fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
bumpp	^10.0.3 -> ^10.1.0
oxc-transform (source)	^0.57.0 -> ^0.58.1
pnpm (source)	10.6.2 -> 10.6.3
unplugin-isolated-decl	^0.13.2 -> ^0.13.3
vite (source)	^6.2.1 -> ^6.2.2

---

Release Notes

antfu-collective/bumpp (bumpp)

v10.1.0

Compare Source

   🚀 Features

• Replace picocolors with ansis  -  by @​webdiscus in https://github.com/antfu-collective/bumpp/issues/74 (6f836)
• Update deps  -  by @​antfu (7f208)

    View changes on GitHub

oxc-project/oxc (oxc-transform)

v0.58.1

Features

• a8331f7 transformer: Turn off explicit resource management by default (#​9749) (Boshen)

v0.58.0

Features

• 3429898 transformer/module_runner_transform: Remove duplicate deps and dynamicDeps (#​9709) (Dunqing)

pnpm/pnpm (pnpm)

v10.6.3

Compare Source

Patch Changes

• pnpm install --prod=false should not crash, when executed in a project with a pnpm-workspace.yaml file #​9233. This fixes regression introduced via #​9211.

• Add the missing node-options config to recursive run #​9180.

• Removed a branching code path that only executed when dedupe-peer-dependents=false. We believe this internal refactor will not result in behavior changes, but we expect it to make future pnpm versions behave more consistently for projects that override dedupe-peer-dependents to false. There should be less unique bugs from turning off dedupe-peer-dependents.

  See details in #​9259.

unplugin/unplugin-isolated-decl (unplugin-isolated-decl)

v0.13.3

Compare Source

No significant changes

    View changes on GitHub

vitejs/vite (vite)

v6.2.2

Compare Source

• fix: await client buildStart on top level buildStart (#​19624) (b31faab), closes #​19624
• fix(css): inline css correctly for double quote use strict (#​19590) (d0aa833), closes #​19590
• fix(deps): update all non-major dependencies (#​19613) (363d691), closes #​19613
• fix(indexHtml): ensure correct URL when querying module graph (#​19601) (dc5395a), closes #​19601
• fix(preview): use preview https config, not server (#​19633) (98b3160), closes #​19633
• fix(ssr): use optional chaining to prevent "undefined is not an object" happening in `ssrRewriteStac (4309755), closes #​19612
• feat: show friendly error for malformed base (#​19616) (2476391), closes #​19616
• feat(worker): show asset filename conflict warning (#​19591) (367d968), closes #​19591
• chore: extend commit hash correctly when ambigious with a non-commit object (#​19600) (89a6287), closes #​19600

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/bumpp@10.0.3 ➜ 10.1.0	environment Transitive: filesystem	+21	2.76 MB	antfu
npm/oxc-transform@0.56.5 ➜ 0.58.1	None	0	27 kB	boshen
npm/unplugin-isolated-decl@0.13.2 ➜ 0.13.3	Transitive: environment, shell	+11	1.93 MB	sxzz
npm/vite@6.2.1 ➜ 6.2.2	Transitive: environment, filesystem, network, shell	+5	3.39 MB	antfu, patak, soda, ...2 more

View full report↗︎

[pkg-pr-new]

Open in Stackblitz

npm i https://pkg.pr.new/tsdown@76

commit: a4082b8