Bump the development-dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #650 · changesets/action

dependabot · 2026-06-09T08:10:12Z

Bumps the development-dependencies group with 4 updates in the / directory: fs-fixture, oxfmt, rolldown and vitest.

Updates fs-fixture from 2.13.0 to 2.14.0

Release notes

Sourced from fs-fixture's releases.

v2.14.0

2.14.0 (2026-05-18)

Features

document grouped path prefixes (5b00042)

Commits

5b00042 feat: document grouped path prefixes
See full diff in compare view

Updates oxfmt from 0.48.0 to 0.53.0

Commits

964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
16b8058 feat(oxfmt): Support vite-plus/resolveConfig for vite.config.ts (#22454)
5570206 release(apps): oxlint v1.66.0 && oxfmt v0.51.0 (#22528)
25e5cbc release(apps): oxlint v1.65.0 && oxfmt v0.50.0 (#22458)
43b9978 fix(formatter/sort_imports): Treat subpath imports as internal (#22440)
d652a55 release(apps): oxlint v1.64.0 && oxfmt v0.49.0 (#22318)
6e8e818 feat(oxfmt): Experimental .svelte support (#21700)
330fe31 refactor(config): Update doc comment for GlobSet (#22197)
fb3067c refactor(oxfmt): use shared GlobSet for overrides (#22147)
See full diff in compare view

Updates rolldown from 1.0.1 to 1.0.3

Release notes

Sourced from rolldown's releases.

v1.0.3

[1.0.3] - 2026-05-27

🚀 Features

transform: respect decorator strictNullChecks option (#9580) by @kylecannon

drop defer keyword (#9503) by @TheAlexLichter

🐛 Bug Fixes

ci: create target dir before cargo release-oxc update (#9584) by @shulaoda

ci: reorder prepare-release steps to avoid dirty git check failure (#9583) by @shulaoda

testing: canonicalize temp dir early and use platform-specific separator in test262 (#9582) by @shulaoda

testing: resolve symlinked temp dir in test262 snapshot normalization (#9581) by @shulaoda

testing: canonicalize temp dir path in test262 snapshot normalization (#9579) by @shulaoda

dev: onOutput called twice when initial build fails (#9552) by @hyf0

dev: make ensureCurrentBuildFinish not returning error when engine closes (#9564) by @h-a-n-a

oxc-runtime: route require() to CJS helper variant (#9263) (#9526) by @IWANABETHATGUY

generator: use exporter chunk's export mode for CJS default re-exports (#9299) (#9529) by @IWANABETHATGUY

rolldown: always run reduced-atom static cycle check (#9441) (#9514) by @IWANABETHATGUY

apply transform.dropLabels before scanning (#9521) (#9522) by @IWANABETHATGUY

rolldown_watcher: take rolldown dep through the workspace (#9510) by @Boshen

cache: keep the scan-stage cache consistent when a build fails (#9495) by @h-a-n-a

skip JSON default-import namespace optimization for write targets (#9484) (#9489) by @IWANABETHATGUY

deps: skip pnpm frozen-lockfile on Netlify to dodge catalog mismatch bug (#9471) by @Boshen

🚜 Refactor

oxc-runtime: use Cow for helper path construction (#9538) by @IWANABETHATGUY

fold import defer phase drop into PreProcessor (#9524) by @IWANABETHATGUY

distinguish map: null vs map: undefined in transform hook output (#9497) by @sapphi-red

📚 Documentation

explain the policy for Rust crates (#9547) by @sapphi-red

cache: add design doc for cache (#9544) by @h-a-n-a

guide/troubleshooting: add TDZ error section (#9537) by @sapphi-red

dev-engine: add design doc for dev-engine (#9479) by @h-a-n-a

lazy-barrel: tweak some words (#9483) by @shulaoda

lazy-barrel: expand reasoning behind LARGE_BARREL_MODULES advice (#9477) by @shulaoda

⚡ Performance

generate: thread ast_table by value into codegen consumer (#9555) by @Boshen

finalizers: replace _reExport construction with a direct call to avoid calling clone_in (#9501) by @Dunqing

reorder hot-path boolean checks to short-circuit on cheap predicates first (#9523) by @Boshen

🧪 Testing

rolldown: regression fixture for #9401 (#9418) by @IWANABETHATGUY

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.0.3] - 2026-05-27

🚀 Features

transform: respect decorator strictNullChecks option (#9580) by @kylecannon

drop defer keyword (#9503) by @TheAlexLichter

🐛 Bug Fixes

ci: create target dir before cargo release-oxc update (#9584) by @shulaoda

ci: reorder prepare-release steps to avoid dirty git check failure (#9583) by @shulaoda

testing: canonicalize temp dir early and use platform-specific separator in test262 (#9582) by @shulaoda

testing: resolve symlinked temp dir in test262 snapshot normalization (#9581) by @shulaoda

testing: canonicalize temp dir path in test262 snapshot normalization (#9579) by @shulaoda

dev: onOutput called twice when initial build fails (#9552) by @hyf0

dev: make ensureCurrentBuildFinish not returning error when engine closes (#9564) by @h-a-n-a

oxc-runtime: route require() to CJS helper variant (#9263) (#9526) by @IWANABETHATGUY

generator: use exporter chunk's export mode for CJS default re-exports (#9299) (#9529) by @IWANABETHATGUY

rolldown: always run reduced-atom static cycle check (#9441) (#9514) by @IWANABETHATGUY

apply transform.dropLabels before scanning (#9521) (#9522) by @IWANABETHATGUY

rolldown_watcher: take rolldown dep through the workspace (#9510) by @Boshen

cache: keep the scan-stage cache consistent when a build fails (#9495) by @h-a-n-a

skip JSON default-import namespace optimization for write targets (#9484) (#9489) by @IWANABETHATGUY

deps: skip pnpm frozen-lockfile on Netlify to dodge catalog mismatch bug (#9471) by @Boshen

🚜 Refactor

oxc-runtime: use Cow for helper path construction (#9538) by @IWANABETHATGUY

fold import defer phase drop into PreProcessor (#9524) by @IWANABETHATGUY

distinguish map: null vs map: undefined in transform hook output (#9497) by @sapphi-red

📚 Documentation

explain the policy for Rust crates (#9547) by @sapphi-red

cache: add design doc for cache (#9544) by @h-a-n-a

guide/troubleshooting: add TDZ error section (#9537) by @sapphi-red

dev-engine: add design doc for dev-engine (#9479) by @h-a-n-a

lazy-barrel: tweak some words (#9483) by @shulaoda

lazy-barrel: expand reasoning behind LARGE_BARREL_MODULES advice (#9477) by @shulaoda

⚡ Performance

generate: thread ast_table by value into codegen consumer (#9555) by @Boshen

finalizers: replace _reExport construction with a direct call to avoid calling clone_in (#9501) by @Dunqing

reorder hot-path boolean checks to short-circuit on cheap predicates first (#9523) by @Boshen

🧪 Testing

rolldown: regression fixture for #9401 (#9418) by @IWANABETHATGUY

failing test for #9441 (#9504) by @TheAlexLichter

... (truncated)

Commits

a287faa release: v1.0.3 (#9586)
e3b7756 feat(transform): respect decorator strictNullChecks option (#9580)
8326121 chore(deps): upgrade oxc to 0.133.0 (#9563)
c7bbe2d fix(dev): onOutput called twice when initial build fails (#9552)
95ed7ca fix(dev): make ensureCurrentBuildFinish not returning error when engine clo...
f06c2a0 fix(oxc-runtime): route require() to CJS helper variant (#9263) (#9526)
1de499a feat: drop defer keyword (#9503)
e412df1 refactor: distinguish map: null vs map: undefined in transform hook outpu...
47a0e3b docs(lazy-barrel): expand reasoning behind LARGE_BARREL_MODULES advice (#9477)
f2757ed release: v1.0.2 (#9478)
Additional commits viewable in compare view

Updates vitest from 4.1.6 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

Commits

e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
a09d472 chore: release v4.1.7
See full diff in compare view

changeset-bot · 2026-06-09T08:10:19Z

⚠️ No Changeset found

Latest commit: b2b45e3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-06-09T08:10:40Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	rolldown@1.0.3
	vitest@4.1.8
	oxfmt@0.53.0
	fs-fixture@2.14.0

View full report

…ates Bumps the development-dependencies group with 4 updates in the / directory: [fs-fixture](https://github.com/privatenumber/fs-fixture), [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt), [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `fs-fixture` from 2.13.0 to 2.14.0 - [Release notes](https://github.com/privatenumber/fs-fixture/releases) - [Commits](privatenumber/fs-fixture@v2.13.0...v2.14.0) Updates `oxfmt` from 0.48.0 to 0.53.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.53.0/npm/oxfmt) Updates `rolldown` from 1.0.1 to 1.0.3 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.0.3/packages/rolldown) Updates `vitest` from 4.1.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) --- updated-dependencies: - dependency-name: fs-fixture dependency-version: 2.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.53.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: rolldown dependency-version: 1.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 9, 2026

dependabot Bot mentioned this pull request Jun 9, 2026

Bump rolldown from 1.0.1 to 1.0.2 #638

Closed

This was referenced Jun 9, 2026

Bump fs-fixture from 2.13.0 to 2.14.0 #639

Closed

Bump vitest from 4.1.6 to 4.1.7 #642

Closed

dependabot Bot changed the title ~~Bump the development-dependencies group with 4 updates~~ Bump the development-dependencies group across 1 directory with 4 updates Jun 9, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-c0472b7d9f branch from b2de1e4 to b2b45e3 Compare June 9, 2026 16:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the development-dependencies group across 1 directory with 4 updates#650

Bump the development-dependencies group across 1 directory with 4 updates#650
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-c0472b7d9f

dependabot Bot commented on behalf of github Jun 9, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.14.0

2.14.0 (2026-05-18)

Features

v1.0.3

[1.0.3] - 2026-05-27

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

[1.0.3] - 2026-05-27

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

v4.1.8

🐞 Bug Fixes

View changes on GitHub

v4.1.7

🐞 Bug Fixes

View changes on GitHub

Uh oh!

changeset-bot Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 9, 2026 •

edited

Loading

changeset-bot Bot commented Jun 9, 2026 •

edited

Loading

socket-security Bot commented Jun 9, 2026 •

edited

Loading