chore(deps): update all non-major dependencies (#64)

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [oxfmt](https://oxc.rs/docs/guide/usage/formatter) ([source](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)) | [`0.60.0` → `0.61.0`](https://renovatebot.com/diffs/npm/oxfmt/0.60.0/0.61.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/oxfmt/0.61.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/oxfmt/0.60.0/0.61.0?slim=true) | | [rolldown](https://rolldown.rs/) ([source](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown)) | [`1.2.0` → `1.2.1`](https://renovatebot.com/diffs/npm/rolldown/1.2.0/1.2.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/rolldown/1.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/rolldown/1.2.0/1.2.1?slim=true) | --- ### Release Notes <details> <summary>oxc-project/oxc (oxfmt)</summary> ### [`v0.61.0`](https://github.com/oxc-project/oxc/compare/oxfmt_v0.60.0...oxfmt_v0.61.0) [Compare Source](https://github.com/oxc-project/oxc/compare/oxfmt_v0.60.0...oxfmt_v0.61.0) </details> <details> <summary>rolldown/rolldown (rolldown)</summary> ### [`v1.2.1`](https://github.com/rolldown/rolldown/blob/HEAD/CHANGELOG.md#121---2026-07-29) [Compare Source](https://github.com/rolldown/rolldown/compare/v1.2.0...v1.2.1) ##### 🚀 Features - dev: support `hotUpdate` hook ([#10305](https://github.com/rolldown/rolldown/issues/10305)) by [@h-a-n-a](https://github.com/h-a-n-a) - dev: expose `disableWatcher` through the dev engine bindings ([#10474](https://github.com/rolldown/rolldown/issues/10474)) by [@shulaoda](https://github.com/shulaoda) - plugin: surface output-option callbacks in \[PLUGIN\_TIMINGS] ([#10411](https://github.com/rolldown/rolldown/issues/10411)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - `import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId>` support to pass context to `resolveFileUrl` hook ([#10297](https://github.com/rolldown/rolldown/issues/10297)) by [@sapphi-red](https://github.com/sapphi-red) - dev: skip the HMR update when a module's rebuilt output is unchanged ([#10333](https://github.com/rolldown/rolldown/issues/10333)) by [@h-a-n-a](https://github.com/h-a-n-a) - code-splitting: wrap strict execution order modules on demand ([#10104](https://github.com/rolldown/rolldown/issues/10104)) by [@hyfdev](https://github.com/hyfdev) - support `import.meta.ROLLDOWN_FILE_URL_*` ([#10296](https://github.com/rolldown/rolldown/issues/10296)) by [@sapphi-red](https://github.com/sapphi-red) - implement `resolveFileUrl` plugin hook ([#10291](https://github.com/rolldown/rolldown/issues/10291)) by [@sapphi-red](https://github.com/sapphi-red) - magic-string: support storeName on overwrite/update ([#10312](https://github.com/rolldown/rolldown/issues/10312)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) ##### 🐛 Bug Fixes - external: keep `__toESM` when the importing module is tree-shaken ([#10516](https://github.com/rolldown/rolldown/issues/10516)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - dev: resolve re-exports from externals through a real import ([#10489](https://github.com/rolldown/rolldown/issues/10489)) by [@tbvjaos510](https://github.com/tbvjaos510) - code-splitting: route CJS barrel initialization per consumer ([#10488](https://github.com/rolldown/rolldown/issues/10488)) by [@hyfdev](https://github.com/hyfdev) - error: align filename-pattern diagnostics with Rollup's wording ([#10501](https://github.com/rolldown/rolldown/issues/10501)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - plugin: validate emitted prebuilt-chunk file names ([#10399](https://github.com/rolldown/rolldown/issues/10399)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - code-splitting: point a two-argument dynamic import at the chunk that holds the module ([#10479](https://github.com/rolldown/rolldown/issues/10479)) by [@hyfdev](https://github.com/hyfdev) - common: align is\_path\_fragment with Rollup's isPathFragment ([#10398](https://github.com/rolldown/rolldown/issues/10398)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - code-splitting: never name an internal chunk export `then` ([#10480](https://github.com/rolldown/rolldown/issues/10480)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: avoid creating call-site-triggered entry facades ([#10485](https://github.com/rolldown/rolldown/issues/10485)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: collect top-level eager order reasons in every strict build ([#10463](https://github.com/rolldown/rolldown/issues/10463)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: let a cross-chunk dynamic importer carry the order trigger ([#10456](https://github.com/rolldown/rolldown/issues/10456)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger ([#10433](https://github.com/rolldown/rolldown/issues/10433)) by [@hyfdev](https://github.com/hyfdev) - binding: forward resolveId options.kind to callable builtin plugins ([#10440](https://github.com/rolldown/rolldown/issues/10440)) by [@martijnwalraven](https://github.com/martijnwalraven) - dev: keep the export name of `export * as ns from` ([#10476](https://github.com/rolldown/rolldown/issues/10476)) by [@tbvjaos510](https://github.com/tbvjaos510) - code-splitting: only split an entry facade when something else can load its chunk ([#10441](https://github.com/rolldown/rolldown/issues/10441)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: fold the runtime chunk back after order lowering ([#10414](https://github.com/rolldown/rolldown/issues/10414)) by [@hyfdev](https://github.com/hyfdev) - runtime: don't leave default undefined for cjs that fakes \_\_esModule ([#10453](https://github.com/rolldown/rolldown/issues/10453)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - import-glob: escape generated string literals ([#10438](https://github.com/rolldown/rolldown/issues/10438)) by [@shantanuraj](https://github.com/shantanuraj) - preserve-modules: don't assume every chunk mirrors a module ([#10442](https://github.com/rolldown/rolldown/issues/10442)) by [@hyfdev](https://github.com/hyfdev) - filter: treat missing hook inputs as non-matches, not panics ([#10443](https://github.com/rolldown/rolldown/issues/10443)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - code-splitting: keep CommonJS modules wrapped under strict execution order ([#10405](https://github.com/rolldown/rolldown/issues/10405)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: align dynamicImports metadata with the rewritten import() specifier ([#10430](https://github.com/rolldown/rolldown/issues/10430)) by [@hyfdev](https://github.com/hyfdev) - dev: skip user plugin hooks for ?rolldown-lazy proxy modules ([#10426](https://github.com/rolldown/rolldown/issues/10426)) by [@unknownjedi](https://github.com/unknownjedi) - treeshake: preserve side-effect-free spread arguments in manual-pure chains ([#10432](https://github.com/rolldown/rolldown/issues/10432)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - treeshake: preserve eagerly evaluated child effects of manual pure chains ([#10427](https://github.com/rolldown/rolldown/issues/10427)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - code-splitting: initialize pure definers behind star re-export barrels under strict execution order ([#10409](https://github.com/rolldown/rolldown/issues/10409)) by [@hyfdev](https://github.com/hyfdev) - resolveId: reject string `id` filters (must be a RegExp) ([#10412](https://github.com/rolldown/rolldown/issues/10412)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - code-splitting: collect eager order reasons for on-demand wrapping ([#10387](https://github.com/rolldown/rolldown/issues/10387)) by [@hyfdev](https://github.com/hyfdev) - rolldown: apply output.paths to CJS export-star of external modules ([#10406](https://github.com/rolldown/rolldown/issues/10406)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - dev: sourcemaps of lazily compiled chunks ([#10386](https://github.com/rolldown/rolldown/issues/10386)) by [@tbvjaos510](https://github.com/tbvjaos510) - plugin: validate emitted file names at emitFile time ([#10377](https://github.com/rolldown/rolldown/issues/10377)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - guarantee tokio runtime release when close rejects ([#10381](https://github.com/rolldown/rolldown/issues/10381)) by [@shulaoda](https://github.com/shulaoda) - code-splitting: make strict transitive init registration deterministic and constant-time ([#10320](https://github.com/rolldown/rolldown/issues/10320)) by [@hyfdev](https://github.com/hyfdev) - pair tokio runtime acquire and release on wasm to prevent premature shutdown ([#10363](https://github.com/rolldown/rolldown/issues/10363)) by [@shulaoda](https://github.com/shulaoda) - don't body-demand modules from simulated facade chunk includes ([#10351](https://github.com/rolldown/rolldown/issues/10351)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - tracing: invalid RD\_LOG filter and RD\_LOG\_OUTPUT=json no longer panic ([#10343](https://github.com/rolldown/rolldown/issues/10343)) by [@Brooooooklyn](https://github.com/Brooooooklyn) - code-splitting: treat class definition-time global reads as order-sensitive ([#10322](https://github.com/rolldown/rolldown/issues/10322)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: deconflict force-included runtime helper statements ([#10336](https://github.com/rolldown/rolldown/issues/10336)) by [@hyfdev](https://github.com/hyfdev) - binding: forward all missing parallel JS plugin hooks ([#10345](https://github.com/rolldown/rolldown/issues/10345)) by [@Brooooooklyn](https://github.com/Brooooooklyn) - code-splitting: re-derive chunk exec order after the runtime sweep ([#10334](https://github.com/rolldown/rolldown/issues/10334)) by [@hyfdev](https://github.com/hyfdev) - types: add undefined to ExistingRawSourceMap optional properties ([#10355](https://github.com/rolldown/rolldown/issues/10355)) by [@ocavue](https://github.com/ocavue) - magic-string: validate relocate ranges before rewiring ([#10327](https://github.com/rolldown/rolldown/issues/10327)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - add EMPTY\_IMPORT\_META warning for non-node CJS output ([#10222](https://github.com/rolldown/rolldown/issues/10222)) by [@sapphi-red](https://github.com/sapphi-red) - call `resolveFileUrl` in a deterministic order ([#10330](https://github.com/rolldown/rolldown/issues/10330)) by [@sapphi-red](https://github.com/sapphi-red) - magic-string: refuse repeated sendMagicString on a consumed instance ([#10331](https://github.com/rolldown/rolldown/issues/10331)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - magic-string: refuse to use a MagicString after sendMagicString consumed it ([#10326](https://github.com/rolldown/rolldown/issues/10326)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - magic-string: reject non-contiguous moves before rewiring the chunk list ([#10311](https://github.com/rolldown/rolldown/issues/10311)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - handle `./foo/bar` glob pattern the same as `foo/bar` ([#10313](https://github.com/rolldown/rolldown/issues/10313)) by [@sapphi-red](https://github.com/sapphi-red) - magic-string: throw instead of panicking when append/prepend splits an edited chunk ([#10301](https://github.com/rolldown/rolldown/issues/10301)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - output: skip separator for empty hoisted functions ([#10310](https://github.com/rolldown/rolldown/issues/10310)) by [@hyfdev](https://github.com/hyfdev) - magic-string: don't report a change when edits cancel out ([#10299](https://github.com/rolldown/rolldown/issues/10299)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - sourcemap: map wrapped imported callees ([#10288](https://github.com/rolldown/rolldown/issues/10288)) by [@hyfdev](https://github.com/hyfdev) - magic-string: count positional inserts at index 0 on an empty source ([#10306](https://github.com/rolldown/rolldown/issues/10306)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - magic-string: return UTF-16 code units from length() ([#10295](https://github.com/rolldown/rolldown/issues/10295)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - output: skip separator for empty import prelude ([#10289](https://github.com/rolldown/rolldown/issues/10289)) by [@hyfdev](https://github.com/hyfdev) ##### 🚜 Refactor - dev: make it easier to customize the runtime ([#10338](https://github.com/rolldown/rolldown/issues/10338)) by [@sapphi-red](https://github.com/sapphi-red) - code-splitting: declare CJS carrier namespaces initializer-free ([#10513](https://github.com/rolldown/rolldown/issues/10513)) by [@hyfdev](https://github.com/hyfdev) - rollup-tests: avoid relying on `NODE_PATH` env var resolution ([#10496](https://github.com/rolldown/rolldown/issues/10496)) by [@sapphi-red](https://github.com/sapphi-red) - code-splitting: derive symbol chunk ownership as pass-local link data ([#10449](https://github.com/rolldown/rolldown/issues/10449)) by [@hyfdev](https://github.com/hyfdev) - plugin: share asset emission helpers between copy\_module and asset\_module ([#10450](https://github.com/rolldown/rolldown/issues/10450)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - plugin: dedupe hook binding boilerplate ([#10428](https://github.com/rolldown/rolldown/issues/10428)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - plugin: share the oxc parse preamble between import-glob and dynamic-import-vars ([#10452](https://github.com/rolldown/rolldown/issues/10452)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - implement `GetAstBuilder` on visitor/pass types ([#10424](https://github.com/rolldown/rolldown/issues/10424)) by [@overlookmotel](https://github.com/overlookmotel) - pass arrays to AST builder methods ([#10419](https://github.com/rolldown/rolldown/issues/10419)) by [@overlookmotel](https://github.com/overlookmotel) - shorten AST builder code ([#10418](https://github.com/rolldown/rolldown/issues/10418)) by [@overlookmotel](https://github.com/overlookmotel) - centralize final ESM init metadata ([#10376](https://github.com/rolldown/rolldown/issues/10376)) by [@hyfdev](https://github.com/hyfdev) - descriptor-based parallel-plugin detection (getParallelPluginInfo) ([#10349](https://github.com/rolldown/rolldown/issues/10349)) by [@Brooooooklyn](https://github.com/Brooooooklyn) - remove AstFactory in favor of new\_\* construction traits ([#10353](https://github.com/rolldown/rolldown/issues/10353)) by [@Boshen](https://github.com/Boshen) - enable oxc\_ast's `disable_old_builder` feature ([#10316](https://github.com/rolldown/rolldown/issues/10316)) by [@Boshen](https://github.com/Boshen) ##### 📚 Documentation - development-guide: update config.json link line reference ([#10523](https://github.com/rolldown/rolldown/issues/10523)) by [@dogledogle](https://github.com/dogledogle) - clarify slash normalization for id hook filter ([#10511](https://github.com/rolldown/rolldown/issues/10511)) by [@sapphi-red](https://github.com/sapphi-red) - code-splitting: record the thenable-namespace rule ([#10502](https://github.com/rolldown/rolldown/issues/10502)) by [@hyfdev](https://github.com/hyfdev) - clarify that `esmExternalRequirePlugin` must own its externals ([#10439](https://github.com/rolldown/rolldown/issues/10439)) by [@TheAlexLichter](https://github.com/TheAlexLichter) - add troubleshooting entry for the [@rolldown/binding-](https://github.com/rolldown/binding-)... resolution error ([#10390](https://github.com/rolldown/rolldown/issues/10390)) by [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) - add Code Splitting API reference category ([#10382](https://github.com/rolldown/rolldown/issues/10382)) by [@vittorioexp](https://github.com/vittorioexp) ##### ⚡ Performance - use VisitJsMut in JavaScript-only AST passes ([#10507](https://github.com/rolldown/rolldown/issues/10507)) by [@Boshen](https://github.com/Boshen) - cache the resolved glob matcher for Id/ImporterId filters ([#10410](https://github.com/rolldown/rolldown/issues/10410)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - scope\_hoisting: remove `alloc` field from `ScopeHoistingFinalizer` ([#10425](https://github.com/rolldown/rolldown/issues/10425)) by [@overlookmotel](https://github.com/overlookmotel) - reduce string allocations ([#10423](https://github.com/rolldown/rolldown/issues/10423)) by [@overlookmotel](https://github.com/overlookmotel) - hmr: remove unnecessary string allocations ([#10422](https://github.com/rolldown/rolldown/issues/10422)) by [@overlookmotel](https://github.com/overlookmotel) - avoid allocating static strings via custom builder methods ([#10421](https://github.com/rolldown/rolldown/issues/10421)) by [@overlookmotel](https://github.com/overlookmotel) - pass string literals to AST builder methods ([#10420](https://github.com/rolldown/rolldown/issues/10420)) by [@overlookmotel](https://github.com/overlookmotel) - use VisitJs in JavaScript-only AST passes ([#10396](https://github.com/rolldown/rolldown/issues/10396)) by [@Boshen](https://github.com/Boshen) - plugin: shrink erased plugin debug vtables ([#10370](https://github.com/rolldown/rolldown/issues/10370)) by [@Boshen](https://github.com/Boshen) - reuse normalized path buffers ([#10315](https://github.com/rolldown/rolldown/issues/10315)) by [@hyfdev](https://github.com/hyfdev) ##### 🧪 Testing - code-splitting: pin CJS barrel fallback triggers and flag-off equivalence ([#10514](https://github.com/rolldown/rolldown/issues/10514)) by [@hyfdev](https://github.com/hyfdev) - plugin: cover chunk fileName, absolute chunk name, and Windows drive names ([#10400](https://github.com/rolldown/rolldown/issues/10400)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - code-splitting: cover a single-chunk dynamic import of a wrapped module ([#10505](https://github.com/rolldown/rolldown/issues/10505)) by [@hyfdev](https://github.com/hyfdev) - file: remove the unused .dynamic\_import fixture ([#10481](https://github.com/rolldown/rolldown/issues/10481)) by [@hyfdev](https://github.com/hyfdev) - treeshake: reduce manual-pure fixture to a minimal smoke test, move matrix to unit tests ([#10436](https://github.com/rolldown/rolldown/issues/10436)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - dev: run vite playgrounds under bundled dev (test-serve-bundled) ([#10434](https://github.com/rolldown/rolldown/issues/10434)) by [@h-a-n-a](https://github.com/h-a-n-a) - stop snapshots from silently hiding user code inside the runtime region ([#10431](https://github.com/rolldown/rolldown/issues/10431)) by [@hyfdev](https://github.com/hyfdev) - wasi: add tokio runtime lifecycle regression test ([#10379](https://github.com/rolldown/rolldown/issues/10379)) by [@shulaoda](https://github.com/shulaoda) - dev: expect preserved hot.data in hmr-whole-chain-dispose ([#10380](https://github.com/rolldown/rolldown/issues/10380)) by [@h-a-n-a](https://github.com/h-a-n-a) - code-splitting: pin flag-off wrapped-esm init emission ([#10324](https://github.com/rolldown/rolldown/issues/10324)) by [@hyfdev](https://github.com/hyfdev) - sourcemap: fix Windows-only failures in composition fixtures ([#10368](https://github.com/rolldown/rolldown/issues/10368)) by [@shulaoda](https://github.com/shulaoda) - generated-code: mark assert external in symbols\_ns2 for deterministic output ([#10339](https://github.com/rolldown/rolldown/issues/10339)) by [@hyfdev](https://github.com/hyfdev) - code-splitting: cover entries-aware strict init cycle ([#10307](https://github.com/rolldown/rolldown/issues/10307)) by [@hyfdev](https://github.com/hyfdev) - make `just setup-vite` the only entry point that touches `vite/` ([#10332](https://github.com/rolldown/rolldown/issues/10332)) by [@shulaoda](https://github.com/shulaoda) - vite-tests: reuse the shared root vite checkout ([#10325](https://github.com/rolldown/rolldown/issues/10325)) by [@shulaoda](https://github.com/shulaoda) - test-dev-server: drop the vite submodule, track rolldown-canary ([#10319](https://github.com/rolldown/rolldown/issues/10319)) by [@shulaoda](https://github.com/shulaoda) - vite-tests: track the latest rolldown-canary rebased onto vite main ([#10318](https://github.com/rolldown/rolldown/issues/10318)) by [@shulaoda](https://github.com/shulaoda) - unify Vite in vite-test and test-dev-server ([#10293](https://github.com/rolldown/rolldown/issues/10293)) by [@h-a-n-a](https://github.com/h-a-n-a) ##### ⚙️ Miscellaneous Tasks - scope the binding artifact download to `bindings-*` ([#10525](https://github.com/rolldown/rolldown/issues/10525)) by [@shulaoda](https://github.com/shulaoda) - deps: update napi ([#10506](https://github.com/rolldown/rolldown/issues/10506)) by [@renovate](https://github.com/renovate)\[bot] - deps: update rollup submodule for tests to v4.62.3 ([#10494](https://github.com/rolldown/rolldown/issues/10494)) by [@rolldown-guard](https://github.com/rolldown-guard)\[bot] - deps: upgrade oxc to 0.142.0 ([#10497](https://github.com/rolldown/rolldown/issues/10497)) by [@shulaoda](https://github.com/shulaoda) - deps: update test262 submodule for tests ([#10495](https://github.com/rolldown/rolldown/issues/10495)) by [@rolldown-guard](https://github.com/rolldown-guard)\[bot] - deps: update github actions ([#10460](https://github.com/rolldown/rolldown/issues/10460)) by [@renovate](https://github.com/renovate)\[bot] - deps: update rust crates ([#10462](https://github.com/rolldown/rolldown/issues/10462)) by [@renovate](https://github.com/renovate)\[bot] - deps: update npm packages ([#10461](https://github.com/rolldown/rolldown/issues/10461)) by [@renovate](https://github.com/renovate)\[bot] - metric: alert Discord when the metric workflow fails ([#10447](https://github.com/rolldown/rolldown/issues/10447)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - metric: mint a short-lived GitHub App token instead of a PAT ([#10446](https://github.com/rolldown/rolldown/issues/10446)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) - repo: repair dangling CLAUDE.md symlink ([#10451](https://github.com/rolldown/rolldown/issues/10451)) by [@hanayashiki](https://github.com/hanayashiki) - publint/package-metadata fixes and small correctness fixes ([#10344](https://github.com/rolldown/rolldown/issues/10344)) by [@Brooooooklyn](https://github.com/Brooooooklyn) - deps: update dependency vite-plus to v0.2.6 ([#10404](https://github.com/rolldown/rolldown/issues/10404)) by [@renovate](https://github.com/renovate)\[bot] - add Semgrep scan workflow ([#10395](https://github.com/rolldown/rolldown/issues/10395)) by [@Boshen](https://github.com/Boshen) - enable Windows CI with a PR label ([#10375](https://github.com/rolldown/rolldown/issues/10375)) by [@hyfdev](https://github.com/hyfdev) - deps: upgrade oxc to 0.141.0 ([#10373](https://github.com/rolldown/rolldown/issues/10373)) by [@camc314](https://github.com/camc314) - deps: update napi ([#10369](https://github.com/rolldown/rolldown/issues/10369)) by [@renovate](https://github.com/renovate)\[bot] - deps: update test262 submodule for tests ([#10367](https://github.com/rolldown/rolldown/issues/10367)) by [@rolldown-guard](https://github.com/rolldown-guard)\[bot] - deps: update taiki-e/install-action action to v2.83.3 ([#10358](https://github.com/rolldown/rolldown/issues/10358)) by [@renovate](https://github.com/renovate)\[bot] - deps: update rust crates ([#10357](https://github.com/rolldown/rolldown/issues/10357)) by [@renovate](https://github.com/renovate)\[bot] - deps: update npm packages ([#10359](https://github.com/rolldown/rolldown/issues/10359)) by [@renovate](https://github.com/renovate)\[bot] - deps: update rust crate syn to v3 ([#10362](https://github.com/rolldown/rolldown/issues/10362)) by [@renovate](https://github.com/renovate)\[bot] - deps: update rust crate oxc\_sourcemap to v8.1.2 ([#10356](https://github.com/rolldown/rolldown/issues/10356)) by [@renovate](https://github.com/renovate)\[bot] - deps: update dependency vite-plus to v0.2.5 ([#10329](https://github.com/rolldown/rolldown/issues/10329)) by [@renovate](https://github.com/renovate)\[bot] - docs: migrate Netlify redirects to Void config ([#10282](https://github.com/rolldown/rolldown/issues/10282)) by [@tux-tn](https://github.com/tux-tn) - deps: update dependency rust to v1.97.1 ([#10317](https://github.com/rolldown/rolldown/issues/10317)) by [@renovate](https://github.com/renovate)\[bot] - runtime: remove unused `runtime/index.js` ([#10302](https://github.com/rolldown/rolldown/issues/10302)) by [@IWANABETHATGUY](https://github.com/IWANABETHATGUY) ##### ❤️ New Contributors - [@dogledogle](https://github.com/dogledogle) made their first contribution in [#10523](https://github.com/rolldown/rolldown/pull/10523) - [@tbvjaos510](https://github.com/tbvjaos510) made their first contribution in [#10489](https://github.com/rolldown/rolldown/pull/10489) - [@martijnwalraven](https://github.com/martijnwalraven) made their first contribution in [#10440](https://github.com/rolldown/rolldown/pull/10440) - [@shantanuraj](https://github.com/shantanuraj) made their first contribution in [#10438](https://github.com/rolldown/rolldown/pull/10438) - [@Nic-Polumeyv](https://github.com/Nic-Polumeyv) made their first contribution in [#10450](https://github.com/rolldown/rolldown/pull/10450) - [@hanayashiki](https://github.com/hanayashiki) made their first contribution in [#10451](https://github.com/rolldown/rolldown/pull/10451) - [@unknownjedi](https://github.com/unknownjedi) made their first contribution in [#10426](https://github.com/rolldown/rolldown/pull/10426) - [@vittorioexp](https://github.com/vittorioexp) made their first contribution in [#10382](https://github.com/rolldown/rolldown/pull/10382) - [@tux-tn](https://github.com/tux-tn) made their first contribution in [#10282](https://github.com/rolldown/rolldown/pull/10282) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action/pulls/64 Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>
2026-08-06 07:14:39 +02:00
parent 80e43303c6
commit a366444ba0
3 changed files with 216 additions and 368 deletions
@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
@@ -1785,7 +1785,7 @@ var require_dispatcher_base = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		get webSocketOptions() {
 			return {
 				maxFragments: this[kWebSocketOptions].maxFragments ?? 131072,
-				maxPayloadSize: this[kWebSocketOptions].maxPayloadSize ?? 128 * 1024 * 1024
+				maxPayloadSize: this[kWebSocketOptions].maxPayloadSize ?? 134217728
 			};
 		}
 		get destroyed() {
@@ -1837,7 +1837,7 @@ var require_dispatcher_base = /* @__PURE__ */ __commonJSMin(((exports, module) =
 			}
 			if (callback === void 0) return new Promise((resolve, reject) => {
 				this.destroy(err, (err, data) => {
-					return err ? reject(err) : resolve(data);
+					return err ? /* istanbul ignore next: should never error */ reject(err) : resolve(data);
 				});
 			});
 			if (typeof callback !== "function") throw new InvalidArgumentError("invalid callback");
@@ -2307,7 +2307,7 @@ var require_connect = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				assert$25(!httpSocket, "httpSocket can only be sent on TLS update");
 				port = port || 80;
 				socket = net$1.connect({
-					highWaterMark: 64 * 1024,
+					highWaterMark: 65536,
 					...options,
 					localAddress,
 					port,
@@ -3786,10 +3786,7 @@ var require_util$7 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				case "strict-origin-when-cross-origin":
 					if (request.origin && urlHasHttpsScheme(request.origin) && !urlHasHttpsScheme(requestCurrentURL(request))) serializedOrigin = null;
 					break;
-				case "same-origin":
-					if (!sameOrigin(request, requestCurrentURL(request))) serializedOrigin = null;
-					break;
-				default:
+				case "same-origin": if (!sameOrigin(request, requestCurrentURL(request))) serializedOrigin = null;
 			}
 			request.headersList.append("origin", serializedOrigin, true);
 		}
@@ -4071,9 +4068,7 @@ var require_util$7 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					case "value":
 						result = value;
 						break;
-					case "key+value":
-						result = [key, value];
-						break;
+					case "key+value": result = [key, value];
 				}
 				return {
 					value: result,
@@ -6859,7 +6854,7 @@ var require_client = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region node_modules/undici/lib/dispatcher/fixed-queue.js
 var require_fixed_queue = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const kSize = 2048;
-	const kMask = kSize - 1;
+	const kMask = 2047;
 	var FixedCircularBuffer = class {
 		constructor() {
 			this.bottom = 0;
@@ -7644,7 +7639,7 @@ var require_retry_handler = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			this.retryOpts = {
 				retry: retryFn ?? RetryHandler[kRetryHandlerDefaultRetry],
 				retryAfter: retryAfter ?? true,
-				maxTimeout: maxTimeout ?? 30 * 1e3,
+				maxTimeout: maxTimeout ?? 3e4,
 				minTimeout: minTimeout ?? 500,
 				timeoutFactor: timeoutFactor ?? 2,
 				maxRetries: maxRetries ?? 5,
@@ -7888,7 +7883,7 @@ var require_readable = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const kContentLength = Symbol("kContentLength");
 	const noop = () => {};
 	var BodyReadable = class extends Readable$2 {
-		constructor({ resume, abort, contentType = "", contentLength, highWaterMark = 64 * 1024 }) {
+		constructor({ resume, abort, contentType = "", contentLength, highWaterMark = 65536 }) {
 			super({
 				autoDestroy: true,
 				read: resume,
@@ -7967,7 +7962,7 @@ var require_readable = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			return this[kBody];
 		}
 		async dump(opts) {
-			let limit = Number.isFinite(opts?.limit) ? opts.limit : 128 * 1024;
+			let limit = Number.isFinite(opts?.limit) ? opts.limit : 131072;
 			const signal = opts?.signal;
 			if (signal != null && (typeof signal !== "object" || !("aborted" in signal))) throw new InvalidArgumentError("signal must be an AbortSignal");
 			signal?.throwIfAborted();
@@ -8106,7 +8101,7 @@ var require_util$6 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const assert$14 = require("node:assert");
 	const { ResponseStatusCodeError } = require_errors$1();
 	const { chunksDecode } = require_readable();
-	const CHUNK_LIMIT = 128 * 1024;
+	const CHUNK_LIMIT = 131072;
 	async function getResolveErrorBodyCallback({ callback, body, contentType, statusCode, statusMessage, headers }) {
 		assert$14(body);
 		let chunks = [];
@@ -9605,7 +9600,7 @@ var require_dump = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { InvalidArgumentError, RequestAbortedError } = require_errors$1();
 	const DecoratorHandler = require_decorator_handler();
 	var DumpHandler = class extends DecoratorHandler {
-		#maxSize = 1024 * 1024;
+		#maxSize = 1048576;
 		#abort = null;
 		#dumped = false;
 		#aborted = false;
@@ -9655,7 +9650,7 @@ var require_dump = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			this.#handler.onComplete(trailers);
 		}
 	};
-	function createDumpInterceptor({ maxSize: defaultMaxSize } = { maxSize: 1024 * 1024 }) {
+	function createDumpInterceptor({ maxSize: defaultMaxSize } = { maxSize: 1048576 }) {
 		return (dispatch) => {
 			return function Intercept(opts, handler) {
 				const { dumpMaxSize = defaultMaxSize } = opts;
@@ -9826,9 +9821,7 @@ var require_dns = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					this.#handler.onError(err);
 					return;
 				case "ENOTFOUND": this.#state.deleteRecord(this.#origin);
-				default:
-					this.#handler.onError(err);
-					break;
+				default: this.#handler.onError(err);
 			}
 		}
 	};
@@ -15229,7 +15222,6 @@ var require_eventsource_stream = /* @__PURE__ */ __commonJSMin(((exports, module
 				default:
 					if (this.buffer[0] === BOM[0] && this.buffer[1] === BOM[1] && this.buffer[2] === BOM[2]) this.buffer = this.buffer.subarray(3);
 					this.checkBOM = false;
-					break;
 			}
 			while (this.pos < this.buffer.length) {
 				if (this.eventEndCheck) {
@@ -15295,9 +15287,7 @@ var require_eventsource_stream = /* @__PURE__ */ __commonJSMin(((exports, module
 				case "id":
 					if (isValidLastEventId(value)) event[field] = value;
 					break;
-				case "event":
-					if (value.length > 0) event[field] = value;
-					break;
+				case "event": if (value.length > 0) event[field] = value;
 			}
 		}
 		/**
@@ -16090,188 +16080,9 @@ var Summary = class {
 	}
 };
 new Summary();
-//#endregion
-//#region node_modules/@actions/io/lib/io-util.js
-var __awaiter$5 = function(thisArg, _arguments, P, generator) {
-	function adopt(value) {
-		return value instanceof P ? value : new P(function(resolve) {
-			resolve(value);
-		});
-	}
-	return new (P || (P = Promise))(function(resolve, reject) {
-		function fulfilled(value) {
-			try {
-				step(generator.next(value));
-			} catch (e) {
-				reject(e);
-			}
-		}
-		function rejected(value) {
-			try {
-				step(generator["throw"](value));
-			} catch (e) {
-				reject(e);
-			}
-		}
-		function step(result) {
-			result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
-		}
-		step((generator = generator.apply(thisArg, _arguments || [])).next());
-	});
-};
 const { chmod, copyFile, lstat, mkdir, open, readdir, rename, rm, rmdir, stat, symlink, unlink } = fs.promises;
-const IS_WINDOWS$1 = process.platform === "win32";
+process.platform;
 fs.constants.O_RDONLY;
-/**
-* On OSX/Linux, true if path starts with '/'. On Windows, true for paths like:
-* \, \hello, \\hello\share, C:, and C:\hello (and corresponding alternate separator cases).
-*/
-function isRooted(p) {
-	p = normalizeSeparators(p);
-	if (!p) throw new Error("isRooted() parameter \"p\" cannot be empty");
-	if (IS_WINDOWS$1) return p.startsWith("\\") || /^[A-Z]:/i.test(p);
-	return p.startsWith("/");
-}
-/**
-* Best effort attempt to determine whether a file exists and is executable.
-* @param filePath    file path to check
-* @param extensions  additional file extensions to try
-* @return if file exists and is executable, returns the file path. otherwise empty string.
