chore(deps): update rolldown-related dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@oxc-project/types (source)	^0.144.0 → ^0.146.0
oxc-parser (source)	^0.144.0 → ^0.146.0
rolldown (source)	^1.2.4 → ^1.2.5
vite (source)	^8.2.1 → ^8.2.2

---

Release Notes

oxc-project/oxc (@​oxc-project/types)

v0.145.0

🐛 Bug Fixes

• 0c68b7f estree: Emit decorators on FormalParameterRest (#​25582) (camc314)

oxc-project/oxc (oxc-parser)

v0.145.0

🐛 Bug Fixes

• db44651 napi: Disable reuseWorker in browser bindings (#​25640) (leaysgur)
• 0c68b7f estree: Emit decorators on FormalParameterRest (#​25582) (camc314)

rolldown/rolldown (rolldown)

v1.2.5

Compare Source

🚀 Features

• bench: record per-suite peak memory in the node benchmark (#​10704) by @​IWANABETHATGUY
• binding: allocation-tracking global allocator behind the tracking_allocator feature (#​10703) by @​IWANABETHATGUY
• add armv7 android (armv7-linux-androideabi) support (#​10691) by @​shulaoda
• add NAMESPACE_CONFLICT warning for conflicting star re-exports (#​7452) by @​AliceLanniste

🐛 Bug Fixes

• rolldown_plugin_vite_reporter: avoid ANSI erase-line escape in non-TTY output (#​10692) by @​shulaoda
• rolldown_plugin_vite_resolve: preserve Yarn PnP virtual importer (#​10591) by @​Freakazo
• exclude hash placeholders from case-insensitive filename deconfliction (#​10590) by @​Nic-Polumeyv
• code-splitting: fold already-loaded side-effectful libraries into eager entries (#​10645) by @​JoviDeCroock
• dev: flush re-emitted assets when their content changes (#​10637) by @​btea
• renamer: rename nested require/__filename/__dirname bindings in CJS output (#​10655) by @​marcoroth
• silence two wasm-only warnings (#​10668) by @​IWANABETHATGUY

🚜 Refactor

• skip case folding for filenames with hash placeholders (#​10689) by @​hyfdev
• code-splitting: remove redundant synthetic statement owner (#​10503) by @​hyfdev
• renamer: move the cjs check into rename_bindings_shadowing_cjs_ambient_names (#​10672) by @​IWANABETHATGUY

📚 Documentation

• agents: point the never-edit list at the binding files that exist (#​10719) by @​melbinjp

🧪 Testing

• deconflict: pin renaming the external process binding away from the global (#​10702) by @​hyfdev
• dev: expect a hot update across a circular import (#​10700) by @​hyfdev

⚙️ Miscellaneous Tasks

• deps: upgrade oxc to 0.146.0 (#​10707) by @​Boshen
• deps: update rust crates (#​10684) by @​renovate[bot]
• deps: update npm packages (#​10685) by @​renovate[bot]
• build the benchmark comparison window from the JSON lines (#​10701) by @​IWANABETHATGUY
• wasi: retry the Node Test step to absorb the shared-dlmalloc flake (#​10699) by @​hyfdev
• append benchmark results to storage as JSON lines (#​10682) by @​IWANABETHATGUY
• deps: update github actions (#​10683) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.2 (#​10679) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.1 (#​10674) by @​renovate[bot]

❤️ New Contributors

• @​melbinjp made their first contribution in #​10719
• @​Freakazo made their first contribution in #​10591
• @​marcoroth made their first contribution in #​10655

vitejs/vite (vite)

v8.2.2

Compare Source

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#​23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#​23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#​23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#​23239) (05a003e)
• css: don't pass empty targets to lightningcss (#​23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#​23249) (dcf88bd)
• deps: update all non-major dependencies (#​23217) (ba958bd)
• deps: update rolldown-related dependencies (#​23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #​22999) (#​23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#​23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#​23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #​23197) (#​23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#​23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#​23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#​23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#​23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#​23258) (1d9fa39)
• use named regex constants over inline literals (#​22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#​23231) (b4d66fe)
• module-runner: add TLA circular import case (#​23299) (4a261f2)
• module-runner: simplify server-hmr tests (#​23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#​23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#​23251) (d615bcd)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​oxc-project/​types@​0.146.0
	rolldown@​1.2.5
	vite@​8.2.2
	oxc-parser@​0.146.0

View full report