fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/node (source)	^24.12.3 → ^24.12.4			devDependencies	patch
fs-fixture	^2.13.0 → ^2.14.0			devDependencies	minor
oxfmt (source)	^0.48.0 → ^0.51.0			devDependencies	minor
publint (source)	^0.3.20 → ^0.3.21			dependencies	patch
rolldown (source)	^1.0.0 → ^1.0.1			devDependencies	patch
vitest (source)	^4.1.5 → ^4.1.7			devDependencies	patch
zizmorcore/zizmor-action	v0.5.3 → v0.5.6			action	patch

---

Release Notes

privatenumber/fs-fixture (fs-fixture)

v2.14.0

Compare Source

Features

• document grouped path prefixes (5b00042)

oxc-project/oxc (oxfmt)

v0.51.0

Compare Source

v0.50.0

Compare Source

🐛 Bug Fixes

• 43b9978 formatter/sort_imports: Treat subpath imports as internal (#​22440) (leaysgur)

v0.49.0

Compare Source

🚀 Features

• 6e8e818 oxfmt: Experimental .svelte support (#​21700) (leaysgur)

publint/publint (publint)

v0.3.21

Compare Source

Patch Changes

• Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#​228)

rolldown/rolldown (rolldown)

v1.0.1

Compare Source

🚀 Features

• experimental/lazy-barrel: advice on oversized barrel modules (#​9236) by @​shulaoda
• rolldown: inline optional-chain enum access (#​9379) by @​Dunqing
• chunk-optimization: dedupe already-loaded dynamic deps (#​9305) by @​IWANABETHATGUY
• binding: call moduleParsed hook in ParallelJsPlugin (#​9318) by @​jaehafe

🐛 Bug Fixes

• transform: enable enum_eval for transformSync and vite TS transform (#​9325) by @​Dunqing
• error: remove severity prefix from diagnostic messages (#​9262) by @​Kyujenius
• deps: pin pnpm to 10.23.0 to work around catalog mismatch on Netlify (#​9364) by @​shulaoda
• ci: pin mimalloc-safe to 0.1.58 (#​9361) by @​shulaoda
• dev/lazy: fix exports of lazy requests in lazy chunks (#​9249) by @​h-a-n-a
• rolldown_plugin_vite_resolve: handle errors in resolveSubpathImports callback (#​9355) by @​sapphi-red
• rolldown_plugin_lazy_compilation: use loadExports for fetched proxy to preserve original export names (#​9132) by @​h-a-n-a
• common: include offending index in HybridIndexVec panic message (#​9296) by @​SAY-5

🚜 Refactor

• ecmascript: extract semantic_builder_for_transform helper (#​9326) by @​Dunqing
• test: extract reusable static-import-cycle helper (#​9332) by @​IWANABETHATGUY

📚 Documentation

• clarify scope of topLevelVar (#​9380) by @​IWANABETHATGUY
• meta/design: add ast-mutation design doc (#​9338) by @​hyf0
• feat: add ai policy in contribution guide (#​9315) by @​mdong1909

⚡ Performance

• binding: enable mimalloc v3 to reduce idle memory (#​9349) by @​shulaoda

🧪 Testing

• mcs: cover require() in $initial group (#​9376) by @​hyf0
• add regression for CJS facade chunk merge into entry (#​9351) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• switch prepare-release to manual dispatch with version input (#​9383) by @​shulaoda
• migrate @rolldown/pluginutils to rolldown/plugins (#​9317) by @​shulaoda
• deps: pin libmimalloc-sys2 to 0.1.54 (#​9372) by @​shulaoda
• replace igorskyflyer/action-readfile with cat (#​9369) by @​sapphi-red
• deps: update test262 submodule for tests (#​9371) by @​rolldown-guard[bot]
• use app token for test dep update PRs (#​9368) by @​sapphi-red
• replace some actions with gh commands (#​9367) by @​sapphi-red
• replace action-semantic-pull-request with inline regex (#​9366) by @​sapphi-red
• remove pull_request_target workflows (#​9188) by @​Boshen
• deps: upgrade oxc to 0.130.0 (#​9360) by @​shulaoda
• deps: update github actions (major) (#​9348) by @​renovate[bot]
• deps: update github actions (#​9341) by @​renovate[bot]
• deps: update rust crates (#​9344) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.46.1 (#​9357) by @​renovate[bot]
• deps: update npm packages (#​9343) by @​renovate[bot]
• deps: update pnpm to v10.33.4 (#​9347) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to ^0.25.0 (#​9346) by @​renovate[bot]
• .claude: add rolldown-repl encoder, rename decode skill (#​9352) by @​IWANABETHATGUY
• deps: update crate-ci/typos action to v1.46.0 (#​9345) by @​renovate[bot]
• deps: update napi to v3.8.6 (#​9342) by @​renovate[bot]
• deps: update dependency vite-plus to v0.1.20 (#​9340) by @​renovate[bot]
• enable rollup chunking-form test (#​9335) by @​IWANABETHATGUY
• typo: fix typo in watcher options comment (#​9324) by @​thescripted

❤️ New Contributors

• @​Kyujenius made their first contribution in #​9262
• @​SAY-5 made their first contribution in #​9296
• @​thescripted made their first contribution in #​9324

vitest-dev/vitest (vitest)

v4.1.7

Compare Source

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in #​10384 (4f0f2)

    View changes on GitHub

v4.1.6

Compare Source

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in #​10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in #​10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in #​10276 (9f7b1)

    View changes on GitHub

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

Compare Source

• 1.25.2 is now available via the action
• 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

• 1.25.0 is now available via the action
• 1.25.0 is now the default version of zizmor used by the action

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.