-*/
-function tryGetExecutablePath(filePath, extensions) {
-	return __awaiter$5(this, void 0, void 0, function* () {
-		let stats = void 0;
-		try {
-			stats = yield stat(filePath);
-		} catch (err) {
-			if (err.code !== "ENOENT") console.log(`Unexpected error attempting to determine if executable file exists '${filePath}': ${err}`);
-		}
-		if (stats && stats.isFile()) {
-			if (IS_WINDOWS$1) {
-				const upperExt = path.extname(filePath).toUpperCase();
-				if (extensions.some((validExt) => validExt.toUpperCase() === upperExt)) return filePath;
-			} else if (isUnixExecutable(stats)) return filePath;
-		}
-		const originalFilePath = filePath;
-		for (const extension of extensions) {
-			filePath = originalFilePath + extension;
-			stats = void 0;
-			try {
-				stats = yield stat(filePath);
-			} catch (err) {
-				if (err.code !== "ENOENT") console.log(`Unexpected error attempting to determine if executable file exists '${filePath}': ${err}`);
-			}
-			if (stats && stats.isFile()) {
-				if (IS_WINDOWS$1) {
-					try {
-						const directory = path.dirname(filePath);
-						const upperName = path.basename(filePath).toUpperCase();
-						for (const actualName of yield readdir(directory)) if (upperName === actualName.toUpperCase()) {
-							filePath = path.join(directory, actualName);
-							break;
-						}
-					} catch (err) {
-						console.log(`Unexpected error attempting to determine the actual case of the file '${filePath}': ${err}`);
-					}
-					return filePath;
-				} else if (isUnixExecutable(stats)) return filePath;
-			}
-		}
-		return "";
-	});
-}
-function normalizeSeparators(p) {
-	p = p || "";
-	if (IS_WINDOWS$1) {
-		p = p.replace(/\//g, "\\");
-		return p.replace(/\\\\+/g, "\\");
-	}
-	return p.replace(/\/\/+/g, "/");
-}
-function isUnixExecutable(stats) {
-	return (stats.mode & 1) > 0 || (stats.mode & 8) > 0 && process.getgid !== void 0 && stats.gid === process.getgid() || (stats.mode & 64) > 0 && process.getuid !== void 0 && stats.uid === process.getuid();
-}
-//#endregion
-//#region node_modules/@actions/io/lib/io.js
-var __awaiter$4 = function(thisArg, _arguments, P, generator) {
-	function adopt(value) {
-		return value instanceof P ? value : new P(function(resolve) {
-			resolve(value);
-		});
-	}
-	return new (P || (P = Promise))(function(resolve, reject) {
-		function fulfilled(value) {
-			try {
-				step(generator.next(value));
-			} catch (e) {
-				reject(e);
-			}
-		}
-		function rejected(value) {
-			try {
-				step(generator["throw"](value));
-			} catch (e) {
-				reject(e);
-			}
-		}
-		function step(result) {
-			result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
-		}
-		step((generator = generator.apply(thisArg, _arguments || [])).next());
-	});
-};
-/**
-* Returns path of a tool had the tool actually been invoked.  Resolves via paths.
-* If you check and the tool does not exist, it will throw.
-*
-* @param     tool              name of the tool
-* @param     check             whether to check if tool exists
-* @returns   Promise<string>   path to tool
-*/
-function which(tool, check) {
-	return __awaiter$4(this, void 0, void 0, function* () {
-		if (!tool) throw new Error("parameter 'tool' is required");
-		if (check) {
-			const result = yield which(tool, false);
-			if (!result) if (IS_WINDOWS$1) throw new Error(`Unable to locate executable file: ${tool}. Please verify either the file path exists or the file can be found within a directory specified by the PATH environment variable. Also verify the file has a valid extension for an executable file.`);
-			else throw new Error(`Unable to locate executable file: ${tool}. Please verify either the file path exists or the file can be found within a directory specified by the PATH environment variable. Also check the file mode to verify the file is executable.`);
-			return result;
-		}
-		const matches = yield findInPath(tool);
-		if (matches && matches.length > 0) return matches[0];
-		return "";
-	});
-}
-/**
-* Returns a list of all occurrences of the given tool on the system path.
-*
-* @returns   Promise<string[]>  the paths of the tool
-*/
-function findInPath(tool) {
-	return __awaiter$4(this, void 0, void 0, function* () {
-		if (!tool) throw new Error("parameter 'tool' is required");
-		const extensions = [];
-		if (IS_WINDOWS$1 && process.env["PATHEXT"]) {
-			for (const extension of process.env["PATHEXT"].split(path.delimiter)) if (extension) extensions.push(extension);
-		}
-		if (isRooted(tool)) {
-			const filePath = yield tryGetExecutablePath(tool, extensions);
-			if (filePath) return [filePath];
-			return [];
-		}
-		if (tool.includes(path.sep)) return [];
-		const directories = [];
-		if (process.env.PATH) {
-			for (const p of process.env.PATH.split(path.delimiter)) if (p) directories.push(p);
-		}
-		const matches = [];
-		for (const directory of directories) {
-			const filePath = yield tryGetExecutablePath(path.join(directory, tool), extensions);
-			if (filePath) matches.push(filePath);
-		}
-		return matches;
-	});
-}
 process.platform;
 events.EventEmitter;
 events.EventEmitter;
@@ -22253,7 +22064,8 @@ async function run() {
 	try {
 		const jsonFilePath = getInput("json-file");
 		info(`Validating JSON file: ${jsonFilePath}`);
-		await validateJson((0, node_fs.readFileSync)(jsonFilePath, "utf8"));
+		const json = (0, node_fs.readFileSync)(jsonFilePath, "utf8");
+		await validateJson(json);
 		info("JSON file is valid");
 	} catch (error) {
 		setFailed(`Error validating JSON file: ${error}`);