Skip to content

Bump tsdown from 0.23.0 to 0.23.1 in the npm-patch group across 1 directory - #44

Merged
mpsq merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-patch-580ccd742d
Oct 21, 2026
Merged

mpsq merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-patch-580ccd742d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-patch group with 1 update in the / directory: tsdown.

Updates tsdown from 0.23.0 to 0.23.1

Release notes

Sourced from tsdown's releases.

v0.23.1

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 6493257 chore: release v0.23.1
  • ba6acb9 chore: upgrade deps
  • 6cbfec7 chore(deps): update dependency unplugin-vue to v8 (#1090)
  • eb40c95 chore: declare package side effects
  • f9c95d0 chore: align pnpm workspace settings
  • e64bde4 chore: configure pnpm via devEngines
  • 83f0c57 fix(pkg): pack tarball inside npm publish --dry-run (#1076)
  • 1745223 fix(entry): honor custom root for object entry (#1072)
  • 9655dcb chore: upgrade deps
  • 30da631 docs: correct default value of minify
  • Additional commits viewable in compare view


Note

Low Risk
Patch-level devDependency and lockfile-only changes; risk is limited to build output if tsdown/rolldown behavior shifts.

Overview
Bumps the dev dependency tsdown from 0.23.0 to 0.23.1 and refreshes pnpm-lock.yaml for that upgrade.

The lockfile also picks up transitive updates from tsdown’s stack (e.g. rolldown 1.2.12 → 1.2.14, rolldown-plugin-dts, yuku packages 0.10.2 → 0.19.0 with bindings consolidated under yuku-core, plus minor bumps like cac, obug, and verkit). No application source or build config files change beyond the version pin; pnpm build still runs tsdown as before.

Reviewed by Cursor Bugbot for commit f0244be. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@greptile-apps

greptile-apps Bot commented Oct 21, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@dependabot
dependabot Bot requested a review from a team as a code owner October 21, 2026 09:35
@socket-security

socket-security Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtsdown@​0.23.0 ⏵ 0.23.198 +110088 +196 +1100

View full report

@dependabot dependabot Bot changed the title Bump tsdown from 0.23.0 to 0.23.1 in the npm-patch group Bump tsdown from 0.23.0 to 0.23.1 in the npm-patch group across 1 directory Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-patch-580ccd742d branch from 20bf624 to 3a938ef Compare October 21, 2026 11:04
Bumps the npm-patch group with 1 update in the / directory: [tsdown](https://github.com/rolldown/tsdown).


Updates `tsdown` from 0.23.0 to 0.23.1
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: tsdown
  dependency-version: 0.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@mpsq
mpsq force-pushed the dependabot/npm_and_yarn/npm-patch-580ccd742d branch from 3a938ef to f0244be Compare October 21, 2026 11:05
@mpsq
mpsq merged commit 5d2a67c into main Oct 21, 2026
10 checks passed
@mpsq
mpsq deleted the dependabot/npm_and_yarn/npm-patch-580ccd742d branch October 21, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant