Skip to content

Bump the npm group with 25 updates#2145

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dc95ac8a65
Mar 23, 2026
Merged

Bump the npm group with 25 updates#2145
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dc95ac8a65

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 25 updates:

Package From To
vite 8.0.0 8.0.1
@emnapi/core 1.9.0 1.9.1
@emnapi/runtime 1.9.0 1.9.1
@oxc-project/types 0.115.0 0.120.0
@rolldown/binding-android-arm64 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-darwin-arm64 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-darwin-x64 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-freebsd-x64 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-arm-gnueabihf 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-arm64-gnu 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-arm64-musl 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-ppc64-gnu 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-s390x-gnu 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-x64-gnu 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-linux-x64-musl 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-openharmony-arm64 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-wasm32-wasi 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-win32-arm64-msvc 1.0.0-rc.9 1.0.0-rc.10
@rolldown/binding-win32-x64-msvc 1.0.0-rc.9 1.0.0-rc.10
@rolldown/pluginutils 1.0.0-rc.9 1.0.0-rc.10
baseline-browser-mapping 2.10.8 2.10.10
electron-to-chromium 1.5.313 1.5.321
jose 6.2.1 6.2.2
rolldown 1.0.0-rc.9 1.0.0-rc.10
ts-api-utils 2.4.0 2.5.0

Updates vite from 8.0.0 to 8.0.1

Release notes

Sourced from vite's releases.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.1 (2026-03-19)

Features

Bug Fixes

  • bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
  • css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
  • deps: update all non-major dependencies (#21878) (6dbbd7f)
  • dev: always use ESM Oxc runtime (#21829) (d323ed7)
  • dev: handle concurrent restarts in _createServer (#21810) (40bc729)
  • handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
  • improve no-cors request block error (#21902) (5ba688b)
  • use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
  • worker: require(json) result should not be wrapped (#21847) (0672fd2)
  • worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

Commits

Updates @emnapi/core from 1.9.0 to 1.9.1

Release notes

Sourced from @​emnapi/core's releases.

v1.9.1

fix for emscripten 5.0.3 emscripten-core/emscripten@3051725

Full Changelog: toyobayashi/emnapi@v1.9.0...v1.9.1

Commits

Updates @emnapi/runtime from 1.9.0 to 1.9.1

Release notes

Sourced from @​emnapi/runtime's releases.

v1.9.1

fix for emscripten 5.0.3 emscripten-core/emscripten@3051725

Full Changelog: toyobayashi/emnapi@v1.9.0...v1.9.1

Commits

Updates @oxc-project/types from 0.115.0 to 0.120.0

Release notes

Sourced from @​oxc-project/types's releases.

oxc crates_v0.120.0

🐛 Bug Fixes

  • edb8677 ecmascript: Treat collection constructor with variable arg as side-effectful (#20383) (Dunqing)
  • 1f65c3f transformer: Emit design:paramtypes when class has static anonymous class expression (#20382) (bab)
  • fa70d5c transformer: Use implementation signature for design:paramtypes when constructor is overloaded (#20394) (bab)
  • ed5a7fb parser: Report syntax error for new super() (#20384) (Boshen)
  • e62524d minifier: Treat object spread of getters as having side effects (#20380) (Boshen)
  • f8fbd6e linter/plugins: Remove hashbang property from AST (#20365) (overlookmotel)

⚡ Performance

  • 30a2b0f minifier: Use atom_from_strs_array for template literal concat (#20386) (Boshen)
  • 690ce17 minifier: Use Vec::with_capacity for inline template expressions (#20389) (Boshen)
  • 9cd612f linter/plugins: Recycle comment objects (#20362) (overlookmotel)

oxc crates_v0.119.0

🚀 Features

  • e7163b6 ecmascript: Add known-globals to side-effect-free property reads (#20212) (Dunqing)
  • 139ab68 ecmascript: Add property_write_side_effects to MayHaveSideEffectsContext (#20217) (Dunqing)

🐛 Bug Fixes

  • 78c264a parser: Fix conditional expressions with arrow-function alternates in TS (#20356) (camc314)
  • 5c97b14 minifier: Recognize object spread of object literals as side-effect-free (#20299) (Boshen)
  • 1ff5c1d transformer/typescript: Rewrite extensions in dynamic import() expressions (#20121) (Sverre Johansen)
  • 1c07b3b diagnostics: Handle WouldBlock in stdout writes to prevent panic (#20295) (Boshen)
  • ade14d4 ecmascript: Enhance side-effect detection for classes, TypedArrays, computed members, and spread (#20213) (Dunqing)

⚡ Performance

  • 5474d0a semantic: V8-style walk-up reference resolution (#20292) (Boshen)

📚 Documentation

  • e4aa5b5 parser/napi, linter/plugins: Add JSDoc comments to raw transfer constants (#20286) (overlookmotel)

oxc crates_v0.118.0

No release notes provided.

oxc crates_v0.117.0

🚀 Features

  • e8547cc parser: Report error for using declarations in ambient contexts (#19934) (camc314)
  • 8345318 allocator: Add methods for boxed slices ArenaBox<[T]> (#19968) (overlookmotel)
  • f83be30 allocator: Add Vec::push_fast method (#19959) (overlookmotel)

🐛 Bug Fixes

... (truncated)

Commits

Updates @rolldown/binding-android-arm64 from 1.0.0-rc.9 to 1.0.0-rc.10

Release notes

Sourced from @​rolldown/binding-android-arm64's releases.

v1.0.0-rc.10

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

  • rolldown: some minor perf optimization found by autoresearch (#8730) by @​Brooooooklyn
  • replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @​Boshen
  • replace TypedDashMap with TypedMap in CustomField (#8708) by @​Boshen
  • bench: remove scan benchmark binary to halve LTO link time (#8694) by @​Boshen

🧪 Testing

... (truncated)

Changelog

Sourced from @​rolldown/binding-android-arm64's changelog.

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

  • rolldown: some minor perf optimization found by autoresearch (#8730) by @​Brooooooklyn
  • replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @​Boshen
  • replace TypedDashMap with TypedMap in CustomField (#8708) by @​Boshen
  • bench: remove scan benchmark binary to halve LTO link time (#8694) by @​Boshen

🧪 Testing

... (truncated)

Commits
  • 69585a6 release: v1.0.0-rc.10 (#8774)
  • fd4d0b8 chore: correct comment in bundle-analyzer-plugin.ts (#8770)
  • 51d4932 test(watch): increase timeout for error output (#8766)
  • 25d11c9 fix(rolldown_plugin_vite_dynamic_import_vars): align dynamic import fast chec...
  • 64db202 docs: clarify watch mode behavior and its limitations (#8751)
  • 726db18 test(watch): add CLI exit code test (#8752)
  • 529f54b chore: enable all test for reset category in MagicString.test.ts (#8749)
  • 638ce1e feat: add indentExclusionRanges property to MagicString (#8746)
  • 683f218 test: normalize paths on Windows even if resolve.symlinks is false (#8483)
  • a828c64 fix: pass yarn_pnp option where needed (#8736)
  • Additional commits viewable in compare view

Updates @rolldown/binding-darwin-arm64 from 1.0.0-rc.9 to 1.0.0-rc.10

Release notes

Sourced from @​rolldown/binding-darwin-arm64's releases.

v1.0.0-rc.10

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

  • rolldown: some minor perf optimization found by autoresearch (#8730) by @​Brooooooklyn
  • replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @​Boshen
  • replace TypedDashMap with TypedMap in CustomField (#8708) by @​Boshen
  • bench: remove scan benchmark binary to halve LTO link time (#8694) by @​Boshen

🧪 Testing

... (truncated)

Changelog

Sourced from @​rolldown/binding-darwin-arm64's changelog.

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

  • rolldown: some minor perf optimization found by autoresearch (#8730) by @​Brooooooklyn
  • replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @​Boshen
  • replace TypedDashMap with TypedMap in CustomField (#8708) by @​Boshen
  • bench: remove scan benchmark binary to halve LTO link time (#8694) by @​Boshen

🧪 Testing

... (truncated)

Commits
  • 69585a6 release: v1.0.0-rc.10 (#8774)
  • fd4d0b8 chore: correct comment in bundle-analyzer-plugin.ts (#8770)
  • 51d4932 test(watch): increase timeout for error output (#8766)
  • 25d11c9 fix(rolldown_plugin_vite_dynamic_import_vars): align dynamic import fast chec...
  • 64db202 docs: clarify watch mode behavior and its limitations (#8751)
  • 726db18 test(watch): add CLI exit code test (#8752)
  • 529f54b chore: enable all test for reset category in MagicString.test.ts (#8749)
  • 638ce1e feat: add indentExclusionRanges property to MagicString (#8746)
  • 683f218 test: normalize paths on Windows even if resolve.symlinks is false (#8483)
  • a828c64 fix: pass yarn_pnp option where needed (#8736)
  • Additional commits viewable in compare view

Updates @rolldown/binding-darwin-x64 from 1.0.0-rc.9 to 1.0.0-rc.10

Release notes

Sourced from @​rolldown/binding-darwin-x64's releases.

v1.0.0-rc.10

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

  • rolldown: some minor perf optimization found by autoresearch (#8730) by @​Brooooooklyn
  • replace Vec allocation with lazy iterator in find_hash_placeholders (#8703) by @​Boshen
  • replace TypedDashMap with TypedMap in CustomField (#8708) by @​Boshen
  • bench: remove scan benchmark binary to halve LTO link time (#8694) by @​Boshen

🧪 Testing

... (truncated)

Changelog

Sourced from @​rolldown/binding-darwin-x64's changelog.

[1.0.0-rc.10] - 2026-03-18

🚀 Features

🐛 Bug Fixes

Bumps the npm group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.0` | `8.0.1` |
| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.9.0` | `1.9.1` |
| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.9.0` | `1.9.1` |
| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.115.0` | `0.120.0` |
| [@rolldown/binding-android-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-darwin-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-darwin-x64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-freebsd-x64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-arm-gnueabihf](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-arm64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-arm64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-ppc64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-s390x-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-x64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-linux-x64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-openharmony-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-wasm32-wasi](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-win32-arm64-msvc](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/binding-win32-x64-msvc](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [@rolldown/pluginutils](https://github.com/rolldown/rolldown/tree/HEAD/packages/pluginutils) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.8` | `2.10.10` |
| [electron-to-chromium](https://github.com/kilian/electron-to-chromium) | `1.5.313` | `1.5.321` |
| [jose](https://github.com/panva/jose) | `6.2.1` | `6.2.2` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.9` | `1.0.0-rc.10` |
| [ts-api-utils](https://github.com/JoshuaKGoldberg/ts-api-utils) | `2.4.0` | `2.5.0` |


Updates `vite` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.1/packages/vite)

Updates `@emnapi/core` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.9.0...v1.9.1)

Updates `@emnapi/runtime` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.9.0...v1.9.1)

Updates `@oxc-project/types` from 0.115.0 to 0.120.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxc-types/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.120.0/npm/oxc-types)

Updates `@rolldown/binding-android-arm64` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-darwin-arm64` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-darwin-x64` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-freebsd-x64` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-arm-gnueabihf` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-arm64-gnu` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-arm64-musl` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-ppc64-gnu` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-s390x-gnu` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-x64-gnu` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-linux-x64-musl` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-openharmony-arm64` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-wasm32-wasi` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-win32-arm64-msvc` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/binding-win32-x64-msvc` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `@rolldown/pluginutils` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/pluginutils)

Updates `baseline-browser-mapping` from 2.10.8 to 2.10.10
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.8...v2.10.10)

Updates `electron-to-chromium` from 1.5.313 to 1.5.321
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.313...v1.5.321)

Updates `jose` from 6.2.1 to 6.2.2
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.1...v6.2.2)

Updates `rolldown` from 1.0.0-rc.9 to 1.0.0-rc.10
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.10/packages/rolldown)

Updates `ts-api-utils` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/JoshuaKGoldberg/ts-api-utils/releases)
- [Changelog](https://github.com/JoshuaKGoldberg/ts-api-utils/blob/main/CHANGELOG.md)
- [Commits](JoshuaKGoldberg/ts-api-utils@v2.4.0...v2.5.0)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/core"
  dependency-version: 1.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/runtime"
  dependency-version: 1.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@oxc-project/types"
  dependency-version: 0.120.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rolldown/binding-android-arm64"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-darwin-arm64"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-darwin-x64"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-freebsd-x64"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm-gnueabihf"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm64-gnu"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm64-musl"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-ppc64-gnu"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-s390x-gnu"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-x64-gnu"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-x64-musl"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-openharmony-arm64"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-wasm32-wasi"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-win32-arm64-msvc"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-win32-x64-msvc"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/pluginutils"
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: baseline-browser-mapping
  dependency-version: 2.10.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: electron-to-chromium
  dependency-version: 1.5.321
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: jose
  dependency-version: 6.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: rolldown
  dependency-version: 1.0.0-rc.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: ts-api-utils
  dependency-version: 2.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 23, 2026
@github-actions github-actions Bot enabled auto-merge (squash) March 23, 2026 01:52
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@emnapi/core 1.9.1 🟢 3.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1017 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@emnapi/runtime 1.9.1 🟢 3.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1017 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@oxc-project/types 0.120.0 UnknownUnknown
npm/@rolldown/binding-android-arm64 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-darwin-arm64 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-darwin-x64 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-freebsd-x64 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-arm-gnueabihf 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-arm64-gnu 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-arm64-musl 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-ppc64-gnu 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-s390x-gnu 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-x64-gnu 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-linux-x64-musl 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-openharmony-arm64 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-wasm32-wasi 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-win32-arm64-msvc 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/binding-win32-x64-msvc 1.0.0-rc.10 UnknownUnknown
npm/@rolldown/pluginutils 1.0.0-rc.10 UnknownUnknown
npm/baseline-browser-mapping 2.10.10 UnknownUnknown
npm/electron-to-chromium 1.5.321 UnknownUnknown
npm/jose 6.2.2 🟢 7.2
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/18 approved changesets -- score normalized to 0
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/rolldown 1.0.0-rc.10 UnknownUnknown
npm/ts-api-utils 2.5.0 UnknownUnknown
npm/vite 8.0.1 🟢 6.5
Details
CheckScoreReason
Code-Review🟢 6Found 17/25 approved changesets -- score normalized to 6
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 6detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 5binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3

Scanned Files

  • pnpm-lock.yaml

@github-actions github-actions Bot merged commit 55bea47 into main Mar 23, 2026
5 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/npm-dc95ac8a65 branch March 23, 2026 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant