chore(deps): (deps): bump the production group with 34 updates by dependabot[bot] · Pull Request #925 · tidev/titanium-cli

dependabot · 2026-04-01T02:50:11Z

Bumps the production group with 34 updates:

Package	From	To
@xmldom/xmldom	`0.9.8`	`0.9.9`
undici	`7.24.5`	`7.24.6`
yauzl	`3.2.1`	`3.3.0`
@rollup/rollup-android-arm-eabi	`4.60.0`	`4.60.1`
@rollup/rollup-android-arm64	`4.60.0`	`4.60.1`
@rollup/rollup-darwin-arm64	`4.60.0`	`4.60.1`
@rollup/rollup-darwin-x64	`4.60.0`	`4.60.1`
@rollup/rollup-freebsd-arm64	`4.60.0`	`4.60.1`
@rollup/rollup-freebsd-x64	`4.60.0`	`4.60.1`
@rollup/rollup-linux-arm-gnueabihf	`4.60.0`	`4.60.1`
@rollup/rollup-linux-arm-musleabihf	`4.60.0`	`4.60.1`
@rollup/rollup-linux-arm64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-arm64-musl	`4.60.0`	`4.60.1`
@rollup/rollup-linux-loong64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-loong64-musl	`4.60.0`	`4.60.1`
@rollup/rollup-linux-ppc64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-ppc64-musl	`4.60.0`	`4.60.1`
@rollup/rollup-linux-riscv64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-riscv64-musl	`4.60.0`	`4.60.1`
@rollup/rollup-linux-s390x-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-x64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-linux-x64-musl	`4.60.0`	`4.60.1`
@rollup/rollup-openbsd-x64	`4.60.0`	`4.60.1`
@rollup/rollup-openharmony-arm64	`4.60.0`	`4.60.1`
@rollup/rollup-win32-arm64-msvc	`4.60.0`	`4.60.1`
@rollup/rollup-win32-ia32-msvc	`4.60.0`	`4.60.1`
@rollup/rollup-win32-x64-gnu	`4.60.0`	`4.60.1`
@rollup/rollup-win32-x64-msvc	`4.60.0`	`4.60.1`
baseline-browser-mapping	`2.10.10`	`2.10.13`
browserslist	`4.28.1`	`4.28.2`
caniuse-lite	`1.0.30001781`	`1.0.30001782`
electron-to-chromium	`1.5.322`	`1.5.330`
minimatch	`10.2.4`	`10.2.5`
rollup	`4.60.0`	`4.60.1`

Updates @xmldom/xmldom from 0.9.8 to 0.9.9

Release notes

Sourced from @xmldom/xmldom's releases.

0.9.9

Commits

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

xmldom/xmldom#435

Changelog

Sourced from @xmldom/xmldom's changelog.

0.9.9

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

0.8.12

Fixed

preserve trailing whitespace in ProcessingInstruction data [#962](https://github.com/xmldom/xmldom/issues/962) / [#42](https://github.com/xmldom/xmldom/issues/42)

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @thesmartshadow, @stevenobiajulu, for your contributions

0.8.11

Fixed

update ownerDocument when moving nodes between documents [#933](https://github.com/xmldom/xmldom/issues/933) / [#932](https://github.com/xmldom/xmldom/issues/932)

Thank you, @shunkica, for your contributions

0.9.8

... (truncated)

Commits

7ffb16b 0.9.9
07aade1 docs: add missing references to changelog (#970)
2b852e8 fix: XML injection via unsafe CDATA serialization (GHSA-wh4c-j3r5-mjhp) (#969)
d9adeff chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#966)
be45d04 chore: add local CI script and format:check (#965)
2d73ddd chore(deps-dev): bump yauzl from 3.2.0 to 3.2.1 (#963)
385c392 chore(deps): bump minimatch (#961)
7750b31 feat: implement ParentNode.children getter (#960)
aa806cd chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#958)
7d2610c chore(deps): update npm to v11.6.3 (#947)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by karfau, a new releaser for @xmldom/xmldom since your current version.

