[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
tsdown (source)	0.23.3 → 0.23.7

---

Release Notes

rolldown/tsdown (tsdown)

v0.23.7

Compare Source

[!NOTE]
v0.23.6 was skipped on purpose: its release failed, so this release follows v0.23.5 directly.

Notes

rolldown-plugin-dts is now v0.30. Full details are in the rolldown-plugin-dts v0.30.0 release notes.

Migration

dts.entry only filters entries. Only entries that match get declaration files. A matching file that is not an entry no longer gets its own declaration file. To emit declarations for such a file, add it to entry. The filter now applies to .d.cts as well as .d.mts.

dts.entry is resolved from cwd. Patterns are relative to tsdown's cwd, the same as the top-level entry, instead of process.cwd(). This only matters when the two differ, e.g. in workspace builds. Set dts.cwd to override it.

dts.emitDtsOnly and dts.dtsInput are deprecated. Use dts.dtsOnly instead. The old names still work but log a warning.

Highlights

• dts: An entry's file-level doc comment is kept in its declaration file.
• dts: Declaration files no longer contain a dangling sourceMappingURL.
• dts: CJS declaration builds no longer emit a throwaway JS chunk. With the tsc generator, they build one program for all entries.
• tsgo (experimental): Diagnostics show code context in color terminals, and packages from project references and files outside the tsconfig directory now get declarations.
• Agent skill: The npm package now ships a small tsdown skill. pnpm 12.11+ can link it into agent skill directories, and it points agents to the full skill on GitHub for the installed version.

---

   🚀 Features

• Ship a skill facade in the npm package  -  by @​sxzzbot in #​1122 (6ad05)
• dts: Upgrade rolldown-plugin-dts to v0.30  -  by @​sxzzbot in #​1123 (d351b)

    View changes on GitHub

v0.23.5

Compare Source

Notes

rolldown-plugin-dts is now v0.29. tsdown passes dts options through to it unchanged, so its deprecations show up in your config too. Full details are in the rolldown-plugin-dts v0.29.0 release notes.

Migration

tsc-only dts options move under dts.tsc. The top-level build, incremental, parallel, eager, newContext and vue options still work but log a deprecation warning. Setting the same option at both levels throws an error. emitJs stays at the top level.

 export default defineConfig({
   dts: {
-    vue: true,
+    tsc: { vue: true },
   },
 })

tsgo (experimental, not covered by semver):

• @typescript/native-preview is no longer supported. Install TypeScript 7.1+ (typescript@7.1.0-beta), or point tsgo.moduleUrl at another build.
• On TypeScript 7.1+, tsgo.path is the API server executable, not the tsgo CLI. You usually don't need to set it.
• Declaration maps come only from compilerOptions.declarationMap: true in tsconfig; the sourcemap option no longer enables them.
• TypeScript 7.0 still works with a deprecation warning, but that backend will be removed soon.

---

   🚀 Features

• css: Support css: false to disable built-in CSS handling  -  by @​sxzzbot in #​1113 (181af)
• dts: Upgrade rolldown-plugin-dts to v0.29, upgrade deps  -  by @​sxzzbot in #​1121 (e12ab)

   🐞 Bug Fixes

• css: Remove dangling requires and handle CSS extensions in chunk names  -  by @​sxzzbot in #​1114 (c8ca3)

   🏎 Performance

• deps: Read each package.json once when resolving dep subpaths  -  by @​Cherry and @​sxzzbot in #​1093 (4435a)

    View changes on GitHub

v0.23.4

Compare Source

   🚀 Features

• cjs: Warn when platform is ignored for the CJS format  -  by @​sxzz and @​sxzzbot in #​1111 (58003)
• config: Support multiple env files  -  by @​sxzz and @​sxzzbot in #​1110 (5d558)

   🐞 Bug Fixes

• attw: Apply profiles to file-based problems  -  by @​sxzz and @​sxzzbot in #​1108 (a853d)
• config: Ignore empty env file paths and scope env deps per watcher  -  by @​sxzzbot (17bd0)
• css: Inline ?inline CSS imported from dependencies  -  by @​sxzz and @​sxzzbot in #​1109 (75a78)

   🏎 Performance

• Use tinyps in hooks  -  by @​43081j in #​1112 (f925e)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[safedep]

SafeDep Report Summary

Package Details

Package	Malware	Vulnerability	Risky License	Report
@yuku-toolchain/darwin-arm64 @ 0.27.0 pnpm-lock.yaml				🔗
@yuku-toolchain/darwin-x64 @ 0.27.0 pnpm-lock.yaml				🔗
@yuku-toolchain/linux-arm64 @ 0.27.0 pnpm-lock.yaml				🔗
@yuku-toolchain/linux-x64 @ 0.27.0 pnpm-lock.yaml				🔗
@yuku-toolchain/win32-arm64 @ 0.27.0 pnpm-lock.yaml				🔗
@yuku-toolchain/win32-x64 @ 0.27.0 pnpm-lock.yaml				🔗
rolldown-plugin-dts @ 0.30.0 pnpm-lock.yaml				🔗
tinyps @ 0.5.1 pnpm-lock.yaml				🔗
tsdown @ 0.23.7 packages/api-client/package.json packages/cli/package.json pnpm-lock.yaml				🔗
yuku @ 0.27.0 pnpm-lock.yaml				🔗

View complete scan results →

_{This report is generated by SafeDep GitHub App}