Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 10, 2025

This PR contains the following updates:

Package Change Age Confidence
ast-kit ^2.1.3 -> ^2.2.0 age confidence
esbuild ^0.25.12 -> ^0.27.0 age confidence
eslint (source) ^9.39.0 -> ^9.39.1 age confidence
pnpm (source) 10.20.0 -> 10.21.0 age confidence
rollup (source) ^4.52.5 -> ^4.53.1 age confidence
tsdown ^0.15.12 -> ^0.16.1 age confidence
vite (source) ^7.1.12 -> ^7.2.2 age confidence
vitest (source) ^4.0.6 -> ^4.0.8 age confidence

Release Notes

sxzz/ast-kit (ast-kit)

v2.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
evanw/esbuild (esbuild)

v0.27.0

Compare Source

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#​4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#​4208, #​4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

Compare Source

  • Enable trusted publishing (#​4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

eslint/eslint (eslint)

v9.39.1

Compare Source

pnpm/pnpm (pnpm)

v10.21.0

Compare Source

rollup/rollup (rollup)

v4.53.1

Compare Source

2025-11-07

Bug Fixes
Pull Requests

v4.53.0

Compare Source

2025-11-07

Features
  • Improve rendering performance by caching generated variable names (#​5947)
Pull Requests
rolldown/tsdown (tsdown)

v0.16.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.16.0

Compare Source

   🚨 Breaking Changes
  • Rename config exports  -  by @​sxzz in #​519 (7de20)
    • Split Options interface into UserConfig and InlineConfig. The original one now is InlineConfig.
    • Rename NormalizedUserConfig to UserConfig
    • Rename ResolvedOptions to ResolvedConfig
  • Defaults fixedExtension to true when platform is node  -  by @​sxzz in #​517 (e1168)
  • Rename --debug CLI flag to --debug-logs  -  by @​sxzz in #​576 (e4ef6)
   🚀 Features
    View changes on GitHub
vitejs/vite (vite)

v7.2.2

Compare Source

Bug Fixes

v7.2.1

Compare Source

Bug Fixes
Code Refactoring

v7.2.0

Compare Source

Bug Fixes
  • css: fallback to sass when sass-embedded platform binary is missing (#​21002) (b1fd616)
  • module-runner: make getBuiltins response JSON serializable (#​21029) (ad5b3bf)
  • types: add undefined to optional properties for exactOptionalProperties type compatibility (#​21040) (2833c55)
Miscellaneous Chores
vitest-dev/vitest (vitest)

v4.0.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.7

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@bolt-new-by-stackblitz
Copy link

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@pkg-pr-new
Copy link

pkg-pr-new bot commented Nov 10, 2025

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-inline-enum@93

commit: ab98c2a

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedesbuild@​0.27.0991007494100
Updatedvite@​7.1.12 ⏵ 7.2.298 +11008299100
Updatedeslint@​9.39.0 ⏵ 9.39.19710010096 +1100
Updatedrollup@​4.52.5 ⏵ 4.53.19710010099100
Updatedvitest@​4.0.6 ⏵ 4.0.8100 +3100100 +22100 +2100
Updatedast-kit@​2.1.3 ⏵ 2.2.0100 +1100100 +13100 +13100
Updatedtsdown@​0.15.12 ⏵ 0.16.1100 +3100100 +9100 +5100

View full report

@renovate renovate bot merged commit 35559ac into main Nov 10, 2025
14 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch November 10, 2025 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant