chore(deps): lock file maintenance npm packages

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
		lockFileMaintenance	All locks refreshed
@napi-rs/cli	pnpm.catalog.default	minor	3.3.1 -> 3.4.1
@nestjs/common (source)	devDependencies	patch	11.1.6 -> 11.1.7
@nestjs/core (source)	devDependencies	patch	11.1.6 -> 11.1.7
@nestjs/platform-express (source)	devDependencies	patch	11.1.6 -> 11.1.7
@types/express (source)	devDependencies	patch	5.0.3 -> 5.0.4
@types/node (source)	devDependencies	minor	24.8.1 -> 24.9.1
emnapi	devDependencies	minor	1.5.0 -> 1.6.0
lint-staged	devDependencies	patch	16.2.4 -> 16.2.6
oxlint (source)	devDependencies	minor	1.23.0 -> 1.24.0
pnpm (source)	packageManager	minor	10.18.3 -> 10.19.0
rolldown (source)	devDependencies	patch	1.0.0-beta.43 -> 1.0.0-beta.44
tinybench	devDependencies	minor	5.0.1 -> 5.1.0

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

napi-rs/napi-rs (@​napi-rs/cli)

v3.4.1

Compare Source

Bug Fixes

• cli: remove createRequire in cjs binding (#​2976) (c388c12)

v3.4.0

Compare Source

Bug Fixes

• cli: correct OpenHarmony SDK path detection logic (#​2963) (b453673)
• napi: do not invoke process.report on Windows (#​2972) (01485ff)

Features

• cli: resolve command from args (#​2973) (13cb9dc)

nestjs/nest (@​nestjs/common)

v11.1.7

Compare Source

nestjs/nest (@​nestjs/core)

v11.1.7

Compare Source

nestjs/nest (@​nestjs/platform-express)

v11.1.7

Compare Source

toyobayashi/emnapi (emnapi)

v1.6.0

Compare Source

What's Changed

• feat: added SharedArrayBuffer api by @​toyobayashi in #​171
• feat: make napi_delete_reference use node_api_basic_env by @​toyobayashi in #​170
• ci: migrate to npm trusted publishing by @​toyobayashi in #​168

Full Changelog: toyobayashi/emnapi@v1.5.0...v1.6.0

lint-staged/lint-staged (lint-staged)

v16.2.6

Compare Source

Patch Changes

• #​1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

v16.2.5

Compare Source

Patch Changes

• #​1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

oxc-project/oxc (oxlint)

v1.24.0

Compare Source

🐛 Bug Fixes

• 28e76ec oxlint: Resolving JS plugin failing when extends is used (#​14556) (camc314)

pnpm/pnpm (pnpm)

v10.19.0

Compare Source

Minor Changes

• You can now allow specific versions of dependencies to run postinstall scripts. onlyBuiltDependencies now accepts package names with lists of trusted versions. For example:

  onlyBuiltDependencies:
    - nx@21.6.4 || 21.6.5
    - esbuild@0.25.1

  Related PR: #​10104.

• Added support for exact versions in minimumReleaseAgeExclude #​9985.

  You can now list one or more specific versions that pnpm should allow to install, even if those versions don’t satisfy the maturity requirement set by minimumReleaseAge. For example:

  minimumReleaseAge: 1440
  minimumReleaseAgeExclude:
    - nx@21.6.5
    - webpack@4.47.0 || 5.102.1

rolldown/rolldown (rolldown)

v1.0.0-beta.44

Compare Source

💥 BREAKING CHANGES

• enable output.minifyInternalExports for format: 'es' or minify: true (#​6594) by @​sapphi-red
• node/options: remove InputOptions.jsx, prefer transform.jsx always (#​6548) by @​hyf0

🚀 Features

• support jsx preset for transform.jsx (#​6630) by @​shulaoda
• rolldown_plugin_vite_html: align inject_to_body function (#​6622) by @​shulaoda
• rolldown_vite_css_post_plugin: tweak is_legacy field (#​6620) by @​shulaoda
• native-plugin: expose viteHtmlPlugin (#​6609) by @​shulaoda
• native-plugin: expose viteCSSPostPlugin (#​6606) by @​shulaoda
• builtin-plugin: expose viteCSSPlugin (#​6605) by @​shulaoda
• rolldown_plugin_vite_html: complete plugin binding (#​6604) by @​shulaoda
• rolldown_plugin_vite_css: support plugin binding (#​6598) by @​shulaoda
• add TypedArray constructors to side-effect free globals (#​6592) by @​IWANABETHATGUY
• rolldown_plugin_vite_html: align process src attr logic (#​6572) by @​shulaoda
• rolldown: support output.clearDir to clean up dir before build (#​6486) by @​aprosail
• dev: return RolldownOutput instead of BindingOutputs from onOutput (#​6563) by @​sapphi-red
• rolldown_plugin_vite_html: align process srcset logic (#​6560) by @​shulaoda
• rolldown_plugin_vite_html: align process src function (#​6559) by @​shulaoda
• rolldown_plugin_vite_html: align parse secset function (#​6558) by @​shulaoda
• node/options: deprecate dropLabels and add transform.dropLabels (#​6557) by @​hyf0
• node/options: deprecate keepNames and add output.keepNames (#​6556) by @​hyf0
• node/options: deprecate profilerNames and add output.generatedCode.profilerNames (#​6555) by @​hyf0
• node/options: deprecate top level inject and define and add transform.define, transform.inject (#​6544) by @​hyf0
• rolldown_plugin_vite_html: initialize attributes handle logic (#​6543) by @​shulaoda
• rolldown: oxc v0.95.0 (#​6541) by @​Boshen
• rolldown_plugin_vite_html: align inject css logic (#​6528) by @​shulaoda
• rolldown_plugin_vite_html: align modulepreload inject logic (#​6526) by @​shulaoda
• rolldown_plugin_vite_html: align css bundle output inject logic (#​6524) by @​shulaoda
• rolldown_plugin_vite_html: support inject_to_head function (#​6522) by @​shulaoda
• rolldown_plugin_vite_html: align emit and delete logic (#​6521) by @​shulaoda
• rolldown_vite_html: align handle html asset url logic (#​6518) by @​shulaoda
• add an example how to transform code and generate sourcemap with experimental.nativeMagicString (#​6514) by @​IWANABETHATGUY
• rolldown_plugin_vite_html: align handle inline css logic (#​6517) by @​shulaoda

🐛 Bug Fixes

• native-plugin: use correct config for assetPlugin (#​6638) by @​shulaoda
• no_color not being respected on reporter (#​6615) by @​H4ad
• improve tree shaking for JSON default imports (#​6626) by @​IWANABETHATGUY
• cjs treeshaking removes used code (#​6597) by @​IWANABETHATGUY
• plugin/vite-resolve: return package_json_path from resolveId hook (#​6434) by @​sapphi-red
• dev: should have idx error happens with deferSyncScanData + incremental rebuild (#​6568) by @​sapphi-red
• rolldown: sync scoping properly in pre_process_ecma_ast (#​6537) by @​Boshen
• process CJS tree shaking bailout modules before eliminating unused dynamic entries (#​6549) by @​IWANABETHATGUY
• rust/dev: error of bundler.scandoesn't get handled (#​6547) by @​Copilot
• inline only self referenced json module properties (#​6519) by @​IWANABETHATGUY
• avoid processing native MagicString sourcemap when sourcemap is disabled (#​6510) by @​IWANABETHATGUY

🚜 Refactor

• rolldown_binding: unify BindingAssetInlineLimit (#​6625) by @​shulaoda
• rolldown_binding: tweak BindingAssetPluginConfig (#​6624) by @​shulaoda
• tweak viteCSSPlugin config (#​6610) by @​shulaoda
• rust/dev: remove unnecessary bundler cache management of dev engine (#​6576) by @​hyf0
• rust/dev: refactor TaskInput into enum to reduce invalid states (#​6575) by @​hyf0
• improve the error message of ScanStageCache#merge (#​6564) by @​IWANABETHATGUY
• rust/dev: use client_id to check if module is executed for test environment (#​6566) by @​hyf0
• rust/binding: mark napi object that won't be received from js side (#​6531) by @​hyf0
• rust/binding: mark napi object struct that won't be passed to js explicitly (#​6525) by @​hyf0
• rust/binding: use &str or JsString to avoid unnecessary clone (#​6523) by @​hyf0
• rust/binding: use &str to avoid unnecessary clone (#​6520) by @​hyf0
• rust: replace unwrap with expect for better error handling in message sending (#​6509) by @​hyf0

📚 Documentation

• add redirect from /guide/in-depth/ to /in-depth/ (#​6554) by @​Copilot
• guide: polish notable features page (#​6535) by @​sapphi-red
• builtin-plugins: add replace plugin docs (#​6534) by @​sapphi-red
• add Additional Thanks in acknowledgements page (#​6507) by @​hyf0
• polish doc for experimental.nativeMagicString (#​6504) by @​IWANABETHATGUY

⚡ Performance

• cli: advance createTokioRuntime (#​6618) by @​hyf0
• rolldown: reduce unnecessary Vec allocate (#​6601) by @​Brooooooklyn
• rolldown: make derived assets generation more parallel (#​6600) by @​Brooooooklyn
• rolldown: make chunks generation more parallel (#​6599) by @​Brooooooklyn
• rolldown_utils: only allocate HASH_PLACEHOLDER_LEFT once (#​6595) by @​Brooooooklyn
• rolldown: use oxc-resolver with simd-json (#​6591) by @​Boshen
• rolldown: avoid allocate the sourcemap sources on non Windows os (#​6590) by @​Brooooooklyn
• resolver: use optimized fs.read_to_string impl (#​6589) by @​Brooooooklyn
• deps: upgrade json-escape-simd and add simdutf8 dependency (#​6579) by @​Brooooooklyn
• rust/dev: remove unncessary clone for ClientInput (#​6565) by @​hyf0
• visit ast in cross_module_optimization stage parallel (#​6552) by @​IWANABETHATGUY

🧪 Testing

• json module prop conflict with normal module declaration binding (#​6540) by @​IWANABETHATGUY
• vite-tests: fix rolldown overrides (#​6532) by @​sapphi-red

⚙️ Miscellaneous Tasks

• remove string conversion warning in replacePlugin to compatible with rollup (#​6639) by @​IWANABETHATGUY
• deps: update dependency dprint-json to v0.21.0 (#​6637) by @​renovate[bot]
• deps: lock file maintenance (#​6635) by @​renovate[bot]
• deps: lock file maintenance npm packages (#​6632) by @​renovate[bot]
• node: use built-in styleText (#​6340) by @​dumbmatter
• deps: update actions/setup-node action to v6 (#​6629) by @​renovate[bot]
• deps: update github-actions (#​6628) by @​renovate[bot]
• deps: update dependency dprint-markdown to v0.20.0 (#​6627) by @​renovate[bot]
• Switch color dependencies (ansis and picocolors) to built-in styleText (#​6619) by @​IWANABETHATGUY
• native-plugin: tweak assetPlugin (#​6623) by @​shulaoda
• remove deprecated warning in build.ts (#​6621) by @​IWANABETHATGUY
• deps: update dependency tsdown to v0.15.8 (#​6617) by @​renovate[bot]
• rolldown_binding: rename vite css plugin config field (#​6611) by @​shulaoda
• add colored deprecation warnings for top-level options (#​6612) by @​IWANABETHATGUY
• rust: make cargo publish --workspace work (#​6287) by @​Boshen
• deps: update dependency rolldown-plugin-dts to v0.16.12 (#​6608) by @​renovate[bot]
• test: add opposite_minify_internal_exports and remove minify_internal_exports extend test (#​6596) by @​hyf0
• test: render snapshot for build and dev independently (#​6584) by @​hyf0
• test: split test logic for normal build and dev engine (#​6580) by @​hyf0
• fix rolldown build self warning (#​6578) by @​IWANABETHATGUY
• tweak BindingBuiltinPluginName (#​6574) by @​shulaoda
• rust: use forked notify crate (#​6573) by @​Boshen
• add .len() and .is_empty() to HybridIndexVec (#​6570) by @​sapphi-red
• ai: improve AGENT.md with verified prompts (#​6533) by @​hyf0
• clippy: set too-many-lines-threshold to 200 (#​6530) by @​shulaoda
• clean up examples/basic-vue (#​6515) by @​IWANABETHATGUY
• deps: update dependency tsdown to v0.15.7 (#​6512) by @​renovate[bot]
• add shulaoda to release PR assignees (#​6505) by @​shulaoda

❤️ New Contributors

• @​dumbmatter made their first contribution in #​6340
• @​H4ad made their first contribution in #​6615
• @​aprosail made their first contribution in #​6486

tinylibs/tinybench (tinybench)

v5.1.0

Compare Source

   🚀 Features

• Add AbortSignal support at the task level  -  by @​boneskull in #​364 (f3721)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.