Skip to content

chore(deps): bump the example-dependencies group across 10 directories with 12 updates#647

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/components/bundled-esbuild/example-dependencies-5f0275d58e
Open

chore(deps): bump the example-dependencies group across 10 directories with 12 updates#647
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/components/bundled-esbuild/example-dependencies-5f0275d58e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps the example-dependencies group with 3 updates in the /examples/components/bundled-esbuild directory: fast-xml-parser, remeda and @types/node.
Bumps the example-dependencies group with 3 updates in the /examples/components/bundled-rsbuild directory: remeda, @types/node and @rslib/core.
Bumps the example-dependencies group with 4 updates in the /examples/components/http-axios directory: @types/node, axios, @bytecodealliance/componentize-js and rollup.
Bumps the example-dependencies group with 1 update in the /examples/components/http-hello-world directory: @types/node.
Bumps the example-dependencies group with 3 updates in the /examples/components/http-password-checker directory: @types/node, rollup and valibot.
Bumps the example-dependencies group with 3 updates in the /examples/components/http-server-with-hono directory: @types/node, rollup and hono.
Bumps the example-dependencies group with 3 updates in the /examples/components/http-stdio directory: hono, @bytecodealliance/jco-std and rolldown.
Bumps the example-dependencies group with 1 update in the /examples/components/http-streaming directory: @types/node.
Bumps the example-dependencies group with 3 updates in the /examples/components/wasi-config-from-k8s-env directory: hono, @bytecodealliance/jco-std and rolldown.
Bumps the example-dependencies group with 5 updates in the /examples/components/webgpu-tensorflow directory:

Package From To
typescript 5.9.3 6.0.3
@bytecodealliance/componentize-js 0.20.0 0.21.0
rollup 4.60.3 4.60.4
hono 4.12.18 4.12.23
@bytecodealliance/jco-std 0.1.3 0.2.0

Updates fast-xml-parser from 5.7.2 to 5.8.0

Release notes

Sourced from fast-xml-parser's releases.

update strnum, FXB. Use xml-naming for DOCTYPE

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is by deault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

fix minor old bugs and update builder

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated
Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

5.7.2 / 2026-04-25

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder
  • fix #817: stackoverflow when tag expression is very long

5.7.1 / 2026-04-20

  • fix typo in CJS typing file

5.7.0 / 2026-04-17

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to user entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

5.6.0 / 2026-04-15

  • fix: entity replacement for numeric entities
  • use @​nodable/entities to replace entities
    • this may change some error messages related to entities expansion limit or inavlid use
    • post check would be exposed in future version

... (truncated)

Commits

Updates remeda from 2.34.0 to 2.35.0

Release notes

Sourced from remeda's releases.

v2.35.0

2.35.0 (2026-05-25)

Bug Fixes

v2.34.1

2.34.1 (2026-05-13)

Features

Commits

Updates @types/node from 24.12.2 to 24.12.4

Commits

Updates remeda from 2.34.0 to 2.35.0

Release notes

Sourced from remeda's releases.

v2.35.0

2.35.0 (2026-05-25)

Bug Fixes

v2.34.1

2.34.1 (2026-05-13)

Features

Commits

Updates @types/node from 24.12.2 to 24.12.4

Commits

Updates @rslib/core from 0.21.3 to 0.21.5

Release notes

Sourced from @​rslib/core's releases.

v0.21.5

What's Changed

New Features 🎉

Bug Fixes 🐞

Other Changes

New Contributors

Full Changelog: web-infra-dev/rslib@v0.21.4...v0.21.5

v0.21.4

What's Changed

New Features 🎉

Document 📖

Other Changes

... (truncated)

Commits

Updates @types/node from 24.12.3 to 24.12.4

Commits

Updates axios from 1.16.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Updates @bytecodealliance/componentize-js from 0.20.0 to 0.21.0

Release notes

Sourced from @​bytecodealliance/componentize-js's releases.

0.21.0

Changelog

[0.21.0] - 2026-05-20

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

0.21.0-rc.0

Changelog

[0.21.0-rc.0] - 2026-05-19

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Changelog

Sourced from @​bytecodealliance/componentize-js's changelog.

[0.21.0] - 2026-05-20

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

[0.21.0-rc.0] - 2026-05-19

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Commits

Updates rollup from 4.60.3 to 4.60.4

Release notes

Sourced from rollup's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Changelog

Sourced from rollup's changelog.

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Commits

Updates @types/node from 24.12.2 to 24.12.4

Commits

Updates @types/node from 24.12.3 to 24.12.4

Commits

Updates rollup from 4.60.3 to 4.60.4

Release notes

Sourced from rollup's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Changelog

Sourced from rollup's changelog.

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Commits

Updates valibot from 1.4.0 to 1.4.1

Release notes

Sourced from valibot's releases.

v1.4.1

  • Fix intersect schema to infer correct input and output types for non-tuple array options instead of never (pull request #1478)
Commits
  • 6991ea7 Bump version to 1.4.1 and update changelog for release (#1479)
  • c3a8f07 Fix intersect schema to infer correct types (#1478)
  • 106893c Change syntax highlighting form Prism to Shiki (#1468)
  • 5949d9e Bump to-json-schema version to 1.7.0 and update changelog for release
  • 9f90a74 Bump i18n version to 1.2.0 and update changelog for release
  • d00a646 Add release notes for Valibot v1.4 to blog
  • See full diff in compare view

Updates @types/node fro...

Description has been truncated

@dependabot
chore(deps): bump the example-dependencies group across 10 directorie…
eb3b5ac 
…s with 12 updates

Bumps the example-dependencies group with 3 updates in the /examples/components/bundled-esbuild directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [remeda](https://github.com/remeda/remeda) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the example-dependencies group with 3 updates in the /examples/components/bundled-rsbuild directory: [remeda](https://github.com/remeda/remeda), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@rslib/core](https://github.com/web-infra-dev/rslib/tree/HEAD/packages/core).
Bumps the example-dependencies group with 4 updates in the /examples/components/http-axios directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [axios](https://github.com/axios/axios), [@bytecodealliance/componentize-js](https://github.com/bytecodealliance/ComponentizeJS) and [rollup](https://github.com/rollup/rollup).
Bumps the example-dependencies group with 1 update in the /examples/components/http-hello-world directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the example-dependencies group with 3 updates in the /examples/components/http-password-checker directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [rollup](https://github.com/rollup/rollup) and [valibot](https://github.com/open-circle/valibot).
Bumps the example-dependencies group with 3 updates in the /examples/components/http-server-with-hono directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [rollup](https://github.com/rollup/rollup) and [hono](https://github.com/honojs/hono).
Bumps the example-dependencies group with 3 updates in the /examples/components/http-stdio directory: [hono](https://github.com/honojs/hono), [@bytecodealliance/jco-std](https://github.com/bytecodealliance/jco) and [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown).
Bumps the example-dependencies group with 1 update in the /examples/components/http-streaming directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the example-dependencies group with 3 updates in the /examples/components/wasi-config-from-k8s-env directory: [hono](https://github.com/honojs/hono), [@bytecodealliance/jco-std](https://github.com/bytecodealliance/jco) and [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown).
Bumps the example-dependencies group with 5 updates in the /examples/components/webgpu-tensorflow directory:

| Package | From | To |
| --- | --- | --- |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |
| [@bytecodealliance/componentize-js](https://github.com/bytecodealliance/ComponentizeJS) | `0.20.0` | `0.21.0` |
| [rollup](https://github.com/rollup/rollup) | `4.60.3` | `4.60.4` |
| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.23` |
| [@bytecodealliance/jco-std](https://github.com/bytecodealliance/jco) | `0.1.3` | `0.2.0` |



Updates `fast-xml-parser` from 5.7.2 to 5.8.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.7.2...v5.8.0)

Updates `remeda` from 2.34.0 to 2.35.0
- [Release notes](https://github.com/remeda/remeda/releases)
- [Commits](remeda/remeda@v2.34.0...v2.35.0)

Updates `@types/node` from 24.12.2 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `remeda` from 2.34.0 to 2.35.0
- [Release notes](https://github.com/remeda/remeda/releases)
- [Commits](remeda/remeda@v2.34.0...v2.35.0)

Updates `@types/node` from 24.12.2 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@rslib/core` from 0.21.3 to 0.21.5
- [Release notes](https://github.com/web-infra-dev/rslib/releases)
- [Commits](https://github.com/web-infra-dev/rslib/commits/v0.21.5/packages/core)

Updates `@types/node` from 24.12.3 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `axios` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.0...v1.16.1)

Updates `@bytecodealliance/componentize-js` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/bytecodealliance/ComponentizeJS/releases)
- [Changelog](https://github.com/bytecodealliance/ComponentizeJS/blob/main/CHANGELOG.md)
- [Commits](bytecodealliance/ComponentizeJS@0.20.0...0.21.0)

Updates `rollup` from 4.60.3 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

Updates `@types/node` from 24.12.2 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/node` from 24.12.3 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `rollup` from 4.60.3 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

Updates `valibot` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.0...v1.4.1)

Updates `@types/node` from 24.12.3 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `rollup` from 4.60.3 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

Updates `hono` from 4.12.18 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.18...v4.12.23)

Updates `hono` from 4.12.18 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.18...v4.12.23)

Updates `@bytecodealliance/jco-std` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/bytecodealliance/jco/releases)
- [Commits](bytecodealliance/jco@jco-std-v0.1.3...jco-std-v0.2.0)

Updates `rolldown` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.2/packages/rolldown)

Updates `@types/node` from 24.12.2 to 24.12.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `hono` from 4.12.18 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.18...v4.12.23)

Updates `@bytecodealliance/jco-std` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/bytecodealliance/jco/releases)
- [Commits](bytecodealliance/jco@jco-std-v0.1.3...jco-std-v0.2.0)

Updates `rolldown` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.2/packages/rolldown)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `@bytecodealliance/componentize-js` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/bytecodealliance/ComponentizeJS/releases)
- [Changelog](https://github.com/bytecodealliance/ComponentizeJS/blob/main/CHANGELOG.md)
- [Commits](bytecodealliance/ComponentizeJS@0.20.0...0.21.0)

Updates `rollup` from 4.60.3 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

Updates `hono` from 4.12.18 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.18...v4.12.23)

Updates `@bytecodealliance/jco-std` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/bytecodealliance/jco/releases)
- [Commits](bytecodealliance/jco@jco-std-v0.1.3...jco-std-v0.2.0)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: remeda
  dependency-version: 2.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: remeda
  dependency-version: 2.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@rslib/core"
  dependency-version: 0.21.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@bytecodealliance/componentize-js"
  dependency-version: 0.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: rollup
  dependency-version: 4.60.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: rollup
  dependency-version: 4.60.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: valibot
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: rollup
  dependency-version: 4.60.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@bytecodealliance/jco-std"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: rolldown
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@bytecodealliance/jco-std"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: rolldown
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: example-dependencies
- dependency-name: "@bytecodealliance/componentize-js"
  dependency-version: 0.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
- dependency-name: rollup
  dependency-version: 4.60.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: example-dependencies
- dependency-name: "@bytecodealliance/jco-std"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: example-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 25, 2026
@dependabot dependabot Bot requested review from a team as code owners May 25, 2026 19:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants