chore(deps): update tsdown and rolldown

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
rolldown	1.2.8 → 1.2.13
tsdown	0.23.0 → 0.23.1

---

Release Notes

rolldown/rolldown (rolldown)

v1.2.13

Compare Source

🚀 Features

• rolldown_plugin_vite_import_glob: follow file creation and deletion via hotUpdate (#​10550) by @​shulaoda
• inline-common-chunks: deduplicate shared code along known loading paths (#​11093) by @​hyfdev
• rolldown_plugin_vite_import_glob: record a matcher per glob call in dev (#​10592) by @​shulaoda
• rolldown_plugin_vite_import_glob: watch the directory each glob reads (#​10549) by @​shulaoda
• watch: hand watch.exclude to notify as its ignore filter (#​11008) by @​shulaoda
• dev: add experimental.devMode.hotUpdate option (#​11123) by @​h-a-n-a

🐛 Bug Fixes

• renamer: check the printed name of namespace-alias imports for captures (#​11129) by @​IWANABETHATGUY
• devtools: honor devtools.sessionId by @​Brooooooklyn
• renamer: keep a renamed nested binding off its module's top-level bindings (#​11128) by @​IWANABETHATGUY
• dev: keep this undefined when calling an imported function in HMR patches and lazy chunks (#​11126) by @​h-a-n-a
• dev: read string-named imports correctly in HMR patches and lazy chunks (#​11127) by @​h-a-n-a
• sanitize preserveModules chunk names after resolving the relative path (#​11087) by @​waltuov
• keep the with clause on bare external imports (#​11100) by @​IWANABETHATGUY
• generator: filter DISABLE_JS_HOOK bits from generated HookUsage (#​10346) by @​Brooooooklyn
• dev: make the module factory async for top-level await (#​11118) by @​h-a-n-a
• node: give each renderChunk call its own meta object (#​11115) by @​Brooooooklyn
• honor externalLiveBindings for imported exports (#​11048) by @​camc314
• dev: keep a late payload from replacing newer module code (#​11030) by @​h-a-n-a
• binding: use-after-free in async transform with a TsconfigCache (#​11080) by @​shulaoda
• fail on chunk syntax errors and escape export names once (#​11051) by @​hyfdev
• dev: ship newly imported modules the client never received (#​11029) by @​h-a-n-a
• code-splitting: avoid cycles from redundant re-export initialization (#​11073) by @​hyfdev
• link: treat re-exports of the same external binding as one export (#​11069) by @​IWANABETHATGUY
• escape namespace properties in IIFE and UMD output (#​11085) by @​hyfdev
• escape dependency paths in CJS and UMD output (#​11084) by @​hyfdev
• use computed access for arbitrary import names (#​11083) by @​hyfdev
• generate valid bindings for shimmed exports (#​11082) by @​hyfdev
• dev: reload the page when an HMR update fails after merging its edit (#​11031) by @​h-a-n-a
• dev/lazy: ship the deps of a module that a patch shipped but never ran (#​11028) by @​h-a-n-a
• code-splitting: don't move init calls in front of unwrapped JSON modules (#​11062) by @​IWANABETHATGUY
• escape export names in defineProperty calls (#​11047) by @​camc314

📚 Documentation

• say the CLI bundles multiple configs one after another (#​11111) by @​Brooooooklyn
• add renderChunk hook filter docs (#​11065) by @​sapphi-red

⚡ Performance

• use concat_string! instead of format! for plain string joins (#​11139) by @​IWANABETHATGUY
• utils: evaluate each concat_string! argument once (#​11105) by @​IWANABETHATGUY
• json: escape JSON.parse string with json-escape-simd (#​11104) by @​IWANABETHATGUY
• unwrap JSON modules with a non-object root (#​11066) by @​IWANABETHATGUY

🧪 Testing

• inline-common-chunks: fix flaky inlineCommonChunks concurrent imports (#​11088) by @​hyfdev

⚙️ Miscellaneous Tasks

• deps: upgrade oxc to 0.153.0 (#​11109) by @​camc314
• update pnpm to v12 (#​10876) by @​btea
• deps: update pnpm to v11.28.0 (#​11049) by @​renovate[bot]
• deps: update rollup submodule for tests to v4.64.0 (#​11116) by @​rolldown-guard[bot]
• deps: update napi (#​11137) by @​renovate[bot]
• scripts: spawn the rolldown CLI without a shell in setup-vite (#​10875) by @​Brooooooklyn
• deps: bump @napi-rs/wasm-runtime to ~1.2.5 (#​11117) by @​shulaoda
• deps: update napi (#​11108) by @​renovate[bot]
• deps: update taiki-e/install-action action to v2.87.22 (#​11096) by @​renovate[bot]
• deps: update npm packages (#​11095) by @​renovate[bot]
• deps: update rust crates (#​11097) by @​renovate[bot]
• deps: update napi (#​11063) by @​renovate[bot]
• deps: update dependency rust to v1.99.0 (#​11071) by @​renovate[bot]
• deps: update dependency vite-plus to v1 (#​11056) by @​renovate[bot]

v1.2.12

Compare Source

🚀 Features

• inline common chunks containing import() and deduplicate shared code in lazy chunks (#​11034) by @​hyfdev
• experimental inlineCommonChunks support (#​10899) by @​hyfdev
• dev: ship imported bindings for HMR partial accept (#​10856) by @​h-a-n-a

🐛 Bug Fixes

• chunking: re-derive chunk exec orders after the runtime leaves its host chunk (#​11005) by @​hyfdev
• code-splitting: gate member-read init paths on the reading statement (#​11039) by @​hyfdev
• code-splitting: retain initialization paths through re-exported namespaces (#​11037) by @​hyfdev
• dev: reject non-ESM output formats in dev mode (#​11038) by @​h-a-n-a
• dev: align import.meta.hot.accept deps with Vite (#​10997) by @​h-a-n-a
• dev: clear the resolver cache when a file is created or deleted (#​10986) by @​waltuov
• error: name the resolved specifier in unresolved import diagnostics (#​11014) by @​linyiru
• make entries-aware chunk merging deterministic (#​11002) by @​hyfdev
• watch: avoid restarting macOS watcher for unchanged paths (#​10992) by @​sep2

🚜 Refactor

• dev: ship the dev runtime entry as one file (#​10998) by @​h-a-n-a
• binding: remove __internalForcePanic (#​10989) by @​IWANABETHATGUY

📚 Documentation

• fix cloudflare preview builds (#​10996) by @​sapphi-red
• fix build config loader warning (#​10994) by @​sapphi-red
• deps: use Vite 8 (#​10993) by @​sapphi-red

⚡ Performance

• dev: only ship rows with dynamic edges in registerGraph (#​11019) by @​h-a-n-a

🧪 Testing

• code-splitting: cover more re-exported namespace shapes (#​11042) by @​hyfdev
• webcontainer: cover the WebContainer download fallback in plain Node (#​10966) by @​shulaoda
• dev: pin the runtime entry file layout that Vite serves (#​10983) by @​h-a-n-a

⚙️ Miscellaneous Tasks

• pin VOID_API_URL for the docs deploy (#​11041) by @​shulaoda
• opt into the WebContainer smoke test for napi bumps and loader changes (#​10967) by @​shulaoda
• deps: upgrade oxc to 0.152.0 (#​11018) by @​camc314
• deps: update rust crates (#​11012) by @​renovate[bot]
• deps: update npm packages (#​11011) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.50.3 (#​11023) by @​renovate[bot]
• deps: update test262 submodule for tests (#​11022) by @​rolldown-guard[bot]
• deps: update rollup submodule for tests to v4.63.5 (#​11021) by @​rolldown-guard[bot]
• deps: update dependency vite-plus to v1 (#​11017) by @​renovate[bot]
• deps: update github actions (#​11010) by @​renovate[bot]
• remove CLAUDE.md (#​10925) by @​iiio2
• verify release debug info by matching file IDs (#​10988) by @​IWANABETHATGUY
• deps: update rollup submodule for tests to v4.63.4 (#​10940) by @​rolldown-guard[bot]