Updates undici from 7.24.5 to 7.24.6

Release notes

Sourced from undici's releases.

v7.24.6

What's Changed

fix(test): client wasm compatible with clang 22 by @rozzilla in nodejs/undici#4909

fix(mock): improve error message when intercepts are exhausted by @travisbreaks in nodejs/undici#4912

fix(websocket): support open diagnostics over h2 by @mcollina in nodejs/undici#4921

fix: assume http/https scheme for scheme-less proxy env vars by @travisbreaks in nodejs/undici#4914

fix(cache): check Authorization on request headers per RFC 9111 §3.5 by @metalix2 in nodejs/undici#4911

fix: wrap kConnector call in try/catch to prevent client hang by @veeceey in nodejs/undici#4834

docs: clarify fetch and FormData pairing by @mcollina in nodejs/undici#4922

fix: support Connection header with connection-specific header names per RFC 7230 by @mcollina in nodejs/undici#4775

fix: avoid prototype collisions in parseHeaders by @mcollina in nodejs/undici#4923

build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @dependabot[bot] in nodejs/undici#4926

test: auto-init WPT submodule by @mcollina in nodejs/undici#4930

New Contributors

@rozzilla made their first contribution in nodejs/undici#4909

@veeceey made their first contribution in nodejs/undici#4834

Full Changelog: nodejs/undici@v7.24.5...v7.24.6

Commits

38eab36 Bumped v7.24.6 (#4931)
993609d test: auto-init WPT submodule (#4930)
1eacc49 build(deps-dev): bump typescript from 5.9.3 to 6.0.2 (#4926)
b64e7e4 fix: avoid prototype collisions in parseHeaders (#4923)
deba679 Revert "fix: assume http/https scheme for scheme-less proxy env vars (#4914)"
feef62b fix: support Connection header with connection-specific header names per RFC ...
a613d9a docs: clarify fetch and FormData pairing (#4922)
2ba99a3 fix: wrap kConnector call in try/catch to prevent client hang (#4834)
a7398c0 fix(cache): check Authorization on request headers per RFC 9111 §3.5 (#4911)
2b2afbc fix: assume http/https scheme for scheme-less proxy env vars (#4914)
Additional commits viewable in compare view

Updates yauzl from 3.2.1 to 3.3.0

Commits

08ee971 version 3.3.0
a2941d1 add decodeFileData and canDecodeFileData
See full diff in compare view

Updates @rollup/rollup-android-arm-eabi from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-android-arm-eabi's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Changelog

Sourced from @rollup/rollup-android-arm-eabi's changelog.

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Commits

ae871d7 4.60.1
51f8f60 fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...
ca55406 chore(deps): pin dependency typescript to v5 (#6320)
fe50d86 chore(deps): pin dependencies (#6317)
42785ff chore(deps): update minor/patch updates (#6319)
65e82a9 chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)
c336205 chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)
b25d25e fix(deps): update swc monorepo (major) (#6322)
119abdb chore(deps): lock file maintenance (#6324)
5598a66 chore(deps): lock file maintenance (#6323)
See full diff in compare view

Updates @rollup/rollup-android-arm64 from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-android-arm64's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Changelog

Sourced from @rollup/rollup-android-arm64's changelog.

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Commits

ae871d7 4.60.1
51f8f60 fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...
ca55406 chore(deps): pin dependency typescript to v5 (#6320)
fe50d86 chore(deps): pin dependencies (#6317)
42785ff chore(deps): update minor/patch updates (#6319)
65e82a9 chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)
c336205 chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)
b25d25e fix(deps): update swc monorepo (major) (#6322)
119abdb chore(deps): lock file maintenance (#6324)
5598a66 chore(deps): lock file maintenance (#6323)
See full diff in compare view

Updates @rollup/rollup-darwin-arm64 from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-darwin-arm64's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Changelog

Sourced from @rollup/rollup-darwin-arm64's changelog.

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Commits

ae871d7 4.60.1
51f8f60 fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...
ca55406 chore(deps): pin dependency typescript to v5 (#6320)
fe50d86 chore(deps): pin dependencies (#6317)
42785ff chore(deps): update minor/patch updates (#6319)
65e82a9 chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)
c336205 chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)
b25d25e fix(deps): update swc monorepo (major) (#6322)
119abdb chore(deps): lock file maintenance (#6324)
5598a66 chore(deps): lock file maintenance (#6323)
See full diff in compare view

Updates @rollup/rollup-darwin-x64 from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-darwin-x64's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Changelog

Sourced from @rollup/rollup-darwin-x64's changelog.

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Commits

ae871d7 4.60.1
51f8f60 fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...
ca55406 chore(deps): pin dependency typescript to v5 (#6320)
fe50d86 chore(deps): pin dependencies (#6317)
42785ff chore(deps): update minor/patch updates (#6319)
65e82a9 chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)
c336205 chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)
b25d25e fix(deps): update swc monorepo (major) (#6322)
119abdb chore(deps): lock file maintenance (#6324)
5598a66 chore(deps): lock file maintenance (#6323)
See full diff in compare view

Updates @rollup/rollup-freebsd-arm64 from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-freebsd-arm64's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Changelog

Sourced from @rollup/rollup-freebsd-arm64's changelog.

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6323: chore(deps): lock file maintenance (@renovate[bot])

#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

Commits

ae871d7 4.60.1
51f8f60 fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...
ca55406 chore(deps): pin dependency typescript to v5 (#6320)
fe50d86 chore(deps): pin dependencies (#6317)
42785ff chore(deps): update minor/patch updates (#6319)
65e82a9 chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)
c336205 chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)
b25d25e fix(deps): update swc monorepo (major) (#6322)
119abdb chore(deps): lock file maintenance (#6324)
5598a66 chore(deps): lock file maintenance (#6323)
See full diff in compare view

Updates @rollup/rollup-freebsd-x64 from 4.60.0 to 4.60.1

Release notes

Sourced from @rollup/rollup-freebsd-x64's releases.

v4.60.1

4.60.1

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)

#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)

#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)

#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)

#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)

#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

Bumps the production group with 34 updates: | Package | From | To | | --- | --- | --- | | [@xmldom/xmldom](https://github.com/xmldom/xmldom) | `0.9.8` | `0.9.9` | | [undici](https://github.com/nodejs/undici) | `7.24.5` | `7.24.6` | | [yauzl](https://github.com/thejoshwolfe/yauzl) | `3.2.1` | `3.3.0` | | [@rollup/rollup-android-arm-eabi](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-android-arm64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-freebsd-arm64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-freebsd-x64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-arm-gnueabihf](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-arm-musleabihf](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-arm64-musl](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-loong64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-loong64-musl](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-ppc64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-ppc64-musl](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-riscv64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-riscv64-musl](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-s390x-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-linux-x64-musl](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-openbsd-x64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-openharmony-arm64](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-win32-arm64-msvc](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-win32-ia32-msvc](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-win32-x64-gnu](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.10` | `2.10.13` | | [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.28.2` | | [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001781` | `1.0.30001782` | | [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.322` | `1.5.330` | | [minimatch](https://github.com/isaacs/minimatch) | `10.2.4` | `10.2.5` | | [rollup](https://github.com/rollup/rollup) | `4.60.0` | `4.60.1` | Updates `@xmldom/xmldom` from 0.9.8 to 0.9.9 - [Release notes](https://github.com/xmldom/xmldom/releases) - [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md) - [Commits](xmldom/xmldom@0.9.8...0.9.9) Updates `undici` from 7.24.5 to 7.24.6 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.24.5...v7.24.6) Updates `yauzl` from 3.2.1 to 3.3.0 - [Commits](thejoshwolfe/yauzl@3.2.1...3.3.0) Updates `@rollup/rollup-android-arm-eabi` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-android-arm64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-darwin-arm64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-darwin-x64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-freebsd-arm64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-freebsd-x64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-arm-gnueabihf` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-arm-musleabihf` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-arm64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-arm64-musl` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-loong64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-loong64-musl` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-ppc64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-ppc64-musl` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-riscv64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-riscv64-musl` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-s390x-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-x64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-linux-x64-musl` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-openbsd-x64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-openharmony-arm64` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-win32-arm64-msvc` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-win32-ia32-msvc` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-win32-x64-gnu` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `@rollup/rollup-win32-x64-msvc` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) Updates `baseline-browser-mapping` from 2.10.10 to 2.10.13 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.10.10...v2.10.13) Updates `browserslist` from 4.28.1 to 4.28.2 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.28.1...4.28.2) Updates `caniuse-lite` from 1.0.30001781 to 1.0.30001782 - [Commits](browserslist/caniuse-lite@1.0.30001781...1.0.30001782) Updates `electron-to-chromium` from 1.5.322 to 1.5.330 - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.322...v1.5.330) Updates `minimatch` from 10.2.4 to 10.2.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.2.4...v10.2.5) Updates `rollup` from 4.60.0 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.0...v4.60.1) --- updated-dependencies: - dependency-name: "@xmldom/xmldom" dependency-version: 0.9.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: undici dependency-version: 7.24.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: yauzl dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@rollup/rollup-android-arm-eabi" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-android-arm64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-darwin-arm64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-darwin-x64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-freebsd-arm64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-freebsd-x64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm-gnueabihf" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm-musleabihf" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm64-musl" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-loong64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-loong64-musl" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-ppc64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-ppc64-musl" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-riscv64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-riscv64-musl" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-s390x-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-x64-musl" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-openbsd-x64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-openharmony-arm64" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-arm64-msvc" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-ia32-msvc" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-x64-gnu" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-x64-msvc" dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: baseline-browser-mapping dependency-version: 2.10.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: browserslist dependency-version: 4.28.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: caniuse-lite dependency-version: 1.0.30001782 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: electron-to-chromium dependency-version: 1.5.330 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: minimatch dependency-version: 10.2.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: rollup dependency-version: 4.60.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-04-01T02:50:41Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
undici@7.24.5 ⏵ 7.24.6	⁺¹		⁺¹
yauzl@3.2.1 ⏵ 3.3.0	⁺¹
@xmldom/xmldom@0.9.8 ⏵ 0.9.9	⁺³	⁺¹⁶	⁺¹	⁺³⁷

View full report

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2026

cb1kenobi merged commit bef53c9 into main Apr 5, 2026
12 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/production-0448068437 branch April 5, 2026 20:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): (deps): bump the production group with 34 updates#925

chore(deps): (deps): bump the production group with 34 updates#925
cb1kenobi merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-0448068437

dependabot bot commented on behalf of github Apr 1, 2026

Uh oh!

socket-security bot commented Apr 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Apr 1, 2026

0.9.9

Added

Fixed

Chore

0.9.9

Added

Fixed

Chore

0.8.12

Fixed

0.8.11

Fixed

0.9.8

v7.24.6

What's Changed

New Contributors

v4.60.1

4.60.1

Bug Fixes

Pull Requests

4.60.1

Bug Fixes

Pull Requests

v4.60.1

4.60.1

Bug Fixes

Pull Requests

4.60.1

Bug Fixes

Pull Requests

v4.60.1

4.60.1

Bug Fixes

Pull Requests

4.60.1

Bug Fixes

Pull Requests

v4.60.1

4.60.1

Bug Fixes

Pull Requests

4.60.1

Bug Fixes

Pull Requests

v4.60.1

4.60.1

Bug Fixes

Pull Requests

4.60.1

Bug Fixes

Pull Requests

v4.60.1

4.60.1

Bug Fixes

Pull Requests

Uh oh!

socket-security bot commented Apr 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant