fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #65 · rolldown/plugins

renovate · 2026-05-11T02:53:18Z

This PR contains the following updates:

Package	Change	Type	Update
@babel/core (source)	`^8.0.0-rc.3` → `^8.0.0-rc.4`	devDependencies	patch
@babel/plugin-proposal-decorators (source)	`^8.0.0-rc.3` → `^8.0.0-rc.4`	devDependencies	patch
@babel/plugin-transform-runtime (source)	`^8.0.0-rc.3` → `^8.0.0-rc.4`	devDependencies	patch
@babel/runtime (source)	`^8.0.0-rc.3` → `^8.0.0-rc.4`	devDependencies	patch
@swc/core (source)	`^1.15.30` → `^1.15.33`	devDependencies	patch
@swc/core (source)	`^1.15.30` → `^1.15.33`	dependencies	patch
@swc/plugin-emotion (source)	`^14.8.0` → `^14.9.0`	devDependencies	minor
@swc/plugin-emotion (source)	`^14.8.0` → `^14.9.0`	dependencies	minor
@swc/plugin-react-remove-properties (source)	`^12.8.0` → `^12.9.0`	devDependencies	minor
@swc/plugin-react-remove-properties (source)	`^12.8.0` → `^12.9.0`	dependencies	minor
@swc/plugin-styled-jsx (source)	`^13.8.0` → `^13.9.0`	devDependencies	minor
@swc/plugin-styled-jsx (source)	`^13.8.0` → `^13.9.0`	dependencies	minor
@swc/plugin-transform-imports (source)	`^12.8.0` → `^12.9.0`	devDependencies	minor
@swc/plugin-transform-imports (source)	`^12.8.0` → `^12.9.0`	dependencies	minor
@types/node (source)	`^24.12.2` → `^24.12.3`	devDependencies	patch
@typescript/native-preview (source)	`7.0.0-dev.20260419.1` → `7.0.0-dev.20260510.1`	devDependencies	patch
@vitejs/release-scripts	`^1.6.0` → `^1.7.0`	devDependencies	minor
oxfmt (source)	`^0.45.0` → `^0.48.0`	devDependencies	minor
oxlint (source)	`^1.60.0` → `^1.63.0`	devDependencies	minor
oxlint-tsgolint	`^0.21.1` → `^0.22.1`	devDependencies	minor
pnpm (source)	`10.33.0` → `10.33.4`	packageManager	patch
pnpm/action-setup	`v6.0.1` → `v6.0.6`	action	patch
react (source)	`^19.2.5` → `^19.2.6`	dependencies	patch
react-dom (source)	`^19.2.5` → `^19.2.6`	dependencies	patch
vitest (source)	`^4.1.4` → `^4.1.5`	devDependencies	patch

Release Notes

babel/babel (@babel/core)

`v8.0.0-rc.4`

Compare Source

👓 Spec Compliance

babel-parser
- #17954 fix(parser): ts parser small fixes (@JLHwung)
- #17923 Support flow extends bound (@JLHwung)
- #17888 TS parser small fixes (@JLHwung)
- #17865 Fix(parser): flow parser small fixes (@JLHwung)
babel-generator, babel-parser, babel-plugin-transform-spread, babel-types
- #17871 Disallow super call after new (@JLHwung)

💥 Breaking Change

babel-cli, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-register
- #17938 Bundle more packages (@JLHwung)
babel-traverse
- #17937 Remove Scope#buildUndefinedNode (@nicolo-ribaudo)
babel-helper-wrap-function, babel-plugin-transform-block-scoping, babel-plugin-transform-regenerator, babel-traverse
- #17907 Remove NodePath#toComputedKey (@liuxingbaoyu)
babel-plugin-external-helpers, babel-template, babel-traverse
- #17830 Replace remaining whitelist/blacklist with inclusive alternatives (@stuckvgn)
babel-plugin-transform-property-mutators, babel-standalone
- #17882 Remove @babel/plugin-transform-property-mutators (@liuxingbaoyu)

🐛 Bug Fix

babel-register
- #17928 fix(register): skip hook for ignored files (@JLHwung)
- #17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)
babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
- #17947 Fix decorators interaction with abstract/declare fields (@nicolo-ribaudo)
- #17931 fix(decorators): replace super within all removed static elements (@JLHwung)
Other
- #17940 fix(eslint-plugin): Cleanup references to removed rules (@JLHwung)
babel-core
- #17933 Update Babel 8 config item brand (@JLHwung)
babel-types
- #17885 Make ArrowFunctionExpression.expression optional (@liuxingbaoyu)

💅 Polish

babel-register
- #17941 Uninstall sms in register revert (@JLHwung)
babel-parser
- #17902 polish(parser): improve ImportExpression error recovery (@JLHwung)

📝 Documentation

#17952 docs: fix exponentiation fixture links (@cyphercodes)

🏠 Internal

Other
- #17944 refactor(eslint): remove compat layers for ESLint < 9 (@JLHwung)
babel-core, babel-generator
- #17880 chore: Remove unused merging source map code (@liuxingbaoyu)

swc-project/swc (@swc/core)

`v1.15.33`

Compare Source

Bug Fixes

(ci) Update rand lockfile entries (#11827) (7988966)
(es/minifier) Fold unary bool nullish coalescing (#11826) (e39ae3d)
(es/minifier) Preserve for-init sequence order (#11837) (16a56d0)
(es/parser) Parse empty Flow exact object type (#11836) (3d18a26)

Features

Move swc ast explorer into workspace (#11831) (02a8f81)

`v1.15.32`

Compare Source

Bug Fixes

(es/flow) Fix Flow type-only modules in script transforms (#11817) (be38316)
(es/flow) Avoid restoring module context when flow syntax is enabled (#11819) (3ed7243)
(es/minifier) Preserve frozen spread registry keys (#11825) (347181c)
(es/parser) Align Flow generic arrow JSX disambiguation (#11821) (28a7fad)

Features

(es) Add jsc.preserveSymlinks to swc::Options (#11813) (fe38342)

swc-project/plugins (@swc/plugin-emotion)

`v14.9.0`

Minor Changes

d2f9cfa: build: Update swc_core to v65.0.0

Patch Changes

2a1be0d: Fix the emotion keyframes auto-label regression so generated animations keep the plain name string instead of receiving a label: CSS fragment.

swc-project/plugins (@swc/plugin-react-remove-properties)

`v12.9.0`

Minor Changes

d2f9cfa: build: Update swc_core to v65.0.0

swc-project/plugins (@swc/plugin-styled-jsx)

`v13.9.0`

Minor Changes

d2f9cfa: build: Update swc_core to v65.0.0

swc-project/plugins (@swc/plugin-transform-imports)

`v12.9.0`

Minor Changes

d2f9cfa: build: Update swc_core to v65.0.0

microsoft/typescript-go (@typescript/native-preview)

vitejs/release-scripts (@vitejs/release-scripts)

`v1.7.0`

Compare Source

oxc-project/oxc (oxfmt)

`v0.48.0`

Compare Source

`v0.47.0`

Compare Source

`v0.46.0`

Compare Source

oxc-project/oxc (oxlint)

`v1.63.0`

Compare Source

📚 Documentation

cacbc4a linter: Fix jest settings docs. (#22127) (connorshea)

`v1.62.0`

Compare Source

🚀 Features

348f46c linter: Add respectEslintDisableDirectives option (#21384) (Christian Vuerings)

🐛 Bug Fixes

8c425db linter: Allow string for jest version in config schema (#21649) (camc314)

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🚀 Features

38d8090 linter/jest: Implemented jest version settings in config file. (#21522) (Said Atrahouch)

oxc-project/tsgolint (oxlint-tsgolint)

`v0.22.1`

Compare Source

What's Changed

fix: clarify AGENTS.md submodule guidance by @camc314 in #909
feat(no-unsafe-enum-comparison): implement suggestion by @camc314 in #910
feat(no-unnecessary-template-expression): implement fix by @camc314 in #911
chore(deps): update dependency vitest to v4.1.5 by @renovate[bot] in #912
chore(deps): update github-actions by @renovate[bot] in #913
fix(prefer-optional-chain): avoid access comparison false positive by @camc314 in #914

Full Changelog: oxc-project/tsgolint@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

chore: convert renovate config to json by @Boshen in #893
chore: update typescript-go submodule by @camc314 in #895
ci: replace OXC_BOT_PAT with GitHub App tokens by @Boshen in #894
ci: add security analysis workflow by @Boshen in #898
chore(deps): update github-actions by @renovate[bot] in #899
chore(deps): update module github.com/dlclark/regexp2 to v1.12.0 by @renovate[bot] in #900
chore(deps): update dependency typescript to v6.0.3 by @renovate[bot] in #901
ci: make security analysis required-check friendly by @Boshen in #902
feat(require-await): implement suggestions by @younggglcy in #896
fix: add warning for unsupported tsgolint CLI entrypoint by @camc314 in #903
fix: resolve ancestor tsconfig for excluded nearest config by @camc314 in #904
chore: update typescript-go submodule by @camc314 in #905
fix: handle UTF-16 diagnostics by @camc314 in #906
fix(no-useless-default-assignment): make default assignment removal a suggestion by @camc314 in #907
fix(no-unnecessary-type-arguments): preserve shadowed type arguments by @camc314 in #908

Full Changelog: oxc-project/tsgolint@v0.21.1...v0.22.0

pnpm/pnpm (pnpm)

`v10.33.4`: pnpm 10.33.4

Compare Source

Patch Changes

Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #11341.

Platinum Sponsors

Gold Sponsors

`v10.33.3`

Compare Source

`v10.33.2`

Compare Source

`v10.33.1`: pnpm 10.33.1

Compare Source

Patch Changes

When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #11328.

Platinum Sponsors

Gold Sponsors

pnpm/action-setup (pnpm/action-setup)

`v6.0.6`

Compare Source

What's Changed

fix: bin_dest output points to self-updated pnpm, not bootstrap by @zkochan in #249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

`v6.0.5`

Compare Source

What's Changed

fix: append (not prepend) action node dir to PATH for npm bootstrap by @zkochan in #241

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

`v6.0.4`

Compare Source

What's Changed

fix: use npm co-located with the action node binary by @benquarmby in #239

New Contributors

@benquarmby made their first contribution in #239

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

`v6.0.3`

Compare Source

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

`v6.0.2`

Compare Source

What's Changed

fix: pnpm self-update binary shadowed by bootstrap on PATH by @oniani1 in #230

New Contributors

@oniani1 made their first contribution in #230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

facebook/react (react)

`v19.2.6`: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

Type hardening and performance improvements
(by @eps1lon and @unstubbable)

vitest-dev/vitest (vitest)

`v4.1.5`

Compare Source

🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)

🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in #10131 (9423d)
Project color label on html reporter - by @hi-ogawa in #10142 (596f7)
Fix vi.defineHelper called as object method - by @hi-ogawa in #10163 (122c2)
Alias agent reporter to minimal - by @sheremet-va in #10157 (663b9)
Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in #8696 (9787d)
Respect diff config options in soft assertions " - by @sheremet-va in #8696 (7dc6d)
ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in #10129 (32546)
coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in #10117 (14133)
snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in #10150 (21e66)
ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in #10152 (f1b1f)
web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in #9927 and #10124 (7ad7d)
api: Make test-specification options writable - by @sheremet-va in #10154 (6abd5)

