Skip to content

Bump the npm group with 32 updates#2161

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-ab6e589157
Apr 20, 2026
Merged

Bump the npm group with 32 updates#2161
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-ab6e589157

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 32 updates:

Package From To
@types/node 24.12.0 25.6.0
@vitest/coverage-v8 4.1.2 4.1.4
vite 8.0.7 8.0.8
vitest 4.1.2 4.1.4
@emnapi/core 1.9.1 1.9.2
@emnapi/runtime 1.9.1 1.9.2
@emnapi/wasi-threads 1.2.0 1.2.1
@oxc-project/types 0.123.0 0.124.0
@rolldown/binding-android-arm64 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-darwin-arm64 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-darwin-x64 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-freebsd-x64 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-arm-gnueabihf 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-arm64-gnu 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-arm64-musl 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-ppc64-gnu 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-s390x-gnu 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-x64-gnu 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-linux-x64-musl 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-openharmony-arm64 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-wasm32-wasi 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-win32-arm64-msvc 1.0.0-rc.13 1.0.0-rc.15
@rolldown/binding-win32-x64-msvc 1.0.0-rc.13 1.0.0-rc.15
@rolldown/pluginutils 1.0.0-rc.13 1.0.0-rc.15
@vitest/expect 4.1.2 4.1.4
@vitest/mocker 4.1.2 4.1.4
@vitest/pretty-format 4.1.2 4.1.4
@vitest/runner 4.1.2 4.1.4
@vitest/snapshot 4.1.2 4.1.4
@vitest/spy 4.1.2 4.1.4
@vitest/utils 4.1.2 4.1.4
rolldown 1.0.0-rc.13 1.0.0-rc.15

Updates @types/node from 24.12.0 to 25.6.0

Commits

Updates @vitest/coverage-v8 from 4.1.2 to 4.1.4

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates vite from 8.0.7 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

Bug Fixes

  • avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
  • ssr: class property keys hoisting matching imports (#22199) (e137601)
Commits

Updates vitest from 4.1.2 to 4.1.4

Release notes

Sourced from vitest's releases.

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ac04bac chore: release v4.1.4
  • 82c858d chore: Remove no-op function in plugin config logic (#8501)
  • d4fbb5c feat(experimental): support aria snapshot (#9668)
  • b77de96 feat(reporter): add filterMeta option to json reporter (#10078)
  • a120e3a feat(experimental): expose assertion as a public field (#10095)
  • 5375780 feat(coverage): default to text reporter skipFull if agent detected (#10018)
  • a1b5f0f fix: make expect(..., message) consistent as error message prefix (#10068)
  • 203f07a fix: use "black" foreground for labeled terminal message to ensure contrast (...
  • 2dc0d62 chore: release v4.1.3
  • 7827363 feat: add experimental.preParse flag (#10070)
  • Additional commits viewable in compare view

Updates @emnapi/core from 1.9.1 to 1.9.2

Release notes

Sourced from @​emnapi/core's releases.

v1.9.2

What's Changed

Full Changelog: toyobayashi/emnapi@v1.9.1...v1.9.2

Commits

Updates @emnapi/runtime from 1.9.1 to 1.9.2

Release notes

Sourced from @​emnapi/runtime's releases.

v1.9.2

What's Changed

Full Changelog: toyobayashi/emnapi@v1.9.1...v1.9.2

Commits

Updates @emnapi/wasi-threads from 1.2.0 to 1.2.1

Commits

Updates @oxc-project/types from 0.123.0 to 0.124.0

Release notes

Sourced from @​oxc-project/types's releases.

oxc crates_v0.124.0

🐛 Bug Fixes

  • fc7f60c allocator: Revert changes to get_current_chunk_footer_field_offset (#20964) (overlookmotel)
  • 31316c8 semantic: Rebind class expressions before identifier checks (#20916) (camc314)

⚡ Performance

  • fb52383 napi/parser, linter/plugins: Clear buffers and source texts earlier (#21025) (overlookmotel)
  • 3b7dec4 napi/parser, linter/plugins: Use utf8Slice for decoding UTF-8 strings (#21022) (overlookmotel)
  • 012c924 napi/parser, linter/plugins: Speed up decoding strings in raw transfer (#21021) (overlookmotel)
  • 55e1e9b napi/parser, linter/plugins: Initialize vars as 0 (#21020) (overlookmotel)
  • c25ef02 napi/parser, linter/plugins: Simplify branch condition in deserializeStr (#21019) (overlookmotel)
  • 9f494c3 napi/parser, linter/plugins: Raw transfer use String.fromCharCode in string decoding (#21018) (overlookmotel)
  • 91cf105 allocator: Increase initial chunk size from 512B to 16KB (#20968) (overlookmotel)
  • cbc0c21 allocator: Add #[cold] to to error handling functions (#20967) (overlookmotel)
  • 0503a78 napi/parser, linter/plugins: Faster deserialization of raw fields (#20923) (overlookmotel)
  • a24f75e napi/parser: Optimize string deserialization for non-ASCII sources (#20834) (Joshua Tuddenham)

📚 Documentation

  • c78a57a syntax: Fix typo (#21044) (camc314)
  • f5e228f allocator: Fix typo in comment (#20972) (overlookmotel)
  • 7159d51 allocator: Improve doc comment examples for vec2::Vec (#20969) (overlookmotel)
  • b1da750 allocator, data_structures: Correct comments (#20966) (overlookmotel)
Commits

Updates @rolldown/binding-android-arm64 from 1.0.0-rc.13 to 1.0.0-rc.15

Release notes

Sourced from @​rolldown/binding-android-arm64's releases.

v1.0.0-rc.15

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

v1.0.0-rc.14

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from @​rolldown/binding-android-arm64's changelog.

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Commits

Updates @rolldown/binding-darwin-arm64 from 1.0.0-rc.13 to 1.0.0-rc.15

Release notes

Sourced from @​rolldown/binding-darwin-arm64's releases.

v1.0.0-rc.15

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

v1.0.0-rc.14

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from @​rolldown/binding-darwin-arm64's changelog.

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Commits

Bumps the npm group with 32 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.12.0` | `25.6.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.2` | `4.1.4` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.7` | `8.0.8` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.2` | `4.1.4` |
| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.9.1` | `1.9.2` |
| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.9.1` | `1.9.2` |
| [@emnapi/wasi-threads](https://github.com/toyobayashi/emnapi) | `1.2.0` | `1.2.1` |
| [@oxc-project/types](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxc-types) | `0.123.0` | `0.124.0` |
| [@rolldown/binding-android-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-darwin-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-darwin-x64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-freebsd-x64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-arm-gnueabihf](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-arm64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-arm64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-ppc64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-s390x-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-x64-gnu](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-linux-x64-musl](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-openharmony-arm64](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-wasm32-wasi](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-win32-arm64-msvc](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/binding-win32-x64-msvc](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@rolldown/pluginutils](https://github.com/rolldown/rolldown/tree/HEAD/packages/pluginutils) | `1.0.0-rc.13` | `1.0.0-rc.15` |
| [@vitest/expect](https://github.com/vitest-dev/vitest/tree/HEAD/packages/expect) | `4.1.2` | `4.1.4` |
| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.2` | `4.1.4` |
| [@vitest/pretty-format](https://github.com/vitest-dev/vitest/tree/HEAD/packages/pretty-format) | `4.1.2` | `4.1.4` |
| [@vitest/runner](https://github.com/vitest-dev/vitest/tree/HEAD/packages/runner) | `4.1.2` | `4.1.4` |
| [@vitest/snapshot](https://github.com/vitest-dev/vitest/tree/HEAD/packages/snapshot) | `4.1.2` | `4.1.4` |
| [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `4.1.2` | `4.1.4` |
| [@vitest/utils](https://github.com/vitest-dev/vitest/tree/HEAD/packages/utils) | `4.1.2` | `4.1.4` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.13` | `1.0.0-rc.15` |


Updates `@types/node` from 24.12.0 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/coverage-v8)

Updates `vite` from 8.0.7 to 8.0.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite)

Updates `vitest` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest)

Updates `@emnapi/core` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.9.1...v1.9.2)

Updates `@emnapi/runtime` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.9.1...v1.9.2)

Updates `@emnapi/wasi-threads` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.2.0...wasi-threads-v1.2.1)

Updates `@oxc-project/types` from 0.123.0 to 0.124.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxc-types/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.124.0/npm/oxc-types)

Updates `@rolldown/binding-android-arm64` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-darwin-arm64` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-darwin-x64` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-freebsd-x64` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-arm-gnueabihf` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-arm64-gnu` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-arm64-musl` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-ppc64-gnu` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-s390x-gnu` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-x64-gnu` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-linux-x64-musl` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-openharmony-arm64` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-wasm32-wasi` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-win32-arm64-msvc` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/binding-win32-x64-msvc` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `@rolldown/pluginutils` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/pluginutils)

Updates `@vitest/expect` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/expect)

Updates `@vitest/mocker` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/mocker)

Updates `@vitest/pretty-format` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/pretty-format)

Updates `@vitest/runner` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/runner)

Updates `@vitest/snapshot` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/snapshot)

Updates `@vitest/spy` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/spy)

Updates `@vitest/utils` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/utils)

Updates `rolldown` from 1.0.0-rc.13 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/core"
  dependency-version: 1.9.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/runtime"
  dependency-version: 1.9.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/wasi-threads"
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@oxc-project/types"
  dependency-version: 0.124.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rolldown/binding-android-arm64"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-darwin-arm64"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-darwin-x64"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-freebsd-x64"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm-gnueabihf"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm64-gnu"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-arm64-musl"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-ppc64-gnu"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-s390x-gnu"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-x64-gnu"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-linux-x64-musl"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-openharmony-arm64"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-wasm32-wasi"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-win32-arm64-msvc"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/binding-win32-x64-msvc"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rolldown/pluginutils"
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/expect"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/mocker"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/pretty-format"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/runner"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/snapshot"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/spy"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/utils"
  dependency-version: 4.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: rolldown
  dependency-version: 1.0.0-rc.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@github-actions github-actions Bot enabled auto-merge (squash) April 20, 2026 01:43
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@emnapi/core 1.9.2 🟢 3.4
Details
CheckScoreReason
Maintained🟢 1028 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@emnapi/runtime 1.9.2 🟢 3.4
Details
CheckScoreReason
Maintained🟢 1028 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@emnapi/wasi-threads 1.2.1 🟢 3.4
Details
CheckScoreReason
Maintained🟢 1028 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@napi-rs/wasm-runtime 1.1.3 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 6Found 15/25 approved changesets -- score normalized to 6
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@oxc-project/types 0.124.0 UnknownUnknown
npm/@rolldown/binding-android-arm64 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-darwin-arm64 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-darwin-x64 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-freebsd-x64 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-arm-gnueabihf 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-arm64-gnu 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-arm64-musl 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-ppc64-gnu 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-s390x-gnu 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-x64-gnu 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-linux-x64-musl 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-openharmony-arm64 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-wasm32-wasi 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-win32-arm64-msvc 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/binding-win32-x64-msvc 1.0.0-rc.15 UnknownUnknown
npm/@rolldown/pluginutils 1.0.0-rc.15 UnknownUnknown
npm/@types/node 24.12.2 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 9Found 28/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@vitest/coverage-v8 4.1.4 UnknownUnknown
npm/@vitest/expect 4.1.4 UnknownUnknown
npm/@vitest/mocker 4.1.4 UnknownUnknown
npm/@vitest/pretty-format 4.1.4 UnknownUnknown
npm/@vitest/runner 4.1.4 UnknownUnknown
npm/@vitest/snapshot 4.1.4 UnknownUnknown
npm/@vitest/spy 4.1.4 UnknownUnknown
npm/@vitest/utils 4.1.4 UnknownUnknown
npm/rolldown 1.0.0-rc.15 UnknownUnknown
npm/vite 8.0.8 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 8Found 21/26 approved changesets -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 5detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 5binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 5SAST tool is not run on all commits -- score normalized to 5
npm/vitest 4.1.4 UnknownUnknown

Scanned Files

  • pnpm-lock.yaml

@github-actions github-actions Bot merged commit 47a1a0e into main Apr 20, 2026
4 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/npm-ab6e589157 branch April 20, 2026 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant