chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #22 · unjs/nf3

renovate · 2026-02-06T02:59:24Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^25.2.3` → `^25.3.5`
@typescript/native-preview (source)	`^7.0.0-dev.20260212.1` → `^7.0.0-dev.20260308.1`
@vercel/nft	`^1.3.1` → `^1.3.2`
obuild	`^0.4.27` → `^0.4.32`
oxc-minify (source)	`^0.112.0` → `^0.116.0`
oxfmt (source)	`^0.32.0` → `^0.36.0`
oxlint (source)	`^1.47.0` → `^1.51.0`
pnpm (source)	`10.29.3` → `10.31.0`
rolldown (source)	`^1.0.0-rc.4` → `^1.0.0-rc.8`
rollup (source)	`^4.57.1` → `^4.59.0`

Release Notes

microsoft/typescript-go (@typescript/native-preview)

vercel/nft (@vercel/nft)

`v1.3.2`

Compare Source

Bug Fixes

do not follow absolute paths outside job base (#568) (0ce8e2c)

unjs/obuild (obuild)

`v0.4.32`

Compare Source

compare changes

🩹 Fixes

bundle: Mark # subpath imports as external (5841515)

📦 Build

Export BuildConfig type (#74)

🏡 Chore

Update deps (2152c14)
Add agents.md (2a64596)

❤️ Contributors

Pooya Parsa (@pi0)
Thierry Goettelmann (@ByScripts)

`v0.4.31`

Compare Source

compare changes

🚀 Enhancements

Support dts filter for transform entries (ae925ae)

🩹 Fixes

transform: Show all errors in the end (154b770)
transform: Warn only for isolated decl errors (5543925)
Default dts to true for transform (8624948)

❤️ Contributors

Pooya Parsa (@pi0)

`v0.4.30`

Compare Source

compare changes

🩹 Fixes

bundle: Do not skip isolated declaration errors (ce10fc5)
transform: Also show transform warnings (f06a619)

💅 Refactors

Migrate to rolldown/utils (ceb4d8c)

❤️ Contributors

Pooya Parsa (@pi0)

`v0.4.29`

Compare Source

compare changes

🏡 Chore

Update deps (d709000)

❤️ Contributors

Pooya Parsa (@pi0)

`v0.4.28`

Compare Source

compare changes

🩹 Fixes

Enable treeshake.moduleSideEffects: "no-external" for rolldown (4826ad0)

🏡 Chore

Update deps (9f3f705)
Lint (8aff7a1)
Update deps (ecfe0a0)

❤️ Contributors

Pooya Parsa (@pi0)

oxc-project/oxc (oxc-minify)

`v0.114.0`

oxc-project/oxc (oxfmt)

`v0.36.0`

Compare Source

🐛 Bug Fixes

04e6223 npm: Add preferUnplugged for Yarn PnP compatibility (#19829) (Boshen)

📚 Documentation

2fa936f README.md: Map npm package links to npmx.dev (#19666) (Boshen)

`v0.35.0`

Compare Source

🚀 Features

984dc07 oxfmt: Strip "experimental"SortXxx prefix (#19567) (leaysgur)

`v0.34.0`

Compare Source

🐛 Bug Fixes

6c61b70 oxfmt: Fix outdated sortImports.groups doc comments (#19513) (leaysgur)

`v0.33.0`

Compare Source

💥 BREAKING CHANGES

9c34f72 formatter/sort_imports: [BREAKING] Report invalid group name with renaming side-effect > side_effect (#19416) (leaysgur)

🚀 Features

4baebef formatter/sort_imports: Support { newlinesBetween: bool } inside groups (#19358) (leaysgur)
d1c2fb6 formatter/sort_imports: Support customGroups attributes(selector and modifiers) (#19356) (leaysgur)

oxc-project/oxc (oxlint)

`v1.51.0`

Compare Source

🚀 Features

f34f6fa linter: Introduce typeCheck config option (#19764) (camc314)
694be7d linter: Introduce typeAware as config options (#19614) (camc314)

🐛 Bug Fixes

04e6223 npm: Add preferUnplugged for Yarn PnP compatibility (#19829) (Boshen)

📚 Documentation

2fa936f README.md: Map npm package links to npmx.dev (#19666) (Boshen)

`v1.50.0`

Compare Source

`v1.49.0`

Compare Source

`v1.48.0`

Compare Source

pnpm/pnpm (pnpm)

`v10.31.0`

Compare Source

`v10.30.3`

Compare Source

`v10.30.2`

Compare Source

`v10.30.1`: pnpm 10.30.1

Compare Source

Patch Changes

Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #10649.

Platinum Sponsors

Gold Sponsors

`v10.30.0`: pnpm 10.30

Compare Source

Minor Changes

pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #7122.
Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #10596.

Platinum Sponsors

Gold Sponsors

rolldown/rolldown (rolldown)

`v1.0.0-rc.8`

Compare Source

🚀 Features

watch: enable full functional fs watcher in wasm (#8575) by @hyf0
watch: expose debounce related options (#8572) by @hyf0

🐛 Bug Fixes

detect new URL(…, import.meta.url) with no-sub template literal (#8565) by @char
devtools: trace dynamic imports in devtools (#8581) by @cal-gooo
watch: rebuild when a previously missing file is created (#8562) by @hyf0-agent
watch: filter out Access events to prevent infinite rebuild loop on Linux (#8557) by @hyf0-agent

🚜 Refactor

watch: remove auto watch for fail imports (#8585) by @hyf0
fs_watcher: unify the way of constructing watcher (#8571) by @hyf0
cli: migrate CLI to CAC (#8551) by @h-a-n-a
switch asset module support from hard-code to builtin plugin (#8546) by @hyf0

📚 Documentation

fix subject-verb agreement in why-bundlers.md (#8591) by @brandonzylstra
maintenance: align release and canary workflow guide (#8538) by @minsoo-web
add format option to directives example config (#8590) by @shulaoda
fix: change twitter to x logo in team (#8552) by @mdong1909
correct composable filter support explanation (#8550) by @sapphi-red

⚡ Performance

testing: share tokio runtime across fixture tests (#8567) by @Boshen

🧪 Testing

hmr: fix infinite loop in dev server test retry logic (#8576) by @hyf0-agent
cli: add more cli-e2e test cases (#8548) by @h-a-n-a

⚙️ Miscellaneous Tasks

docs: update in-depth/directives for output.strict option (#8535) by @minsoo-web
add PNPM_HOME Dev Drive mapping to Windows CI workflows (#8589) by @Boshen
deps: update github-actions (#8588) by @renovate[bot]
move Windows cargo target dir to Dev Drive (#8586) by @Boshen
optimize cache keys to fix race conditions and reduce usage (#8578) by @Boshen
remove WASI build & test pipeline (#8580) by @Boshen
remove unnecessary submodule checkouts (#8577) by @Boshen
use Dev Drive for Windows CI jobs (#8574) by @Boshen
skip redundant native binding build for browser and remove standalone job (#8573) by @Boshen
parallelize Node tests on ubuntu, single Node 24 on macOS/windows (#8570) by @Boshen
docs: bump @voidzero-dev/vitepress-theme to 4.8.0 (#8558) by @crusty-voidzero
dedupe type-check from dev server workflow (#8554) by @Boshen

❤️ New Contributors

@brandonzylstra made their first contribution in #8591
@char made their first contribution in #8565
@cal-gooo made their first contribution in #8581
@hyf0-agent made their first contribution in #8562
@h-a-n-a made their first contribution in #8551

`v1.0.0-rc.7`

Compare Source

💥 BREAKING CHANGES

enable minify: 'dce-only' by default (#8465) by @IWANABETHATGUY
settings inlineConst: { mode: 'smart', pass: 1} by default (#8444) by @IWANABETHATGUY

🚀 Features

binding: add original getter to BindingMagicString (#8533) by @IWANABETHATGUY
native-magic-string: add offset property support (#8531) by @IWANABETHATGUY
add output.strict option to control "use strict" directive emission (#8489) by @Copilot
watch: expose watcher.compareContentsForPolling (#8526) by @hyf0
watch: use new watcher to support watch mode (#8475) by @hyf0
rust/watch: handle bulk-change (#8466) by @hyf0
add LLM-friendly markdown output format to bundle analyzer plugin (#8242) by @IWANABETHATGUY

🐛 Bug Fixes

expose plugins on NormalizedInputOptions for buildStart hook (#8521) by @Copilot
only uppercase facade symbols in JSX preserve mode (#8519) by @IWANABETHATGUY
binding: export BindingResult in generated dts header (#8537) by @minsoo-web
pre-resolve paths option to avoid invoke_sync deadlock (#8518) by @IWANABETHATGUY
remove debug-only jsx_preset and UntranspiledSyntaxError (#8511) by @IWANABETHATGUY
apply topLevelVar to exported const/let declarations (#8507) by @IWANABETHATGUY
rolldown_plugin_vite_web_worker_post: avoid replacing new.target (#8488) by @sapphi-red

🚜 Refactor

rust: use Oxc's SymbolFlags::ConstVariable instead of custom IsConst flag (#8543) by @Dunqing
rust: remove FacadeScoping, use Scoping::create_symbol for facade symbols (#8540) by @Dunqing
rust/watch: remove hacky reset_closed_for_watch_mode (#8530) by @hyf0
binding: return &str instead of String in filename() getter (#8534) by @IWANABETHATGUY
rust: remove old watch mode implementation (#8525) by @hyf0
rust/watch: simply watch logic in the binding layer (#8516) by @hyf0
rust/watch: tweak struct/function names (#8464) by @hyf0

📚 Documentation

explain how external modules work in rolldown (#8457) by @sapphi-red
add some diagrams using graphviz (#8499) by @sapphi-red
use vitepress-plugin-graphviz (#8498) by @sapphi-red
list s390x/ppc64le prebuilt binaries (#8495) by @crusty-voidzero
fix error type for RolldownBuild.generate and others (#8490) by @sapphi-red

⚡ Performance

string_wizard: reduce allocations and add ASCII fast paths (#8541) by @IWANABETHATGUY
use IndexBitSet to replace IndexVec<XXXIdx, bool> for module/stmt inclusion tracking (#8503) by @IWANABETHATGUY
plugin: use IndexBitSet to optimize skipped plugins checking (#8497) by @ShroXd
rust/tla: skip compute_tla if there is no module use TLA (#8487) by @ShroXd

🧪 Testing

node/watch: make watch tests run in concurrent and retry-able (#8512) by @hyf0
add test case for static flag tree-shaking (#8476) by @IWANABETHATGUY
migrate post-banner sourcemap-with-shebang to Rust (#8477) by @Copilot

⚙️ Miscellaneous Tasks

vscode: formatOnSave for markdown files using oxc formatter (#8536) by @minsoo-web
deps: update test262 submodule for tests (#8528) by @sapphi-red
remove retry workaround from output paths test fixtures (#8520) by @Copilot
docs: add Shuyuan Wang (h-a-n-a) and remove from acknowledgements (#8509) by @Copilot
consolidate top_level_var test cases using configVariants (#8508) by @IWANABETHATGUY
add s390x and ppc64le linux gnu targets (#8493) by @Brooooooklyn

◀️ Revert

fix(rolldown): increase tokio blocking threads size for watch mode (#8517) by @hyf0

❤️ New Contributors

@minsoo-web made their first contribution in #8536
@crusty-voidzero made their first contribution in #8495
@maciekzygmunt made their first contribution in #8486

`v1.0.0-rc.6`

Compare Source

💥 BREAKING CHANGES

css: remove css_entry_filenames , css_chunk_filenames and related code (#8402) by @hyf0
css: drop builtin CSS bundling to explore alternative solutions (#8399) by @hyf0

🚀 Features

rust/data-url: use hash as id for data url modules to prevent long string overhead (#8420) by @hyf0
validate bundle stays within output dir (#8441) by @sapphi-red
rust: support PluginOrder::PinPost (#8417) by @hyf0
support ModuleType:Copy (#8407) by @hyf0
expose ESTree types from rolldown/utils (#8400) by @sapphi-red

🐛 Bug Fixes

incorrect sourcemap when postBanner/postFooter is used with shebang (#8459) by @Copilot
resolver: disable node_path option to align ESM resolver behavior (#8472) by @sapphi-red
parse .js within "type": "commonjs" as ESM for now (#8470) by @sapphi-red
case-insensitive filename conflict detection for chunk deduplication (#8458) by @Copilot
prevent inlining CJS exports that are mutated by importers (#8456) by @IWANABETHATGUY
parse .cjs / .cts / .js within "type": "commonjs" as CommonJS (#8455) by @sapphi-red
plugin/copy-module: correct hooks' priority (#8423) by @hyf0
plugin/chunk-import-map: ensure render_chunk_meta run after users plugin (#8422) by @hyf0
rust: correct hooks order of DataUriPlugin (#8418) by @hyf0
jsx.preserve should also considering tsconfig json preserve (#8324) by @IWANABETHATGUY
deferred_scan_data.rs "Should have resolved id: NotFound" error (#8379) by @sapphi-red
cli: require value for --dir/-d and --file/-o (#8378) by @Copilot
dev: avoid mutex deadlock caused by inconsistent lock order (#8370) by @sapphi-red

🚜 Refactor

watch: rename TaskStart/TaskEnd to BundleStart/BundleEnd (#8463) by @hyf0
rust: rename rolldown_plugin_data_uri to rolldown_plugin_data_url (#8421) by @hyf0
bindingify-build-hook: extract helper for PluginContextImpl (#8438) by @ShroXd
give source loading a proper name (#8436) by @IWANABETHATGUY
ban holding DashMap refs across awaits (#8362) by @sapphi-red

📚 Documentation

add glob pattern usage example to input option (#8469) by @IWANABETHATGUY
remove https://rolldown.rs from links in reference docs (#8454) by @sapphi-red
mention execution order issue in output.codeSplitting docs (#8452) by @sapphi-red
clarify output.comments behavior a bit (#8451) by @sapphi-red
replace npmjs package links with npmx.dev (#8439) by @Boshen
reference: add Exported from for values / types exported from subpath exports (#8394) by @sapphi-red
add JSDocs for APIs exposed from subpath exports (#8393) by @sapphi-red
reference: generate reference pages for APIs exposed from subpath exports (#8392) by @sapphi-red
avoid pipe character in codeSplitting example to fix broken rendering (#8391) by @IWANABETHATGUY

⚡ Performance

avoid redundant PathBuf allocations in resolve paths (#8435) by @Brooooooklyn
bump to sugar_path@2 (#8432) by @hyf0
use flag-based convergence detection in include_statements (#8412) by @Brooooooklyn

🧪 Testing

execute _test.mjs even if executeOutput is false (#8398) by @sapphi-red
add retry to tree-shake/module-side-effects-proxy4 as it is flaky (#8397) by @sapphi-red
avoid expect.assertions() as it is not concurrent test friendly (#8383) by @sapphi-red
disable mockReset option (#8382) by @sapphi-red
fix flaky failure caused by concurrent resolveId calls (#8381) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update dependency rollup to v4.59.0 [security] (#8471) by @renovate[bot]
ai/design: add design doc about watch mode (#8453) by @hyf0
deps: update oxc resolver to v11.19.0 ([#8461](https://redirect.g

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-02-06T03:00:47Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.79%. Comparing base (5f982a9) to head (f27a389).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #22   +/-   ##
=======================================
  Coverage   68.79%   68.79%           
=======================================
  Files           4        4           
  Lines         282      282           
  Branches       91       91           
=======================================
  Hits          194      194           
  Misses         63       63           
  Partials       25       25

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate Bot force-pushed the renovate/all-minor-patch branch from d9f2855 to b8547ff Compare February 6, 2026 10:58

renovate Bot changed the title ~~chore(deps): update devdependency obuild to ^0.4.24~~ chore(deps): update all non-major dependencies Feb 6, 2026

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies - autoclosed Feb 6, 2026

renovate Bot closed this Feb 6, 2026

renovate Bot deleted the renovate/all-minor-patch branch February 6, 2026 12:26

renovate Bot changed the title ~~chore(deps): update all non-major dependencies - autoclosed~~ chore(deps): update devdependency obuild to ^0.4.27 Feb 7, 2026

renovate Bot reopened this Feb 7, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 6688648 to 9025a34 Compare February 7, 2026 10:15

renovate Bot changed the title ~~chore(deps): update devdependency obuild to ^0.4.27~~ chore(deps): update all non-major dependencies Feb 7, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 38d2e9b to 5bc56cc Compare February 12, 2026 13:09

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies - autoclosed Feb 12, 2026

renovate Bot closed this Feb 12, 2026

renovate Bot changed the title ~~chore(deps): update all non-major dependencies - autoclosed~~ chore(deps): update devdependency @typescript/native-preview to ^7.0.0-dev.20260213.1 Feb 14, 2026

renovate Bot reopened this Feb 14, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 5bc56cc to b4c6bfb Compare February 14, 2026 02:36

renovate Bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 38dc307 to ec4527a Compare February 25, 2026 08:15

renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from cbc590e to d45cf3a Compare March 4, 2026 11:13

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 69fbf1e to c0f27e7 Compare March 6, 2026 11:04

chore(deps): update all non-major dependencies

f27a389

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#22

chore(deps): update all non-major dependencies#22
pi0 merged 1 commit intomainfrom
renovate/all-minor-patch

renovate Bot commented Feb 6, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Feb 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

🩹 Fixes

📦 Build

🏡 Chore

❤️ Contributors

🚀 Enhancements

🩹 Fixes

❤️ Contributors

🩹 Fixes

💅 Refactors

❤️ Contributors

🏡 Chore

❤️ Contributors

🩹 Fixes

🏡 Chore

❤️ Contributors

🐛 Bug Fixes

📚 Documentation

🚀 Features

🐛 Bug Fixes

💥 BREAKING CHANGES

🚀 Features

🚀 Features

🐛 Bug Fixes

📚 Documentation

v10.30.1: pnpm 10.30.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.30.0: pnpm 10.30

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

◀️ Revert

❤️ New Contributors

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

Configuration

Uh oh!

codecov Bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Feb 6, 2026 •

edited

Loading

`v10.30.1`: pnpm 10.30.1

`v10.30.0`: pnpm 10.30

codecov Bot commented Feb 6, 2026 •

edited

Loading