chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #86 · unplugin/unplugin-replace

renovate · 2026-03-30T01:21:59Z

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	`^7.8.3` → `^7.8.4`
@sxzz/test-utils	`^0.5.15` → `^0.5.16`
@typescript/native-preview (source)	`7.0.0-dev.20260322.1` → `7.0.0-dev.20260330.1`
pnpm (source)	`10.32.1` → `10.33.0`
rolldown (source)	`1.0.0-rc.10` → `1.0.0-rc.12`
rollup (source)	`^4.60.0` → `^4.60.1`
tsdown (source)	`^0.21.4` → `^0.21.7`
tsdown-preset-sxzz	`^0.4.2` → `^0.5.0`
vite (source)	`^8.0.1` → `^8.0.3`
vitest (source)	`^4.1.0` → `^4.1.2`

Release Notes

sxzz/eslint-config (@sxzz/eslint-config)

`v7.8.4`

Compare Source

No significant changes

View changes on GitHub

sxzz/test-utils (@sxzz/test-utils)

`v0.5.16`

Compare Source

No significant changes

View changes on GitHub

microsoft/typescript-go (@typescript/native-preview)

pnpm/pnpm (pnpm)

`v10.33.0`

Compare Source

rolldown/rolldown (rolldown)

`v1.0.0-rc.12`

Compare Source

🚀 Features

chunk-optimizer: skip circular dependency check when strict execution order is enabled (#8886) by @hyf0

🐛 Bug Fixes

emit build warnings during watch mode rebuilds (#8897) by @IWANABETHATGUY
lazy-barrel: load import-then-export specifiers when barrel has local exports (#8895) by @shulaoda
correct execution order of transferred CJS init calls (#8877) by @IWANABETHATGUY
mcs: entriesAware should calculate sizes without duplication (#8887) by @hyf0
non-deterministic chunk generation (#8882) by @sapphi-red
is_top_level incorrectly treats strict-mode scopes as top-level (#8878) by @Dunqing

🚜 Refactor

treeshake: migrate SideEffectDetector to Oxc's MayHaveSideEffects trait (#8624) by @Dunqing

🧪 Testing

make dev server tests deterministic by replacing fixed sleeps with event-driven polling (#8561) by @Boshen

⚙️ Miscellaneous Tasks

deps: update dependency vite-plus to v0.1.14 (#8902) by @camc314
deps: update dependency oxfmt to ^0.42.0 (#8891) by @renovate[bot]
deps: update rust crate oxc_sourcemap to v6.1.1 (#8890) by @renovate[bot]
remove Rolldown MF plan (#8883) by @shulaoda
deps: update rollup submodule for tests to v4.60.0 (#8881) by @sapphi-red
deps: update test262 submodule for tests (#8880) by @sapphi-red
deps: upgrade oxc crates to 0.122.0 (#8879) by @shulaoda

`v1.0.0-rc.11`

Compare Source

🚀 Features

magicString replace with regex (#8802) by @IWANABETHATGUY
support output.sourcemapExcludeSources option (#8828) by @sapphi-red
support getIndentString in MagicString (#8775) by @IWANABETHATGUY
MagicString ignoreList support (#8773) by @IWANABETHATGUY

🐛 Bug Fixes

forward test filters through vp run (#8870) by @younggglcy
types: remove pluginName from MinimalPluginContext (#8864) by @sapphi-red
do not report eval?.() as direct eval (#8860) by @IWANABETHATGUY
handle negative indices, overlapping ranges, and moved content in MagicString remove (#8829) by @IWANABETHATGUY
enable arbitrary_precision for serde_json to fix JSON float parsing (#8848) by @elderapo
resolve TypeScript lint errors (#8841) by @Boshen
avoid panic on multi-byte UTF-8 chars in hash placeholder iterator (#8790) by @shulaoda
ci: skip failing vite build watch raw query test (#8840) by @Boshen
ci: use step-level env override to unset VITE_PLUS_CLI_BIN in vite tests (#8838) by @Boshen
ci: move vite tests into CI workflow by @Boshen
ci: unset all VITE_PLUS_* env vars in vite-tests workflow (#8837) by @Boshen
test: skip watch CLI tests on Windows (#8830) by @Boshen
ci: unset VITE_PLUS_CLI_BIN in vite-tests workflow (#8832) by @Boshen
remove redundant bare side-effect imports in entry/facade chunks (#8804) by @h-a-n-a
magicString prepend issues (#8797) by @IWANABETHATGUY
ci: use vpx instead of vp exec for pkg-pr-new (#8827) by @Boshen
set order for callable plugins (#8815) by @sapphi-red
handle reversed slice ranges with moved content (#8750) by @IWANABETHATGUY
update emnapi to latest to avoid version mismatch (#8781) by @sapphi-red
external.md on Windows OS (#8780) by @bddjr
align MagicString length/isEmpty with reference magic-string (#8776) by @IWANABETHATGUY

🚜 Refactor

extract canonical_ref_resolving_namespace helper (#8836) by @Boshen

📚 Documentation

improve external examples for cross-platform correctness (#8786) by @hyf0-agent
update reference to transform function in plugin API documentation (#8778) by @zOadT

⚡ Performance

reduce timing of dervie_entries_aware_chunk_name (#8847) by @AliceLanniste
bench: remove redundant sourcemap benchmark cases (#8825) by @Boshen
reduce intermediate allocations in collapse_sourcemaps (#8821) by @Boshen
enable parallel AST cloning on macOS (#8814) by @Boshen

🧪 Testing

watch: use polling watcher and retry for watch error test (#8772) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update dependency @oxc-project/types to v0.122.0 (#8873) by @renovate[bot]
publish-to-npm: use correct vp pm publish (#8871) by @shulaoda
justfile: skip setup-vite-plus if vp is already installed (#8862) by @Boshen
add expectWarning option to test config (#8861) by @IWANABETHATGUY
justfile: support windows for just setup (#8846) by @AliceLanniste
deps: update rust crates (#8852) by @renovate[bot]
deps: update endbug/version-check action to v3 (#8855) by @renovate[bot]
deps: update github-actions (#8853) by @renovate[bot]
deps: update dependency vitepress to v2.0.0-alpha.17 (#8854) by @renovate[bot]
deps: update npm packages (#8851) by @renovate[bot]
bench: use mimalloc as global allocator in bench crate (#8844) by @IWANABETHATGUY
reuse native build artifact in node-validation job (#8826) by @Boshen
speed up CodSpeed benchmark build by disabling LTO (#8824) by @Boshen
remove redundant critcmp benchmark job (#8823) by @Boshen
deps: update rust crate oxc_sourcemap to v6.1.0 (#8785) by @renovate[bot]
node: migrate oxlint and oxfmt to Vite+ (#8813) by @Boshen
revert namespace runners for release build jobs (#8820) by @Boshen
migrate runners to namespace (#8819) by @Boshen
test: relax test utils path assertion to support git worktrees (#8816) by @younggglcy
rename examples/lazy to examples/lazy-compilation (#8789) by @shulaoda
improve "needs reproduction" wording by @Boshen
deps: update dependency oxlint-tsgolint to v0.17.1 (#8807) by @renovate[bot]
enable 7 previously-skipped MagicString tests (#8771) by @IWANABETHATGUY
upgrade oxc to 0.121.0 (#8784) by @shulaoda
increase Windows dev drive size from 12GB to 20GB (#8779) by @Copilot

❤️ New Contributors

@younggglcy made their first contribution in #8870
@elderapo made their first contribution in #8848
@bddjr made their first contribution in #8780
@zOadT made their first contribution in #8778

rollup/rollup (rollup)

`v4.60.1`

Compare Source

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)
#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)
#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)
#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)
#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)
#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6323: chore(deps): lock file maintenance (@renovate[bot])
#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

rolldown/tsdown (tsdown)

`v0.21.7`

Compare Source

🚀 Features

Add module option for attw and publint to allow passing imported modules directly - by @sxzz (31e90)

🐞 Bug Fixes

deps: Add skipNodeModulesBundle dep subpath e2e tests and fix docs - by @sxzz (deff7)

View changes on GitHub

`v0.21.6`

Compare Source

🚀 Features

Upgrade rolldown to v1.0.0-rc.12 - by @sxzz (51292)
config:
- Pass root config to workspace config functions - by @sxzz (76169)
- Use mergeConfig for workspace config merging and support variadic overrides - by @sxzz (148aa)
dts:
- Add cjsReexport option to eliminate dual module type hazard - by @mandarini and @sxzz in #856 (875c1)
exports:
- Add bin option to auto-generate package.json bin field - by @sxzz in #869 (7ebd6)

🐞 Bug Fixes

css:
- Compile preprocessor langs in virtual CSS modules - by @sxzz in #865 (7b2e0)
- Strip .module from CSS output filenames - by @sxzz in #866 (03ade)
- Default splitting to true in unbundle mode for CSS inject - by @sxzz in #867 (a4da6)
- Split CSS plugin into pre/post phases for scoped CSS support - by @sxzz in #870 (ff0c4)
entry:
- Correctly output relative paths in logger output - by @sxzz (00050)

View changes on GitHub

`v0.21.5`

Compare Source

🚀 Features

Update rolldown to 1.0.0-rc.10 - by @wChenonly in #845 (41411)
Support typescript v6 - by @ocavue in #858 (bffc4)

🐞 Bug Fixes

css:
- Run final minification on merged CSS output - by @sxzz in #853 (475df)
- Don't override internal importer - by @Laupetin in #860 (af40e)
- Use aliased exports for CSS module keys - by @wChenonly and @sxzz in #840 (bb6de)
deps:
- External optionalDependencies by default - by @sxzz (cd24d)
- Resolve subpath extensions for packages without exports field - by @sxzz in #863 (c5150)
- Correctly resolve root @types packages for dts deep imports - by @brc-dd and @sxzz in #852 (0b276)

View changes on GitHub

sxzz/tsdown-preset-sxzz (tsdown-preset-sxzz)

`v0.5.0`

Compare Source

🚨 Breaking Changes

Require tsdown@^0.21.7 - by @sxzz (5bb89)

View changes on GitHub

vitejs/vite (vite)

`v8.0.3`

Compare Source

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

deps: bump picomatch from 4.0.3 to 4.0.4 (#22027) (7e56003)

Tests

html: add tests for getCssFilesForChunk (#22016) (43fbbf9)

`v8.0.2`

Compare Source

Features

update rolldown to 1.0.0-rc.11 (#21998) (ff91c31)

Bug Fixes

deps: update all non-major dependencies (#21988) (9b7d150)

Miscellaneous Chores

deps: update dependency @vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

vitest-dev/vitest (vitest)

`v4.1.2`

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#9975).

🐞 Bug Fixes

Don't resolve setupFiles from parent directory - by @hi-ogawa in #9960 (7aa93)
Ensure sequential mock/unmock resolution - by @hi-ogawa and Claude Opus 4.6 in #9830 (7c065)
browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot - by @macarie in #9847 (faace)
coverage: Correct coverageConfigDefaults values and types - by @Arthie in #9940 (b3c99)
pretty-format: Fix output limit over counting - by @hi-ogawa in #9965 (d3b7a)
Disable colors if agent is detected - by @sheremet-va and @AriPerkkio in #9851 (6f97b)

View changes on GitHub

`v4.1.1`

Compare Source

🚀 Features

experimental:
- Expose matchesTagsFilter to test if the current filter matches tags - by @sheremet-va in #9913 (eec53)
- Introduce experimental.vcsProvider - by @sheremet-va in #9928 (56115)

🐞 Bug Fixes

Mark TestProject.testFilesList internal properly - by @sapphi-red in #9867 (54f26)
Detect fixture that returns without calling use - by @oilater in #9831 and #9861 (633ae)
Drop vite 8.beta support - by @AriPerkkio in #9862 (b78f5)
Type regression in vi.mocked() static class methods - by @purepear and @hi-ogawa in #9857 (90926)
Properly re-evaluate actual modules of mocked external - by @hi-ogawa in #9898 (ae5ec)
Preserve coverage report when html reporter overlaps - by @hi-ogawa in #9889 (2d81a)
Provide vi.advanceTimers to the preview provider - by @sheremet-va in #9891 (1bc3e)
Don't leak event listener in playwright provider - by @sheremet-va in #9910 (d9355)
Open browser in --standalone mode without running tests - by @sheremet-va in #9911 (e78ad)
Guard disposable and optional body - by @sheremet-va in #9912 (6fdb2)
Resolve retry.condition RegExp serialization issue - by @nstepien and @hi-ogawa in #9942 (7b605)
collect:
- Don't treat extra props on test return as tests - by @sheremet-va in #9871 (141e7)
coverage:
- Simplify provider types - by @AriPerkkio in #9931 (aaf9f)
- Load built-in provider without module runner - by @AriPerkkio in #9939 (bf892)
expect:
- Soft assertions continue after .resolves/.rejects promise errors - by @mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @hi-ogawa in #9843 (6d74b)
- Fix sinon-chai style API - by @hi-ogawa in #9943 (0f08d)
pretty-format:
- Limit output for large object - by @hi-ogawa and Claude Opus 4.6 (1M context) in #9949 (0d5f9)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2026-03-30T01:22:02Z

Run & review this pull request in StackBlitz Codeflow.

pkg-pr-new · 2026-03-30T01:22:24Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-replace@86

commit: 9e893ba

socket-security · 2026-03-30T01:22:31Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
tsdown-preset-sxzz@0.4.2 ⏵ 0.5.0	⁺¹	⁺¹	⁺¹
@typescript/native-preview@7.0.0-dev.20260322.1 ⏵ 7.0.0-dev.20260330.1		⁺¹
@sxzz/test-utils@0.5.15 ⏵ 0.5.16	^-1	⁺¹	^-1
rolldown@1.0.0-rc.9 ⏵ 1.0.0-rc.12		⁺¹
vitest@4.1.0 ⏵ 4.1.2	⁺¹	⁺¹
vite@8.0.1 ⏵ 8.0.3	⁺¹	⁺¹
@sxzz/eslint-config@7.8.3 ⏵ 7.8.4	⁺¹
tsdown@0.21.4 ⏵ 0.21.7	⁺¹	⁺¹	⁺¹
rollup@4.60.0 ⏵ 4.60.1	⁺¹¹		⁺²

View full report

renovate bot added the dependencies label Mar 30, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0e220d5 to 56baa3c Compare March 30, 2026 04:47

chore(deps): update all non-major dependencies

9e893ba

renovate bot force-pushed the renovate/all-minor-patch branch from 56baa3c to 9e893ba Compare March 30, 2026 08:59

renovate bot merged commit 51c91e6 into main Mar 30, 2026
12 checks passed

renovate bot deleted the renovate/all-minor-patch branch March 30, 2026 13:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#86

chore(deps): update all non-major dependencies#86
renovate[bot] merged 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Mar 30, 2026

Uh oh!

pkg-pr-new bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 Features

🐛 Bug Fixes

🚜 Refactor

🧪 Testing

⚙️ Miscellaneous Tasks

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

Bug Fixes

Pull Requests

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚨 Breaking Changes

Features

Bug Fixes

Miscellaneous Chores

Tests

Features

Bug Fixes

Miscellaneous Chores

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Mar 30, 2026

Uh oh!

pkg-pr-new bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 30, 2026 •

edited

Loading

pkg-pr-new bot commented Mar 30, 2026 •

edited

Loading

socket-security bot commented Mar 30, 2026 •

edited

Loading