chore(deps): update patch crates by renovate[bot] · Pull Request #14509 · web-infra-dev/rspack

renovate · 2026-06-19T19:03:59Z

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	`1.0.102` → `1.0.103`
bytes	workspace.dependencies	patch	`1.12.0` → `1.12.1`
camino	workspace.dependencies	patch	`1.2.3` → `1.2.4`
clap	workspace.dependencies	patch	`4.6.1` → `4.6.2`
indicatif	workspace.dependencies	patch	`0.18.4` → `0.18.6`
json-escape-simd	workspace.dependencies	patch	`3.1.0` → `3.1.1`
memchr	workspace.dependencies	patch	`2.8.2` → `2.8.3`
pnp (source)	workspace.dependencies	patch	`0.12.9` → `0.12.10`
quote	workspace.dependencies	patch	`1.0.45` → `1.0.46`
rustc-hash	workspace.dependencies	patch	`2.1.2` → `2.1.3`
ryu-js	workspace.dependencies	patch	`1.0.2` → `1.0.3`
simd-json	workspace.dependencies	patch	`0.17.0` → `0.17.3`
syn	workspace.dependencies	patch	`2.0.117` → `2.0.119`
thread_local	workspace.dependencies	patch	`1.1.9` → `1.1.10`
trybuild	workspace.dependencies	patch	`1.0.116` → `1.0.118`
wasi-common	workspace.dependencies	patch	`36.0.10` → `36.0.12`
wasmtime	workspace.dependencies	patch	`36.0.10` → `36.0.12`
xxhash-rust	workspace.dependencies	patch	`0.8.15` → `0.8.17`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

dtolnay/anyhow (anyhow)

`v1.0.103`

Compare Source

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

tokio-rs/bytes (bytes)

`v1.12.1`

Compare Source

Fixed

Properly handle when Box::new panics (#837)

camino-rs/camino (camino)

`v1.2.4`

Compare Source

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).
Utf8Path::into_std_boxed_path(self: Box<Self>)
Utf8Path::from_boxed_path(path: Box<Path>)
TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

clap-rs/clap (clap)

`v4.6.2`

Compare Source

Fixes

(help) Say alias when there is only one

console-rs/indicatif (indicatif)

`v0.18.6`

Compare Source

What's Changed

fix: correctly detect dumb terminal on Windows by @ugur-eren in #818

`v0.18.5`

Compare Source

What's Changed

Upgrade to rand 0.10 by @djc in #768
multi: document common MultiProgress bugs + behavior (#595) by @chris-laplante in #786
Use div_duration_f64 by @ChrisDenton in #792
Clear the rest of line after drawing to the terminal by @ChrisDenton in #790
Fix ProgressDrawTarget.is_stderr() for MultiProgress by @kojiishi in #803
Fix height and filler when wrapped at the middle of wide characters by @kojiishi in #799
fix: respect NO_COLOR and TERM=dumb environment variable by @ValentinLeTallec in #808
Fix stray comma after minus sign in HumanFloatCount by @sueun-dev in #815
Fix HumanFloatCount dropping the fractional part by @greymoth-jp in #816
style module cleanup by @djc in #813
Drop screenshots from MultiProgress documentation by @djc in #817

napi-rs/json-escape-simd (json-escape-simd)

`v3.1.1`

Compare Source

Fixed

(simd) correct big-endian bitmask in scalar v128 fallback (#88)

BurntSushi/memchr (memchr)

`v2.8.3`

Compare Source

yarnpkg/pnp-rs (pnp)

`v0.12.10`

Compare Source

Other

replace fancy-regex with regress (#108)

dtolnay/quote (quote)

`v1.0.46`

Compare Source

Avoid repeated get_span in quote_spanned (#329, thanks @Noratrieb)

rust-lang/rustc-hash (rustc-hash)

`v2.1.3`

Compare Source

boa-dev/ryu-js (ryu-js)

`v1.0.3`

Compare Source

Breaking Changes

Minimum rust version has been bumped from 1.64.0 to 1.71.0.

Bug Fixes

BUG #56: Fix panic in format64_to_fixed when rounding carries past all integer digits. (@Ansh-699)

Internal Improvements

INTERNAL #57: Sync upstream/main. (@jedel1043)
INTERNAL #63: Make Cursor store unsigned integer len and index. (@HalidOdat)

simd-lite/simd-json (simd-json)

dtolnay/syn (syn)

`v2.0.119`

Compare Source

Preserve attributes on tail-call expressions in statement position (#1994)
Parse field-representing types builtin in type position (#1996)

`v2.0.118`

Compare Source

Documentation improvements

Amanieu/thread_local-rs (thread_local)

`v1.1.10`

Compare Source

Fixed

Fix undefined behavior when get_or or get_or_try reentrantly initializes the same ThreadLocal (#97).
Fix an integer underflow in iterator size_hint implementations (#89).
Fix compilation with the nightly feature enabled (#96).

Changed

ThreadLocal::get no longer allocates a thread ID or registers a thread-local destructor when no value exists for the current thread (#84).

dtolnay/trybuild (trybuild)

`v1.0.118`

Compare Source

Normalize cargo registry paths for any registry source (#331, thanks @devjgm)
Limit custom registry to new normalization level (#334)

`v1.0.117`

Compare Source

Better error message when TRYBUILD env var is wrong (#332, thanks @tisonkun)

bytecodealliance/wasmtime (wasi-common)

`v36.0.12`

Compare Source

36.0.12

Released 2026-06-24.

Fixed

WASI hard links and renames check wasmtime-wasi's FilePerms for destination
GHSA-4ch3-9j33-3pmj

`v36.0.11`

Compare Source

36.0.11

Released 2026-06-15.

Fixed

Leak in WASIp1 fd_renumber implementation.
GHSA-3p27-qvp9-27qf

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 8am on saturday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-06-19T19:13:48Z

📦 Binary Size-limit

Comparing 1f26262 to chore(deps): update dependency @rslint/core to v0.7.0 (#14849) by renovate[bot]

❌ Size increased by 540.00KB from 66.60MB to 67.13MB (⬆️0.79%)

codspeed-hq · 2026-06-19T19:22:35Z

Merging this PR will improve performance by 32.87%

⚠️

Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 1 improved benchmark
✅ 42 untouched benchmarks
⏩ 47 skipped benchmarks¹

Performance Changes

	Mode	Benchmark	`BASE`	`HEAD`	Efficiency
⚡	Simulation	`sources@parse_source_map_from_json`	9.9 ms	7.5 ms	+32.87%

Tip

Curious why this is faster? Comment @codspeedbot explain why this is faster on this PR, or directly use the CodSpeed MCP with your agent.

_{Comparing renovate/patch-crates (1f26262) with main (e8a7bce)}

47 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

stormslowly · 2026-06-20T11:08:19Z

@codspeedbot Why is this bench case so flaky? How can I make it more stable

codspeed-hq · 2026-06-20T11:08:24Z

@codspeedbot Why is this bench case so flaky? How can I make it more stable

Good question — and the short answer is that the +2.62% here is almost certainly noise, not a real effect of this dependency bump (pnp/syn/wasi-common/wasmtime aren't on the hashing path).

Why `rust@create_full_hash` looks flaky

It's the shortest benchmark in the suite (~3 ms). Simulation mode counts simulated CPU cycles, which is very stable for purely single-threaded code. But a fixed amount of run-to-run jitter is a much larger fraction of a 3 ms benchmark than of a 30 ms one, so the same absolute wobble reads as a bigger percentage. The fastest benchmarks are always the noisiest in relative terms.
Residual multi-threading. The harness is already well-tuned for determinism (NeverGrowInPlaceAllocator to remove allocator non-determinism, rayon pinned to 1 thread, and a current-thread tokio runtime under CodSpeed). However, the blocking thread pool is still 8 (SIMULATION_BENCHMARK_BLOCKING_THREADS in xtask/benchmark/src/lib.rs). Any spawn_blocking work executed during run_create_hash_pass gets scheduled across those 8 threads non-deterministically, which perturbs the cycle count from run to run.

How to make it more stable

Treat small changes as noise. For this particular benchmark, I'd treat anything under ~5% in simulation as within the noise floor unless the diff actually touches the hashing/codegen path. CodSpeed flags it because it's a real measured delta, but at this duration the signal-to-noise ratio is low.
Lengthen the workload for this stage. It shares GENERAL_STAGE_NUM_MODULES with the other stage benchmarks, so the cleanest fix is a dedicated, larger input for create_full_hash so the fixed jitter becomes a smaller fraction of the total. This is the single most effective lever.
Reduce blocking-thread non-determinism. If run_create_hash_pass doesn't deadlock with fewer threads, pinning SIMULATION_BENCHMARK_BLOCKING_THREADS to 1 (or making the pass run inline) would make the executed path fully deterministic. This needs validation against the other stage benchmarks before adopting it.
Ensure deterministic iteration order. Confirm any maps iterated while building hashes use a deterministic hasher (FxHashMap) or are sorted before iteration, so iteration order doesn't shift the instruction count.

I held off on committing a change here since the most impactful options (bigger dedicated input, or dropping the blocking-thread count) need a few benchmark runs to confirm they actually lower the variance without regressing the other stages or deadlocking. If you'd like, I can open a follow-up PR that adds a larger dedicated input for this stage and we can validate the reduced variance on CodSpeed — just let me know.

Summary

Warming up the performance wizard...
Analyzing benchmark stability — Explained why rust@create_full_hash is noise-prone and how to stabilize it
Handling comment — Comment handling finished successfully

_{Was this response helpful? React with 👍 or 👎 to help us improve CodSpeedBot.}

chenjiahan · 2026-06-22T05:38:55Z

The size regression is mainly from pnp 0.12.10.

pnp replaced fancy-regex with regress 0.11.1, while Rspack already depends on regress 0.10.5. This pulls two regress versions into the binary, which also causes the cargo deny duplicate failure.

github-actions · 2026-06-23T05:41:17Z

Rsdoctor Bundle Diff Analysis

Found 5 projects in monorepo, 0 projects with changes.

📊 Quick Summary

Project	Total Size	Gzip Size
popular-libs	1.7 MB	552.1 KB
react-10k	5.6 MB	1.3 MB
react-1k	823.1 KB	217.0 KB
react-5k	2.7 MB	663.8 KB
ui-components	4.9 MB	1.4 MB

Generated by Rsdoctor GitHub Action

cloudflare-workers-and-pages · 2026-07-11T03:24:29Z

Deploying rspack with Cloudflare Pages

Latest commit:	`b677b51`
Status:	✅ Deploy successful!
Preview URL:	https://ac809c3d.rspack-v2.pages.dev
Branch Preview URL:	https://renovate-patch-crates.rspack-v2.pages.dev

View logs

renovate Bot added the dependencies Pull requests that update a dependency file label Jun 19, 2026

renovate Bot force-pushed the renovate/patch-crates branch from eebd9f8 to 929efea Compare June 20, 2026 09:57

chenjiahan assigned stormslowly Jun 22, 2026

renovate Bot force-pushed the renovate/patch-crates branch 3 times, most recently from 0176c85 to 9488bff Compare June 23, 2026 05:29

renovate Bot force-pushed the renovate/patch-crates branch 6 times, most recently from 8551a20 to e29cafa Compare July 2, 2026 13:54

renovate Bot force-pushed the renovate/patch-crates branch 11 times, most recently from 0ae816b to f96a1ad Compare July 10, 2026 18:55

renovate Bot force-pushed the renovate/patch-crates branch 2 times, most recently from e30b28b to 59ee169 Compare July 17, 2026 18:13

chore(deps): update patch crates

1f26262

renovate Bot force-pushed the renovate/patch-crates branch from 59ee169 to 1f26262 Compare July 18, 2026 09:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update patch crates#14509

chore(deps): update patch crates#14509
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-crates

renovate Bot commented Jun 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 19, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented Jun 19, 2026 •

edited

Loading

Uh oh!

stormslowly commented Jun 20, 2026

Uh oh!

codspeed-hq Bot commented Jun 20, 2026 •

edited

Loading

Uh oh!

chenjiahan commented Jun 22, 2026

Uh oh!

github-actions Bot commented Jun 23, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 11, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jun 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixed

Added

Fixes

What's Changed

What's Changed

Fixed

Other

Breaking Changes

Bug Fixes

Internal Improvements

Fixed

Changed

36.0.12

Fixed

36.0.11

Fixed

Configuration

Uh oh!

github-actions Bot commented Jun 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Binary Size-limit

Uh oh!

codspeed-hq Bot commented Jun 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will improve performance by 32.87%

Performance Changes

Footnotes

Uh oh!

stormslowly commented Jun 20, 2026

Uh oh!

codspeed-hq Bot commented Jun 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Why rust@create_full_hash looks flaky

How to make it more stable

Uh oh!

chenjiahan commented Jun 22, 2026

Uh oh!

github-actions Bot commented Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Rsdoctor Bundle Diff Analysis

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying rspack with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Jun 19, 2026 •

edited

Loading

github-actions Bot commented Jun 19, 2026 •

edited

Loading

codspeed-hq Bot commented Jun 19, 2026 •

edited

Loading

codspeed-hq Bot commented Jun 20, 2026 •

edited

Loading

Why `rust@create_full_hash` looks flaky

github-actions Bot commented Jun 23, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Jul 11, 2026 •

edited

Loading