Skip to content

fix(deps): update rolldown - #1947

Open
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/rolldown
Open

fix(deps): update rolldown#1947
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/rolldown

Conversation

@renovate

@renovate renovate Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
rolldown (source) 1.2.01.2.1 age confidence
tsdown (source) 0.22.50.22.14 age confidence

Release Notes

rolldown/rolldown (rolldown)

v1.2.1

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
⚡ Performance
🧪 Testing
⚙️ Miscellaneous Tasks
❤️ New Contributors
rolldown/tsdown (tsdown)

v0.22.14

Compare Source

   🚀 Features
  • Add CLI build concurrency option  -  by @​sxzz and Jeroen Zwartepoorte (8a14c)
    View changes on GitHub

v0.22.13

Compare Source

   🚀 Features
  • deps: Support neverBundle: true to externalize all dependencies  -  by @​sxzz (d30a7)
   🐞 Bug Fixes
    View changes on GitHub

v0.22.12

Compare Source

   🚨 Breaking Changes
    View changes on GitHub

v0.22.11

Compare Source

   🚀 Features
    View changes on GitHub

v0.22.10

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.22.9

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.22.8

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • config: Concat plugins arrays when merging config  -  by @​sxzz (b1c80)
    View changes on GitHub

v0.22.7

Compare Source

   🚀 Features
  • logger: Add suppressWarnings option to filter warnings  -  by @​sxzz (dc510)
    View changes on GitHub

v0.22.6

Compare Source

No significant changes

    View changes on GitHub

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • Between 09:00 AM and 06:59 PM, Monday through Friday (* 9-18 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 31, 2026 09:59
@changeset-bot

changeset-bot Bot commented Jul 31, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: e7ce211

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@tailor-platform/sdk Patch
@tailor-platform/create-sdk Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@pkg-pr-new

pkg-pr-new Bot commented Jul 31, 2026

Copy link
Copy Markdown

Open in StackBlitz

@tailor-platform/create-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/create-sdk@e7ce211

@tailor-platform/eslint-plugin-sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/eslint-plugin-sdk@e7ce211

@tailor-platform/sdk

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk@e7ce211

@tailor-platform/sdk-plugin-seed

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-seed@e7ce211

@tailor-platform/sdk-plugin-tailordb-erd

pnpm add https://pkg.pr.new/tailor-platform/sdk/@tailor-platform/sdk-plugin-tailordb-erd@e7ce211

commit: e7ce211

@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown

🗺️ ERD preview

Self-contained ERD viewer HTML built for this run. Each viewer can switch between the current schema and a diff against base branch main.

@github-actions

This comment has been minimized.

@github-actions

Copy link
Copy Markdown

🤖 Claude Dependency Review

📦 Update Summary

  • Library: tsdown
  • Version: 0.22.5 → 0.22.14
  • Change Type: Patch (9 patch releases)

📝 Release Notes

GitHub Releases

🔐 Security Assessment

  • Risk: 🟢 Low
  • Known vulnerabilities: None found. According to Aikido security analysis, tsdown has a 94% security health score with no vulnerabilities detected.
  • Supply-chain notes: No red flags detected. The package is maintained by @​sxzz and @​yyx990803 under the Rolldown project. No recent maintainer changes, no new suspicious lifecycle scripts, and no unexpected dependencies were found.

🚨 Breaking Changes

v0.22.12 contains a breaking change that affects the @​tsdown/exe feature:

  • Change: Standardize minimum Node.js version for SEA (Single Executable Applications)
  • Details: Updated the minimum Node.js version requirement for the executable feature from >=25.5.0 to >=25.7.0
  • Impact on this project: ✅ None — This project does not use the @​tsdown/exe package or the executable feature. The @​tsdown/exe package only appears as an optional peer dependency in pnpm-lock.yaml and is not installed or configured.

✨ Main Changes

v0.22.14 - CLI build concurrency

  • Add CLI build concurrency option for parallel builds

v0.22.13 - Dependency bundling control

  • Feature: Add neverBundle: true option to externalize all dependencies
    • Used in this project: ✅ This project uses deps: { neverBundle: [...] } in multiple tsdown configs
  • Bug Fix: Prevent tinyexec from modifying PATH environment variable

v0.22.12 - Node.js version standardization

  • Breaking change for executable feature only (see above)

v0.22.11 - Dependency resolution

  • Add resolveDepSubpath option for better dependency subpath resolution

v0.22.10 - Executable improvements & bug fixes

  • Support custom node index and download URLs for executables
  • Fix: External peerDependenciesMeta dependencies correctly
  • Fix: Handle Windows node archives on Linux

v0.22.9 - Rolldown upgrade

  • Upgrade rolldown to v1.2
  • Fix: Check dynamic imports in onlyImport option

v0.22.8 - Import-only dependencies

  • Add onlyImport option for dependency handling
  • Fix: Concatenate plugin arrays when merging configuration

v0.22.7 - Warning suppression

  • Add suppressWarnings option to filter build warnings

v0.22.6 - No significant changes

🔍 Impact Analysis

📁 Usage Locations

tsdown is used in the following 6 files:

  1. packages/sdk/tsdown.config.ts

    import { defineConfig, type TsdownPluginOption } from "tsdown";
    • Feature used: defineConfig, custom plugins, deps.neverBundle option (added in v0.22.13)
    • Impact: ✅ Benefits from the new neverBundle feature. No breaking changes affect this usage.
  2. packages/sdk-plugin-seed/tsdown.config.ts

    import { defineConfig } from "tsdown";
    • Feature used: defineConfig, deps.neverBundle option
    • Impact: ✅ Standard configuration usage. No breaking changes.
  3. packages/sdk-plugin-tailordb-erd/tsdown.config.ts

    import { defineConfig } from "tsdown";
    • Feature used: defineConfig, deps.neverBundle option, onSuccess hook
    • Impact: ✅ Standard configuration usage. No breaking changes.
  4. packages/sdk-codemod/tsdown.config.ts

    import { defineConfig } from "tsdown";
    • Feature used: defineConfig with multiple build configurations
    • Impact: ✅ No breaking changes affect this usage.
  5. packages/create-sdk/tsdown.config.ts

    import { defineConfig } from "tsdown";
    • Feature used: defineConfig
    • Impact: ✅ No breaking changes affect this usage.
  6. example/tests/scripts/analyze_minified_size.ts

    import { build } from "tsdown";
    • Feature used: Programmatic build() API for minification analysis
    • Impact: ✅ Uses the programmatic API directly. No breaking changes affect this usage.

Summary: All 6 usage locations are in devDependencies for build tooling. The project benefits from new features (especially neverBundle in v0.22.13) and bug fixes. No breaking changes affect this project since the executable feature is not used.

✅ Recommended Actions

  1. Merge this PR - The update is low-risk and brings useful improvements:

    • Bug fixes for dependency handling and PATH modification
    • The neverBundle feature (v0.22.13) that this project already uses
    • Upgrade to rolldown v1.2 with improved performance
  2. No code changes required - All existing tsdown configurations are compatible with v0.22.14

  3. Testing - Run the build to verify all packages build successfully:

    pnpm build

@renovate
renovate Bot force-pushed the renovate/rolldown branch from a17492f to f351f37 Compare August 1, 2026 17:54
@renovate renovate Bot changed the title chore(deps): update dependency tsdown to v0.22.14 fix(deps): update rolldown Aug 1, 2026
@tailor-platform-pr-trigger
tailor-platform-pr-trigger Bot requested a review from a team as a code owner August 1, 2026 17:54
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

Code Metrics Report (packages/sdk)

main (76a892b) #1947 (f05337a) +/-
Coverage 78.4% 78.4% 0.0%
Code to Test Ratio 1:0.4 1:0.4 0.0
Details
  |                    | main (76a892b) | #1947 (f05337a) | +/-  |
  |--------------------|----------------|-----------------|------|
  | Coverage           |          78.4% |           78.4% | 0.0% |
  |   Files            |            462 |             462 |    0 |
  |   Lines            |          17720 |           17720 |    0 |
  |   Covered          |          13909 |           13909 |    0 |
  | Code to Test Ratio |          1:0.4 |           1:0.4 |  0.0 |
  |   Code             |         126564 |          126564 |    0 |
  |   Test             |          61875 |           61875 |    0 |

SDK Configure Bundle Size

main (76a892b) #1947 (f05337a) +/-
configure-index-size 39.25KB 39.25KB 0KB
dependency-chunks-size 24.96KB 24.99KB 0.03KB
total-bundle-size 64.22KB 64.24KB 0.02KB

Runtime Performance

main (76a892b) #1947 (f05337a) +/-
Generate Median 2,497ms 2,451ms -46ms
Generate Max 2,589ms 2,489ms -100ms
Apply Build Median 2,556ms 2,503ms -53ms
Apply Build Max 2,616ms 2,520ms -96ms

Type Performance (instantiations)

main (76a892b) #1947 (f05337a) +/-
tailordb-basic 40,450 40,450 0
tailordb-optional 4,535 4,535 0
tailordb-relation 3,854 3,854 0
tailordb-validate 666 666 0
tailordb-hooks 5,499 5,499 0
tailordb-object 16,345 16,345 0
tailordb-enum 1,538 1,538 0
resolver-basic 12,120 12,120 0
resolver-nested 35,419 35,419 0
resolver-array 24,056 24,056 0
executor-schedule 4,489 4,489 0
executor-webhook 1,130 1,130 0
executor-record 4,542 4,542 0
executor-resolver 5,808 5,808 0
executor-operation-function 1,118 1,118 0
executor-operation-gql 1,126 1,126 0
executor-operation-webhook 1,137 1,137 0
executor-operation-workflow 1,931 1,931 0

Reported by octocov

@renovate

renovate Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants