chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #4065 · nitrojs/nitro

renovate · 2026-03-02T02:05:57Z

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/workers-types	`^4.20260304.0` → `^4.20260305.0`
@scalar/api-reference (source)	`^1.44.26` → `^1.46.1`
@types/aws-lambda (source)	`^8.10.160` → `^8.10.161`
@types/node (source)	`^25.3.0` → `^25.3.3`
@typescript/native-preview (source)	`^7.0.0-dev.20260224.1` → `^7.0.0-dev.20260302.1`
miniflare (source)	`^4.20260302.0` → `^4.20260305.0`
oxfmt (source)	`^0.35.0` → `^0.36.0`
oxlint (source)	`^1.50.0` → `^1.51.0`
pnpm (source)	`10.30.2` → `10.30.3`
rolldown (source)	`^1.0.0-rc.5` → `^1.0.0-rc.6`
shaders	`^2.3.73` → `^2.3.75`
srvx (source)	`^0.11.7` → `^0.11.8`
unimport	`^5.6.0` → `^5.7.0`
unstorage (source)	`^2.0.0-alpha.5` → `^2.0.0-alpha.6`
vite (source)	`8.0.0-beta.15` → `8.0.0-beta.16`
wrangler (source)	`^4.68.1` → `^4.69.0`

Release Notes

cloudflare/workerd (@cloudflare/workers-types)

`v4.20260305.0`

Compare Source

scalar/scalar (@scalar/api-reference)

`v1.46.1`

Patch Changes

#8294: default createAnySecurityScheme to false and fix index clamp issue

Updated Dependencies

@scalar/workspace-store@0.35.2
- #8310: refactor: move helpers to the helpers package to share primitive helpers
- #8294: default createAnySecurityScheme to false and fix index clamp issue
- #8287: consider path-level parameters in syncPathParameters instead of creating bare synthetic ones
@scalar/api-client@2.31.1
- #8310: refactor: move helpers to the helpers package to share primitive helpers
- #8294: default createAnySecurityScheme to false and fix index clamp issue
@scalar/helpers@0.2.17
- #8310: refactor: move helpers to the helpers package to share primitive helpers
@scalar/oas-utils@0.8.1
- #8310: fix: correctly handle circular documents during the migration to indexdb
@scalar/agent-chat@0.7.1
@scalar/sidebar@0.7.44
@scalar/components@0.19.13
@scalar/openapi-parser@0.24.16
@scalar/types@0.6.9
@scalar/snippetz@0.6.18

`v1.46.0`

Minor Changes

#8290: chore: update deps

Patch Changes

#8283: fix: scrollToLazy can not find id when the browser is busy

Updated Dependencies

@scalar/agent-chat@0.7.0
- #8290: chore: update deps
@scalar/api-client@2.31.0
- #8290: chore: update deps
@scalar/oas-utils@0.8.0
- #8290: chore: update deps
@scalar/components@0.19.12
- #8290: chore: update deps
@scalar/themes@0.14.2
- #8290: chore: update deps
@scalar/workspace-store@0.35.1
- #8290: chore: update deps
@scalar/sidebar@0.7.43
@scalar/code-highlight@0.2.4

`v1.44.27`

Patch Changes

#8274: feat(agent): add config to hide search api
#8260: feat: update developer tools

Updated Dependencies

@scalar/agent-chat@0.5.18
- #8274: feat(agent): add config to hide search api
@scalar/types@0.6.8
- #8274: feat(agent): add config to hide search api
@scalar/api-client@2.29.4
@scalar/oas-utils@0.6.48
@scalar/openapi-parser@0.24.15
@scalar/snippetz@0.6.17
@scalar/workspace-store@0.34.4
@scalar/components@0.19.10
@scalar/sidebar@0.7.41

microsoft/typescript-go (@typescript/native-preview)

cloudflare/workers-sdk (miniflare)

`v4.20260305.0`

Compare Source

Patch Changes

#12661 99037e3 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260302.0 1.20260303.0
#12680 295297a Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260303.0 1.20260305.0

oxc-project/oxc (oxfmt)

`v0.36.0`

Compare Source

🐛 Bug Fixes

04e6223 npm: Add preferUnplugged for Yarn PnP compatibility (#19829) (Boshen)

📚 Documentation

2fa936f README.md: Map npm package links to npmx.dev (#19666) (Boshen)

oxc-project/oxc (oxlint)

`v1.51.0`

Compare Source

🚀 Features

f34f6fa linter: Introduce typeCheck config option (#19764) (camc314)
694be7d linter: Introduce typeAware as config options (#19614) (camc314)

🐛 Bug Fixes

04e6223 npm: Add preferUnplugged for Yarn PnP compatibility (#19829) (Boshen)

📚 Documentation

2fa936f README.md: Map npm package links to npmx.dev (#19666) (Boshen)

pnpm/pnpm (pnpm)

`v10.30.3`

Compare Source

rolldown/rolldown (rolldown)

`v1.0.0-rc.6`

Compare Source

💥 BREAKING CHANGES

css: remove css_entry_filenames , css_chunk_filenames and related code (#8402) by @hyf0
css: drop builtin CSS bundling to explore alternative solutions (#8399) by @hyf0

🚀 Features

rust/data-url: use hash as id for data url modules to prevent long string overhead (#8420) by @hyf0
validate bundle stays within output dir (#8441) by @sapphi-red
rust: support PluginOrder::PinPost (#8417) by @hyf0
support ModuleType:Copy (#8407) by @hyf0
expose ESTree types from rolldown/utils (#8400) by @sapphi-red

🐛 Bug Fixes

incorrect sourcemap when postBanner/postFooter is used with shebang (#8459) by @Copilot
resolver: disable node_path option to align ESM resolver behavior (#8472) by @sapphi-red
parse .js within "type": "commonjs" as ESM for now (#8470) by @sapphi-red
case-insensitive filename conflict detection for chunk deduplication (#8458) by @Copilot
prevent inlining CJS exports that are mutated by importers (#8456) by @IWANABETHATGUY
parse .cjs / .cts / .js within "type": "commonjs" as CommonJS (#8455) by @sapphi-red
plugin/copy-module: correct hooks' priority (#8423) by @hyf0
plugin/chunk-import-map: ensure render_chunk_meta run after users plugin (#8422) by @hyf0
rust: correct hooks order of DataUriPlugin (#8418) by @hyf0
jsx.preserve should also considering tsconfig json preserve (#8324) by @IWANABETHATGUY
deferred_scan_data.rs "Should have resolved id: NotFound" error (#8379) by @sapphi-red
cli: require value for --dir/-d and --file/-o (#8378) by @Copilot
dev: avoid mutex deadlock caused by inconsistent lock order (#8370) by @sapphi-red

🚜 Refactor

watch: rename TaskStart/TaskEnd to BundleStart/BundleEnd (#8463) by @hyf0
rust: rename rolldown_plugin_data_uri to rolldown_plugin_data_url (#8421) by @hyf0
bindingify-build-hook: extract helper for PluginContextImpl (#8438) by @ShroXd
give source loading a proper name (#8436) by @IWANABETHATGUY
ban holding DashMap refs across awaits (#8362) by @sapphi-red

📚 Documentation

add glob pattern usage example to input option (#8469) by @IWANABETHATGUY
remove https://rolldown.rs from links in reference docs (#8454) by @sapphi-red
mention execution order issue in output.codeSplitting docs (#8452) by @sapphi-red
clarify output.comments behavior a bit (#8451) by @sapphi-red
replace npmjs package links with npmx.dev (#8439) by @Boshen
reference: add Exported from for values / types exported from subpath exports (#8394) by @sapphi-red
add JSDocs for APIs exposed from subpath exports (#8393) by @sapphi-red
reference: generate reference pages for APIs exposed from subpath exports (#8392) by @sapphi-red
avoid pipe character in codeSplitting example to fix broken rendering (#8391) by @IWANABETHATGUY

⚡ Performance

avoid redundant PathBuf allocations in resolve paths (#8435) by @Brooooooklyn
bump to sugar_path@2 (#8432) by @hyf0
use flag-based convergence detection in include_statements (#8412) by @Brooooooklyn

🧪 Testing

execute _test.mjs even if executeOutput is false (#8398) by @sapphi-red
add retry to tree-shake/module-side-effects-proxy4 as it is flaky (#8397) by @sapphi-red
avoid expect.assertions() as it is not concurrent test friendly (#8383) by @sapphi-red
disable mockReset option (#8382) by @sapphi-red
fix flaky failure caused by concurrent resolveId calls (#8381) by @sapphi-red

⚙️ Miscellaneous Tasks

deps: update dependency rollup to v4.59.0 [security] (#8471) by @renovate[bot]
ai/design: add design doc about watch mode (#8453) by @hyf0
deps: update oxc resolver to v11.19.0 (#8461) by @renovate[bot]
ai: introduce progressive spec-driven development pattern (#8446) by @hyf0
deprecate output.legalComments (#8450) by @sapphi-red
deps: update dependency oxlint-tsgolint to v0.15.0 (#8448) by @renovate[bot]
ai: make CLAUDE.md a symlink of AGENTS.md (#8445) by @hyf0
deps: update rollup submodule for tests to v4.59.0 (#8433) by @sapphi-red
deps: update test262 submodule for tests (#8434) by @sapphi-red
deps: update oxc to v0.115.0 (#8430) by @renovate[bot]
deps: update oxc apps (#8429) by @renovate[bot]
deps: update npm packages (#8426) by @renovate[bot]
deps: update rust crate owo-colors to v4.3.0 (#8428) by @renovate[bot]
deps: update github-actions (#8424) by @renovate[bot]
deps: update rust crates (#8425) by @renovate[bot]
deps: update oxc resolver to v11.18.0 (#8406) by @renovate[bot]
deps: update dependency oxlint-tsgolint to v0.14.2 (#8405) by @renovate[bot]
ban expect.assertions in all fixture tests (#8395) by @sapphi-red
deps: update oxc apps (#8389) by @renovate[bot]
ban expect.assertions in fixture tests (#8387) by @sapphi-red
enable lint for _config.ts files (#8386) by @sapphi-red
deps: update dependency oxlint-tsgolint to v0.14.1 (#8385) by @renovate[bot]

h3js/srvx (srvx)

`v0.11.8`

Compare Source

compare changes

🩹 Fixes

node: Validate host header (7c8c962)

🏡 Chore

Update deps (b6738bd)

❤️ Contributors

Pooya Parsa (@pi0)

unjs/unimport (unimport)

`v5.7.0`

Compare Source

🐞 Bug Fixes

Use map instead of plain object for injection usage records - by @KazariEX in #496 (b2f99)
toImport: Handle comma-separated declaration exports - by @cernymatej in #491 (e908b)

View changes on GitHub

unjs/unstorage (unstorage)

`v2.0.0-alpha.6`

Compare Source

compare changes

🚀 Enhancements

vercel-blob: Support private blob (#743)
cloudflare-cache-binding driver (#603)
redis: ⚠️ Native raw support (#561)
s3: Add Content-Type and headers support for S3 uploads (#741)
Experimental tracing channels support (#707)

🩹 Fixes

db0: Close database connection after dispose (#693)
fs: Ensure directory exists before watching (#704)
fs: Exclude ignored file in key listing (#622)

💅 Refactors

Remove deprecated @vercel/kv driver (#744)
drivers: Remove defineDriver in favor of DriverFactory type (1a0d3ee)
Fix driver type issues and lint (a5cdb6d)
server: Expose minimal http event type only (2a77d42)

📖 Documentation

Remove duplicate string from feature description (#648)

📦 Build

Allow @capacitor/preferences v8 in peer dependencies (#730)
Improve dist (92aefab)

🏡 Chore

Update undocs (fa86024)
Switch to tsgo (35953ee)
Update deps (00fbf8b)
Lint (ccb34e0)
Fix more isolated declr issues (9fc135b)
Lint (4e86f75)
Remove old cli script (2e2ca65)
Fix decl issues for internals (05e2857)
Use oxlint and oxfmt (9c3bc44)

✅ Tests

Include drivers in coverage (bbc9990)
Run driver type check once against dist/index.d.mts (1c21fd7)

🤖 CI

Typecheck after build (dc5ddac)

⚠️ Breaking Changes

redis: ⚠️ Native raw support (#561)

❤️ Contributors

Pooya Parsa (@pi0)
Abdelrahman Awad (@logaretm)
Oleh oreznichenko@artelogic.net
Connor Pearson (@cjpearson)
Oleksandr Dzhychko oleksandr@dzhychko.de
Nicolaos Skimas contact@nicolaos.dev
Kricsleo (@kricsleo)
Rihan Arfan (@RihanArfan)
Wind hi@productdevbook.com

vitejs/vite (vite)

`v8.0.0-beta.16`

Compare Source

Features

export Visitor and ESTree from rolldown/utils (#21664) (45de31e)
update rolldown to 1.0.0-rc.6 (#21714) (37a65f8)
use util.inspect for CLI error display (#21668) (5f425a9)

Bug Fixes

deps: update all non-major dependencies (#21691) (521fdc0)
optimizer: avoid duplicate modules when preserveSymlinks is enabled (#21720) (72165e0)

Code Refactoring

avoid deprecated legalComments option (#21721) (e06496e)
use ESTree types from rolldown/utils (#21719) (9239750)

Tests

add more type tests for defineConfig (#21698) (4fedbbd)

cloudflare/workers-sdk (wrangler)

`v4.69.0`

Compare Source

Minor Changes

#12625 c0e9e08 Thanks @WillTaylorDev! - Add cache configuration option for enabling worker cache (experimental)

You can now enable cache before worker execution using the new cache configuration:
```
{
	"cache": {
		"enabled": true,
	},
}
```
This setting is environment-inheritable and opt-in. When enabled, cache behavior is applied before your worker runs.

Note: This feature is experimental. The runtime API is not yet generally available.

Patch Changes

#12661 99037e3 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260302.0 1.20260303.0
#12680 295297a Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260303.0 1.20260305.0
#12671 f765244 Thanks @MattieTK! - fix: Only redact account names in CI environments, not all non-interactive contexts

The multi-account selection error in getAccountId now only redacts account names
when running in a CI environment (detected via ci-info). Non-interactive terminals
such as coding agents and piped commands can now see account names, which they need
to identify which account to configure. CI logs remain protected.
Updated dependencies [99037e3, 295297a]:
- miniflare@4.20260305.0

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-03-02T02:06:02Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nitro.build	Ready	Preview, Comment	Mar 2, 2026 9:30pm

pkg-pr-new · 2026-03-02T02:10:33Z

Open in StackBlitz

npm i https://pkg.pr.new/nitro@4065

commit: f2432d0

renovate bot requested a review from pi0 as a code owner March 2, 2026 02:05

vercel bot deployed to Preview March 2, 2026 02:07 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from ff71023 to 3ebc809 Compare March 2, 2026 08:50

vercel bot deployed to Preview March 2, 2026 08:52 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 3ebc809 to e487f56 Compare March 2, 2026 14:15

vercel bot deployed to Preview March 2, 2026 14:17 View deployment

chore(deps): update all non-major dependencies

2df1f25

renovate bot force-pushed the renovate/all-minor-patch branch from e487f56 to 2df1f25 Compare March 2, 2026 21:28

vercel bot deployed to Preview March 2, 2026 21:30 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#4065

chore(deps): update all non-major dependencies#4065
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

vercel bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Updated Dependencies

Minor Changes

Patch Changes

Updated Dependencies

Patch Changes

Updated Dependencies

Patch Changes

🐛 Bug Fixes

📚 Documentation

🚀 Features

🐛 Bug Fixes

📚 Documentation

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

🩹 Fixes

🏡 Chore

❤️ Contributors

🐞 Bug Fixes

🚀 Enhancements

🩹 Fixes

💅 Refactors

📖 Documentation

📦 Build

🏡 Chore

✅ Tests

🤖 CI

⚠️ Breaking Changes

❤️ Contributors

Features

Bug Fixes

Code Refactoring

Tests

Minor Changes

Patch Changes

Configuration

Uh oh!

vercel bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 2, 2026 •

edited

Loading

vercel bot commented Mar 2, 2026 •

edited

Loading

pkg-pr-new bot commented Mar 2, 2026 •

edited

Loading