Skip to content

feat(deps): upgrade upstream dependencies#2202

Open
voidzero-guard[bot] wants to merge 4 commits into
mainfrom
deps/upstream-update
Open

feat(deps): upgrade upstream dependencies#2202
voidzero-guard[bot] wants to merge 4 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor

Summary

  • Automated daily upgrade of upstream dependencies.
  • Bumps rolldown to v1.2.0 and vite to v8.1.5, plus tsdown 0.22.9, the oxc/oxlint/oxfmt toolchain (oxlint 1.74.0, oxfmt 0.59.0, oxc 0.140.0), and @vitejs/devtools 0.4.1.
  • Requires accompanying Rust dep bumps for the new rolldown rev and regenerated NAPI bindings for the new dev-engine API.
  • Includes a bundling-check fix for rolldown-deduped @tsdown/css chunks and an @oxlint/migrate publish-lag fallback in the ESLint migrator.

Dependency updates

Package From To
rolldown f09947a v1.2.0 (03e1e34)
vite a477454 v8.1.5 (5e7fe12)
tsdown 0.22.7 0.22.9
@tsdown/css 0.22.7 0.22.9
@tsdown/exe 0.22.7 0.22.9
oxfmt 0.58.0 0.59.0
oxlint 1.73.0 1.74.0
oxlint-tsgolint 0.24.0 0.25.0
@oxc-project/runtime 0.139.0 0.140.0
@oxc-project/types 0.139.0 0.140.0
oxc-minify 0.139.0 0.140.0
oxc-parser 0.139.0 0.140.0
oxc-transform 0.139.0 0.140.0
@vitejs/devtools 0.4.0 0.4.1
Unchanged dependencies
  • vitest: 4.1.10
  • @vitest/browser: 4.1.10
  • @vitest/browser-playwright: 4.1.10
  • @vitest/browser-preview: 4.1.10
  • @vitest/browser-webdriverio: 4.1.10
  • @vitest/expect: 4.1.10
  • @vitest/mocker: 4.1.10
  • @vitest/pretty-format: 4.1.10
  • @vitest/runner: 4.1.10
  • @vitest/snapshot: 4.1.10
  • @vitest/spy: 4.1.10
  • @vitest/utils: 4.1.10
  • lightningcss: ^1.32.0
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0
  • VITEST_VERSION constant: 4.1.10
  • README vitest pins: 4.1.10

Code changes

  • Cargo.toml (+ Cargo.lock): bump root Rust deps required by the new rolldown rev — itertools 0.14 → 0.15, phf 0.13 → 0.14 (with the macros feature), sugar_path 2 → 3, oxc_resolver/oxc_resolver_napi 11.23.0 → 11.24.2, and the oxc* crates 0.139.0 → 0.140.0.
  • pnpm-workspace.yaml (+ pnpm-lock.yaml): drop the postcss-modules@9.0.0 override and patch (vite no longer patches it), add a @jridgewell/trace-mapping catalog entry, and bump @napi-rs/cli 3.7.2 → 3.7.3 and rolldown-plugin-dts 0.26 → 0.27.
  • packages/core/build.ts: accept a rolldown-deduped @tsdown/css shared chunk (const { CssPlugin } = await import("./dist-<hash>.js")) when asserting the bundled css-plugin load is wired.
  • packages/cli/src/migration/migrator/eslint.ts: try candidate @oxlint/migrate specifiers in order, falling back from the exact bundled oxlint version to the latest release in the same major when the exact pin is unpublished.
  • packages/cli/binding/index.d.cts: regenerate NAPI bindings for the new rolldown dev-engine API (registerClient/notifyPayloadDelivered replacing invalidate/registerModules, BindingLazyChunkOutput, revised HMR envelope fields, BindingRebuildStrategy variants).

Build status

  • sync-remote-and-build: failure
  • build-upstream: failure

- rolldown: f09947a -> v1.2.0 (03e1e34)
- vite: a477454 -> v8.1.5 (5e7fe12)
- tsdown: 0.22.7 -> 0.22.9
- @tsdown/css: 0.22.7 -> 0.22.9
- @tsdown/exe: 0.22.7 -> 0.22.9
- oxfmt: 0.58.0 -> 0.59.0
- oxlint: 1.73.0 -> 1.74.0
- oxlint-tsgolint: 0.24.0 -> 0.25.0
- @oxc-project/runtime: 0.139.0 -> 0.140.0
- @oxc-project/types: 0.139.0 -> 0.140.0
- oxc-minify: 0.139.0 -> 0.140.0
- oxc-parser: 0.139.0 -> 0.140.0
- oxc-transform: 0.139.0 -> 0.140.0
- @vitejs/devtools: 0.4.0 -> 0.4.1

Code changes:
- Cargo.toml: bump root Rust deps required by the new rolldown rev
  (itertools 0.14 -> 0.15, phf 0.13 -> 0.14 with `macros`, sugar_path
  2 -> 3, oxc_resolver 11.23.0 -> 11.24.2, oxc crates 0.139.0 -> 0.140.0).
- pnpm-workspace.yaml: drop the postcss-modules@9.0.0 override and patch
  (vite no longer patches it), add @jridgewell/trace-mapping catalog entry,
  bump @napi-rs/cli 3.7.2 -> 3.7.3 and rolldown-plugin-dts 0.26 -> 0.27.
- packages/core/build.ts: accept a rolldown-deduped `@tsdown/css` shared
  chunk when verifying the bundled css-plugin load is wired.
- packages/cli/src/migration/migrator/eslint.ts: add a major-range fallback
  for @oxlint/migrate when the exact bundled oxlint version is unpublished.
- packages/cli/binding/index.d.cts: regenerate NAPI bindings for the new
  rolldown dev-engine API (registerClient/notifyPayloadDelivered, lazy chunk
  output, HMR envelope changes).
@netlify

netlify Bot commented Jul 19, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit 52d719c
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a5de2f53210e800087be05c

@github-actions

github-actions Bot commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Native binary sizes (52d719c)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.32 MiB 10.32 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.42 MiB 4.42 MiB +692 B (+0.01%)
NAPI (Linux x64) Binary 33.46 MiB 33.35 MiB -112.19 KiB (-0.33%)
NAPI (Linux x64) gzip -9 12.80 MiB 12.77 MiB -23.84 KiB (-0.18%)
vp (macOS ARM64) Binary 7.65 MiB 7.65 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.83 MiB 3.83 MiB +1.17 KiB (+0.03%)
NAPI (macOS ARM64) Binary 40.73 MiB 40.64 MiB -96.91 KiB (-0.23%)
NAPI (macOS ARM64) gzip -9 17.03 MiB 17.01 MiB -21.19 KiB (-0.12%)
vp (Windows x64) Binary 8.37 MiB 8.37 MiB +1.50 KiB (+0.02%)
vp (Windows x64) gzip -9 3.64 MiB 3.64 MiB +351 B (+0.01%)
NAPI (Windows x64) Binary 27.78 MiB 27.67 MiB -110.50 KiB (-0.39%)
NAPI (Windows x64) gzip -9 10.74 MiB 10.72 MiB -25.31 KiB (-0.23%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB -1 B (-0.00%)
Installer (Windows x64) Binary 4.46 MiB 4.46 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.08 MiB 2.08 MiB 0 B (0.00%)

@wan9chi

wan9chi commented Jul 20, 2026

Copy link
Copy Markdown
Member

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 68c475a599

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread packages/cli/src/migration/migrator/eslint.ts Outdated
wan9chi and others added 2 commits July 20, 2026 16:22
…llback

- @oxlint/plugins tracks oxlint's JS plugin API in lockstep; 1.74.0 was
  published before this PR was cut, so keep it aligned with oxlint 1.74.0.
- vp dlx forwards the executed package's exit status, so the migrate
  fallback loop could rerun an older migrator after a genuine project
  migration failure. Only fall back when the registry confirms the exact
  version is unpublished, and surface the stderr of the run that actually
  failed instead of dropping it on spawn errors.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@wan9chi

wan9chi commented Jul 20, 2026

Copy link
Copy Markdown
Member

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b44ebe26a0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread packages/cli/src/migration/migrator/eslint.ts Outdated
@oxlint/migrate v1.74.0 was released upstream (oxc-project/oxlint-migrate#542)
but its npm publish failed (EBADENGINE in the release workflow, fixed by #545)
and was never retried, so the registry still tops out at 1.73.0. Keep the
exact bundled-version pin and let CI fail on the mismatch instead of
working around a broken upstream release; the fix is republishing 1.74.0.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant