chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2025

dependabot · 2025-09-04T16:16:09Z

Bumps the npm_and_yarn group with 5 updates in the /electron-test directory:

Package	From	To
esbuild	`0.23.1`	`0.25.9`
tsx	`4.19.2`	`4.20.5`
rollup	`4.34.7`	`4.50.0`
tar-fs	`3.0.8`	`3.1.0`
undici	`6.21.1`	`6.21.3`

Bumps the npm_and_yarn group with 4 updates in the /examples/vite-example directory: rollup, vite, nanoid and postcss.

Updates esbuild from 0.23.1 to 0.25.9

Release notes

Sourced from esbuild's releases.

v0.25.9
Better support building projects that use Yarn on Windows (#3131, #3663)

With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive

Some developers put their projects on the D: drive

Yarn generates relative paths that use ../.. to get from the project directory to the cache directory

Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)

I didn't have access to a Windows machine for testing this edge case

Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.
Preserve parentheses around function expressions (#4252)

The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:
// Original code
const fn0 = () => 0
const fn1 = (() => 1)
console.log(fn0, function() { return fn1() }())
// Old output
const fn0 = () => 0;
const fn1 = () => 1;
console.log(fn0, function() {
return fn1();
}());
// New output
const fn0 = () => 0;
const fn1 = (() => 1);
console.log(fn0, (function() {
return fn1();
})());
Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.
Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.
v0.25.8

Fix another TypeScript parsing edge case (#4248)

This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

Fix regression with --define and import.meta (#4010, #4012, #4013)

The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

This fix was contributed by @sapphi-red.

0.24.1
Allow es2024 as a target in tsconfig.json (#4004)

TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:
{
  "compilerOptions": {
    "target": "ES2024"
  }
}
As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

This fix was contributed by @billyjanitsch.
Allow automatic semicolon insertion after get/set

This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
class Foo {
  get
  *x() {}
  set
  *y() {}
}
The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in --define and --pure (#4008)

The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

195e05c publish 0.25.9 to npm
3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
0f2c5c8 mock fs now supports multiple volumes on windows
100a51e split out yarnpnp snapshot tests
13aace3 remove C: assumption from windows snapshot tests
f1f413f fix #4252: preserve parentheses around functions
1bc8091 fix #4257, close #4258: go 1.23.10 => 1.23.12
bc52135 move the go compiler version to go.version
a0af5d1 makefile: use ESBUILD_VERSION consistently
8c71947 publish 0.25.8 to npm
Additional commits viewable in compare view

Updates tsx from 4.19.2 to 4.20.5

Release notes

Sourced from tsx's releases.

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

handle ambiguous packages (796053a)

This release is also available on:

npm package (@latest dist-tag)

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

override Node's native TS formats (#733) (a639836)

This release is also available on:

npm package (@latest dist-tag)

v4.20.3

4.20.3 (2025-06-13)

Bug Fixes

revert v4.20 changes (dadcf27)

This release is also available on:

npm package (@latest dist-tag)

v4.20.2

4.20.2 (2025-06-12)

Bug Fixes

... (truncated)

Commits

e6d1a47 docs: obfuscate aside classname
de2719d style: remove unused variable
13f2954 chore: upgrade docs deps
0504525 chore: upgrade manten
132fdd8 test: assert require.cache
f057e7d test: require loop
a6f8f9f refactor: getFormat to handle all formats
796053a fix: handle ambiguous packages
471997a test: CJS & ESM race condition
a639836 fix: override Node's native TS formats (#733)
Additional commits viewable in compare view

Updates rollup from 4.34.7 to 4.50.0

Release notes

Sourced from rollup's releases.

v4.50.0

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

v4.49.0

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

v4.48.1

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

v4.48.0

4.48.0

2025-08-23

... (truncated)

Changelog

Sourced from rollup's changelog.

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

4.48.0

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

... (truncated)

Commits

592e7d7 4.50.0
06df2d6 Split up changelog file
38a5c6d Add support for openharmony-arm64 platform (#6081)
bd02778 Return null to defer to the default resolution behavior (#6084)
b12c061 4.49.0
6b06476 feat: Run external check in cli/run/loadConfigFile.ts as last in order to a...
59c16b9 Improve build pipeline performance (#6082)
8b6b06b 4.48.1
8cf554a build: optimize pipeline take two (#6078)
c9e96c2 fix: handle whitespace according to JSX common practice (#6051)
Additional commits viewable in compare view

Updates tar-fs from 3.0.8 to 3.1.0

Commits

cb1c571 3.1.0
374460e add optional disablement of symlink validation (#119)
5bfe6df 3.0.10
63e12f9 bare support
2ceedf4 3.0.9
647447b check windows tweak (#115)
See full diff in compare view

Updates tsx from 4.19.2 to 4.20.5

Release notes

Sourced from tsx's releases.

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

handle ambiguous packages (796053a)

This release is also available on:

npm package (@latest dist-tag)

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

override Node's native TS formats (#733) (a639836)

This release is also available on:

npm package (@latest dist-tag)

v4.20.3

4.20.3 (2025-06-13)

Bug Fixes

revert v4.20 changes (dadcf27)

This release is also available on:

npm package (@latest dist-tag)

v4.20.2

4.20.2 (2025-06-12)

Bug Fixes

... (truncated)

Commits

e6d1a47 docs: obfuscate aside classname
de2719d style: remove unused variable
13f2954 chore: upgrade docs deps
0504525 chore: upgrade manten
132fdd8 test: assert require.cache
f057e7d test: require loop
a6f8f9f refactor: getFormat to handle all formats
796053a fix: handle ambiguous packages
471997a test: CJS & ESM race condition
a639836 fix: override Node's native TS formats (#733)
Additional commits viewable in compare view

Updates undici from 6.21.1 to 6.21.3

Release notes

Sourced from undici's releases.

v6.21.3

What's Changed

[Backport v6.x] append crlf to formdata body by @github-actions in nodejs/undici#4210

Full Changelog: nodejs/undici@v6.21.2...v6.21.3

v6.21.2

What's Changed

fix(types): add missing DNS interceptor by @slagiewka in nodejs/undici#4024

[v6.x] fix wpts on windows by @mcollina in nodejs/undici#4093

Removed clients with unrecoverable errors from the Pool nodejs/undici#4088

New Contributors

@slagiewka made their first contribution in nodejs/undici#4024

Full Changelog: nodejs/undici@v6.21.1...v6.21.2

Commits

da0e823 Bumped v6.21.4
dbbe0a2 append crlf to formdata body (#3625) (#4210)
b63d939 Bumped v6.21.2
de1e4b8 [v6.x] fix wpts on windows (#4093)
4e07dda test: fix windows wpt (#4050)
1333871 Removed clients with unrecoverable errors from the Pool (#4088)
a0e76c7 fix(types): add missing DNS interceptor (#4024)
See full diff in compare view

Updates rollup from 4.34.7 to 4.50.0

Release notes

Sourced from rollup's releases.

v4.50.0

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

v4.49.0

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

v4.48.1

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

v4.48.0

4.48.0

2025-08-23

... (truncated)

Changelog

Sourced from rollup's changelog.

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

4.48.0

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

... (truncated)

Commits

592e7d7 4.50.0
06df2d6 Split up changelog file
38a5c6d Add support for openharmony-arm64 platform (#6081)
bd02778 Return null to defer to the default resolution behavior (#6084)
b12c061 4.49.0
6b06476 feat: Run external check in cli/run/loadConfigFile.ts as last in order to a...
59c16b9 Improve build pipeline performance (#6082)
8b6b06b 4.48.1
8cf554a build: optimize pipeline take two (#6078)
c9e96c2 fix: handle whitespace according to JSX common practice (#6051)
Additional commits viewable in compare view

Updates rollup from 3.29.4 to 3.29.5

Release notes

Sourced from rollup's releases.

v4.50.0

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

v4.49.0

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

v4.48.1

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

v4.48.0

4.48.0

2025-08-23

... (truncated)

Changelog

Sourced from rollup's changelog.

4.50.0

2025-08-31

Features

Support openharmony-arm64 platform (#6081)

Bug Fixes

Fix loading of extensionless imports in config files (#6084)

Pull Requests

#6081: Add support for openharmony-arm64 platform (@hqzing, @lukastaegert)

#6084: Return null to defer to the default resolution behavior (@TrickyPi)

4.49.0

2025-08-27

Features

Allow config plugins to resolve imports first before deciding whether to treat them as external (#6038)

Pull Requests

#6038: feat: Run external check in cli/run/loadConfigFile.ts as last in order to allow handling of e.g. workspace package imports in TS monorepos correctly (@stazz, @TrickyPi)

#6082: Improve build pipeline performance (@lukastaegert)

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

4.48.0

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

... (truncated)

Commits

592e7d7 4.50.0
06df2d6 Split up changelog file
38a5c6d Add support for openharmony-arm64 platform (#6081)
bd02778 Return null to defer to the default resolution behavior (#6084)
b12c061 4.49.0
6b06476 feat: Run external check in cli/run/loadConfigFile.ts as last in order to a...
59c16b9 Improve build pipeline performance (#6082)
8b6b06b 4.48.1
8cf554a build: optimize pipeline take two (#6078)
c9e96c2 fix: handle whitespace according to JSX common practice (#6051)
Additional commits viewable in compare view

Updates vite from 4.5.3 to 4.5.14

Release notes

Sourced from vite's releases.

v4.5.14

Please refer to CHANGELOG.md for details.

v4.5.13

Please refer to CHANGELOG.md for details.

v4.5.12

Please refer to CHANGELOG.md for details.

v4.5.11

Please refer to CHANGELOG.md for details.

v4.5.10

Please refer to CHANGELOG.md for details.

v4.5.9

Please refer to CHANGELOG.md for details.

v4.5.8

Please refer to CHANGELOG.md for details.

v4.5.7

Please refer to CHANGELOG.md for details.

v4.5.6

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

4.5.14 (2025-04-30)

fix: backport #19965, check static serve file inside sirv (#19967) (7739479), closes #19965 #19967

chore: run format (99afb60)

4.5.13 (2025-04-10)

fix: backport #19830, reject requests with # in request-target (#19832) (41f3819), closes #19830 #19832

4.5.12 (2025-04-03)

fix: backport #19782, fs check with svg and relative paths (#19785) (0a3dcf5), closes #19782 #19785

4.5.11 (2025-03-31)

fix: backport #19761, fs check in transform middleware (#19763) (26e1764), closes #19761 #19763

4.5.10 (2025-03-24)

fix: backport #19702, fs raw query with query separators (#19704) (315695e), closes #19702 #19704

4.5.9 (2025-01-21)

fix: preview.allowedHosts with specific values was not respected (#19246) (0bc52e0), closes #19246

fix: allow CORS from loopback addresses by default (#19249) (8f63cd6), closes #19249

4.5.8 (2025-01-20)

fix: try parse server.origin URL (#19241) (3680bad), closes #19241

4.5.7 (2025-01-20)

fix: crypto.getRandomValues is not available in old Node versions (#19237) (f4d3c46), closes #19237

... (truncated)

Commits

9bfe2b1 release: v4.5.14
7739479 fix: backport #19965, check static serve file inside sirv (#19967)
99afb60 chore: run format
cd60e8b release: v4.5.13
41f3819 fix: backport #19830, reject requests with # in request-target (#19832)
6104add release: v4.5.12
0a3dcf5 fix: backport #19782, fs check with svg and relative paths (#19785)
07ddc3e release: v4.5.11
26e1764 fix: backport #19761, fs check in transform middleware (#19763)
86e7a6b release: v4.5.10
Additional commits viewable in compare view

Updates nanoid from 3.3.6 to 3.3.11

Release notes

Sourced from nanoid's releases.

3.3.11

Fixed React Native support.

3.3.10

Fixed React Native support (by @steida).

3.3.9

Reduced npm package size.

Changelog

Sourced from nanoid's changelog.

3.3.11

Fixed React Native support.

3.3.10

Fixed React Native support (by @steida).

3.3.9

Reduced npm package size.

3.3.8

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

Commits

37289ce Release 3.3.11 version
23690b7 Fix CI
c147962 Fix RN support
a83734e Move to manually ESM/CJS dual package
bb12e8a Release 3.3.10 version
8f44264 Fix Expo support
adf9b0c Release 3.3.9 version
1c6f088 Remove dev file from npm package
3044cd5 Release 3.3.8 version
4fe3495 Update size limit
Additional commits viewable in compare view

Updates postcss from 8.4.27 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

... (truncated)

Commits

91d6eb5 Release 8.5.6 version
65ffc55 Update dependencies
ecd20eb Fix ContainerWithChildren to allow discriminating the node type by comparing ...
c181597 Release 8.5.5 version
c5523fb Update dependencies
2e3450c refactor: import should be listed before require (

…updates Bumps the npm_and_yarn group with 5 updates in the /electron-test directory: | Package | From | To | | --- | --- | --- | | [esbuild](https://github.com/evanw/esbuild) | `0.23.1` | `0.25.9` | | [tsx](https://github.com/privatenumber/tsx) | `4.19.2` | `4.20.5` | | [rollup](https://github.com/rollup/rollup) | `4.34.7` | `4.50.0` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `3.0.8` | `3.1.0` | | [undici](https://github.com/nodejs/undici) | `6.21.1` | `6.21.3` | Bumps the npm_and_yarn group with 4 updates in the /examples/vite-example directory: [rollup](https://github.com/rollup/rollup), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [nanoid](https://github.com/ai/nanoid) and [postcss](https://github.com/postcss/postcss). Updates `esbuild` from 0.23.1 to 0.25.9 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.23.1...v0.25.9) Updates `tsx` from 4.19.2 to 4.20.5 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.19.2...v4.20.5) Updates `rollup` from 4.34.7 to 4.50.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.34.7...v4.50.0) Updates `tar-fs` from 3.0.8 to 3.1.0 - [Commits](mafintosh/tar-fs@v3.0.8...v3.1.0) Updates `tsx` from 4.19.2 to 4.20.5 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.19.2...v4.20.5) Updates `undici` from 6.21.1 to 6.21.3 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.21.1...v6.21.3) Updates `rollup` from 4.34.7 to 4.50.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.34.7...v4.50.0) Updates `rollup` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.34.7...v4.50.0) Updates `vite` from 4.5.3 to 4.5.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.14/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.14/packages/vite) Updates `nanoid` from 3.3.6 to 3.3.11 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.11) Updates `postcss` from 8.4.27 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.27...8.5.6) Updates `rollup` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.34.7...v4.50.0) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.25.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tsx dependency-version: 4.20.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.50.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar-fs dependency-version: 3.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tsx dependency-version: 4.20.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.21.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.50.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 3.29.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 4.5.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 3.29.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2025

dependabot bot mentioned this pull request Sep 4, 2025

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2020

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2025

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2025

Uh oh!

dependabot bot commented on behalf of github Sep 4, 2025

Uh oh!

Uh oh!

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2025

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #2025

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 4, 2025

v0.25.9

v0.25.8

Changelog: 2024

0.24.2

0.24.1

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

v4.20.3

4.20.3 (2025-06-13)

Bug Fixes

v4.20.2

4.20.2 (2025-06-12)

Bug Fixes

v4.50.0

4.50.0

Features

Bug Fixes

Pull Requests

v4.49.0

4.49.0

Features

Pull Requests

v4.48.1

4.48.1

Bug Fixes

Pull Requests

v4.48.0

4.48.0

4.50.0

Features

Bug Fixes

Pull Requests

4.49.0

Features

Pull Requests

4.48.1

Bug Fixes

Pull Requests

4.48.0

Features

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

v4.20.3

4.20.3 (2025-06-13)

Bug Fixes

v4.20.2

4.20.2 (2025-06-12)

Bug Fixes

v6.21.3

What's Changed

v6.21.2

What's Changed

New Contributors

v4.50.0

4.50.0

Features

Bug Fixes

Pull Requests

v4.49.0

4.49.0

Features

Pull Requests

v4.48.1

4.48.1

Bug Fixes

Pull Requests