chore(deps): update npm dependencies

renovate-bot commented

2026-04-03 14:01:24 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
conventional-changelog-conventionalcommits (source)	`9.3.0` → `9.3.1`
handlebars (source)	`4.7.8` → `4.7.9`
pnpm (source)	`10.32.1` → `10.33.0`
rollup (source)	`4.59.0` → `4.60.1`
vite (source)	`8.0.0` → `8.0.3`

Release Notes

conventional-changelog/conventional-changelog (conventional-changelog-conventionalcommits)

`v9.3.1`

Compare Source

Bug Fixes

skip mention linkification inside inline code (#1444) (c598bf1)

handlebars-lang/handlebars.js (handlebars)

`v4.7.9`

Compare Source

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
fix type "RuntimeOptions" also accepting string partials - eab1d14
feat(types): set hash to be a Record<string, any> - de4414d
fix non-contiguous program indices - 4512766
refactor: rename i to startPartIndex - e497a35
security: fix security issues - 68d8df5

Commits

pnpm/pnpm (pnpm)

`v10.33.0`: pnpm 10.33

Compare Source

Minor Changes

Added a new dedupePeers setting that reduces peer dependency duplication. When enabled, peer dependency suffixes use version-only identifiers (name@version) instead of full dep paths, eliminating nested suffixes like (foo@1.0.0(bar@2.0.0)). This dramatically reduces the number of package instances in projects with many recursive peer dependencies #11070.

Patch Changes

Fail on incompatible lockfiles in CI when frozen lockfile mode is enabled, while preserving non-frozen CI fallback behavior.
When package metadata is malformed or can't be fetched, the error thrown will now show the originating error.
Fixed intermittent failures when multiple pnpm dlx calls run concurrently for the same package. When the global virtual store is enabled, the importer now verifies file content before skipping a rename, avoiding destructive swap-renames that break concurrent processes. Also tolerates EPERM during bin creation on Windows and properly propagates enableGlobalVirtualStore through the install pipeline.
Fixed handling of non-string version selectors in hoistPeers, preventing invalid peer dependency specifiers.
Improve the non-interactive modules purge error hint to include the confirmModulesPurge=false workaround.

When pnpm needs to recreate node_modules but no TTY is available, the error now suggests either setting CI=true or disabling the purge confirmation prompt via confirmModulesPurge=false.

Adds a regression test for the non-TTY flow.
Fixed false "Command not found" errors on Windows when a command exists in PATH but exits with a non-zero code. Also fixed path resolution for --filter contexts where the command runs in a different package directory.
When a pnpm-lock.yaml contains two documents, ignore the first one. pnpm v11 will write two lockfile documents into pnpm-lock.yaml in order to store pnpm version integrities and config dependency resolutions.
Fixed a bug preventing the clearCache function returned by createNpmResolver from properly clearing metadata cache.

Platinum Sponsors

Gold Sponsors

rollup/rollup (rollup)

`v4.60.1`

Compare Source

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)
#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)
#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)
#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)
#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)
#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6323: chore(deps): lock file maintenance (@renovate[bot])
#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

`v4.60.0`

Compare Source

2026-03-22

Features

Support source phase imports as long as they are external (#6279)

Pull Requests

#6279: feat: external only Source Phase imports support (@guybedford, @lukastaegert)

`v4.59.1`

Compare Source

2026-03-21

Bug Fixes

Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

#6281: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6282: chore(deps): update github artifact actions (major) (@renovate[bot], @lukastaegert)
#6283: chore(deps): update dependency nyc to v18 (@renovate[bot], @lukastaegert)
#6284: fix(deps): update swc monorepo (major) (@renovate[bot])
#6285: chore(deps): lock file maintenance (@renovate[bot])
#6290: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6291: chore(deps): update dependency @shikijs/vitepress-twoslash to v4 (@renovate[bot])
#6292: chore(deps): lock file maintenance (@renovate[bot])
#6297: chore(deps): update minor/patch updates (@renovate[bot])
#6298: chore(deps): lock file maintenance (@renovate[bot])
#6299: chore(deps): lock file maintenance (@renovate[bot])
#6300: docs: update packagephobia link (@bluwy)
#6301: chore(deps): update dependency lint-staged to ^16.3.3 (@renovate[bot])
#6306: fix: fix chunk assignment for deoptimized module with dynamic import (@JoaoBrlt, @lukastaegert)
#6307: chore(deps): update minor/patch updates (@renovate[bot])
#6308: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6309: chore(deps): update dependency vite to v8 (@renovate[bot])
#6310: chore(deps): lock file maintenance (@renovate[bot])
#6311: chore(deps): lock file maintenance (@renovate[bot])
#6312: chore(deps): lock file maintenance (@renovate[bot])

vitejs/vite (vite)

`v8.0.3`

Compare Source

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

deps: bump picomatch from 4.0.3 to 4.0.4 (#22027) (7e56003)

Tests

html: add tests for getCssFilesForChunk (#22016) (43fbbf9)

`v8.0.2`

Compare Source

Features

update rolldown to 1.0.0-rc.11 (#21998) (ff91c31)

Bug Fixes

deps: update all non-major dependencies (#21988) (9b7d150)