❤️ New Contributors

• @​waltuov made their first contribution in #​10986
• @​linyiru made their first contribution in #​11014
• @​sep2 made their first contribution in #​10992

v1.2.11

Compare Source

🚀 Features

• watch: report only file events (#​10974) by @​shulaoda

🐛 Bug Fixes

• sourcemap: preserve names through collapse_sourcemaps (#​9486) by @​eoin
• watch: map metadata events by kind and missing paths as deleted (#​10973) by @​shulaoda

🚜 Refactor

• rolldown_fs_watcher: hand the handler file events instead of notify results (#​10980) by @​shulaoda
• rolldown_fs_watcher: share one event handler adapter between the notify watchers (#​10979) by @​shulaoda
• rolldown_fs_watcher: register every path with one watch mode (#​10978) by @​shulaoda
• rolldown_fs_watcher: tweak the backend traits and the event mapping (#​10977) by @​shulaoda
• watch: translate notify events inside FsWatcher (#​10972) by @​shulaoda

📚 Documentation

• watch: update the fs watcher layout and the dev coordinator message (#​10981) by @​shulaoda
• watch: document the event translation in FsWatcher (#​10975) by @​shulaoda

◀️ Revert

• "perf(dev/lazy): fetch a lazy route in one request" (#​10789) (#​10982) by @​h-a-n-a

❤️ New Contributors

• @​eoin made their first contribution in #​9486

v1.2.10

Compare Source

🚀 Features

• rolldown_plugin_esm_external_require: prefer 'module.exports' over a namespace spread (#​10901) by @​isker
• watch: support directories in addWatchFile (#​10944) by @​shulaoda
• label code-splitting timing rows (#​10896) by @​IWANABETHATGUY
• separate code-splitting group timing rows (#​10892) by @​IWANABETHATGUY
• clarify callback owners in the timing report (#​10890) by @​IWANABETHATGUY
• add checks.bundlerTimings with deprecated pluginTimings alias (#​10883) by @​IWANABETHATGUY

🐛 Bug Fixes

• code-splitting: initialize leaves behind a re-exported namespace import (#​10694) by @​hyfdev
• node: record the WASI target on the WebContainer binding fallback (#​10952) by @​shulaoda
• dev: force incremental build on in DevEngine::new (#​10958) by @​o-alexandrov
• tree-shaking: propagate side effects through cycles (#​10893) by @​IWANABETHATGUY
• deconflict CJS locals that shadow a renamed require wrapper (#​10793) by @​logaretm
• include group indexes in labeled codeSplitting timing rows (#​10916) by @​IWANABETHATGUY
• docs: type-check Algolia indices option (#​10934) by @​shulaoda
• docs: restore Algolia search (#​10929) by @​isker
• tell code-splitting timing rows apart by position (#​10903) by @​IWANABETHATGUY

🚜 Refactor

• rolldown_fs_watcher: remove the single-path API (#​10950) by @​shulaoda
• dev: register watch files through FsWatcher (#​10949) by @​shulaoda
• watch: let FsWatcher own the watched paths (#​10948) by @​shulaoda
• watch: identify watch files by normalized absolute path (#​10943) by @​shulaoda
• plugin: build a plugin-resolved ResolvedId in one place (#​10921) by @​IWANABETHATGUY

📚 Documentation

• dev: add HMR design, align dev docs and engine comments (#​10271) by @​h-a-n-a

⚡ Performance

• batch sourcemapPathTransform calls (#​10763) by @​IWANABETHATGUY
• batch sourcemapIgnoreList calls (#​10762) by @​IWANABETHATGUY
• hmr: drop the unused kind argument from registerFactory (#​10915) by @​h-a-n-a

🧪 Testing

• handle Windows paths in sourcemap callback tests (#​10942) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• replace custom ban-expect-assertions JS lint with builtin no-restricted-properties (#​10933) by @​isker
• deps: update napi (#​10959) by @​renovate[bot]
• deps: upgrade oxc to 0.151.0 (#​10939) by @​camc314
• deps: update test262 submodule for tests (#​10941) by @​rolldown-guard[bot]
• deps: update npm packages (#​10931) by @​renovate[bot]
• deps: update napi (#​10928) by @​renovate[bot]
• deps: update dependency vite-plus to v0.3.3 (#​10914) by @​renovate[bot]
• deps: update rust crates (#​10932) by @​renovate[bot]
• deps: update github actions (#​10930) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.6 (#​10924) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.50.2 (#​10917) by @​renovate[bot]
• deps: update dependency @​napi-rs/cli to v3.10.4 (#​10913) by @​renovate[bot]
• deps: update napi (#​10897) by @​renovate[bot]

❤️ New Contributors

• @​o-alexandrov made their first contribution in #​10958

v1.2.9

Compare Source

🚀 Features

• add MODULE_LEVEL_DIRECTIVE warning (#​10791) by @​sapphi-red

🐛 Bug Fixes

• handle CommonJS exports through top-level this (#​10872) by @​IWANABETHATGUY
• scripts: make setup-vite CLI invocation work on Windows (#​10885) by @​shulaoda
• remove deleted property from output bundle proxy target (#​10815) by @​Vladexy88x
• treat module-scope await using as top-level await (#​10739) by @​MarshallOfSound
• watch: preserve plugin attribution in warnings (#​10473) by @​Nic-Polumeyv
• test-dev-server: link the workspace rolldown before building vite (#​10857) by @​h-a-n-a
• minify: preserve annotation comments when minified (#​10854) (#​10855) by @​justonemorenight

⚡ Performance

• dev/lazy: fetch a lazy route in one request (#​10789) by @​h-a-n-a
• plugin: reduce binding binary size (#​10776) by @​Boshen
• vite-reporter: reuse emitted sourcemap sizes (#​10841) by @​hyfdev

🧪 Testing

• dev: full-bundle-mode regression test for cyclic import binding (#​9946) (#​9947) by @​ShMcK
• cover asset option callback timings (#​10870) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• wait for npm bindings before publishing rolldown (#​10866) by @​shulaoda
• deps: update dependency @​napi-rs/cli to v3.10.1 (#​10889) by @​renovate[bot]
• deps: update napi (#​10888) by @​renovate[bot]
• compress debug info archives with zstd (#​10778) by @​IWANABETHATGUY
• publish split debug info for release bindings (#​10777) by @​IWANABETHATGUY
• rolldown_utils: simplify MIME guessing and remove UTF-8 check bypass (#​10884) by @​shulaoda
• add npm bugs metadata for rolldown (#​9694) by @​kingshuaishuai
• deps: upgrade oxc to 0.150.0 (#​10877) by @​camc314
• deps: update rust crates (#​10869) by @​renovate[bot]
• deps: update dependency vite-plus to v0.3.2 (#​10878) by @​renovate[bot]
• deps: update rollup submodule for tests to v4.63.3 (#​10880) by @​rolldown-guard[bot]
• deps: update test262 submodule for tests (#​10881) by @​rolldown-guard[bot]
• deps: update github actions (#​10867) by @​renovate[bot]
• deps: update npm packages (#​10868) by @​renovate[bot]
• deps: update napi to v3.12.4 (#​10862) by @​renovate[bot]
• deps: update napi (#​10861) by @​renovate[bot]

❤️ New Contributors

• @​Vladexy88x made their first contribution in #​10815
• @​MarshallOfSound made their first contribution in #​10739
• @​kingshuaishuai made their first contribution in #​9694
• @​ShMcK made their first contribution in #​9947
• @​justonemorenight made their first contribution in #​10855

rolldown/tsdown (tsdown)

v0.23.1

Compare Source

   🐞 Bug Fixes

• Preserve false tsconfig option  -  by @​Masutayunikon in #​1065 (407f8)
• entry: Honor custom root for object entry  -  by @​giaBaoJS in #​1072 (17452)
• pkg: Pack tarball inside npm publish --dry-run  -  by @​giaBaoJS in #​1076 (83f0c)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 3b7f5efb-600a-4cc6-8e03-5762b91d719c

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}