chore(deps): update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
adm-zip	0.6.0 → 0.6.1
rolldown (source)	1.2.6 → 1.2.8

---

Release Notes

cthackers/adm-zip (adm-zip)

v0.6.1

Compare Source

Full Changelog: cthackers/adm-zip@v0.6.0...v0.6.1

• Updated dev dependencies
• Fixed uncaught crash in async decompression on malformed DEFLATE data
• Fixed addLocalFolder following symlinks out of the archived folder
• Stripped setuid/setgid/sticky bits from extracted file permissions
• Enforced the decompression size cap on the async path and for size 0
• Rejected archives with duplicate entry names
• Blocked extraction from writing through symlinks inside the target
• Routed malformed-header parse errors through the async callback
• Rejected zip entries whose declared data extent runs past the buffer
• Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
• Fixed addLocalFolderAsync2 mangling local paths on Windows

rolldown/rolldown (rolldown)

v1.2.8

Compare Source

🚀 Features

• dev: add hotUpdate dev option to gate the hotUpdate hook (#​10837) by @​h-a-n-a
• docs: add wrangler (#​10821) by @​mdong1909

🐛 Bug Fixes

• dev: clean stale dynamic entry references after partial scans (#​10846) by @​shulaoda
• include external wildcard re-exports in OutputChunk.imports (#​10845) by @​isker

📚 Documentation

• document dynamic entry cache merging after partial scans (#​10848) by @​shulaoda

⚡ Performance

• cache getModuleInfo during code splitting (#​10838) by @​hyfdev

🧪 Testing

• dev: cover stale dynamic entry references after partial scans (#​10847) by @​shulaoda

⚙️ Miscellaneous Tasks

• deps: update dependency @​napi-rs/cli to v3.9.0 (#​10816) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.5 (#​10827) by @​renovate[bot]
• deps: update dependency vite-plus to v0.3.1 (#​10842) by @​renovate[bot]
• deps: upgrade oxc to 0.149.0 (#​10834) by @​camc314
• deps: update rust crates (#​10830) by @​renovate[bot]
• deps: update npm packages (#​10832) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.50.1 (#​10824) by @​renovate[bot]
• deps: update test262 submodule for tests (#​10836) by @​rolldown-guard[bot]
• deps: update github actions (#​10831) by @​renovate[bot]
• deps: update dependency rust to v1.98.1 (#​10819) by @​renovate[bot]

❤️ New Contributors

• @​isker made their first contribution in #​10845

v1.2.7

Compare Source

🐛 Bug Fixes

• rolldown_binding: make PreRenderedChunk.facadeModuleId nullable like Rollup (#​10810) by @​IWANABETHATGUY
• plugin_timings: reword the warning so it does not contradict itself (#​10788) by @​IWANABETHATGUY
• model a facade's host import in the fold cycle check (#​10743) by @​ulrichstark

🧪 Testing

• dev: add circular reexport test (#​10563) by @​sapphi-red

⚙️ Miscellaneous Tasks

• deps: update npm packages (#​10795) by @​renovate[bot]
• deps: update rust crates (#​10794) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.3 (#​10805) by @​renovate[bot]
• renovate: disable oxc auto-updates (#​10813) by @​IWANABETHATGUY
• deps: upgrade oxc to 0.148.0 (#​10809) by @​camc314
• deps: update pnpm to v11.24.0 (#​10803) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.50.0 (#​10806) by @​renovate[bot]
• deps: update test262 submodule for tests (#​10808) by @​rolldown-guard[bot]
• deps: update rollup submodule for tests to v4.63.1 (#​10807) by @​rolldown-guard[bot]
• deps: update crate-ci/typos action to v1.49.1 (#​10796) by @​renovate[bot]
• deps: update github actions (#​10749) by @​renovate[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.