fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@astrojs/sitemap (source)	^3.7.0 → ^3.7.1
@rslib/core (source)	0.19.4 → 0.20.0
@rstest/core (source)	^0.8.3 → ^0.9.2
@types/node (source)	24.11.0 → 24.12.0
fs-extra	^11.3.3 → ^11.3.4
pnpm (source)	10.28.2 → 10.32.1
pnpm (source)	10.28.2 → 10.32.1
rollup (source)	^4.57.1 → ^4.59.0

---

Release Notes

withastro/astro (@​astrojs/sitemap)

v3.7.1

Compare Source

Patch Changes

• #​15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

• #​14956 0ff51df Thanks @​matthewp! - Updates usage of zod to own dependency rather than relying on astro/zod

• #​15036 f125a73 Thanks @​florian-lefebvre! - Updates how routes are retrieved to avoid relying on a deprecated API

• #​15373 14252b2 Thanks @​renovate! - Updates zod to v4

web-infra-dev/rslib (@​rslib/core)

v0.20.0

Compare Source

Breaking changes 🚨

Drop Node.js 18 support

Rslib v0.20 requires Node.js 20.19+ or 22.12+, Node.js 18 is no longer supported.

Rsbuild / Rspack v2

Rslib v0.20 now depends on beta version of @​rsbuild/core v2 and @​rspack/core v2. If you use custom Rsbuild / Rspack configurations or plugins, you may need to make corresponding adjustments.

See the Rsbuild v2 upgrade guide for all breaking changes.

Deprecate experiments.advancedEsm

experiments.advancedEsm is now deprecated and effectively ignored. Advanced ESM behavior is the default in both bundle and bundleless mode.

What you need to do:

• Remove experiments.advancedEsm from your config
• Verify the output behaviour

Rename type StartServerResult

The exported type StartServerResult has been renamed to StartDevServerResult.

What's Changed

New Features 🎉

• feat!: upgrade Rsbuild to v2 and deprecate experiments.advancedEsm by @​Timeless0911 in #​1513
• feat: updates the default contenthash length in filenames from 8 to 10 by @​Timeless0911 in #​1515

Bug Fixes 🐞

• fix: validate glob entry correctness in bundle mode by @​9aoy in #​1512
• fix(core): allow preserve jsx in bundleless mode to coexist with bundle mode by @​Timeless0911 in #​1523

Document 📖

• docs: add comprehensive CSS guide by @​Timeless0911 in #​1495
• docs: add tsc migration guide by @​Timeless0911 in #​1503
• docs: enhance tsup migration guide with detailed examples by @​Timeless0911 in #​1504
• docs: add agent skill guide to tsc and tsup migration docs by @​Timeless0911 in #​1505
• docs: polish create-pr skill by @​Timeless0911 in #​1518
• docs: update create-pr skill guidelines by @​Timeless0911 in #​1524

Other Changes

• test: cleanup create-rslib unnecessary tests and suppress logs by @​Timeless0911 in #​1490
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1488
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1494
• chore: use pnpm to run build scripts by @​Timeless0911 in #​1499
• chore(deps): update dependency @​shikijs/transformers to v4 by @​renovate[bot] in #​1501
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1500
• chore: add Copilot review instuctions by @​fi3ework in #​1507
• chore: add create-pr skill by @​Timeless0911 in #​1506
• chore: add internal metadata to create-pr skill by @​Timeless0911 in #​1508
• refactor!: drop support for Node 18 by @​Timeless0911 in #​1509
• chore(deps): update dependency cac to v7 by @​renovate[bot] in #​1502
• test(create-rslib): split parseTemplateName into separate module by @​Timeless0911 in #​1514
• chore(deps): bump rspress to 2.0.4 and align migration docs by @​Timeless0911 in #​1516
• chore(deps): update actions/setup-node digest to 53b8394 by @​renovate[bot] in #​1520
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1521
• chore(deps): update dependency @​shikijs/transformers to ^4.0.2 by @​renovate[bot] in #​1522
• chore(deps): upgrade latest Rslib/Rsbuild canary version by @​Timeless0911 in #​1517
• chore(deps): update @​rsbuild/core to 2.0.0-beta.8 by @​Timeless0911 in #​1525
• Release v0.20.0 by @​Timeless0911 in #​1526

Full Changelog: web-infra-dev/rslib@v0.19.6...v0.20.0

v0.19.6

Compare Source

What's Changed

Document 📖

• docs: clarify dts.build requirement by @​Timeless0911 in #​1482
• docs: update output format guide by @​Timeless0911 in #​1483

Other Changes

• chore(deps): update actions/checkout digest to de0fac2 by @​renovate[bot] in #​1477
• chore(deps): update @​typescript/native-preview by @​Timeless0911 in #​1479
• chore: update @​rslint/core to 0.2.1 and refactor some codes by @​Timeless0911 in #​1480
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1478
• refactor(create-rslib): remove vitest template by @​Timeless0911 in #​1481
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1484
• Release v0.19.6 by @​Timeless0911 in #​1486

Full Changelog: web-infra-dev/rslib@v0.19.5...v0.19.6

v0.19.5

Compare Source

What's Changed

Document 📖

• docs: add guide for using Rspress with Rslib by @​SoonIter in #​1471
• docs: add Rsdoctor guide by @​Timeless0911 in #​1472
• docs: fix Rspress plugin URLs to official-plugins path by @​SoonIter in #​1474

Other Changes

• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1470
• chore(deps): upgrade Rspack to v1.7.5 by @​Timeless0911 in #​1473
• chore(deps): bump Rsbuild 1.7.3 by @​Timeless0911 in #​1475
• Release v0.19.5 by @​Timeless0911 in #​1476

Full Changelog: web-infra-dev/rslib@v0.19.4...v0.19.5

web-infra-dev/rstest (@​rstest/core)

v0.9.2

Compare Source

What's Changed

Document 📖

• docs: add esm tip when migrating from jest by @​9aoy in #​1032

Other Changes

• ci: skip no-isolate e2e on Node 20 by @​fi3ework in #​1023
• test: simplify browser e2e headless setup by @​fi3ework in #​1028
• refactor(core): delegate agent detection to std-env by @​fi3ework in #​1029
• chore(deps): upgrade Rslib 0.20 canary version by @​Timeless0911 in #​1030
• chore(deps): update actions/setup-node digest to 53b8394 by @​renovate[bot] in #​1001
• chore(deps): update @​rslib/core and @​rsbuild/core by @​Timeless0911 in #​1034

Full Changelog: web-infra-dev/rstest@v0.9.1...v0.9.2

v0.9.1

Compare Source

What's Changed

Performance 🚀

• perf: fix cssFilterLoader not working with less / sass plugins by @​9aoy in #​1025

Bug Fixes 🐞

• fix: bail configuration should work with the test file error by @​9aoy in #​997
• fix(core): restore async doMock factory and doUnmock recovery by @​fi3ework in #​998
• fix(e2e): skip headed browser tests on Linux CI without display by @​fi3ework in #​999
• fix: wasm load error with dynamic import expression by @​9aoy in #​991
• fix: apply default watch ignore options for browser mode by @​9aoy in #​1006
• fix(browser): disable rsbuild hmr outside watch mode by @​fi3ework in #​1010
• fix(watch): cleanup resources on Ctrl+Z exit by @​fi3ework in #​1012
• fix(vscode): prevent hanging test runs on worker failures by @​fi3ework in #​1014
• fix(browser): serialize headed file execution by @​fi3ework in #​1017
• fix(browser): eager compile setup files in watch mode by @​fi3ework in #​1021
• fix: should not exclude dist/ directory when collecting coverage by @​9aoy in #​1022
• fix: handle undefined env values correctly when applying worker runtime env by @​9aoy in #​1024
• fix(browser): support quitting watch mode from the terminal by @​fi3ework in #​1026

Document 📖

• docs: introduce rs.mockRequire and rs.doMockRequire APIs by @​9aoy in #​1005
• docs: add global API types tip when migrating from jest by @​9aoy in #​1020

Other Changes

• chore(deps): update dependency open-editor to v6 by @​renovate[bot] in #​1002
• chore(deps): update actions/checkout digest to de0fac2 by @​renovate[bot] in #​1000
• chore(deps): update dependency rslog to v2 by @​renovate[bot] in #​1003
• chore(deps): update dependency @​clack/prompts to v1 by @​renovate[bot] in #​1004
• ci(e2e): enable CI test-case retries by @​fi3ework in #​1011
• chore(deps): update dependency cac to v7 by @​renovate[bot] in #​1007
• chore(deps): update dependency sirv to v3 by @​renovate[bot] in #​1008
• chore(deps): update dependency prettier-plugin-packagejson to v3 by @​renovate[bot] in #​1016
• chore(deps): update dependency check-dependency-version-consistency to v6 by @​renovate[bot] in #​1015
• test: fix MODULE_TYPELESS_PACKAGE_JSON warnings by @​9aoy in #​1018
• test: enable headless mode by default in tests by @​9aoy in #​1019
• chore(deps): update dependency chai to v6 by @​renovate[bot] in #​512
• release: 0.9.1 by @​9aoy in #​1027

Full Changelog: web-infra-dev/rstest@v0.9.0...v0.9.1

v0.9.0

Compare Source

What's Changed

New Features 🎉

• feat(deps)!: update @​rsbuild/core to v2 beta by @​9aoy in #​968
• feat(vscode): add editor diagnostics and clean up failure UI by @​fi3ework in #​980
• feat: add rs.waitFor and rs.waitUntil utilities by @​9aoy in #​982
• feat(adapter-rsbuild): export toRstestConfig method by @​9aoy in #​978
• feat(reporter): add testLists option to md reporter by @​fi3ework in #​987
• feat(browser): support Locator and Assertion by @​fi3ework in #​948

Performance 🚀

• perf: use advanced serialization by @​claneo in #​792
• perf(CLI): change default config loader from jiti to auto by @​9aoy in #​992

Bug Fixes 🐞

• fix(browser): align browser reporter lifecycle hooks across run and watch by @​fi3ework in #​976
• fix(browser): remove default process shim while keep env stubbing support by @​fi3ework in #​981
• fix(browser): resolve browser failure annotations to test sources in github-actions reporter by @​fi3ework in #​989
• fix: error messages not displayed due to stream interception by @​9aoy in #​993
• fix(core): avoid misdetecting cursor terminal as agent by @​fi3ework in #​994

Document 📖

• docs: add more detailed docs for migration by @​fi3ework in #​975
• docs: add migrate-to-rstest skill to migration guide by @​9aoy in #​983

Other Changes

• refactor(browser): sessionize headless scheduler and unify dispatch RPC by @​fi3ework in #​963
• refactor!: drop support for Node 18 by @​9aoy in #​969
• chore(agent): add mermaid based architecture diagram by @​fi3ework in #​977
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​890
• chore(deps): update dependency tinypool to v2 by @​renovate[bot] in #​979
• chore: fix some lint errors by @​9aoy in #​984
• chore(workflow): split e2e tests by @​9aoy in #​986
• release(adapter-rsbuild): 0.2.1 by @​9aoy in #​988

Full Changelog: web-infra-dev/rstest@v0.8.5...v0.9.0

v0.8.5

Compare Source

What's Changed

Bug Fixes 🐞

• fix: prevent rpc timeout by @​9aoy in #​961
• fix(browser): register Rstest API before browser setup files by @​fi3ework in #​966
• fix(mockRequire): __webpack_require__.r is not a function by @​9aoy in #​965

Full Changelog: web-infra-dev/rstest@v0.8.4...v0.8.5

v0.8.4

Compare Source

What's Changed

New Features 🎉

• feat(ui): add viewport option by @​fi3ework in #​945

Performance 🚀

• perf(browser): add lightweight scheduler page for headless mode by @​fi3ework in #​952

Bug Fixes 🐞

• fix: reorganize the logic of color and remove the forced default values by @​fi3ework in #​946
• fix: setup files run only once with no-isolate by @​claneo in #​947
• fix(browser): unify error reporting and avoid duplicate error messages by @​fi3ework in #​950
• fix: should return the same spy instance when respy by @​9aoy in #​955
• fix(core): include worker stderr in unexpected-exit summary by @​fi3ework in #​956

Document 📖

• docs: update vitest migration guide by @​9aoy in #​953
• docs(migration): use diff code block by @​9aoy in #​954
• docs: add TypeScript typings guide for custom matchers by @​9aoy in #​957

Other Changes

• test: drop browser mode test from no-isolate test by @​fi3ework in #​944
• refactor(browser): centralize browser config validation in @​rstest/browser by @​fi3ework in #​951
• test(browser-mode): guard headed e2e case by display availability by @​fi3ework in #​958
• chore(deps): bump rspress 2.0 by @​9aoy in #​918
• chore(deps): update dependency axios to v1.13.5 [security] by @​renovate[bot] in #​959

Full Changelog: web-infra-dev/rstest@v0.8.3...v0.8.4

jprichardson/node-fs-extra (fs-extra)

v11.3.4

Compare Source

• Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#​1038, #​1064)

pnpm/pnpm (pnpm)

v10.32.1: pnpm 10.32.1

Compare Source

Patch Changes

• Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #​10909.

Platinum Sponsors

Gold Sponsors

v10.32.0: pnpm 10.32

Compare Source

Minor Changes

• Added --all flag to pnpm approve-builds that approves all pending builds without interactive prompts #​10136.

Patch Changes

• Reverted change related to setting explicitly the npm config file path, which caused regressions.
• Reverted fix related to lockfile-include-tarball-url. Fixes #​10915.

Platinum Sponsors

Gold Sponsors

v10.31.0

Compare Source

v10.30.3

Compare Source

v10.30.2

Compare Source

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

• Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Gold Sponsors

v10.30.0: pnpm 10.30

Compare Source

Minor Changes

• pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

• Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #​7122.
• Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #​10596.

Platinum Sponsors

Gold Sponsors

v10.29.3

Compare Source

v10.29.2

Compare Source

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes

• The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
• Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
• Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.

Patch Changes

• Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

• Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

• Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

• Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

• Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

• Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

• Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

• update tar to version 7.5.7 to fix security issue

  Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerab

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.