Skip to content

feat(deps): upgrade upstream dependencies#1450

Closed
voidzero-guard[bot] wants to merge 1 commit intomainfrom
deps/upstream-update
Closed

feat(deps): upgrade upstream dependencies#1450
voidzero-guard[bot] wants to merge 1 commit intomainfrom
deps/upstream-update

Conversation

@voidzero-guard
Copy link
Copy Markdown
Contributor

Summary

  • Automated daily upgrade of upstream dependencies.
  • Bumps rolldown to v1.0.0-rc.17 and tsdown to 0.21.10 (including the @tsdown/css / @tsdown/exe peer ranges and the bundledVersions manifest in packages/core/package.json).
  • Bumps @vitejs/devtools to 0.1.15.
  • Extends the RewriteImportsPlugin to also rewrite the bare vite specifier, not just vite/* subpaths.

Dependency updates

Package From To
rolldown edec4fa v1.0.0-rc.17 (d9d72c3)
tsdown 0.21.9 0.21.10
@vitejs/devtools 0.1.14 0.1.15
Unchanged dependencies
  • vite: v8.0.9 (ce729f5)
  • vitest: 4.1.5
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0
  • oxfmt: 0.46.0
  • oxlint: 1.61.0
  • oxlint-tsgolint: 0.21.1
  • @oxc-project/runtime: 0.127.0
  • @oxc-project/types: 0.127.0
  • oxc-minify: 0.127.0
  • oxc-parser: 0.127.0
  • oxc-transform: 0.127.0

Code changes

  • packages/core/build-support/rewrite-imports.ts: handle bare vite specifier in resolveId by rewriting it to the host package name as an external import, mirroring the existing vite/* subpath rewrite.

Build status

  • sync-remote-and-build: failure
  • build-upstream: failure

- rolldown: edec4fa -> v1.0.0-rc.17 (d9d72c3)
- tsdown: 0.21.9 -> 0.21.10
- @vitejs/devtools: 0.1.14 -> 0.1.15

Code changes:
- packages/core/build-support/rewrite-imports.ts: rewrite bare `vite` import specifier in addition to `vite/*` subpaths
@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 23, 2026

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit 41b74c2
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/69e9b62bd2111c0008246fb1

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​tsdown/​exe@​0.21.9 ⏵ 0.21.10711007296 +1100
Updatednpm/​@​tsdown/​css@​0.21.9 ⏵ 0.21.10751008096 +1100
Updatednpm/​@​vitejs/​devtools@​0.1.14 ⏵ 0.1.1581 +110075 +199 +1100
Updatednpm/​tsdown@​0.21.9 ⏵ 0.21.1098 +11008896 +1100

View full report

@Boshen Boshen marked this pull request as draft April 23, 2026 06:04
@voidzero-guard voidzero-guard Bot closed this Apr 24, 2026
@voidzero-guard voidzero-guard Bot deleted the deps/upstream-update branch April 24, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants