chore: bump up all devDependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/bun (source)	^1.3.10 → ^1.3.11
@types/node (source)	^25.3.5 → ^25.5.0
rolldown (source)	^1.0.0-rc.7 → ^1.0.0-rc.10

---

Release Notes

rolldown/rolldown (rolldown)

v1.0.0-rc.10

Compare Source

🚀 Features

• add indentExclusionRanges property to MagicString (#​8746) by @​IWANABETHATGUY
• expose oxcRuntimePlugin (#​8654) by @​sapphi-red
• rust: make bundler generic over FileSystem for in-memory benchmarks (#​8652) by @​Boshen

🐛 Bug Fixes

• rolldown_plugin_vite_dynamic_import_vars: align dynamic import fast check with Vite (#​8760) by @​shulaoda
• renamer: handle existing bindings in nested scopes when finding unique names (#​8741) by @​drewolson
• pass yarn_pnp option where needed (#​8736) by @​sapphi-red
• preserve optional chaining in namespace member expr rewrite (#​8712) by @​Copilot
• correct UTF-16 index handling in native MagicString (#​8693) by @​IWANABETHATGUY
• mark failing doctests as ignore (#​8700) by @​Boshen
• prevent may_partial_namespace from leaking through include_module (#​8682) by @​IWANABETHATGUY
• ci: bump native-build cache key to invalidate stale napi-rs artifacts (#​8678) by @​Boshen
• comments.annotation: false breaking tree-shaking (#​8657) by @​IWANABETHATGUY
• validate filenames for NUL bytes from chunkFileNames/entryFileNames (#​8644) by @​IWANABETHATGUY
• dce-only minify should not set NODE_ENV to production (#​8651) by @​IWANABETHATGUY

🚜 Refactor

• rust: remove dead CrossModuleOptimizationConfig::side_effects_free_function_optimization (#​8673) by @​Dunqing
• rust: simplify cross_module_optimization by removing redundant scope tracking (#​8672) by @​Dunqing
• simplify string repeat in guess_indentor (#​8753) by @​IWANABETHATGUY
• consolidate custom magic-string tests into one file (#​8696) by @​IWANABETHATGUY
• extract CJS bailout checks from include_symbol (#​8683) by @​IWANABETHATGUY
• rust: remove BindingIdentifierExt to use BindingIdentifier::symbol_id() instead (#​8667) by @​Dunqing
• bench: add bench_preset helper and inline presets (#​8658) by @​Boshen
• rust: filter external modules from entries instead of mapping bit positions (#​8637) by @​Dunqing

📚 Documentation

• clarify watch mode behavior and its limitations (#​8751) by @​sapphi-red
• add external link icon to GitHub button in Hero section (#​8731) by @​thisisnkc
• guide: clarify that inject option is only conceptually similar to esbuild's one (#​8743) by @​sapphi-red
• meta/design: add devtools.md (#​8663) by @​hyf0
• add viteplus alpha announcement banner (#​8668) by @​shulaoda

⚡ Performance

• rolldown: some minor perf optimization found by autoresearch (#​8730) by @​Brooooooklyn
• replace Vec allocation with lazy iterator in find_hash_placeholders (#​8703) by @​Boshen
• replace TypedDashMap with TypedMap in CustomField (#​8708) by @​Boshen
• bench: remove scan benchmark binary to halve LTO link time (#​8694) by @​Boshen

🧪 Testing

• watch: increase timeout for error output (#​8766) by @​sapphi-red
• vite-tests: remove JS plugin tests (#​8767) by @​sapphi-red
• watch: add CLI exit code test (#​8752) by @​sapphi-red
• normalize paths on Windows even if resolve.symlinks is false (#​8483) by @​sapphi-red

⚙️ Miscellaneous Tasks

• correct comment in bundle-analyzer-plugin.ts (#​8770) by @​origami-z
• upgrade oxc to 0.120.0 (#​8764) by @​Boshen
• enable all test for reset category in MagicString.test.ts (#​8749) by @​IWANABETHATGUY
• deps: update test262 submodule for tests (#​8742) by @​sapphi-red
• deps: update oxc apps (#​8734) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.1 (#​8724) by @​renovate[bot]
• deps: update npm packages (major) (#​8722) by @​renovate[bot]
• deps: update github-actions (major) (#​8721) by @​renovate[bot]
• deps: update softprops/action-gh-release action to v2.6.0 (#​8720) by @​renovate[bot]
• deps: update npm packages (#​8718) by @​renovate[bot]
• deps: update rust crates (#​8717) by @​renovate[bot]
• deps: update github-actions (#​8716) by @​renovate[bot]
• deps: update dependency oxlint-tsgolint to v0.17.0 (#​8713) by @​renovate[bot]
• deps: bump cargo-shear to v1.11.2 (#​8711) by @​Boshen
• use org level CODE_OF_CONDUCT.md (#​8706) by @​sapphi-red
• fix cache key mismatch and remove redundant cache saves (#​8695) by @​Boshen
• deps: update oxc apps (#​8692) by @​renovate[bot]
• deps: update oxc apps (#​8649) by @​renovate[bot]
• should do matrix out side of reusable workflows 2 (#​8691) by @​hyf0
• should do matrix out side of reusable workflows (#​8690) by @​hyf0
• deps: update dependency rolldown-plugin-dts to v0.22.5 (#​8689) by @​renovate[bot]
• upgrade oxc to 0.119.0 and oxc_resolver to 11.19.1 (#​8686) by @​Boshen
• correct if condition of type-check job (#​8677) by @​hyf0
• Gate CI type-check job on node changes (#​8669) by @​Copilot
• benchmark: improve codspeed build (#​8665) by @​Boshen
• deps: update oxc to v0.118.0 (#​8650) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.44.0 (#​8647) by @​renovate[bot]
• deps: update oxc resolver to v11.19.1 (#​8646) by @​renovate[bot]
• deps: update dependency rust to v1.94.0 (#​8648) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.22.4 (#​8645) by @​renovate[bot]

◀️ Revert

• Revert "ci: Gate CI type-check job on node changes" (#​8674) by @​hyf0
• "chore(deps): update dependency rust to v1.94.0 (#​8648)" (#​8660) by @​shulaoda

❤️ New Contributors

• @​origami-z made their first contribution in #​8770
• @​drewolson made their first contribution in #​8741
• @​thisisnkc made their first contribution in #​8731

v1.0.0-rc.9

Compare Source

💥 BREAKING CHANGES

• rename exported BindingMagicString to RolldownMagicString (#​8626) by @​IWANABETHATGUY

🚀 Features

• rolldown: add isRolldownMagicString property for reliable native detection (#​8614) by @​IWANABETHATGUY
• cli: align object type with rollup (#​8598) by @​h-a-n-a

🐛 Bug Fixes

• rust: circular inter-chunk imports when external dynamic imports exist (#​8596) by @​Dunqing
• update minify default docs from false to 'dce-only' (#​8620) by @​shulaoda

💼 Other

• fix early exit in script build-node (#​8617) by @​h-a-n-a

🚜 Refactor

• binding: remove outdated TODO comment in MagicString to_string() (#​8613) by @​IWANABETHATGUY

📚 Documentation

• add viteplus alpha announcement banner (#​8615) by @​mdong1909
• update VitePress theme to 4.8.2 for narrow-screen layout regression (#​8612) by @​Copilot

⚡ Performance

• merge 4 integration test binaries into 1 (#​8610) by @​Boshen

🧪 Testing

• replace heavy filename_with_hash test with targeted hash fixtures (#​8597) by @​Boshen

