chore(deps): update all non-major dependencies#3085
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
❌ Deploy Preview for dtsx failed. Why did it fail? →
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
12 times, most recently
from
April 6, 2026 12:26
bb08315 to
5cb054c
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
13 times, most recently
from
April 13, 2026 19:34
c237a9f to
86058f1
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
15 times, most recently
from
April 28, 2026 00:56
c0bfea0 to
598586f
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
April 29, 2026 08:55
f6fd716 to
d580213
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
8 times, most recently
from
May 1, 2026 14:31
ae2827f to
a2fa540
Compare
Contributor
Benchmark ResultsPlatform: linux x64 | Runtime: Bun 1.3.14 | Date: 2026-07-22 isolatedDeclarations vs Semantic GenerationUncached end-to-end declaration generation over identical, fully annotated sources.
In-Process API — CachedSmart caching (hash check + cache hit) for watch mode, incremental builds, and CI.
In-Process API — No CacheRaw single-transform comparison (cache cleared every iteration).
Multi-File ProjectAll tools processing files in-process sequentially.
zig-dtsx vs oxc-transform
Internal Benchmark DetailsExtraction
Synthetic
Memory
Real-World
Generation
Phase Timing
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.2.4→^0.2.10^0.1.4→^0.1.20^0.2.0→^0.2.12^0.2.0→^0.2.12^0.1.5→^0.1.6^0.2.1→^0.2.3^1.3.11→^1.3.14v5.0.3→v5.1.0v6.0.2→v6.1.0^0.9.18→^0.9.22^0.3.1→^0.3.2^0.15.6→^0.15.15>=0.27.4→>=0.28.1v2.1.2→v2.2.0^0.121.0→^0.141.0^0.121.0→^0.141.0^0.1.20→^0.1.40^7.3.1→^7.3.6^5.105.4→^5.108.4Release Notes
stacksjs/bumpx (@stacksjs/bumpx)
v0.2.10Compare Source
v0.2.9Compare Source
v0.2.8Compare Source
v0.2.7Compare Source
v0.2.6Compare Source
v0.2.5Compare Source
stacksjs/bunpress (@stacksjs/bunpress)
v0.1.20Compare Source
v0.1.19Compare Source
v0.1.18Compare Source
v0.1.17Compare Source
v0.1.16Compare Source
v0.1.15Compare Source
v0.1.14Compare Source
v0.1.13Compare Source
v0.1.12Compare Source
v0.1.11Compare Source
v0.1.10Compare Source
v0.1.9Compare Source
v0.1.8Compare Source
v0.1.7Compare Source
v0.1.6Compare Source
🐛 Bug Fixes
basePathfrom incoming request paths so/docs/**routing works behind path-based reverse proxiesv0.1.5Compare Source
stacksjs/clapp (@stacksjs/clapp)
v0.2.12Compare Source
v0.2.11Compare Source
v0.2.10Compare Source
v0.2.9Compare Source
v0.2.8Compare Source
v0.2.7Compare Source
v0.2.6Compare Source
v0.2.5Compare Source
v0.2.4Compare Source
v0.2.3Compare Source
stacksjs/gitlint (@stacksjs/gitlint)
v0.1.6Compare Source
actions/cache (actions/cache)
v5.1.0Compare Source
What's Changed
Full Changelog: actions/cache@v5...v5.1.0
v5.0.5Compare Source
What's Changed
Full Changelog: actions/cache@v5...v5.0.5
v5.0.4Compare Source
What's Changed
New Contributors
Full Changelog: actions/cache@v5...v5.0.4
actions/checkout (actions/checkout)
v6.1.0Compare Source
v6.0.3Compare Source
stacksjs/buddy-bot (buddy-bot)
v0.9.22Compare Source
v0.9.21Compare Source
v0.9.20Compare Source
v0.9.19Compare Source
stacksjs/bun-git-hooks (bun-git-hooks)
v0.3.2Compare Source
stacksjs/bunfig (bunfig)
v0.15.15Compare Source
v0.15.14Compare Source
v0.15.13Compare Source
v0.15.12Compare Source
v0.15.11Compare Source
v0.15.10Compare Source
v0.15.9Compare Source
v0.15.8Compare Source
v0.15.7Compare Source
evanw/esbuild (esbuild)
v0.28.1Compare Source
Disallow
\in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a
\backslash character. It happened due to the use of Go'spath.Clean()function, which only handles Unix-style/characters. HTTP requests with paths containing\are no longer allowed.Thanks to @dellalibera for reporting this issue.
Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)
The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.
Note that esbuild's Deno API installs from
registry.npmjs.orgby default, but allows theNPM_CONFIG_REGISTRYenvironment variable to override this with a custom package registry. This change means that the esbuild executable served byNPM_CONFIG_REGISTRYmust now match the expected content.Thanks to @sondt99 for reporting this issue.
Avoid inlining
usingandawait usingdeclarations (#4482)Previously esbuild's minifier sometimes incorrectly inlined
usingandawait usingdeclarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done forletandconstdeclarations by avoiding doing it forvardeclarations, which no longer worked when more declaration types were added. Here's an example:Fix module evaluation when an error is thrown (#4461, #4467)
If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if
import()orrequire()is used to import a module multiple times. The thrown error is supposed to be thrown by every call toimport()orrequire(), not just the first. With this release, esbuild will now throw the same error every time you callimport()orrequire()on a module that throws during its evaluation.Fix some edge cases around the
newoperator (#4477)Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a
newexpression (specifically an optional chain and/or a tagged template literal). The generated code for thenewtarget was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap thenewtarget in parentheses. Here is an example of some affected code:Fix renaming of nested
vardeclarations (#4471)This release fixes a bug where
vardeclarations in nested scopes that are hoisted up to module scope were not correctly being renamed during bundling. That could previously lead to name collisions when minification was disabled, which could potentially cause a behavior change. The bug has been fixed so that these hoisted declarations are now considered to be module-level symbols during the name collision avoidance pass.Emit
varinstead ofconstfor certain TypeScript-only constructs for ES5 (#4448)While esbuild doesn't generally support converting
consttovarfor ES5 due to nested scoping rules (which is currently a build-time error), esbuild previously incorrectly converted TypeScript-onlyimportassignment constructs into aconstdeclaration even when targeting ES5. With this release, esbuild will now usevarfor this case instead:v0.28.0Compare Source
Add support for
with { type: 'text' }imports (#4435)The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing
textloader. Here's an example:Add integrity checks to fallback download path (#4343)
Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the
npmcommand, and then with a HTTP request toregistry.npmjs.orgas a last resort).This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level
esbuildpackage. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.Update the Go compiler from 1.25.7 to 1.26.1
This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:
You can read the Go 1.26 release notes for more information.
v0.27.7Compare Source
Fix lowering of define semantics for TypeScript parameter properties (#4421)
The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
v0.27.5Compare Source
Fix for an async generator edge case (#4401, #4417)
Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:
Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with
--supported:async-generator=false). The transformation should be fixed starting with this release.This fix was contributed by @2767mr.
Fix a regression when
metafileis enabled (#4420, #4418)This release fixes a regression introduced by the previous release. When
metafile: truewas enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.Use define semantics for TypeScript parameter properties (#4421)
Parameter properties are a TypeScript-specific code generation feature that converts constructor parameters into class fields when they are prefixed by certain keywords. When
"useDefineForClassFields": trueis present intsconfig.json, the TypeScript compiler automatically generates class field declarations for parameter properties. Previously esbuild didn't do this, but esbuild will now do this starting with this release:Allow
es2025as a target intsconfig.json(#4432)TypeScript recently added
es2025as a compilation target, so esbuild now supports this in thetargetfield oftsconfig.jsonfiles, such as in the following configuration file:{ "compilerOptions": { "target": "ES2025" } }As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.
oven-sh/setup-bun (oven-sh/setup-bun)
v2.2.0Compare Source
oven-sh/setup-bunis the github action for setting up Bun.What's Changed
actions/checkout@v6.0.2in the test workflow by @tcely in #173autofix.ciworkflow by @tcely in #174Release new action versionworkflow by @tcely in #175New Contributors
Full Changelog: oven-sh/setup-bun@v2...v2.2.0
v2.1.3Compare Source
oven-sh/setup-bunis the github action for setting up Bun.What's Changed
New Contributors
Full Changelog: oven-sh/setup-bun@v2...v2.1.3
oxc-project/oxc (oxc-parser)
v0.141.0💥 BREAKING CHANGES
54cc121ast: [BREAKING] SplitMetaPropertyintoImportMetaandNewTarget(#24557) (camc314)🚀 Features
7b045cdminfier: Drop last break from last switch case (#24673) (Armano)3d22307parser: AddParseOptions::enable_ident_hashes(#24491) (Boshen)v0.138.0🛡️ Security
3cdd18fdeps: Update npm packages (#23690) (renovate[bot])v0.137.0💥 BREAKING CHANGES
7a76cd3estree: [BREAKING] Make whether to include TS fields a runtime option (#23574) (overlookmotel)🚀 Features
53509a8minifier: Treeshake pure typed arrays and Set/Map array literals (#23469) (Dunqing)🐛 Bug Fixes
ae02b4eci/parser: Useminimalfor vitest reporter (#23457) (camc314)v0.136.0⚡ Performance
da1a6c6diagnostics: Migrate to allocation-optimized oxc-miette (#23094) (Boshen)v0.135.0v0.134.0v0.133.0v0.132.0v0.131.0v0.130.0📚 Documentation
a4a6892napi/parser: Correct code comment (#22278) (overlookmotel)v0.129.0🐛 Bug Fixes
429deacnapi/parser: ExportvisitorKeysfromwasmentrypoint (#21996) (NullVoxPopuli)v0.128.0💥 BREAKING CHANGES
502e804ast: [BREAKING] Reduce size ofTSTypePredicateName(#21711) (overlookmotel)5651539ast: [BREAKING] Reduce size ofJSXExpression(#21710) (overlookmotel)c44e280ast: [BREAKING] Reduce size ofArrayExpressionElement(#21709) (overlookmotel)⚡ Performance
9fa362enapi/parser: Do not generate tokens except in tests (#21811) (overlookmotel)🛡️ Security
d8076c9deps: Update rolldown (#21639) (renovate)v0.127.0🐛 Bug Fixes
00fc136codegen: Preserve coverage comments before object properties (#21312) (bab)v0.125.0💥 BREAKING CHANGES
382958aspan: [BREAKING] Remove re-exports of string types fromoxc_spancrate (#21246) (overlookmotel)⚡ Performance
addcd02napi/parser, linter/plugins: Raw transfer deserializer forVecs use shift instead of multiply where possible (#21142) (overlookmotel)3068dednapi/parser, linter/plugins: Shift before add when calculating positions in raw transfer deserializer (#21141) (overlookmotel)eb400b8napi/parser, linter/plugins: Removeuint32buffer view (#21140) (overlookmotel)2675085napi/parser: Lazy deserialization use onlyInt32Array(#21139) (overlookmotel)5b35a53napi/parser: Deserializing tokens use onlyint32array (#21138) (overlookmotel)f163d10parser: Tokens raw deserialization useInt32Array(#21137) (overlookmotel)7a86613linter/plugins: UseInt32Arrays for tokens and comments buffers (#21136) (overlookmotel)8c51121napi/parser, linter/plugins: Raw transfer deserializeSpanfields asi32s (#21135) (overlookmotel)bc1bcddnapi/parser, linter/plugins: Inline trivial raw transfer field deserializers into node object definitions (#21134) (overlookmotel)c0278abnapi/parser, linter/plugins: UseInt32Arrayin raw transfer deserializer (#21132) (overlookmotel)43482c7linter/plugins: Use>>not>>>in binary search loops (#21129) (overlookmotel)v0.124.0⚡ Performance
fb52383napi/parser, linter/plugins: Clear buffers and source texts earlier (#21025) (overlookmotel)3b7dec4napi/parser, linter/plugins: Useutf8Slicefor decoding UTF-8 strings (#21022) (overlookmotel)012c924napi/parser, linter/plugins: Speed up decoding strings in raw transfer (#21021) (overlookmotel)55e1e9bnapi/parser, linter/plugins: Initialize vars as 0 (#21020) (overlookmotel)c25ef02napi/parser, linter/plugins: Simplify branch condition indeserializeStr(#21019) (overlookmotel)9f494c3napi/parser, linter/plugins: Raw transfer useString.fromCharCodein string decoding (#21018) (overlookmotel)0503a78napi/parser, linter/plugins: Faster deserialization ofrawfields (#20923) (overlookmotel)a24f75enapi/parser: Optimize string deserialization for non-ASCII sources (#20834) (Joshua Tuddenham)oxc-project/oxc (oxc-transform)
v0.136.0💥 BREAKING CHANGES
7a24911codegen: [BREAKING] Borrow sourcemaps from codegen (#23422) (Boshen)bb0ed44transformer: [BREAKING] Disable styled-components transpileTemplateLiterals by default (#23171) (Boshen)🚀 Features
ec266bbtransformer: Run React Compiler as a feature-gated transform pass (#23201) (Boshen)v0.135.0🚀 Features
b846ab2react_compiler: Integrate the Rust port of the React Compiler (#22942) (Boshen)v0.133.0🚀 Features
ee659b6transformer/legacy-decorator: AddstrictNullChecksoption for nullable-union design:type (#22266) (Kyle Cannon)v0.128.0📚 Documentation
e4cea25transform: Use thenode:namespace in the example (#19998) (루밀LuMir)🛡️ Security
d8076c9deps: Update rolldown (#21639) (renovate)v0.126.0🚀 Features
f5deb55napi/transform: ExposeoptimizeConstEnumsandoptimizeEnumsoptions (#21388) (Dunqing)v0.125.0🚀 Features
e7e1aeatransformer/typescript: Addoptimize_enumsoption for regular enum inlining (#20539) (Dunqing)pickier/pickier (pickier)
v0.1.40Compare Source
v0.1.39Compare Source
v0.1.38Compare Source
v0.1.37Compare Source
v0.1.36Compare Source
v0.1.35Compare Source
v0.1.34Compare Source
v0.1.33Compare Source
v0.1.32Compare Source
v0.1.30Compare Source
v0.1.29Compare Source
v0.1.28Compare Source
v0.1.27Compare Source
v0.1.26Compare Source
v0.1.25Compare Source
v0.1.24Compare Source
v0.1.23Compare Source
[
v0.1.22](https://redirect.github.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.