chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^20.4.5 -> ^20.4.8
esbuild	^0.18.17 -> ^0.18.19
pnpm (source)	8.6.11 -> 8.6.12
prettier (source)	^3.0.0 -> ^3.0.1
rollup (source)	^3.27.0 -> ^3.27.2
vite (source)	^4.4.8 -> ^4.4.9

---

Release Notes

evanw/esbuild (esbuild)

v0.18.19

Compare Source

• Implement composes from CSS modules (#​20)

  This release implements the composes annotation from the CSS modules specification. It provides a way for class selectors to reference other class selectors (assuming you are using the local-css loader). And with the from syntax, this can even work with local names across CSS files. For example:

  // app.js
  import { submit } from './style.css'
  const div = document.createElement('div')
  div.className = submit
  document.body.appendChild(div)

  /* style.css */
  .button {
    composes: pulse from "anim.css";
    display: inline-block;
  }
  .submit {
    composes: button;
    font-weight: bold;
  }

  /* anim.css */
  @​keyframes pulse {
    from, to { opacity: 1 }
    50% { opacity: 0.5 }
  }
  .pulse {
    animation: 2s ease-in-out infinite pulse;
  }

  Bundling this with esbuild using --bundle --outdir=dist --loader:.css=local-css now gives the following:

  (() => {
    // style.css
    var submit = "anim_pulse style_button style_submit";
  
    // app.js
    var div = document.createElement("div");
    div.className = submit;
    document.body.appendChild(div);
  })();

  /* anim.css */
  @​keyframes anim_pulse {
    from, to {
      opacity: 1;
    }
    50% {
      opacity: 0.5;
    }
  }
  .anim_pulse {
    animation: 2s ease-in-out infinite anim_pulse;
  }
  
  /* style.css */
  .style_button {
    display: inline-block;
  }
  .style_submit {
    font-weight: bold;
  }

  Import paths in the composes: ... from syntax are resolved using the new composes-from import kind, which can be intercepted by plugins during import path resolution when bundling is enabled.

  Note that the order in which composed CSS classes from separate files appear in the bundled output file is deliberately undefined by design (see the specification for details). You are not supposed to declare the same CSS property in two separate class selectors and then compose them together. You are only supposed to compose CSS class selectors that declare non-overlapping CSS properties.

  Issue #​20 (the issue tracking CSS modules) is esbuild's most-upvoted issue! With this change, I now consider esbuild's implementation of CSS modules to be complete. There are still improvements to make and there may also be bugs with the current implementation, but these can be tracked in separate issues.

• Fix non-determinism with tsconfig.json and symlinks (#​3284)

  This release fixes an issue that could cause esbuild to sometimes emit incorrect build output in cases where a file under the effect of tsconfig.json is inconsistently referenced through a symlink. It can happen when using npm link to create a symlink within node_modules to an unpublished package. The build result was non-deterministic because esbuild runs module resolution in parallel and the result of the tsconfig.json lookup depended on whether the import through the symlink or not through the symlink was resolved first. This problem was fixed by moving the realpath operation before the tsconfig.json lookup.

• Add a hash property to output files (#​3084, #​3293)

  As a convenience, every output file in esbuild's API now includes a hash property that is a hash of the contents field. This is the hash that's used internally by esbuild to detect changes between builds for esbuild's live-reload feature. You may also use it to detect changes between your own builds if its properties are sufficient for your use case.

  This feature has been added directly to output file objects since it's just a hash of the contents field, so it makes conceptual sense to store it in the same location. Another benefit of putting it there instead of including it as a part of the watch mode API is that it can be used without watch mode enabled. You can use it to compare the output of two independent builds that were done at different times.

  The hash algorithm (currently XXH64) is implementation-dependent and may be changed at any time in between esbuild versions. If you don't like esbuild's choice of hash algorithm then you are welcome to hash the contents yourself instead. As with any hash algorithm, note that while two different hashes mean that the contents are different, two equal hashes do not necessarily mean that the contents are equal. You may still want to compare the contents in addition to the hashes to detect with certainty when output files have been changed.

• Avoid generating duplicate prefixed declarations in CSS (#​3292)

  There was a request for esbuild's CSS prefixer to avoid generating a prefixed declaration if a declaration by that name is already present in the same rule block. So with this release, esbuild will now avoid doing this:

  /* Original code */
  body {
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }
  
  /* Old output (with --target=safari12) */
  body {
    -webkit-backdrop-filter: blur(30px);
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }
  
  /* New output (with --target=safari12) */
  body {
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }

  This can result in a visual difference in certain cases (for example if the browser understands blur(30px) but not blur(45px), it will be able to fall back to blur(30px)). But this change means esbuild now matches the behavior of Autoprefixer which is probably a good representation of how people expect this feature to work.

v0.18.18

Compare Source

• Fix asset references with the --line-limit flag (#​3286)

  The recently-released --line-limit flag tells esbuild to terminate long lines after they pass this length limit. This includes automatically wrapping long strings across multiple lines using escaped newline syntax. However, using this could cause esbuild to generate incorrect code for references from generated output files to assets in the bundle (i.e. files loaded with the file or copy loaders). This is because esbuild implements asset references internally using find-and-replace with a randomly-generated string, but the find operation fails if the string is split by an escaped newline due to line wrapping. This release fixes the problem by not wrapping these strings. This issue affected asset references in both JS and CSS files.

• Support local names in CSS for @keyframe, @counter-style, and @container (#​20)

  This release extends support for local names in CSS files loaded with the local-css loader to cover the @keyframe, @counter-style, and @container rules (and also animation, list-style, and container declarations). Here's an example:

  @​keyframes pulse {
    from, to { opacity: 1 }
    50% { opacity: 0.5 }
  }
  @​counter-style moon {
    system: cyclic;
    symbols: 🌕 🌖 🌗 🌘 🌑 🌒 🌓 🌔;
  }
  @​container squish {
    li { float: left }
  }
  ul {
    animation: 2s ease-in-out infinite pulse;
    list-style: inside moon;
    container: squish / size;
  }

  With the local-css loader enabled, that CSS will be turned into something like this (with the local name mapping exposed to JS):

  @​keyframes stdin_pulse {
    from, to {
      opacity: 1;
    }
    50% {
      opacity: 0.5;
    }
  }
  @​counter-style stdin_moon {
    system: cyclic;
    symbols: 🌕 🌖 🌗 🌘 🌑 🌒 🌓 🌔;
  }
  @​container stdin_squish {
    li {
      float: left;
    }
  }
  ul {
    animation: 2s ease-in-out infinite stdin_pulse;
    list-style: inside stdin_moon;
    container: stdin_squish / size;
  }

  If you want to use a global name within a file loaded with the local-css loader, you can use a :global selector to do that:

  div {
    /* All symbols are global inside this scope (i.e.
     * "pulse", "moon", and "squish" are global below) */
    :global {
      animation: 2s ease-in-out infinite pulse;
      list-style: inside moon;
      container: squish / size;
    }
  }

  If you want to use @keyframes, @counter-style, or @container with a global name, make sure it's in a file that uses the css or global-css loader instead of the local-css loader. For example, you can configure --loader:.module.css=local-css so that the local-css loader only applies to *.module.css files.

• Support strings as keyframe animation names in CSS (#​2555)

  With this release, esbuild will now parse animation names that are specified as strings and will convert them to identifiers. The CSS specification allows animation names to be specified using either identifiers or strings but Chrome only understands identifiers, so esbuild will now always convert string names to identifier names for Chrome compatibility:

  /* Original code */
  @​keyframes "hide menu" {
    from { opacity: 1 }
    to { opacity: 0 }
  }
  menu.hide {
    animation: 0.5s ease-in-out "hide menu";
  }
  
  /* Old output */
  @​keyframes "hide menu" { from { opacity: 1 } to { opacity: 0 } }
  menu.hide {
    animation: 0.5s ease-in-out "hide menu";
  }
  
  /* New output */
  @​keyframes hide\ menu {
    from {
      opacity: 1;
    }
    to {
      opacity: 0;
    }
  }
  menu.hide {
    animation: 0.5s ease-in-out hide\ menu;
  }

pnpm/pnpm (pnpm)

v8.6.12

Compare Source

Patch Changes

• Make the error message friendlier when a user attempts to run a command that does not exist #​6887.
• pnpm patch should work correctly when shared-workspace-file is set to false #​6885.
• pnpm env use should retry deleting the previous Node.js executable #​6587.
• pnpm dlx should not print an error stack when the underlying script execution fails #​6698.
• When showing the download progress of large tarball files, always display the same number of digits after the decimal point #​6901.
• Report download progress less frequently to improve performance #​6906.
• pnpm install --frozen-lockfile --lockfile-only should fail if the lockfile is not up to date with the package.json files #​6913.

Our Gold Sponsors

Our Silver Sponsors

prettier/prettier (prettier)

v3.0.1

Compare Source

diff

Fix cursor positioning for a special case (#​14812 by @​fisker)

// <|> is the cursor position

/* Input */
// All messages are represented in JSON.
// So, the prettier.py controls a subprocess which spawns "node {this_file}".
import {<|>  } from "fs"

/* Prettier 3.0.0 */
// All messages are represented in JSON.
// So, the prettier.py <|>controls a subprocess which spawns "node {this_file}".
import {} from "fs"

/* Prettier 3.0.1 */
// All messages are represented in JSON.
// So, the prettier.py controls a subprocess which spawns "node {this_file}".
import {<|>} from "fs"

Fix plugins/estree.d.ts to make it a module (#​15018 by @​kingyue737)

Add export {} in plugins/estree.d.ts to fix the "File is not a module" error

Add parenthesis around leading multiline comment in return statement (#​15037 by @​auvred)

// Input
function fn() {
  return (
    /**
     * @​type {...}
     */ expresssion
  )
}

// Prettier 3.0.0
function fn() {
  return /**
   * @​type {...}
   */ expresssion;
}

// Prettier 3.0.1
function fn() {
  return (
    /**
     * @​type {...}
     */ expresssion
  );
}

Add support for Vue "Generic Components" (#​15066 by @​auvred)

https://blog.vuejs.org/posts/vue-3-3#generic-components

<!-- Input -->
<script setup lang="ts" generic="T extends Type1 & Type2 & (Type3 | Type4), U extends string | number | boolean"></script>

<!-- Prettier 3.0.0 -->
<script
  setup
  lang="ts"
  generic="T extends Type1 & Type2 & (Type3 | Type4), U extends string | number | boolean"
></script>

<!-- Prettier 3.0.1 -->
<script
  setup
  lang="ts"
  generic="
    T extends Type1 & Type2 & (Type3 | Type4),
    U extends string | number | boolean
  "
></script>

Fix comments print in IfStatement (#​15076 by @​fisker)

function a(b) {
  if (b) return 1; // comment
  else return 2;
}

/* Prettier 3.0.0 */
Error: Comment "comment" was not printed. Please report this error!

/* Prettier 3.0.1 */
function a(b) {
  if (b) return 1; // comment
  else return 2;
}

Add missing type definition for printer.preprocess (#​15123 by @​so1ve)

export interface Printer<T = any> {
  // ...
+ preprocess?:
+   | ((ast: T, options: ParserOptions<T>) => T | Promise<T>)
+   | undefined;
}

Add missing getVisitorKeys method type definition for Printer (#​15125 by @​auvred)

const printer: Printer = {
  print: () => [],
  getVisitorKeys(node, nonTraversableKeys) {
    return ["body"];
  },
};

Add typing to support readonly array properties of AST Node (#​15127 by @​auvred)

// Input
interface TestNode {
  readonlyArray: readonly string[];
}

declare const path: AstPath<TestNode>;

path.map(() => "", "readonlyArray");

// Prettier 3.0.0
interface TestNode {
  readonlyArray: readonly string[];
}

declare const path: AstPath<TestNode>;

path.map(() => "", "readonlyArray");
//                  ^ Argument of type '"readonlyArray"' is not assignable to parameter of type '"regularArray"'. ts(2345)

// Prettier 3.0.1
interface TestNode {
  readonlyArray: readonly string[];
}

declare const path: AstPath<TestNode>;

path.map(() => "", "readonlyArray");

Add space before unary minus followed by a function call (#​15129 by @​pamelalozano)

// Input
div {
  margin: - func();
}

// Prettier 3.0.0
div {
  margin: -func();
}

// Prettier 3.0.1
div {
  margin: - func();
}

rollup/rollup (rollup)

v3.27.2

Compare Source

2023-08-04

Bug Fixes

• Revert sourcemap performance improvement for now as it causes issues with Vite (#​5075)

Pull Requests

• #​5075: Revert perf(sourcemap): lazy compute decoded mappings (@​thebanjomatic)

v3.27.1

Compare Source

2023-08-03

Bug Fixes

• Improve performance when generating sourcemaps (#​5075)

Pull Requests

• #​5075: perf(sourcemap): lazy compute decoded mappings (@​thebanjomatic)

vitejs/vite (vite)

v4.4.9

Compare Source

• chore: fix eslint warnings (#​14031) (4021a0e), closes #​14031
• chore(deps): update all non-major dependencies (#​13938) (a1b519e), closes #​13938
• fix: dynamic import vars ignored warning (#​14006) (4479431), closes #​14006
• fix(build): silence warn dynamic import module when inlineDynamicImports true (#​13970) (7a77aaf), closes #​13970
• perf: improve build times and memory utilization (#​14016) (9d7d45e), closes #​14016
• perf: replace startsWith with === (#​14005) (f5c1224), closes #​14005

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Removed dependencies detected. Learn more about Socket for GitHub ↗︎

🚮 Removed packages: [email protected]