chore(deps): update dependency oxfmt to v0.61.0

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [oxfmt](https://oxc.rs/docs/guide/usage/formatter) ([source](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)) | [`0.58.0` → `0.60.0`](https://renovatebot.com/diffs/npm/oxfmt/0.58.0/0.60.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/oxfmt/0.60.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/oxfmt/0.58.0/0.60.0?slim=true) |
| [rolldown](https://rolldown.rs/) ([source](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown)) | [`1.1.5` → `1.2.0`](https://renovatebot.com/diffs/npm/rolldown/1.1.5/1.2.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/rolldown/1.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/rolldown/1.1.5/1.2.0?slim=true) |

---

### Release Notes

<details>
<summary>oxc-project/oxc (oxfmt)</summary>

### [`v0.60.0`](https://github.com/oxc-project/oxc/compare/oxfmt_v0.59.0...oxfmt_v0.60.0)

[Compare Source](https://github.com/oxc-project/oxc/compare/oxfmt_v0.59.0...oxfmt_v0.60.0)

### [`v0.59.0`](https://github.com/oxc-project/oxc/blob/HEAD/npm/oxfmt/CHANGELOG.md#0590---2026-07-13)

[Compare Source](https://github.com/oxc-project/oxc/compare/oxfmt_v0.58.0...oxfmt_v0.59.0)

##### 🐛 Bug Fixes

- [`415fe1e`](https://github.com/oxc-project/oxc/commit/415fe1e) oxfmt: Error on ignorePatterns that cannot match files outside the config directory ([#&#8203;24286](https://github.com/oxc-project/oxc/issues/24286)) (leaysgur)

</details>

<details>
<summary>rolldown/rolldown (rolldown)</summary>

### [`v1.2.0`](https://github.com/rolldown/rolldown/blob/HEAD/CHANGELOG.md#120---2026-07-15)

[Compare Source](https://github.com/rolldown/rolldown/compare/v1.1.5...v1.2.0)

##### 🚀 Features

- dev: skip shipping factories for newly imported top-level modules ([#&#8203;10223](https://github.com/rolldown/rolldown/issues/10223)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: per-client ship map for HMR patch sizing ([#&#8203;10208](https://github.com/rolldown/rolldown/issues/10208)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: client-side HMR ([#&#8203;10164](https://github.com/rolldown/rolldown/issues/10164)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- dev: send a full-reload update to clients when a tsconfig changes ([#&#8203;10262](https://github.com/rolldown/rolldown/issues/10262)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- treat `import.meta['url']` and `import.meta['ROLLUP_FILE_URL_*']` as side-effect free ([#&#8203;10267](https://github.com/rolldown/rolldown/issues/10267)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- rewrite `import.meta['url']` ([#&#8203;10251](https://github.com/rolldown/rolldown/issues/10251)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- add `FILE_NOT_FOUND` error ([#&#8203;10220](https://github.com/rolldown/rolldown/issues/10220)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- treat `import.meta.ROLLUP_FILE_URL_*` as side-effect free ([#&#8203;10217](https://github.com/rolldown/rolldown/issues/10217)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)

##### 🐛 Bug Fixes

- sourcemap: preserve unmapped boundaries during composition ([#&#8203;10254](https://github.com/rolldown/rolldown/issues/10254)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- `[format]` in `*FileNames` option for ESM format should be `es` instead of `esm` ([#&#8203;10214](https://github.com/rolldown/rolldown/issues/10214)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- sourcemap: preserve coarse mappings during composition ([#&#8203;10249](https://github.com/rolldown/rolldown/issues/10249)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- rolldown\_plugin\_vite\_import\_glob: support tsconfig paths with `import.meta.glob` ([#&#8203;10167](https://github.com/rolldown/rolldown/issues/10167)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- dev: clear tsconfig caches for bare full builds ([#&#8203;10276](https://github.com/rolldown/rolldown/issues/10276)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- dev: force a full rebuild when a tsconfig changes ([#&#8203;10261](https://github.com/rolldown/rolldown/issues/10261)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- treat rooted drive-less module ids as absolute in preserveModules naming ([#&#8203;10235](https://github.com/rolldown/rolldown/issues/10235)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- watch: rebuild when tsconfig files change ([#&#8203;10258](https://github.com/rolldown/rolldown/issues/10258)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- watch: drop tsconfig-merged transform options on each rebuild ([#&#8203;10257](https://github.com/rolldown/rolldown/issues/10257)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- incorrect `EMPTY_IMPORT_META` warning for `import.meta.ROLLUP_FILE_URL_*` for CJS output ([#&#8203;10221](https://github.com/rolldown/rolldown/issues/10221)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- deconflict: rename CJS locals shadowing wrapped-ESM namespace objects ([#&#8203;9970](https://github.com/rolldown/rolldown/issues/9970)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: drop the unused runtime module after entry-level external flattening ([#&#8203;10237](https://github.com/rolldown/rolldown/issues/10237)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: re-propagate has\_dynamic\_exports to transitive star importers ([#&#8203;10239](https://github.com/rolldown/rolldown/issues/10239)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- tree-shaking: tree-shake destructured dynamic import namespace bindings ([#&#8203;10213](https://github.com/rolldown/rolldown/issues/10213)) by [@&#8203;logaretm](https://github.com/logaretm)
- s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix ([#&#8203;10211](https://github.com/rolldown/rolldown/issues/10211)) by [@&#8203;satyamg1620](https://github.com/satyamg1620)

##### 🚜 Refactor

- dev: move full-reload to client side ([#&#8203;10207](https://github.com/rolldown/rolldown/issues/10207)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- readability follow-ups to the ReplaceWith migration ([#&#8203;10286](https://github.com/rolldown/rolldown/issues/10286)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- replace take\_in-then-write-back with ReplaceWith and by-value moves ([#&#8203;10285](https://github.com/rolldown/rolldown/issues/10285)) by [@&#8203;Boshen](https://github.com/Boshen)
- share the main resolver's cache with the transformer's tsconfig lookups ([#&#8203;10205](https://github.com/rolldown/rolldown/issues/10205)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- rolldown: extract the ns star-external \_\_reExport emission rule into LinkingMetadata ([#&#8203;10238](https://github.com/rolldown/rolldown/issues/10238)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: unify link/generate diagnostics into a Diagnostics accumulator ([#&#8203;10234](https://github.com/rolldown/rolldown/issues/10234)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- sourcemap\_filenames: drop dead sourcemap-filename plumbing ([#&#8203;10189](https://github.com/rolldown/rolldown/issues/10189)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- extract external import symbol merging into a method ([#&#8203;10224](https://github.com/rolldown/rolldown/issues/10224)) by [@&#8203;IWANABETHATGUY](https://github.com/IWANABETHATGUY)
- rolldown: skip CJS namespace merging under strict execution order ([#&#8203;10203](https://github.com/rolldown/rolldown/issues/10203)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- resolve the manual tsconfig per file instead of once at startup ([#&#8203;10200](https://github.com/rolldown/rolldown/issues/10200)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- rolldown: route interop ESM init emission through a shared init-target view ([#&#8203;10202](https://github.com/rolldown/rolldown/issues/10202)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- rolldown: collapse vestigial wrap-kind state and share chunk sort helper ([#&#8203;10201](https://github.com/rolldown/rolldown/issues/10201)) by [@&#8203;hyfdev](https://github.com/hyfdev)

##### 📚 Documentation

- show plugin kinds in JSDoc and each hook's description ([#&#8203;10218](https://github.com/rolldown/rolldown/issues/10218)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- add an explanation about removing imports from external modules without any messages ([#&#8203;10215](https://github.com/rolldown/rolldown/issues/10215)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)

##### ⚡ Performance

- sourcemap: owned merge in SourceJoiner::join (4005->5 allocs/chunk) ([#&#8203;10250](https://github.com/rolldown/rolldown/issues/10250)) by [@&#8203;Boshen](https://github.com/Boshen)
- avoid redundant sourcemap string copies in collapse and minify paths ([#&#8203;10093](https://github.com/rolldown/rolldown/issues/10093)) by [@&#8203;Boshen](https://github.com/Boshen)

##### 🧪 Testing

- code-splitting: establish strict-order review baselines ([#&#8203;10287](https://github.com/rolldown/rolldown/issues/10287)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- dev: add hot API test cases ([#&#8203;10181](https://github.com/rolldown/rolldown/issues/10181)) by [@&#8203;h-a-n-a](https://github.com/h-a-n-a)
- code-splitting: normalize strict execution order variants ([#&#8203;10277](https://github.com/rolldown/rolldown/issues/10277)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- code-splitting: harden strict execution order coverage ([#&#8203;10252](https://github.com/rolldown/rolldown/issues/10252)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- code-splitting: add strict execution order regressions ([#&#8203;10253](https://github.com/rolldown/rolldown/issues/10253)) by [@&#8203;hyfdev](https://github.com/hyfdev)

##### ⚙️ Miscellaneous Tasks

- deps: update github actions ([#&#8203;10241](https://github.com/rolldown/rolldown/issues/10241)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update oxc to 0.140.0 ([#&#8203;10274](https://github.com/rolldown/rolldown/issues/10274)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- update Yunfei's GitHub username ([#&#8203;10275](https://github.com/rolldown/rolldown/issues/10275)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- deps: update napi ([#&#8203;10260](https://github.com/rolldown/rolldown/issues/10260)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update test262 submodule for tests ([#&#8203;10266](https://github.com/rolldown/rolldown/issues/10266)) by [@&#8203;rolldown-guard](https://github.com/rolldown-guard)\[bot]
- deps: update dependency vite-plus to v0.2.4 ([#&#8203;10256](https://github.com/rolldown/rolldown/issues/10256)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update napi ([#&#8203;10240](https://github.com/rolldown/rolldown/issues/10240)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update oxc resolver to v11.24.2 ([#&#8203;10245](https://github.com/rolldown/rolldown/issues/10245)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update rust crates ([#&#8203;10244](https://github.com/rolldown/rolldown/issues/10244)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- disable Renovate updates for idna\_adapter ([#&#8203;10248](https://github.com/rolldown/rolldown/issues/10248)) by [@&#8203;shulaoda](https://github.com/shulaoda)
- deps: update oxc resolver to v11.24.1 ([#&#8203;10232](https://github.com/rolldown/rolldown/issues/10232)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update rust crate oxc\_sourcemap to v8.1.1 ([#&#8203;10233](https://github.com/rolldown/rolldown/issues/10233)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: update dependency rolldown-plugin-dts to ^0.27.0 ([#&#8203;10206](https://github.com/rolldown/rolldown/issues/10206)) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- deps: upgrade sugar\_path to v3 ([#&#8203;10230](https://github.com/rolldown/rolldown/issues/10230)) by [@&#8203;hyfdev](https://github.com/hyfdev)
- add `dist-*` to `.gitignore` in sourcemap-filenames/hash-final-content fixture ([#&#8203;10216](https://github.com/rolldown/rolldown/issues/10216)) by [@&#8203;sapphi-red](https://github.com/sapphi-red)
- deps: update dependency rust to v1.97.0 ([#&#8203;10209](https://github.com/rolldown/rolldown/issues/10209)) by [@&#8203;renovate](https://github.com/renovate)\[bot]

##### ❤️ New Contributors

- [@&#8203;satyamg1620](https://github.com/satyamg1620) made their first contribution in [#&#8203;10211](https://github.com/rolldown/rolldown/pull/10211)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjMuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI2My45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzIiwibnBtIl19-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action/pulls/61
Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/cd.yaml

@@ -14,14 +14,14 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@3ab82e6aa1db388a34562f5ce6eedb598651d916 # 0.1.42
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3f772d0a80a510b0f06762be110276c9c8a7b7b8 # 0.2.12
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/ci.yaml

@@ -8,7 +8,7 @@ jobs:
     name: Dry-Run
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Validate Renovate Config
         uses: ./
         with:
@@ -18,8 +18,8 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: .nvmrc
       - name: Cache dependencies
@@ -43,8 +43,8 @@ jobs:
     name: Check Dist
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: .nvmrc
       - name: Cache dependencies

.gitea/workflows/prerelease.yaml

@@ -8,15 +8,15 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Increment tag
         id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@3ab82e6aa1db388a34562f5ce6eedb598651d916 # 0.1.42
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: true
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3f772d0a80a510b0f06762be110276c9c8a7b7b8 # 0.2.12
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

package.json

@@ -15,11 +15,11 @@
     "ajv": "8.20.0"
   },
   "devDependencies": {
-    "@types/node": "24.13.2",
+    "@types/node": "24.13.3",
     "@vitest/coverage-v8": "4.1.10",
-    "oxfmt": "0.58.0",
+    "oxfmt": "0.61.0",
-    "rolldown": "1.1.4",
+    "rolldown": "1.2.0",
-    "typescript": "6.0.3",
+    "typescript": "7.0.2",
     "vitest": "4.1.10"
   }
 }