⚙️ Miscellaneous Tasks

• ci: remove redundant --no-run build step from cargo-test (#​8623) by @​Boshen
• rust: use cargo-shear to toggle Cargo.toml [lib] test = bool (#​8622) by @​Boshen
• deps: update test262 submodule for tests (#​8611) by @​sapphi-red
• skip macOS CI jobs on pull requests (#​8608) by @​Copilot
• add rust cache to repo validation job (#​8607) by @​Boshen
• skip running empty bin test targets (#​8605) by @​Boshen
• skip building examples in cargo-test to reduce build time (#​8603) by @​Boshen
• switch plain workflow checkouts to taiki-e action (#​8601) by @​Boshen
• skip Windows CI jobs on PRs (#​8600) by @​Boshen
• remove unused asset module (#​8594) by @​shulaoda

◀️ Revert

• "docs: add viteplus alpha announcement banner (#​8615)" (#​8616) by @​shulaoda

v1.0.0-rc.8

Compare Source

🚀 Features

• watch: enable full functional fs watcher in wasm (#​8575) by @​hyf0
• watch: expose debounce related options (#​8572) by @​hyf0

🐛 Bug Fixes

• detect new URL(…, import.meta.url) with no-sub template literal (#​8565) by @​char
• devtools: trace dynamic imports in devtools (#​8581) by @​cal-gooo
• watch: rebuild when a previously missing file is created (#​8562) by @​hyf0-agent
• watch: filter out Access events to prevent infinite rebuild loop on Linux (#​8557) by @​hyf0-agent

🚜 Refactor

• watch: remove auto watch for fail imports (#​8585) by @​hyf0
• fs_watcher: unify the way of constructing watcher (#​8571) by @​hyf0
• cli: migrate CLI to CAC (#​8551) by @​h-a-n-a
• switch asset module support from hard-code to builtin plugin (#​8546) by @​hyf0

📚 Documentation

• fix subject-verb agreement in why-bundlers.md (#​8591) by @​brandonzylstra
• maintenance: align release and canary workflow guide (#​8538) by @​minsoo-web
• add format option to directives example config (#​8590) by @​shulaoda
• fix: change twitter to x logo in team (#​8552) by @​mdong1909
• correct composable filter support explanation (#​8550) by @​sapphi-red

⚡ Performance

• testing: share tokio runtime across fixture tests (#​8567) by @​Boshen

🧪 Testing

• hmr: fix infinite loop in dev server test retry logic (#​8576) by @​hyf0-agent
• cli: add more cli-e2e test cases (#​8548) by @​h-a-n-a

⚙️ Miscellaneous Tasks

• docs: update in-depth/directives for output.strict option (#​8535) by @​minsoo-web
• add PNPM_HOME Dev Drive mapping to Windows CI workflows (#​8589) by @​Boshen
• deps: update github-actions (#​8588) by @​renovate[bot]
• move Windows cargo target dir to Dev Drive (#​8586) by @​Boshen
• optimize cache keys to fix race conditions and reduce usage (#​8578) by @​Boshen
• remove WASI build & test pipeline (#​8580) by @​Boshen
• remove unnecessary submodule checkouts (#​8577) by @​Boshen
• use Dev Drive for Windows CI jobs (#​8574) by @​Boshen
• skip redundant native binding build for browser and remove standalone job (#​8573) by @​Boshen
• parallelize Node tests on ubuntu, single Node 24 on macOS/windows (#​8570) by @​Boshen
• docs: bump @​voidzero-dev/vitepress-theme to 4.8.0 (#​8558) by @​crusty-voidzero
• dedupe type-check from dev server workflow (#​8554) by @​Boshen

❤️ New Contributors

• @​brandonzylstra made their first contribution in #​8591
• @​char made their first contribution in #​8565
• @​cal-gooo made their first contribution in #​8581
• @​hyf0-agent made their first contribution in #​8562
• @​h-a-n-a made their first contribution in #​8551

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 04:59 AM, Monday through Wednesday ( * 0-4 * * 1-3 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.