chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pnpm (source)	10.26.2 → 10.27.0
rolldown (source)	1.0.0-beta.57 → 1.0.0-beta.58
tsdown (source)	^0.18.3 → ^0.18.4

---

Release Notes

pnpm/pnpm (pnpm)

v10.27.0

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-beta.58

Compare Source

💥 BREAKING CHANGES

• experimental/devtools: rename InputOptions#debug to InputOptions#devtools (#​7686) by @​Copilot

🚀 Features

• implement target feature check in should_transform_js for raw options (#​7697) by @​shulaoda
• support output.dynamicImportInCjs option (#​7677) by @​shulaoda
• types: expose ChecksOptions type (#​7653) by @​sapphi-red

🐛 Bug Fixes

• export runtime helpers for cross-chunk access (#​7658) by @​shulaoda
• cjs namespace merging regression (#​7665) by @​IWANABETHATGUY
• replace panic with proper error handling for hash placeholder generation (#​7661) by @​shulaoda
• remove the blank line between shebang and postBanner (#​7643) by @​btea
• rolldown_plugin_vite_reporter: apply padding before ANSI coloring for proper size column alignment (#​7649) by @​shulaoda

🚜 Refactor

• rust: use StableModuleId as the map key if possible (#​7718) by @​hyf0
• rust: return StableModuleId instead of &str from Module#stable_id() (#​7717) by @​hyf0
• rust: return correct stable id of external module from Module#stable_id() (#​7716) by @​hyf0
• rust: introduce StableModuleId type (#​7715) by @​hyf0
• rust: reduce unnecessary id.as_arc_str().clone().into() (#​7714) by @​hyf0
• rust: remove ModuleId#resource_id and use as_arc_str directly (#​7710) by @​hyf0
• rust: remove unused Module#id_clone (#​7709) by @​hyf0
• rust: remove Module#id_as_str and use Module#id directly (#​7708) by @​hyf0
• consolidate namespace call analysis into import analyzer (#​7657) by @​IWANABETHATGUY
• rust: make ExternalModule#id have the type ModuleId (#​7707) by @​hyf0
• rust: rename Module#id to Module#id_as_str (#​7706) by @​hyf0
• rust: use ModuleId instead of raw ArcStr for ScanStageCache (#​7701) by @​hyf0
• simplify error propagation in cache merge (#​7702) by @​shulaoda
• use ModuleId as the type of ResolvedId#id (#​7694) by @​hyf0
• types: rename resolved_request_info.rs to resolved_id.rs and move its contents (#​7687) by @​hyf0
• devtools: emit data to <CWD>/node_modules/.rolldown (#​7692) by @​hyf0
• use InvalidOption for hash placeholder generation errors (#​7674) by @​shulaoda
• rolldown_error: remove dependency on rolldown_utils (#​7672) by @​shulaoda
• use nodejs-built-in-modules v1.0.0 directly in callsites (#​7667) by @​Boshen

📚 Documentation

• migrate input options content from options to auto gen docs (#​7663) by @​mdong1909
• create reference index page (#​7659) by @​mdong1909
• tweak auto-generated reference output (#​7654) by @​sapphi-red
• initialize auto-gen docs (#​7252) by @​mdong1909

⚙️ Miscellaneous Tasks

• deps: update napi (#​7705) by @​renovate[bot]
• pin Node.js version to 24.12.0 LTS in .node-version file (#​7713) by @​Copilot
• update esbuild test reasons (#​7703) by @​sapphi-red
• deps: update crate-ci/typos action to v1.40.1 (#​7696) by @​renovate[bot]
• deps: update oxc to v0.106.0 (#​7512) by @​renovate[bot]
• js: replace dprint with oxfmt (#​7214) by @​Boshen
• deps: update dependency oxlint to v1.36.0 (#​7691) by @​renovate[bot]
• deps: update github-actions (#​7679) by @​renovate[bot]
• deps: update npm packages (#​7680) by @​renovate[bot]
• deps: update rust crates (#​7678) by @​renovate[bot]
• deps: update oxc resolver to v11.16.2 (#​7668) by @​renovate[bot]
• add API reference files to knip entry points (#​7669) by @​Copilot
• deps: update notify (#​7651) by @​sapphi-red
• add homepage field to package.json (#​7648) by @​trivikr
• deps: update oxc resolver to v11.16.1 (#​7647) by @​renovate[bot]
• deps: update rolldown-plugin-dts to 0.20.0 (#​7645) by @​shulaoda

rolldown/tsdown (tsdown)

v0.18.4

Compare Source

   🚀 Features

• Export mergeConfig  -  by @​sxzz (ccd17)
• Warn deprecated removeNodeProtocol  -  by @​sxzz (90cd6)
• css: Add CSS code splitting support  -  by @​jinghaihan and @​sxzz in #​654 (0525f)
• entry: Support multiple patterns with same base  -  by @​sxzz (cee1b)
• exports: Add packageJson option  -  by @​sxzz (6d220)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-replace@73

commit: 42379e6

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	rolldown@​1.0.0-beta.58
	tsdown@​0.18.3 ⏵ 0.18.4	+1		+1

View full report