[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@rollup/pluginutils (source)	^5.3.0 → ^5.5.1			devDependencies	minor
@rsbuild/core (source)	2.0.3 → 2.2.14			devDependencies	minor
@rslib/core (source)	^0.21.3 → ^0.23.2			devDependencies	minor
@rslint/core	^0.5.1 → ^0.9.5			devDependencies	minor
@types/node (source)	^24.12.2 → ^24.19.2			devDependencies	minor
@types/semver (source)	^7.7.1 → ^7.8.0			devDependencies	minor
node	24.15.0 → 24.22.1			uses-with	minor
pnpm (source)	10.33.2 → 10.34.9			packageManager	minor
prettier (source)	^3.8.3 → ^3.9.10			devDependencies	minor
semver	^7.7.4 → ^7.8.5			devDependencies	minor
simple-git-hooks	^2.13.1 → ^2.14.0			devDependencies	minor

---

Release Notes

rollup/plugins (@​rollup/pluginutils)

v5.5.1

2026-10-21

Updates

• pluginutils: compile createFilter patterns once (#​2026)

v5.5.0

2026-10-21

Features

• pluginutils: add staticBlock(es2022) support (#​2000)

v5.4.0

2026-05-29

Features

• feat: named exports for reserved-word keys + fix duplicate default export in dataToEsm (#​2002)

web-infra-dev/rsbuild (@​rsbuild/core)

v2.2.14

Compare Source

What's Changed

New Features 🎉

• feat(create-rsbuild): add TanStack Start template by @​chenjiahan in #​8685
• feat(create-rsbuild): add TanStack Start Solid template by @​chenjiahan in #​8688

Bug Fixes 🐞

• fix(core): recognize charset attributes in custom HTML templates by @​Jarvis636431 in #​8670
• fix(core): handle file watcher errors by @​chenjiahan in #​8671
• fix(core): suggest latest Rsdoctor core when missing by @​yifancong in #​8674
• fix(core): include user-defined fields in import.meta.env by @​chenjiahan in #​8672
• fix(core): limit PostCSS config search to workspace root by @​chenjiahan in #​8673
• fix(core): only serve publicDir for GET and HEAD requests by @​ybai08 in #​8682
• fix(create-rsbuild): preserve non-interactive TanStack creation by @​chenjiahan in #​8686
• fix(create-rsbuild): clarify basic template labels by @​chenjiahan in #​8687

Document 📖

• docs: update Rsdoctor guide for v2 by @​yifancong in #​8459
• docs: simplify Rsdoctor setup guide by @​chenjiahan in #​8676
• docs: highlight Rsdoctor agent-driven analysis by @​chenjiahan in #​8677

Other Changes

• chore(deps): upgrade Rspress to 2.1.0-beta.1 by @​SoonIter in #​8675
• chore(deps): update dependency cac to ^7.1.0 by @​renovate in #​8678
• chore(deps): update pnpm to v12.14.0 by @​renovate in #​8680
• chore(deps): update all patch dependencies by @​renovate in #​8683
• release: v2.2.14 by @​chenjiahan in #​8690

Full Changelog: web-infra-dev/rsbuild@v2.2.13...v2.2.14

v2.2.13

Compare Source

What's Changed

New Features 🎉

• feat(core): add internal Host validation helper by @​chenjiahan in #​8661
• feat(core): export jiti subpath by @​chenjiahan in #​8662
• feat(core): add opt-in dev server Host validation by @​chenjiahan in #​8663
• feat(core): validate preview server request hosts by @​chenjiahan in #​8666
• feat(deps): update @​rspack/core to 2.2.9 by @​chenjiahan in #​8667

Performance 🚀

• perf(core): bound file size compression across environments by @​chenjiahan in #​8656
• perf(core): avoid asset descriptor lookups in file size reporting by @​chenjiahan in #​8657
• perf(core): reuse source buffers for file size reporting by @​chenjiahan in #​8658
• perf(core): skip file labels when size details are disabled by @​chenjiahan in #​8659

Bug Fixes 🐞

• fix(core): calculate file sizes during emit by @​LingyuCoder in #​8650
• fix(core): manage proxy WebSocket upgrades explicitly by @​chenjiahan in #​8660

Document 📖

• docs: fix preconnect link attribute example by @​chenjiahan in #​8637
• docs: fix Module Federation configuration examples by @​chenjiahan in #​8638
• docs: improve page descriptions for discovery by @​chenjiahan in #​8636
• docs: remove outdated Babel React Compiler example links by @​chenjiahan in #​8664
• docs: document server.allowedHosts by @​chenjiahan in #​8665

Other Changes

• chore(deps): update swc monorepo to v17 by @​renovate in #​8633
• chore(deps): update dependency preact to v11 by @​renovate in #​8632
• chore(docs): prepare website for type-aware linting by @​chenjiahan in #​8639
• chore(test): prepare core tests for type-aware linting by @​chenjiahan in #​8640
• chore(test): prepare plugin tests for type-aware linting by @​chenjiahan in #​8641
• chore(lint): scope typed linting for templates and fixtures by @​chenjiahan in #​8642
• chore(deps): upgrade rstack to 0.8.3 by @​chenjiahan in #​8644
• chore(lint): enable automatic TypeScript project discovery by @​chenjiahan in #​8643
• chore(lint): enable import/no-named-as-default by @​chenjiahan in #​8645
• chore(lint): enable import/named and await-thenable by @​chenjiahan in #​8646
• chore(lint): enable no-unsafe-member-access by @​chenjiahan in #​8647
• chore(deps): update all patch dependencies by @​renovate in #​8651
• chore(types): clarify core assignment boundaries by @​chenjiahan in #​8648
• chore(test): type dynamically loaded e2e fixtures by @​chenjiahan in #​8649
• chore(deps): update dependency octane to ^0.13.0 by @​renovate in #​8653
• release: v2.2.13 by @​chenjiahan in #​8668

Full Changelog: web-infra-dev/rsbuild@v2.2.12...v2.2.13

v2.2.12

Compare Source

What's Changed

New Features 🎉

• feat(core): add tapOnce to internal async hooks by @​chenjiahan in #​8594

Performance 🚀

• perf(server): skip unnecessary HTML path normalization by @​chenjiahan in #​8628
• perf(server): reduce gzip overhead for large responses by @​chenjiahan in #​8627
• perf(core): avoid reading assets that writeToDisk skips by @​guru-irl in #​8615
• perf(core): avoid buffering compressed output for size reporting by @​chenjiahan in #​8613

Bug Fixes 🐞

• fix(server): decode request paths when completing HTML files by @​kwy404 in #​8618
• fix(plugin-solid): align refresh with Solid rc.13 by @​chenjiahan in #​8623
• fix(server): close gzip streams when responses close by @​chenjiahan in #​8617
• fix(server): avoid leaking file streams for HEAD requests by @​chenjiahan in #​8614
• fix(core): preserve proxy logger formatting arguments by @​hardfist in #​8609
• fix(core): respect minimizer options for CSS URL imports by @​chenjiahan in #​8607
• fix(core): avoid minifying CSS URL assets twice by @​chenjiahan in #​8606
• fix(core): resolve asset URLs in CSS ?url imports by @​chenjiahan in #​8604
• fix(core): preserve externals for classic worker targets by @​chenjiahan in #​8600
• fix(server): use one-time internal dev server hooks by @​chenjiahan in #​8588

Document 📖

• docs: preserve arguments in logger override examples by @​chenjiahan in #​8611
• docs: explain Node.js externals for Cloudflare Workers by @​chenjiahan in #​8605
• docs: explain workerd export conditions by @​chenjiahan in #​8603
• docs: explain Cloudflare built-in module externals by @​chenjiahan in #​8602
• docs: explain externals for classic workers by @​chenjiahan in #​8601