Miscellaneous Chores

deps: update dependency @vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script (#21835) (efef073)
deps: bump required @vitejs/devtools version to 0.1+ (#21925) (12932f5)
deps: update rolldown-related dependencies (#21787) (1af1d3a)
rearrange 8.0 changelog (8e05b61)
rearrange 8.0 changelog (#21834) (86edeee)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-conventionalcommits#readme) ([source](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits)) | [`9.3.0` → `9.3.1`](https://renovatebot.com/diffs/npm/conventional-changelog-conventionalcommits/9.3.0/9.3.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/conventional-changelog-conventionalcommits/9.3.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/conventional-changelog-conventionalcommits/9.3.0/9.3.1?slim=true) | | [handlebars](https://handlebarsjs.com/) ([source](https://github.com/handlebars-lang/handlebars.js)) | [`4.7.8` → `4.7.9`](https://renovatebot.com/diffs/npm/handlebars/4.7.8/4.7.9) | ![age](https://developer.mend.io/api/mc/badges/age/npm/handlebars/4.7.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/handlebars/4.7.8/4.7.9?slim=true) | | [pnpm](https://pnpm.io) ([source](https://github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`10.32.1` → `10.33.0`](https://renovatebot.com/diffs/npm/pnpm/10.32.1/10.33.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.33.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/10.32.1/10.33.0?slim=true) | | [rollup](https://rollupjs.org/) ([source](https://github.com/rollup/rollup)) | [`4.59.0` → `4.60.1`](https://renovatebot.com/diffs/npm/rollup/4.59.0/4.60.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/rollup/4.60.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/rollup/4.59.0/4.60.1?slim=true) | | [vite](https://vite.dev) ([source](https://github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`8.0.0` → `8.0.3`](https://renovatebot.com/diffs/npm/vite/8.0.0/8.0.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/vite/8.0.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/8.0.0/8.0.3?slim=true) | --- ### Release Notes <details> <summary>conventional-changelog/conventional-changelog (conventional-changelog-conventionalcommits)</summary> ### [`v9.3.1`](https://github.com/conventional-changelog/conventional-changelog/blob/HEAD/packages/conventional-changelog-conventionalcommits/CHANGELOG.md#931-2026-03-29) [Compare Source](https://github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-conventionalcommits-v9.3.0...conventional-changelog-conventionalcommits-v9.3.1) ##### Bug Fixes - skip mention linkification inside inline code ([#1444](https://github.com/conventional-changelog/conventional-changelog/issues/1444)) ([c598bf1](https://github.com/conventional-changelog/conventional-changelog/commit/c598bf1dd8fe31fc3ce3ec561ac8b2b77cee3a02)) </details> <details> <summary>handlebars-lang/handlebars.js (handlebars)</summary> ### [`v4.7.9`](https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9) [Compare Source](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) - fix: enable shell mode for spawn to resolve Windows EINVAL issue - [`e0137c2`](https://github.com/handlebars-lang/handlebars.js/commit/e0137c2) - fix type "RuntimeOptions" also accepting string partials - [`eab1d14`](https://github.com/handlebars-lang/handlebars.js/commit/eab1d14) - feat(types): set `hash` to be a `Record<string, any>` - [`de4414d`](https://github.com/handlebars-lang/handlebars.js/commit/de4414d) - fix non-contiguous program indices - [`4512766`](https://github.com/handlebars-lang/handlebars.js/commit/4512766) - refactor: rename i to startPartIndex - [`e497a35`](https://github.com/handlebars-lang/handlebars.js/commit/e497a35) - security: fix security issues - [`68d8df5`](https://github.com/handlebars-lang/handlebars.js/commit/68d8df5) - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh> - <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2> [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.33.0`](https://github.com/pnpm/pnpm/releases/tag/v10.33.0): pnpm 10.33 [Compare Source](https://github.com/pnpm/pnpm/compare/v10.32.1...v10.33.0) #### Minor Changes - Added a new `dedupePeers` setting that reduces peer dependency duplication. When enabled, peer dependency suffixes use version-only identifiers (`name@version`) instead of full dep paths, eliminating nested suffixes like `(foo@1.0.0(bar@2.0.0))`. This dramatically reduces the number of package instances in projects with many recursive peer dependencies [#11070](https://github.com/pnpm/pnpm/issues/11070). #### Patch Changes - Fail on incompatible lockfiles in CI when frozen lockfile mode is enabled, while preserving non-frozen CI fallback behavior. - When package metadata is malformed or can't be fetched, the error thrown will now show the originating error. - Fixed intermittent failures when multiple `pnpm dlx` calls run concurrently for the same package. When the global virtual store is enabled, the importer now verifies file content before skipping a rename, avoiding destructive swap-renames that break concurrent processes. Also tolerates EPERM during bin creation on Windows and properly propagates `enableGlobalVirtualStore` through the install pipeline. - Fixed handling of non-string version selectors in `hoistPeers`, preventing invalid peer dependency specifiers. - Improve the non-interactive modules purge error hint to include the `confirmModulesPurge=false` workaround. When pnpm needs to recreate `node_modules` but no TTY is available, the error now suggests either setting `CI=true` or disabling the purge confirmation prompt via `confirmModulesPurge=false`. Adds a regression test for the non-TTY flow. - Fixed false "Command not found" errors on Windows when a command exists in PATH but exits with a non-zero code. Also fixed path resolution for `--filter` contexts where the command runs in a different package directory. - When a pnpm-lock.yaml contains two documents, ignore the first one. pnpm v11 will write two lockfile documents into pnpm-lock.yaml in order to store pnpm version integrities and config dependency resolutions. - Fixed a bug preventing the `clearCache` function returned by `createNpmResolver` from properly clearing metadata cache.  #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" /> <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" /> <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" /> <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" /> </picture> </a> </td> </tr> </tbody> </table>  </details> <details> <summary>rollup/rollup (rollup)</summary> ### [`v4.60.1`](https://github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4601) [Compare Source](https://github.com/rollup/rollup/compare/v4.60.0...v4.60.1) *2026-03-30* ##### Bug Fixes - Resolve a situation where side effect imports could be dropped due to a caching issue ([#6286](https://github.com/rollup/rollup/issues/6286)) ##### Pull Requests - [#6286](https://github.com/rollup/rollup/pull/6286): fix: skip dropping side-effects on namespaceReexportsByName cache hit ([#6274](https://github.com/rollup/rollup/issues/6274)) ([@littlegrayss](https://github.com/littlegrayss), [@TrickyPi](https://github.com/TrickyPi)) - [#6317](https://github.com/rollup/rollup/pull/6317): chore(deps): pin dependencies ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6318](https://github.com/rollup/rollup/pull/6318): chore(deps): update msys2/setup-msys2 digest to [`cafece8`](https://github.com/rollup/rollup/commit/cafece8) ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6319](https://github.com/rollup/rollup/pull/6319): chore(deps): update minor/patch updates ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6320](https://github.com/rollup/rollup/pull/6320): chore(deps): pin dependency typescript to v5 ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6321](https://github.com/rollup/rollup/pull/6321): chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6322](https://github.com/rollup/rollup/pull/6322): fix(deps): update swc monorepo (major) ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6323](https://github.com/rollup/rollup/pull/6323): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6324](https://github.com/rollup/rollup/pull/6324): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) ### [`v4.60.0`](https://github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4600) [Compare Source](https://github.com/rollup/rollup/compare/v4.59.1...v4.60.0) *2026-03-22* ##### Features - Support source phase imports as long as they are external ([#6279](https://github.com/rollup/rollup/issues/6279)) ##### Pull Requests - [#6279](https://github.com/rollup/rollup/pull/6279): feat: external only Source Phase imports support ([@guybedford](https://github.com/guybedford), [@lukastaegert](https://github.com/lukastaegert)) ### [`v4.59.1`](https://github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4591) [Compare Source](https://github.com/rollup/rollup/compare/v4.59.0...v4.59.1) *2026-03-21* ##### Bug Fixes - Fix a crash when using lazy dynamic imports with moduleSideEffects:false ([#6306](https://github.com/rollup/rollup/issues/6306)) ##### Pull Requests - [#6281](https://github.com/rollup/rollup/pull/6281): fix(deps): update minor/patch updates ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6282](https://github.com/rollup/rollup/pull/6282): chore(deps): update github artifact actions (major) ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6283](https://github.com/rollup/rollup/pull/6283): chore(deps): update dependency nyc to v18 ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6284](https://github.com/rollup/rollup/pull/6284): fix(deps): update swc monorepo (major) ([@renovate](https://github.com/renovate)\[bot]) - [#6285](https://github.com/rollup/rollup/pull/6285): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6290](https://github.com/rollup/rollup/pull/6290): chore(deps): update minor/patch updates ([@renovate](https://github.com/renovate)\[bot], [@lukastaegert](https://github.com/lukastaegert)) - [#6291](https://github.com/rollup/rollup/pull/6291): chore(deps): update dependency [@shikijs/vitepress-twoslash](https://github.com/shikijs/vitepress-twoslash) to v4 ([@renovate](https://github.com/renovate)\[bot]) - [#6292](https://github.com/rollup/rollup/pull/6292): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6297](https://github.com/rollup/rollup/pull/6297): chore(deps): update minor/patch updates ([@renovate](https://github.com/renovate)\[bot]) - [#6298](https://github.com/rollup/rollup/pull/6298): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6299](https://github.com/rollup/rollup/pull/6299): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6300](https://github.com/rollup/rollup/pull/6300): docs: update packagephobia link ([@bluwy](https://github.com/bluwy)) - [#6301](https://github.com/rollup/rollup/pull/6301): chore(deps): update dependency lint-staged to ^16.3.3 ([@renovate](https://github.com/renovate)\[bot]) - [#6306](https://github.com/rollup/rollup/pull/6306): fix: fix chunk assignment for deoptimized module with dynamic import ([@JoaoBrlt](https://github.com/JoaoBrlt), [@lukastaegert](https://github.com/lukastaegert)) - [#6307](https://github.com/rollup/rollup/pull/6307): chore(deps): update minor/patch updates ([@renovate](https://github.com/renovate)\[bot]) - [#6308](https://github.com/rollup/rollup/pull/6308): chore(deps): update dependency lru-cache to v11 ([@renovate](https://github.com/renovate)\[bot]) - [#6309](https://github.com/rollup/rollup/pull/6309): chore(deps): update dependency vite to v8 ([@renovate](https://github.com/renovate)\[bot]) - [#6310](https://github.com/rollup/rollup/pull/6310): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6311](https://github.com/rollup/rollup/pull/6311): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) - [#6312](https://github.com/rollup/rollup/pull/6312): chore(deps): lock file maintenance ([@renovate](https://github.com/renovate)\[bot]) </details> <details> <summary>vitejs/vite (vite)</summary> ### [`v8.0.3`](https://github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-803-2026-03-26-small) [Compare Source](https://github.com/vitejs/vite/compare/v8.0.2...v8.0.3) ##### Features - update rolldown to 1.0.0-rc.12 ([#22024](https://github.com/vitejs/vite/issues/22024)) ([84164ef](https://github.com/vitejs/vite/commit/84164ef47b24b1de114f1c29446a9e650825d4ea)) ##### Bug Fixes - **html:** cache unfiltered CSS list to prevent missing styles across entries ([#22017](https://github.com/vitejs/vite/issues/22017)) ([5464190](https://github.com/vitejs/vite/commit/5464190a3ee8f23db20004e7818186fbcc32b0e5)) - **module-runner:** handle non-ascii characters in base64 sourcemaps ([#21985](https://github.com/vitejs/vite/issues/21985)) ([77c95bf](https://github.com/vitejs/vite/commit/77c95bff834c43f8be9fe513c10b5393805a7487)) - **module-runner:** skip re-import if the runner is closed ([#22020](https://github.com/vitejs/vite/issues/22020)) ([ee2c2cd](https://github.com/vitejs/vite/commit/ee2c2cd2c2ce3f53088bd2313fa23e9d52a49b4f)) - **optimizer:** scan is not resolving sub path import if used in a glob import ([#22018](https://github.com/vitejs/vite/issues/22018)) ([ddfe20d](https://github.com/vitejs/vite/commit/ddfe20d19e95a323fa3c8d2c19a02c4e02f93824)) - **ssr:** ssrTransform incorrectly rewrites `meta` identifier inside `import.meta` when a binding named `meta` exists ([#22019](https://github.com/vitejs/vite/issues/22019)) ([cff5f0c](https://github.com/vitejs/vite/commit/cff5f0cca5f08c2ce50f233441485e10b6e115e9)) ##### Miscellaneous Chores - **deps:** bump picomatch from 4.0.3 to 4.0.4 ([#22027](https://github.com/vitejs/vite/issues/22027)) ([7e56003](https://github.com/vitejs/vite/commit/7e56003fec3e1b94a20516a901580198a51da614)) ##### Tests - **html:** add tests for `getCssFilesForChunk` ([#22016](https://github.com/vitejs/vite/issues/22016)) ([43fbbf9](https://github.com/vitejs/vite/commit/43fbbf9a09dfd17456ae0611d034c366fcb38998)) ### [`v8.0.2`](https://github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-802-2026-03-23-small) [Compare Source](https://github.com/vitejs/vite/compare/v8.0.1...v8.0.2) ##### Features - update rolldown to 1.0.0-rc.11 ([#21998](https://github.com/vitejs/vite/issues/21998)) ([ff91c31](https://github.com/vitejs/vite/commit/ff91c319facd602dc5eea81ed7e7d79ae7dadb95)) ##### Bug Fixes - **deps:** update all non-major dependencies ([#21988](https://github.com/vitejs/vite/issues/21988)) ([9b7d150](https://github.com/vitejs/vite/commit/9b7d15002a75474421bc5636238336d88c7fe2f3)) ##### Miscellaneous Chores - **deps:** update dependency [@vitejs/devtools](https://github.com/vitejs/devtools) to ^0.1.5 ([#21992](https://github.com/vitejs/vite/issues/21992)) ([b2dd65b](https://github.com/vitejs/vite/commit/b2dd65bf2f113719b72450f2e19696213fd9e255)) ### [`v8.0.1`](https://github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-801-2026-03-19-small) [Compare Source](https://github.com/vitejs/vite/compare/v8.0.0...v8.0.1) ##### Features - update rolldown to 1.0.0-rc.10 ([#21932](https://github.com/vitejs/vite/issues/21932)) ([b3c067d](https://github.com/vitejs/vite/commit/b3c067d71a781ca72899d08d095c9acd119361ee)) ##### Bug Fixes - **bundled-dev:** properly disable `inlineConst` optimization ([#21865](https://github.com/vitejs/vite/issues/21865)) ([6d97142](https://github.com/vitejs/vite/commit/6d97142abc4805ad53cc732826bb502d6d5dd6ce)) - **css:** lightningcss minify failed when `build.target: 'es6'` ([#21933](https://github.com/vitejs/vite/issues/21933)) ([5fcce46](https://github.com/vitejs/vite/commit/5fcce46a609bc3e3c600810918626b5fc8f16448)) - **deps:** update all non-major dependencies ([#21878](https://github.com/vitejs/vite/issues/21878)) ([6dbbd7f](https://github.com/vitejs/vite/commit/6dbbd7f072b1e13abd96489b0016b3d93d937999)) - **dev:** always use ESM Oxc runtime ([#21829](https://github.com/vitejs/vite/issues/21829)) ([d323ed7](https://github.com/vitejs/vite/commit/d323ed7a824c232597c2b4ef2a4f3494e5231c3d)) - **dev:** handle concurrent restarts in `_createServer` ([#21810](https://github.com/vitejs/vite/issues/21810)) ([40bc729](https://github.com/vitejs/vite/commit/40bc7293ef574103171f72cc8618f9ef22cc5fa0)) - handle `+` symbol in package subpath exports during dep optimization ([#21886](https://github.com/vitejs/vite/issues/21886)) ([86db93d](https://github.com/vitejs/vite/commit/86db93d8b1d511e9a56a4ea576741a5350eac99f)) - improve `no-cors` request block error ([#21902](https://github.com/vitejs/vite/issues/21902)) ([5ba688b](https://github.com/vitejs/vite/commit/5ba688bc422c54944bc6fc563bfe1ba2616a0911)) - use precise regexes for transform filter to avoid backtracking ([#21800](https://github.com/vitejs/vite/issues/21800)) ([dbe41bd](https://github.com/vitejs/vite/commit/dbe41bddb9db3563c21ae9ce0ebc310e8b8878c9)) - **worker:** `require(json)` result should not be wrapped ([#21847](https://github.com/vitejs/vite/issues/21847)) ([0672fd2](https://github.com/vitejs/vite/commit/0672fd20aac00e4f78fe8fe886978a9b64f63ba7)) - **worker:** make worker output consistent with client and SSR ([#21871](https://github.com/vitejs/vite/issues/21871)) ([69454d7](https://github.com/vitejs/vite/commit/69454d7136f18334e9a58862741ec14a5edf6f98)) ##### Miscellaneous Chores - add changelog rearrange script ([#21835](https://github.com/vitejs/vite/issues/21835)) ([efef073](https://github.com/vitejs/vite/commit/efef073a6f71be0330bd72784654ed8b8dd60cbf)) - **deps:** bump required `@vitejs/devtools` version to 0.1+ ([#21925](https://github.com/vitejs/vite/issues/21925)) ([12932f5](https://github.com/vitejs/vite/commit/12932f5a5a36b7b3f55ce5e3b867a08154ba1547)) - **deps:** update rolldown-related dependencies ([#21787](https://github.com/vitejs/vite/issues/21787)) ([1af1d3a](https://github.com/vitejs/vite/commit/1af1d3a3a4fd62fa581392b2dec9052efe8485b3)) - rearrange 8.0 changelog ([8e05b61](https://github.com/vitejs/vite/commit/8e05b61d3f2271adb16713835b943e5e13d20499)) - rearrange 8.0 changelog ([#21834](https://github.com/vitejs/vite/issues/21834)) ([86edeee](https://github.com/vitejs/vite/commit/86edeee31eeacdbfb93c112df088fbd606f9917e)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-04-03 14:01:25 +00:00