chore(deps-dev): bump the npm-all group across 1 directory with 10 updates

[dependabot]

Bumps the npm-all group with 10 updates in the / directory:

Package	From	To
@types/node	24.12.4	26.1.1
@vitest/coverage-v8	4.1.9	4.1.10
knip	6.18.0	6.27.0
oxfmt	0.56.0	0.59.0
oxlint	1.71.0	1.74.0
postcss	8.5.15	8.5.19
tsdown	0.22.3	0.22.9
typescript	6.0.3	7.0.2
vite	8.0.16	8.1.5
vitest	4.1.9	4.1.10

Updates @types/node from 24.12.4 to 26.1.1

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates knip from 6.18.0 to 6.27.0

Release notes

Sourced from knip's releases.

Release 6.27.0

• Add Temporal plugin (98191a04aad0572bead191b101bfecef75067b0c)
• Handle -d alias for react-email dir argument (53d1fec3213db8d6a84dfa7a82050b122782e065)
• Expand pnpm script references with forwarded arguments (33e9799df39450033061b9c4c07daf22f5d15721)
• Treat path-shaped script tokens as file references, extend known global binaries (d9508c282ab81351beda4b2f859435b49f142c51)
• Mark tsdown neverBundle dependencies as referenced (5fd863ba12e68842f91ab1a94e7e30d1e571da92)
• Support TanStack Start in tanstack-router plugin (bd63cd8af88dac03a98aa17f1add322f7bdf4a94)
• Mark vite ssr.external dependencies as referenced (91de938032062cb667bced0eadef9e67d1e20b1f)
• Expand bun, npm, and yarn script references with forwarded arguments (b5a31767a83e2cec3fb20c3b146d94c0412a4fd6)
• Add Latitude as sponsor (42676759cad5fb10ac96fd7c0457037e906f4b68)
• Regenerate plugin list in docs (1d2cdffb4d4151f848c44e066eff43e9efbf44fe)
• Support Vue 2 template auto-imports (close #1881) (2157f3913f77216d268b2255899b6fc58609f9bb)
• Ignore block-commented stylesheet imports (resolve #1880, close #1882) (a627f53221547d5397d70722fcc2fd723889e579)
• Support TypeScript 5.0 narrowing for ssr.external (989292f79b9d19028bfc7ba988b74ba691041a45)
• Resolve local binaries from bun run (5e9a7f0286e2c2175bb299c514cc7b67a7cf24f1)
• Support Vitest inline project config extensions (f682327f6181f44e3924715efa7404aa39e532f0)
• Resolve package names from aliased node_modules paths (c273d5fbc1b0d3eaf27b38c3f31d3a2a4b6b184a)
• Support Tailwind CSS URL imports (57a4770447cc4c8f9ea4ffb9171c0c92eed4f255)
• Resolve unbuilt workspace package exports (close #1877) (1b0a2c0ee784db165c7f92fe10397a6cb513c1cf)
• Skip unresolved imports of gitignored generated files (605c9049f73838beb1c6fee83c6a5421ae1a6d07)
• Attribute imports of aliased packages to the declared dependency (d05e775c9a3a5676dc9eadcc1093f7d9983efd06)
• Flag unresolvable imports of transitive peer deps as unlisted (resolve #1883) (18f0bff4ea683837f75ca744d3fbde52df49b297)
• Don't count ambient module declarations in script files as imports (e52aecfd7c022cbe72b1c11dde3f4968579ac409)
• Update rolldown snapshot (a63e92788239062682603a5727ede371db7845c8)
• Remove obsolete workarounds from ecosystem tests (a521cf790d726c18e644e2e316cdc09eb654f607)
• Handle snapshotSerializers in Vitest plugin (resolve #1884) (b597de951f6f0e897afdbbbb8a7d0c06c8d2437d)
• Set the stage (c059c2be5803609924b852c2bf0cd90906a6a831)

Release 6.26.0

• ci: add path filters (#1871) (4249935adffe1b8eca9570fb325fa19cc8010584) - thanks @​trueberryless!
• Add CodeRabbit as gold sponsor (1da09fdc8f4d851f3cad30659200018bfb47a5e0)
• Fix up docs a bit more (39125a7f473e006f61629781bff1ac4a050ca460)
• Don't report ambient declaration files as unused (aed361c00a82829c2fc80a65a2f7af174316782e)
• Register oclif command files as entries (3b4d58c9da83d93b6821a2b24f57b919ba886756)
• Add electron-vite plugin (d92107ea504833b3ee7ad2b695e22d40528b24c3)
• Add esbuild plugin (ef3b601d957546554de2cb1fbff859f5bdafb741)
• Ignore more globally available binaries (829298129fdfd1b41a1f8dff5022b9fbbe25f454)
• Resolve #-imports to source when node condition is unbuilt (resolve #1873) (f2713ed1e499ab286b86615d4b8ec34f711d1bd2)
• Ignore gh as a globally available binary (a6f0772e5db03a8412a3ac036756779f22d1a27d)
• Resolve Vitest benchmark files as entries (57429139f7e93f2a4bee35a53d450c4f45dea9ff)
• Extract shared Vue auto-import machinery into plugins/_vue (73010753d432ae58eb12c7eec9c5723036009749)
• Scope compiler extensions per workspace (5e6f82b963a83e5801484efbc01a4b6a9ce39ea3)
• Resolve auto-imported components in the Vue SFC compiler (009aad8f9dab589898e5dba4c85fa41ea57c1a49)
• Add plugins for the Vue auto-import ecosystem (f638c8302cdd26a63e477344a7cf44ef60af7788)
• Enable Vue SFC compiler on unplugin-vue and @​vitejs/plugin-vue (9396ab159919147ef81dad16e365e531b32b4b12)
• Recognize vite-plugin-vue-meta-layouts (same layouts convention) (3ceee89228b0173eddc0466bf50e8181286ffebc)
• Add vite-plugin-pages and unplugin-icons plugins (9bc17540bcf8eb142474ed84837c1e2cebb7fe73)
• Add vite-plugin-pwa and @​intlify/unplugin-vue-i18n plugins (45dea0a397ed754c34617ed18deef4dc6f0ec0d4)
• Dog, food. (e1249ade2558d3801d85e2dc63349d884f3443d4)
• Update query snapshot (a45941d2db381c04f8a38416533217ee84f77ca7)

... (truncated)

Commits

• e463b61 Release knip@6.27.0
• b597de9 Handle snapshotSerializers in Vitest plugin (resolve #1884)
• e52aecf Don't count ambient module declarations in script files as imports
• 18f0bff Flag unresolvable imports of transitive peer deps as unlisted (resolve #1883)
• d05e775 Attribute imports of aliased packages to the declared dependency
• 605c904 Skip unresolved imports of gitignored generated files
• 1b0a2c0 Resolve unbuilt workspace package exports (close #1877)
• 57a4770 Support Tailwind CSS URL imports
• c273d5f Resolve package names from aliased node_modules paths
• f682327 Support Vitest inline project config extensions
• Additional commits viewable in compare view

Updates oxfmt from 0.56.0 to 0.59.0

Changelog

Sourced from oxfmt's changelog.

[0.59.0] - 2026-07-13

🐛 Bug Fixes

• 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

• 9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

• dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)
• f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

[0.52.0] - 2026-05-26

🚀 Features

• 16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

• 43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

[0.49.0] - 2026-05-11

🚀 Features

• 6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

[0.45.0] - 2026-04-13

🐛 Bug Fixes

• 50c389b oxfmt: Support .editorconfig quote_type (#20989) (leaysgur)

[0.44.0] - 2026-04-06

🐛 Bug Fixes

• dd2df87 npm: Export package.json for oxlint and oxfmt (#20784) (kazuya kawaguchi)
• 4216380 oxfmt: Support .editorconfig tab_width fallback (#20988) (leaysgur)

... (truncated)

Commits

• 2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
• 415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
• 39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
• 5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
• See full diff in compare view

Updates oxlint from 1.71.0 to 1.74.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

• 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
• 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
• bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
• 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
• 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
• 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
• ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

• 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
• 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
• 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
• 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
• a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
• ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
• 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
• ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
• e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
• 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
• 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
• fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
• ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
• dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
• 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
• cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

• 25d577e language_server: Start tools in parallel (#15500) (Sysix)
• 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
• 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
• 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
• 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
• 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

• 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
• 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
• a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
• 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
• 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
• 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.74.0] - 2026-07-13

🚀 Features

• 0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#24044) (Boshen)

🐛 Bug Fixes

• 8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#24341) (leaysgur)
• 2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#24339) (leaysgur)

⚡ Performance

• 7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#24413) (connorshea)
• 6272051 linter/typescript/no-require-imports: Compile allow patterns once (#24417) (connorshea)
• 33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#24420) (connorshea)

[1.73.0] - 2026-07-06

🚀 Features

• a2c97f3 linter/unicorn: Implement explicit-timer-delay rule (#23612) (Mikhail Baev)
• 85735cb linter/unicorn: Implement no-confusing-array-with rule (#23638) (Shekhu☺️)
• cb4fbb9 linter/eslint: Implement no-unreachable-loop rule (#23975) (Todor Andonov)
• dc32112 linter/eslint/no-constant-binary-expression: Check relational comparisons (#24088) (camc314)
• d963967 linter/unicorn/no-array-sort: Add allowAfterSpread option (#24043) (Boshen)
• 0a75682 linter: Add per-rule timings for type-aware linting (#22488) (camchenry)
• 743e222 linter/react: Add disallowedValues option for forbid-dom-props rule (#23970) (Mikhail Baev)

🐛 Bug Fixes

• bdb51c7 linter/jest/prefer-ending-with-an-expect: Validate config patterns (#24122) (camc314)
• 45d607d linter/react/forbid-component-props: Make allow/disallow lists optional in schema (#24024) (Boshen)

[1.72.0] - 2026-06-29

🚀 Features

• 1c8f50c linter: Add schema for eslint/no-restricted-import (#23642) (Sysix)

🐛 Bug Fixes

• 742be36 refactor/node/handle-callback-err: Reject invalid regex config (#23740) (camc314)

Commits

• 2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
• 7f80cac perf(linter/vue/prop-name-casing): precompile ignoreProps regex pattern (#2...
• 6272051 perf(linter/typescript/no-require-imports): compile allow patterns once (#24417)
• 33805b9 perf(linter/jsdoc/require-param): compile checkTypesPattern regex once (#24420)
• 0433a83 feat(linter/eslint/no-inner-declarations): add namespaces option (#24044)
• 8337835 fix(linter): error on ignorePatterns that cannot match files aoutside the c...
• 2ce5a33 fix(linter): resolve ignorePatterns relative to the config dir (#24339)
• 39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
• a2c97f3 feat(linter/unicorn): implement explicit-timer-delay rule (#23612)
• bdb51c7 fix(linter/jest/prefer-ending-with-an-expect): validate config patterns (#24122)
• Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Commits

• 9543b22 Release 8.5.19 version
• 3d13bf9 Fix CI on Windows too
• 00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
• 7a05b33 Temporary fix CI
• 4c0d194 Release 8.5.18 version
• 92b4e78 Update dependencies
• 95663d3 Limit where source map can be loaded for security reasons
• 74e25ae Release 8.5.17 version
• d1518af Fix Maximum call stack size exceeded error
• 2421312 Fix linter
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates tsdown from 0.22.3 to 0.22.9

Release notes

Sourced from tsdown's releases.

v0.22.9

   🚀 Features

• Upgrade rolldown to v1.2  -  by @​sxzz (91bb5)

   🐞 Bug Fixes

• deps: Check dynamic imports in onlyImport  -  by @​sxzz in rolldown/tsdown#1019 (a625a)

    View changes on GitHub

v0.22.8

   🚀 Features

• deps: Add onlyImport option  -  by @​sxzz and Claude Fable 5 (c5798)

   🐞 Bug Fixes

• config: Concat plugins arrays when merging config  -  by @​sxzz (b1c80)

    View changes on GitHub

v0.22.7

   🚀 Features

• logger: Add suppressWarnings option to filter warnings  -  by @​sxzz (dc510)

    View changes on GitHub

v0.22.6

No significant changes

    View changes on GitHub

v0.22.5

   🚀 Features

• Support TS 7  -  by @​sxzz (b21f1)

   🐞 Bug Fixes

• Evaluate banner/footer function addon per chunk  -  by @​spokodev in rolldown/tsdown#1011 (517c5)
• shims: Don't emit esm shim banner in cjs output for unbundle  -  by @​materwelonDhruv in rolldown/tsdown#991 (4bb30)

    View changes on GitHub

v0.22.4

   🚀 Features

• Export tsdown version  -  by @​userquin in rolldown/tsdown#976 (a0938)

... (truncated)

Commits

• ef4e3e6 chore: release v0.22.9
• 91bb5d2 feat: upgrade rolldown to v1.2
• a625a4c fix(deps): check dynamic imports in onlyImport (#1019)
• 8d80e30 chore: release v0.22.8
• cf6e598 chore: upgrade deps
• c579828 feat(deps): add onlyImport option
• b1c8014 fix(config): concat plugins arrays when merging config
• 8700f10 chore(deps): update pnpm to v11.12.0 (#997)
• 7859ee2 docs: update Rolldown links to correct URL structure (#1017)
• b4046e6 chore: release v0.22.7
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 8.0.16 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

• bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
• client: overlay error message format align rolldown (#22869) (5a72b87)
• deps: update all non-major dependencies (#22921) (fef682d)
• deps: update rolldown-related dependencies (#22922) (3c345e4)
• module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
• optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
• ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

• build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
• build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

• avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

... (truncated)

Commits

• 5e7fe12 release: v8.1.5
• 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
• 5a72b87 fix(client): overlay error message format align rolldown (#22869)
• f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
• 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
• c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
• b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
• fef682d fix(deps): update all non-major dependencies (#22921)
• 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
• 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
• Additional commits viewable in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@types/node	[>= 25.a, < 26]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

⚠️ Dependency Count

This PR adds 14 new dependencies (371 → 385), which exceeds the threshold of 10.

⚠️ Duplicate Dependencies (found: 11, threshold: 1)

📦 Package	📋 Versions
tinybench	2 versions root@ @vitest/coverage-v8@4.1.10 vitest@4.1.10 tinybench@2.9.0 root@ tinybench@6.0.2
js-tokens	2 versions root@ @vitest/coverage-v8@4.1.10 ast-v8-to-istanbul@1.0.5 js-tokens@10.0.0 root@ tailwindcss@2.2.19 cosmiconfig@7.1.0 parse-json@5.2.0 @babel/code-frame@7.27.1 js-tokens@4.0.0
@emnapi/core	2 versions root@ knip@6.27.0 oxc-resolver@11.21.3 @oxc-resolver/binding-wasm32-wasi@11.21.3 @emnapi/core@1.11.0 root@ @vitest/coverage-v8@4.1.10 ... rolldown@1.1.5 @rolldown/binding-wasm32-wasi@1.1.5 @emnapi/core@1.11.1
@emnapi/runtime	2 versions root@ knip@6.27.0 oxc-resolver@11.21.3 @oxc-resolver/binding-wasm32-wasi@11.21.3 @emnapi/runtime@1.11.0 root@ @vitest/coverage-v8@4.1.10 ... rolldown@1.1.5 @rolldown/binding-wasm32-wasi@1.1.5 @emnapi/runtime@1.11.1
picomatch	2 versions root@ tailwindcss@2.2.19 chokidar@3.6.0 anymatch@3.1.3 picomatch@2.3.2 root@ @vitest/coverage-v8@4.1.10 vitest@4.1.10 @vitest/mocker@4.1.10 vite@8.1.4 picomatch@4.0.5
postcss-value-parser	2 versions root@ tailwindcss@2.2.19 reduce-css-calc@2.1.8 postcss-value-parser@3.3.1 root@ tailwindcss@2.2.19 autoprefixer@10.4.23 postcss-value-parser@4.2.0
glob-parent	2 versions root@ tailwindcss@2.2.19 chokidar@3.6.0 glob-parent@5.1.2 root@ tailwindcss@2.2.19 glob-parent@6.0.2
yaml	2 versions root@ tailwindcss@2.2.19 cosmiconfig@7.1.0 yaml@1.10.3 root@ @vitest/coverage-v8@4.1.10 vitest@4.1.10 @vitest/mocker@4.1.10 vite@8.1.4 yaml@2.9.0
is-arrayish	2 versions root@ tailwindcss@2.2.19 cosmiconfig@7.1.0 parse-json@5.2.0 error-ex@1.3.4 is-arrayish@0.2.1 root@ tailwindcss@2.2.19 color@4.2.3 color-string@1.9.1 simple-swizzle@0.2.4 is-arrayish@0.3.4
get-tsconfig	2 versions root@ knip@6.27.0 get-tsconfig@4.14.0 root@ tsdown@0.22.8 rolldown-plugin-dts@0.27.9 get-tsconfig@5.0.0-beta.5
@oxc-project/types	2 versions root@ knip@6.27.0 oxc-parser@0.137.0 @oxc-project/types@0.137.0 root@ @vitest/coverage-v8@4.1.10 ... vite@8.1.4 rolldown@1.1.5 @oxc-project/types@0.139.0

💡 To find out what depends on a specific package, run: pnpm -r why example-package

⚠️ Package Size Increase

📦 Package	📏 Base Size	📏 Source Size	📈 Size Change
@projectwallace/css-parser	41.3 kB	41.3 kB	+5 B