Other Changes

• release: v2.2.12 by @​chenjiahan in #​8631
• release: @​rsbuild/plugin-solid v2.0.0-rc.1 by @​chenjiahan in #​8630
• chore(deps): update all patch dependencies by @​renovate in #​8619
• chore: use chore prefix for all Renovate updates by @​chenjiahan in #​8626
• chore(deps): update dependency octane to ^0.8.0 by @​renovate in #​8625
• chore(deps): update pnpm to v12.9.1 by @​renovate in #​8624
• chore(deps): update memfs to v4.80.0 by @​renovate in #​8622
• chore(deps): update dependency @​tsrx/typescript-plugin to ^0.6.1 by @​renovate in #​8621
• chore(deps): update dependency @​shikijs/transformers to ^4.5.0 by @​renovate in #​8620
• chore(deps): update dependency node to v24.21.0 by @​renovate in #​8612

Full Changelog: web-infra-dev/rsbuild@v2.2.11...v2.2.12

v2.2.11

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to 2.2.8 by @​chenjiahan in #​8598

Performance 🚀

• perf(core): skip Node.js compile cache in CI by @​chenjiahan in #​8565
• perf(core): avoid copying complete asset buffers by @​chenjiahan in #​8595

Bug Fixes 🐞

• fix(core): respect CI=false consistently by @​chenjiahan in #​8567
• fix(core): preserve externals for module worker targets by @​chenjiahan in #​8573
• fix(deps): update dependency octane to ^0.6.0 by @​renovate[bot] in #​8575
• fix(server): share graceful shutdown listeners across instances by @​chenjiahan in #​8580
• fix(server): clean up preview shortcuts on close by @​chenjiahan in #​8582
• fix(client): clean up overlay keyboard listeners on removal by @​chenjiahan in #​8584
• fix(server): preserve shared stdin for active shortcuts by @​chenjiahan in #​8583
• fix(client): clear runtime error history on hot updates by @​chenjiahan in #​8585
• fix(plugin-react): apply reactCompiler only to web environments by @​BleedingDev in #​8568
• fix(server): release closed socket server reference by @​chenjiahan in #​8589

Document 📖

• docs: clarify worker chunk splitting behavior by @​chenjiahan in #​8577
• docs: explain Cloudflare Workers build configuration by @​chenjiahan in #​8581
• docs: clarify React Compiler usage in non-web environments by @​chenjiahan in #​8587

Other Changes

• test(core): verify module worker runtime behavior by @​chenjiahan in #​8564
• test(core): cover shared chunks in module worker targets by @​chenjiahan in #​8566
• chore(deps): update all patch dependencies by @​renovate[bot] in #​8569
• chore(deps): update memfs to v4.79.0 by @​renovate[bot] in #​8571
• chore(deps): update dependency ws to ^8.22.0 by @​renovate[bot] in #​8570
• chore(deps): update sass to ^1.105.0 by @​renovate[bot] in #​8572
• test(core): cover shared chunks in classic workers by @​chenjiahan in #​8574
• chore(deps): update swc monorepo to v15 by @​renovate[bot] in #​8576
• chore(test): remove FORCE_COLOR workaround for Rstest by @​fi3ework in #​8578
• test(core): cover module worker entry exports by @​chenjiahan in #​8579
• release: @​rsbuild/plugin-react v2.1.1 by @​chenjiahan in #​8586
• release: v2.2.11 by @​chenjiahan in #​8599

Full Changelog: web-infra-dev/rsbuild@v2.2.10...v2.2.11

v2.2.10

Compare Source

What's Changed

New Features 🎉

• feat(core): support output.module for web-worker target by @​BleedingDev in #​8557

Performance 🚀

• perf(core): cache source map resolution per browser error by @​chenjiahan in #​8531
• perf(core): skip disk copy work before reading asset content by @​chenjiahan in #​8561

Bug Fixes 🐞

• fix(core): flush gzip buffers for streaming responses by @​chenjiahan in #​8533
• fix(core): limit response flushing to the gzip stream by @​chenjiahan in #​8534
• fix(types): expose optional flush on middleware responses by @​chenjiahan in #​8536
• fix(core): handle missing ESM HMR manifests by @​chenjiahan in #​8537
• fix(core): reset compile done state on watch restart by @​chenjiahan in #​8538
• fix(core): avoid treating sibling dist paths as nested by @​kwy404 in #​8544
• fix(core): dedupe nested paths with dot-prefixed names by @​chenjiahan in #​8549
• fix(core): check path boundaries in lazy compilation logs by @​chenjiahan in #​8550
• fix(core): normalize and share path containment checks by @​chenjiahan in #​8551
• fix(core): avoid printing 60.0s in build time logs by @​kwy404 in #​8552
• fix(core): avoid writing assets twice when writeToDisk is true by @​kwy404 in #​8556
• fix(core): avoid retaining CJS runner module scopes by @​chenjiahan in #​8559
• fix(server): remove WebSocket upgrade listeners on close by @​chenjiahan in #​8562

Document 📖

• docs: explain flushing compressed streaming responses by @​chenjiahan in #​8535
• docs: keep tests minimal and behavior-focused by @​chenjiahan in #​8540

Other Changes

• chore(deps): upgrade pnpm to 12.6 and enable autoDedupe by @​chenjiahan in #​8539
• chore(deps): update dependency octane to ^0.5.0 by @​renovate in #​8547
• chore(deps): group memfs and jsonjoy Renovate updates by @​chenjiahan in #​8548
• test(core): cover writeToDisk writes in e2e by @​chenjiahan in #​8560
• release: v2.2.10 by @​chenjiahan in #​8563

Full Changelog: web-infra-dev/rsbuild@v2.2.9...v2.2.10

v2.2.9

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to 2.2.7 by @​chenjiahan in #​8528

Performance 🚀

• perf(deps): upgrade html-rspack-plugin to v6.1.11 by @​chenjiahan in #​8513
• perf(core): cache remapping import in transform loader by @​chenjiahan in #​8519
• perf(core): cache trace-mapping import in browser logs by @​chenjiahan in #​8520
• perf(core): cache range-parser import in assets middleware by @​chenjiahan in #​8521
• perf(core): reuse vm module in ESM runner by @​chenjiahan in #​8522
• perf(core): statically import util and zlib in server helpers by @​chenjiahan in #​8523
• perf(core): cache imports for watchers, hashing and manifests by @​chenjiahan in #​8526
• perf(core): reuse dynamic import function in CJS runner by @​chenjiahan in #​8525
• perf(core): defer SSR runner file reads until cache misses by @​chenjiahan in #​8527

Bug Fixes 🐞

• fix(types): prebundle ws declarations by @​chenjiahan in #​8510

Document 📖

• docs: remove redundant CLAUDE.md setup tip by @​chenjiahan in #​8518

Other Changes

• chore(deps): upgrade Rstack to 0.7.6 and Rstest to 0.12 by @​chenjiahan in #​8511
• test: configure Playwright launch options via helper by @​chenjiahan in #​8512
• chore(deps): update pnpm to v12.5.1 by @​renovate[bot] in #​8515
• chore(deps): update all patch dependencies by @​renovate[bot] in #​8514
• chore(deps): update dependency octane to ^0.3.0 by @​renovate[bot] in #​8517
• chore(deps): update rstest to ^0.12.0 by @​renovate[bot] in #​8516
• chore(deps): upgrade rstack to v0.8.0 by @​SoonIter in #​8524
• release: v2.2.9 by @​chenjiahan in #​8529

Full Changelog: web-infra-dev/rsbuild@v2.2.8...v2.2.9

v2.2.8

Compare Source

What's Changed

New Features 🎉

• feat(core): add environment hot.onConnect API by @​chenjiahan in #​8504
• feat(deps): update @​rspack/core to 2.2.6 by @​chenjiahan in #​8508

Performance 🚀

• perf(core): reduce memory filesystem buffer allocations by @​chenjiahan in #​8507

Refactor 🔨

• refactor(core): support sending HMR messages to a single socket by @​chenjiahan in #​8503

Document 📖

• docs: document environment hot.onConnect API by @​chenjiahan in #​8506

Other Changes

• test(core): cover node chunk filename conflicts by @​chenjiahan in #​8500
• chore(deps): update dependency memfs to ^4.78.0 by @​renovate[bot] in #​8502
• chore(deps): update dependency @​tsrx/typescript-plugin to ^0.4.1 by @​renovate[bot] in #​8501
• release: v2.2.8 by @​chenjiahan in #​8509

Full Changelog: web-infra-dev/rsbuild@v2.2.7...v2.2.8

v2.2.7

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to 2.2.5 by @​chenjiahan in #​8498

Other Changes

• test: cover CSS entry bundling by @​chenjiahan in #​8492
• test: split Rsdoctor auto-loading fixtures by @​yifancong in #​8491
• test(core): isolate Rsdoctor fallback resolution by @​yifancong in #​8493
• release: v2.2.7 by @​chenjiahan in #​8499

Full Changelog: web-infra-dev/rsbuild@v2.2.6...v2.2.7

v2.2.6

Compare Source

What's Changed

New Features 🎉

• feat(core): support Rsdoctor v2 auto-loading by @​yifancong in #​8454
• feat(deps): update @​rspack/core to 2.2.4 by @​chenjiahan in #​8489

Performance 🚀

• perf(core): re-enable compact hashed IDs in production by @​chenjiahan in #​8478

Bug Fixes 🐞

• fix(core): apply security.nonce to html.tags by @​chenjiahan in #​8472
• fix(core): use absolute paths for deeply nested parent references by @​chenjiahan in #​8475
• fix(core): move import maps before module loading tags by @​chenjiahan in #​8476
• fix(deps): update all patch dependencies by @​renovate[bot] in #​8484

Other Changes

• chore(deps): upgrade pnpm to v12.4.0 by @​chenjiahan in #​8473
• chore(docs): disable automatic browser opening by @​chenjiahan in #​8474
• chore(ci): skip tests for documentation and repository metadata by @​chenjiahan in #​8477
• chore: remove unused fixtures and website assets by @​chenjiahan in #​8479
• chore: use shared rstack-docs-writer skill by @​chenjiahan in #​8480
• chore(deps): update dependency rspack-vue-loader to ^17.7.0 by @​renovate[bot] in #​8481
• chore(deps): update swc monorepo to v14 by @​renovate[bot] in #​8483
• chore(deps): update pnpm/action-setup action to v6.1.0 by @​renovate[bot] in #​8482
• chore(deps): update dependency memfs to ^4.76.0 by @​renovate[bot] in #​8485
• chore(deps): update dependency svelte to ^5.57.0 by @​renovate[bot] in #​8487
• chore(deps): update sass to ^1.104.1 by @​renovate[bot] in #​8486
• chore(deps): update react to v19.3.0 by @​renovate[bot] in #​8488
• release: v2.2.6 by @​chenjiahan in #​8490

Full Changelog: web-infra-dev/rsbuild@v2.2.5...v2.2.6

v2.2.5

Compare Source

What's Changed

New Features 🎉

• feat(core): support Brotli file size reporting by @​chenjiahan in #​8458
• feat(core): support custom compression levels in file size reporting by @​chenjiahan in #​8464

Bug Fixes 🐞

• fix(types): make file size compression type optional by @​chenjiahan in #​8466
• fix(core): show compressed size diff when only printing totals by @​chenjiahan in #​8467

Document 📖

• docs: consolidate website editing guidelines by @​chenjiahan in #​8460
• docs: consolidate e2e testing guidelines by @​chenjiahan in #​8461
• docs: correct dev asset prefix resolution by @​Fyerl in #​8462
• docs: correct HTML tag examples and hash behavior by @​Fyerl in #​8463
• docs: simplify dev.assetPrefix boolean options by @​chenjiahan in #​8465

Other Changes

• chore(ci): use major-only Node.js version by @​chenjiahan in #​8468
• chore: update pull request template by @​chenjiahan in #​8469
• chore(deps): upgrade @​rstackjs/load-config to v1.0.0 by @​chenjiahan in #​8470
• release: v2.2.5 by @​chenjiahan in #​8471

Full Changelog: web-infra-dev/rsbuild@v2.2.4...v2.2.5

v2.2.4

Compare Source

What's Changed

New Features 🎉

• feat: log after the initial watch build by @​chenjiahan in #​8426
• feat(plugin-solid): add extensions option by @​chenjiahan in #​8443
• feat(deps): update @​rspack/core to 2.2.3 by @​chenjiahan in #​8453

Bug Fixes 🐞

• fix(types): mark server callback routes as readonly by @​chenjiahan in #​8423
• fix: defer build logs until all progress bars finish by @​chenjiahan in #​8440
• fix(deps): upgrade rspack-chain to 2.3.2 by @​chenjiahan in #​8441
• fix(plugin-solid): preserve native hydration module imports by @​chenjiahan in #​8444

Refactor 🔨

• refactor: improve type safety in core, plugins and tests by @​chenjiahan in #​8437
• refactor: use named React imports by @​chenjiahan in #​8439
• refactor(plugin-solid): migrate to Solid compiler packages by @​chenjiahan in #​8445
• refactor(plugin-solid): simplify compiler defaults by @​chenjiahan in #​8446

Document 📖

• docs: use separate web and node output directories by @​chenjiahan in #​8419
• docs: document how to disable async chunks by @​chenjiahan in #​8422
• docs: clarify Solid plugin setup and capabilities by @​chenjiahan in #​8450
• docs: simplify repository agent instructions by @​chenjiahan in #​8452
• docs: simplify AGENTS.md examples by @​chenjiahan in #​8456

Other Changes

• test: cover asset prefix path boundaries by @​chenjiahan in #​8420
• chore(deps): upgrade Rstack to v0.7.3 by @​chenjiahan in #​8424
• chore(e2e): upgrade test-utils to v1.0.0 by @​chenjiahan in #​8427
• chore: enable restrict-template-expressions lint rule by @​chenjiahan in #​8428
• chore(deps): update dependency node to v24.20.0 by @​renovate[bot] in #​8432
• chore(deps): update dependency memfs to ^4.71.0 by @​renovate[bot] in #​8431
• chore(deps): update dependency happy-dom to ^20.14.0 by @​renovate[bot] in #​8430
• chore: enable unicorn/prefer-array-some lint rule by @​chenjiahan in #​8434
• chore(deps): update dependency octane to ^0.2.3 by @​renovate[bot] in #​8433
• chore(deps): update all patch dependencies by @​renovate[bot] in #​8435
• chore: enable import recommended lint preset by @​chenjiahan in #​8438
• test(plugin-solid): expand SSR and hydration coverage by @​chenjiahan in #​8447
• chore(build): enable Rspack runtime mode by @​Timeless0911 in #​8448
• test: fail e2e tests on unexpected build warnings by @​chenjiahan in #​8449
• release: @​rsbuild/plugin-solid v2.0.0-rc.0 by @​chenjiahan in #​8451
• chore(skills): refine workflows and update installed skills by @​chenjiahan in #​8455
• release: v2.2.4 by @​chenjiahan in #​8457

Full Changelog: web-infra-dev/rsbuild@v2.2.3...v2.2.4

v2.2.3

Compare Source

What's Changed

Bug Fixes 🐞

• fix(core): exclude Node outputs from asset serving by @​chenjiahan in #​8415
• fix(core): prevent asset prefix path traversal by @​chenjiahan in #​8416
• fix(plugin-svgr): avoid redundant type assertion by @​SoonIter in #​8413

Other Changes

• chore: update Rstack config by @​chenjiahan in #​8411
• chore: enable no-unsafe-call lint rule by @​chenjiahan in #​8412
• chore(deps): upgrade Rslib to v1.0.0 by @​Timeless0911 in #​8417
• release: v2.2.3 by @​chenjiahan

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.