View changes on GitHub

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-05-11T02:53:20Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 19 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 23, reused 0, downloaded 0, added 0
Progress: resolved 140, reused 0, downloaded 0, added 0
Progress: resolved 252, reused 0, downloaded 0, added 0
Progress: resolved 431, reused 0, downloaded 0, added 0
Progress: resolved 432, reused 0, downloaded 0, added 0
 ERR_PNPM_UNUSED_PATCH  The following patches were not used: @vitejs/release-scripts@1.6.0

Either remove them from "patchedDependencies" or update them to match packages in your dependencies.
Progress: resolved 458, reused 0, downloaded 0, added 0

socket-security · 2026-05-11T03:07:29Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@swc/plugin-styled-jsx@13.8.0 ⏵ 13.9.0
@swc/plugin-react-remove-properties@12.8.0 ⏵ 12.9.0
@babel/plugin-proposal-decorators@8.0.0-rc.3 ⏵ 8.0.0-rc.4			^-4
@babel/runtime@8.0.0-rc.3 ⏵ 8.0.0-rc.4			^-3
@babel/core@8.0.0-rc.3 ⏵ 8.0.0-rc.4			⁺³
vitest@4.1.4 ⏵ 4.1.5	⁺¹	⁺¹
@types/node@24.12.2 ⏵ 24.12.3	⁺¹	⁺¹
@typescript/native-preview@7.0.0-dev.20260419.1 ⏵ 7.0.0-dev.20260510.1	⁺¹	⁺¹⁰
@vitejs/release-scripts@1.6.0 ⏵ 1.7.0	⁺⁵	⁺¹	⁺⁶
react@19.2.5 ⏵ 19.2.6
oxfmt@0.45.0 ⏵ 0.48.0	⁺¹	⁺¹	⁺¹
oxlint@1.60.0 ⏵ 1.63.0	⁺¹	⁺¹	⁺¹
@swc/core@1.15.30 ⏵ 1.15.33
react-dom@19.2.5 ⏵ 19.2.6
@swc/plugin-emotion@14.8.0 ⏵ 14.9.0
@swc/plugin-transform-imports@12.8.0 ⏵ 12.9.0
oxlint-tsgolint@0.21.1 ⏵ 0.22.1

View full report

renovate Bot added the dependencies label May 11, 2026

fix(deps): update all non-major dependencies

c29525d

renovate Bot force-pushed the renovate/all-minor-patch branch from 1d741ad to c29525d Compare May 11, 2026 03:00

github-actions Bot added plugin: babel plugin: emotion plugin: jsx-remove-attributes plugin: styled-jsx plugin: transform-imports labels May 11, 2026

chore: update

c0f1d9a

chore: update

dc49493

sapphi-red merged commit 465fb38 into main May 11, 2026
12 checks passed

sapphi-red deleted the renovate/all-minor-patch branch May 11, 2026 03:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#65

fix(deps): update all non-major dependencies#65
sapphi-red merged 3 commits intomainfrom
renovate/all-minor-patch

renovate Bot commented May 11, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 11, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

👓 Spec Compliance

💥 Breaking Change

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

Bug Fixes

Features

Bug Fixes

Features

Minor Changes

Patch Changes

Minor Changes

Minor Changes

Minor Changes

📚 Documentation

🚀 Features

🐛 Bug Fixes

🚀 Features

What's Changed

What's Changed

v10.33.4: pnpm 10.33.4

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.33.1: pnpm 10.33.1

Patch Changes

Platinum Sponsors

Gold Sponsors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

v19.2.6: 19.2.6 (May 6th, 2026)

React Server Components

🚀 Experimental Features

🐞 Bug Fixes

Configuration

Uh oh!

renovate Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

socket-security Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented May 11, 2026 •

edited

Loading

`v10.33.4`: pnpm 10.33.4

`v10.33.1`: pnpm 10.33.1

`v19.2.6`: 19.2.6 (May 6th, 2026)

renovate Bot commented May 11, 2026 •

edited

Loading

socket-security Bot commented May 11, 2026 •

edited

Loading