe12) - tsdown: 0.22.7 -> 0.22.9 - @tsdown/css: 0.22.7 -> 0.22.9 - @tsdown/exe: 0.22.7 -> 0.22.9 - oxfmt: 0.58.0 -> 0.59.0 - oxlint: 1.73.0 -> 1.74.0 - oxlint-tsgolint: 0.24.0 -> 0.25.0 - @oxc-project/runtime: 0.139.0 -> 0.140.0 - @oxc-project/types: 0.139.0 -> 0.140.0 - oxc-minify: 0.139.0 -> 0.140.0 - oxc-parser: 0.139.0 -> 0.140.0 - oxc-transform: 0.139.0 -> 0.140.0 - @vitejs/devtools: 0.4.0 -> 0.4.1 Code changes: - Cargo.toml: bump root Rust deps required by the new rolldown rev (itertools 0.14 -> 0.15, phf 0.13 -> 0.14 with `macros`, sugar_path 2 -> 3, oxc_resolver 11.23.0 -> 11.24.2, oxc crates 0.139.0 -> 0.140.0). - pnpm-workspace.yaml: drop the postcss-modules@9.0.0 override and patch (vite no longer patches it), add @jridgewell/trace-mapping catalog entry, bump @napi-rs/cli 3.7.2 -> 3.7.3 and rolldown-plugin-dts 0.26 -> 0.27. - packages/core/build.ts: accept a rolldown-deduped `@tsdown/css` shared chunk when verifying the bundled css-plugin load is wired. - packages/cli/src/migration/migrator/eslint.ts: add a major-range fallback for @oxlint/migrate when the exact bundled oxlint version is unpublished. - packages/cli/binding/index.d.cts: regenerate NAPI bindings for the new rolldown dev-engine API (registerClient/notifyPayloadDelivered, lazy chunk output, HMR envelope changes).
✅ Deploy Preview for viteplus-preview canceled.
|
Native binary sizes (
|
| Artifact | Format | Base | PR | Change |
|---|---|---|---|---|
vp (Linux x64) |
Binary | 10.32 MiB | 10.32 MiB | 0 B (0.00%) |
vp (Linux x64) |
gzip -9 | 4.42 MiB | 4.42 MiB | +692 B (+0.01%) |
| NAPI (Linux x64) | Binary | 33.46 MiB | 33.35 MiB | -112.19 KiB (-0.33%) |
| NAPI (Linux x64) | gzip -9 | 12.80 MiB | 12.77 MiB | -23.84 KiB (-0.18%) |
vp (macOS ARM64) |
Binary | 7.65 MiB | 7.65 MiB | 0 B (0.00%) |
vp (macOS ARM64) |
gzip -9 | 3.83 MiB | 3.83 MiB | +1.17 KiB (+0.03%) |
| NAPI (macOS ARM64) | Binary | 40.73 MiB | 40.64 MiB | -96.91 KiB (-0.23%) |
| NAPI (macOS ARM64) | gzip -9 | 17.03 MiB | 17.01 MiB | -21.19 KiB (-0.12%) |
vp (Windows x64) |
Binary | 8.37 MiB | 8.37 MiB | +1.50 KiB (+0.02%) |
vp (Windows x64) |
gzip -9 | 3.64 MiB | 3.64 MiB | +351 B (+0.01%) |
| NAPI (Windows x64) | Binary | 27.78 MiB | 27.67 MiB | -110.50 KiB (-0.39%) |
| NAPI (Windows x64) | gzip -9 | 10.74 MiB | 10.72 MiB | -25.31 KiB (-0.23%) |
| Trampoline (Windows x64) | Binary | 203.00 KiB | 203.00 KiB | 0 B (0.00%) |
| Trampoline (Windows x64) | gzip -9 | 97.91 KiB | 97.91 KiB | -1 B (-0.00%) |
| Installer (Windows x64) | Binary | 4.46 MiB | 4.46 MiB | 0 B (0.00%) |
| Installer (Windows x64) | gzip -9 | 2.08 MiB | 2.08 MiB | 0 B (0.00%) |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub. |
|
@codex review |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 68c475a599
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
…llback - @oxlint/plugins tracks oxlint's JS plugin API in lockstep; 1.74.0 was published before this PR was cut, so keep it aligned with oxlint 1.74.0. - vp dlx forwards the executed package's exit status, so the migrate fallback loop could rerun an older migrator after a genuine project migration failure. Only fall back when the registry confirms the exact version is unpublished, and surface the stderr of the run that actually failed instead of dropping it on spawn errors. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
@codex review |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b44ebe26a0
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
@oxlint/migrate v1.74.0 was released upstream (oxc-project/oxlint-migrate#542) but its npm publish failed (EBADENGINE in the release workflow, fixed by #545) and was never retried, so the registry still tops out at 1.73.0. Keep the exact bundled-version pin and let CI fail on the mismatch instead of working around a broken upstream release; the fix is republishing 1.74.0. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Summary
v1.2.0and vite tov8.1.5, plus tsdown 0.22.9, the oxc/oxlint/oxfmt toolchain (oxlint 1.74.0, oxfmt 0.59.0, oxc 0.140.0), and@vitejs/devtools0.4.1.@tsdown/csschunks and an@oxlint/migratepublish-lag fallback in the ESLint migrator.Dependency updates
rolldownf09947av1.2.0 (03e1e34)vitea477454v8.1.5 (5e7fe12)tsdown0.22.70.22.9@tsdown/css0.22.70.22.9@tsdown/exe0.22.70.22.9oxfmt0.58.00.59.0oxlint1.73.01.74.0oxlint-tsgolint0.24.00.25.0@oxc-project/runtime0.139.00.140.0@oxc-project/types0.139.00.140.0oxc-minify0.139.00.140.0oxc-parser0.139.00.140.0oxc-transform0.139.00.140.0@vitejs/devtools0.4.00.4.1Unchanged dependencies
vitest:4.1.10@vitest/browser:4.1.10@vitest/browser-playwright:4.1.10@vitest/browser-preview:4.1.10@vitest/browser-webdriverio:4.1.10@vitest/expect:4.1.10@vitest/mocker:4.1.10@vitest/pretty-format:4.1.10@vitest/runner:4.1.10@vitest/snapshot:4.1.10@vitest/spy:4.1.10@vitest/utils:4.1.10lightningcss:^1.32.0@oxc-node/cli:0.1.0@oxc-node/core:0.1.0VITEST_VERSION constant:4.1.10README vitest pins:4.1.10Code changes
Cargo.toml(+Cargo.lock): bump root Rust deps required by the new rolldown rev —itertools0.14 → 0.15,phf0.13 → 0.14 (with themacrosfeature),sugar_path2 → 3,oxc_resolver/oxc_resolver_napi11.23.0 → 11.24.2, and theoxc*crates 0.139.0 → 0.140.0.pnpm-workspace.yaml(+pnpm-lock.yaml): drop thepostcss-modules@9.0.0override and patch (vite no longer patches it), add a@jridgewell/trace-mappingcatalog entry, and bump@napi-rs/cli3.7.2 → 3.7.3 androlldown-plugin-dts0.26 → 0.27.packages/core/build.ts: accept a rolldown-deduped@tsdown/cssshared chunk (const { CssPlugin } = await import("./dist-<hash>.js")) when asserting the bundled css-plugin load is wired.packages/cli/src/migration/migrator/eslint.ts: try candidate@oxlint/migratespecifiers in order, falling back from the exact bundled oxlint version to the latest release in the same major when the exact pin is unpublished.packages/cli/binding/index.d.cts: regenerate NAPI bindings for the new rolldown dev-engine API (registerClient/notifyPayloadDeliveredreplacinginvalidate/registerModules,BindingLazyChunkOutput, revised HMR envelope fields,BindingRebuildStrategyvariants).Build status
sync-remote-and-build: failurebuild-upstream: failure