Skip to content

feat(deps): upgrade upstream dependencies#1521

Merged
fengmk2 merged 10 commits intomainfrom
deps/upstream-update
May 6, 2026
Merged

feat(deps): upgrade upstream dependencies#1521
fengmk2 merged 10 commits intomainfrom
deps/upstream-update

Conversation

@voidzero-guard
Copy link
Copy Markdown
Contributor

@voidzero-guard voidzero-guard Bot commented May 6, 2026

Summary

  • Automated daily upgrade of upstream dependencies.
  • Bump rolldown to v1.0.0-rc.18 (2c4a957) and the bundled rolldown version in packages/core/package.json to 1.0.0-rc.18.
  • Bump the oxc family: Rust oxc crates 0.127.0 -> 0.128.0, npm oxc-minify/oxc-parser/oxc-transform and @oxc-project/runtime/types 0.127.0 -> 0.129.0, plus oxlint 1.61.0 -> 1.63.0, oxlint-tsgolint 0.22.0 -> 0.22.1, oxfmt 0.46.0 -> 0.48.0.
  • Add oxlint-disable no-underscore-dangle directives where new oxlint hits the _-prefixed identifiers and refresh oxlint snapshot outputs (new agent/sarif formatter options, updated warning-output formatting).

Dependency updates

Package From To
rolldown d9d72c3 v1.0.0-rc.18 (2c4a957)
oxfmt 0.46.0 0.48.0
oxlint 1.61.0 1.63.0
oxlint-tsgolint 0.22.0 0.22.1
@oxc-project/runtime 0.127.0 0.129.0
@oxc-project/types 0.127.0 0.129.0
oxc-minify 0.127.0 0.129.0
oxc-parser 0.127.0 0.129.0
oxc-transform 0.127.0 0.129.0
@vitejs/devtools 0.1.15 0.1.18
Unchanged dependencies
  • vite: v8.0.10 (32c2978)
  • vitest: 4.1.5
  • tsdown: 0.21.10
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0

Code changes

  • Cargo.toml: bump Rust oxc crates (oxc, oxc_allocator, oxc_ast, oxc_ecmascript, oxc_parser, oxc_span, oxc_napi, oxc_str, oxc_minify_napi, oxc_parser_napi, oxc_transform_napi, oxc_traverse) 0.127.0 -> 0.128.0 and rolldown-ariadne 0.5.3 -> 0.6.0.
  • Add // oxlint-disable-next-line no-underscore-dangle (or block-form oxlint-disable/oxlint-enable) directives in bench/generate-monorepo.ts, packages/prompts/src/spinner.ts, packages/tools/src/install-global-cli.ts, and packages/tools/src/snap-test.ts for new lint hits introduced by the oxlint bump.
  • Update oxlint-related snapshot outputs in packages/cli/snap-tests/bin-oxlint-wrapper/snap.txt, packages/cli/snap-tests/check-fix-lint-warn/snap.txt, packages/cli/snap-tests/check-lint-fail/snap.txt, packages/cli/snap-tests/check-lint-warn/snap.txt, and packages/cli/snap-tests/command-helper/snap.txt to reflect the new agent/sarif formatter options and updated warning-output behavior.
  • Regenerate Cargo.lock and pnpm-lock.yaml; refresh packages/tools/.upstream-versions.json, packages/core/package.json (catalog/bundledVersions), and pnpm-workspace.yaml catalog entries.

Build status

  • sync-remote-and-build: success
  • build-upstream: success

- rolldown: d9d72c3 -> v1.0.0-rc.18 (2c4a957)
- oxfmt: 0.46.0 -> 0.48.0
- oxlint: 1.61.0 -> 1.63.0
- oxlint-tsgolint: 0.22.0 -> 0.22.1
- @oxc-project/runtime: 0.127.0 -> 0.129.0
- @oxc-project/types: 0.127.0 -> 0.129.0
- oxc-minify: 0.127.0 -> 0.129.0
- oxc-parser: 0.127.0 -> 0.129.0
- oxc-transform: 0.127.0 -> 0.129.0
- @vitejs/devtools: 0.1.15 -> 0.1.18

Code changes:
- Bump Rust `oxc` crates 0.127.0 -> 0.128.0 and `rolldown-ariadne` 0.5.3 -> 0.6.0 in Cargo.toml
- Add `oxlint-disable-next-line no-underscore-dangle` directives for new oxlint rule hits in bench/generate-monorepo.ts, packages/prompts/src/spinner.ts, packages/tools/src/install-global-cli.ts, packages/tools/src/snap-test.ts
- Refresh oxlint-related snapshots in packages/cli/snap-tests/bin-oxlint-wrapper/snap.txt, check-fix-lint-warn/snap.txt, check-lint-fail/snap.txt, check-lint-warn/snap.txt, command-helper/snap.txt
@netlify
Copy link
Copy Markdown

netlify Bot commented May 6, 2026

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit aa26bae
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/69fae5acbe0fec0008c783a7

@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 6, 2026

Comment thread packages/cli/snap-tests/check-fix-lint-warn/snap.txt
…nfig.ts

Since oxlint 1.62, when invoked with `VP_VERSION` set (which vp always does),
the JS-config loader switches to vite-plus mode and only reads the `lint`
field from `vite.config.*`. As a result, severities defined in `.oxlintrc.json`
were silently downgraded (`error` → `warn`, `warn` → off), making the
`check-fix-lint-warn`, `check-lint-fail`, and `check-lint-warn` fixtures stop
asserting the rules they were written to assert.

Move each fixture's rule config into `vite.config.ts` under `lint.rules` so
the original severity assertions hold. The lint summary now reports `in 2
files` (vite.config.ts + src/index.js) instead of `in 1 file`.
Comment thread packages/cli/snap-tests/check-fix-lint-warn/vite.config.ts
fengmk2 added 7 commits May 6, 2026 13:26
vinext's pnpm-workspace.yaml sets `minimumReleaseAge: 1440` (24h), which
blocks fresh upstream upgrades — e.g. the latest oxc 0.129.0 was published
<24h ago and pnpm refuses with `ERR_PNPM_NO_MATURE_MATCHING_VERSION`.
Patch the cloned workspace to set it to 0 during the ecosystem run, the
same way we already patch rollipop's `.oxfmtrc.json`.

Also drop `ecosystem-ci` from the root tsconfig exclude list so its
TypeScript files resolve `@types/node` for the pre-commit type-check.
Guard the regex-replace so an upstream layout change that removes the
`minimumReleaseAge:` line surfaces as an explicit error instead of
silently no-opping (which would let the original `ERR_PNPM_NO_MATURE_MATCHING_VERSION`
failure resurface in CI without an obvious cause).
oxlint 1.63 (bumped in this upgrade-deps run) drops the `eslint-` prefix
from plugin names per oxc#21806 and tightens unused-import handling. That
breaks vinext's existing `oxlint-disable-next-line eslint-plugin-react-hooks/...`
directive and surfaces a couple of unused imports. vinext can only update
its source after a vite-plus release ships this oxlint version, so soften
`vp check --fix` and `vp run check` to `|| true` for now and leave a
comment pointing at the cause.
@fengmk2 fengmk2 merged commit 0450d86 into main May 6, 2026
77 checks passed
@fengmk2 fengmk2 deleted the deps/upstream-update branch May 6, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant