chore(deps): bump the production-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
typescript	5.9.3	7.0.2
@oxc-project/runtime	0.139.0	0.142.0
ws	8.21.0	8.21.1
vite	7.3.6	8.2.0
linkedom	0.18.12	0.18.13
magic-string	0.30.21	1.1.0

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @oxc-project/runtime from 0.139.0 to 0.142.0

Release notes

Sourced from @​oxc-project/runtime's releases.

oxc crates_v0.142.0

💥 BREAKING CHANGES

• 1ac5ac7 ast: [BREAKING] Tighten bound on AstBuild trait (#24925) (overlookmotel)

🚀 Features

• c7c5696 minifier: Fold parenthesized boolean ternary tests (#24968) (Dunqing)
• 82c5806 minifier: Fold sequence branches in boolean ternaries (#24943) (Dunqing)
• cc623d9 ast_visit: Add VisitJsMut visitor (#24828) (Boshen)
• b31713a minifier: Add new IsTerminated trait and use it in exit-point optimization (#24950) (Armano)
• e9e0f24 minifier: Shorten integer zero comparisons (#24933) (Dunqing)
• 34f5559 minifier: Convert switch with one case to if statement (#24611) (Armano)
• 9107e74 str: Add static_str! macro (#24887) (overlookmotel)
• 4d6f623 parser: Emit error for type args in JS files (#24896) (camc314)
• ec08afc ast: Re-export Ident from oxc_ast crate (#24861) (overlookmotel)
• 73cfdfa oxc: Re-export oxc_str types from oxc crate (#24860) (overlookmotel)
• 11f5d1f ast_visit: Add Utf8ToUtf16::convert_program_and_comments (#24859) (overlookmotel)

🐛 Bug Fixes

• cb5acfb minifier: Optimize termination statements in labeled statements (#24813) (Armano)
• 4618300 minifier: Avoid longer numeric constant folds (#24875) (Dunqing)
• f7971f1 minifier: Keep side effects in typeof comparisons (#24940) (sapphi-red)
• 4597d6f minifier: Keep side effects when compressing == true to == 1 (#24939) (sapphi-red)
• c3a48df minifier: Keep side effects values in template literals (#24938) (sapphi-red)
• e19f183 minifier: Keep side effects when folding Number call (#24937) (sapphi-red)
• 9d7745a react-compiler: Preserve warning bailouts (#24935) (Boshen)
• 0126aba codegen: Preserve orphaned file coverage comments (#24815) (Dunqing)
• 9fbbaf8 parser: Clarify return in class static blocks (#24899) (camc314)
• e7d5c78 str: Fix hygiene of format_ident! and format_str! macros (#24886) (overlookmotel)
• 07e9acc ecmascript: Keep side effects in parent of toString calls (#24846) (sapphi-red)
• 16a40ad ecmascript: Detect side effects in unused arguments to charCodeAt (#24845) (sapphi-red)
• 5b4ae54 parser: Use specific for-await diagnostic (#24856) (camc314)
• ffcc33a parser: Report for-await in non-async functions (#24855) (camc314)
• df230d0 minifier: Avoid reordering this in nested class keys (#24785) (Dunqing)
• d24b76b minifier: Isolate derived constructor this state (#24784) (Dunqing)
• 582805d parser: Parse unary conditional after satisfies (#24807) (Boshen)
• 23b904f minifier: Preserve default parameter side effects (#24791) (Dunqing)
• 3048594 parser: Use correct diagnostic for await using in bare switch case (#24798) (camc314)
• e80574f estree: Handle empty spans serializing ImportMeta and NewTarget (#24775) (overlookmotel)
• 4b12840 minifier: Do not fold a -0 ternary branch to +a (loses the sign) (#23637) (Jerry Zhao)
• 133bb35 ecmascript: Detect side effects of foo().#bar correctly when PropertyReadSideEffects::None (#24769) (sapphi-red)

⚡ Performance

• a086d91 ecmascript: Avoid number literal allocations (#24889) (Dunqing)
• 98f2ecb react_compiler: Compare value set pointers before probing in state merge (#24805) (Marius Schulz)
• b287f29 estree: Avoid ident hash calculations when serializing (#24774) (overlookmotel)

... (truncated)

Commits

• fc702c1 release(crates): oxc v0.142.0 (#24977)
• 14533a3 release(crates): oxc v0.141.0 (#24714)
• 8e0ed2e release(crates): oxc v0.140.0 (#24453)
• See full diff in compare view

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

• Empty fragments are now counted toward the limit (a2f4e7c0).
• The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

• ae1de54 [dist] 8.21.1
• 8e9511b [ci] Trust Coveralls Homebrew tap
• f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
• 8df8265 [ci] Update actions/checkout action to v7
• a2f4e7c [fix] Count empty fragments toward the limit (#2329)
• e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
• 4ea355d [doc] Document 32-bit signed integer coercion for option values
• 2120f4c [example] Remove uuid dependency
• 4c534a6 [security] Add latest vulnerability to SECURITY.md
• See full diff in compare view

Updates vite from 7.3.6 to 8.2.0

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

• add input to server.fs.allow (#23035) (95a3cda)
• bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
• bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
• config: include column in config incompatibility location (#23064) (8a24572)
• dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

• bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
• deps: update all non-major dependencies (#23069) (4c07b74)
• hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
• importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
• module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
• server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
• support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

• config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

• config CJS module vars in ESM case (#23010) (d8cd388)

8.2.0-beta.0 (2026-07-22)

Features

• add input option (#22642) (9beae37)
• config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
• css: export PostCSS config type for type-safe configs (#22792) (302c755)
• dev: label network URLs with their interface name (#22830) (78accc4)
• optimizer: support aube lockfile (#22813) (6319827)
• optimizer: support nub lockfile (#22891) (65d3604)
• update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
• wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

• build: map CSS chunks in chunk import maps (fix #22946) (#22947) (e16ff3a)
• config: exclude virtual modules from native config compat check (#22979) (2ced1fe)
• css: rewrite urls in OnceExit-injected content (#22983) (abb793e)
• deps: update all non-major dependencies (#22985) (04f345b)
• deps: update dependency magic-string to v1 (#22998) (c60b4d7)
• hmr: remove hot data after prune (#23002) (be96316)
• resolve root to real path (#22832) (55bba7b)

Performance Improvements

... (truncated)

Commits

• a668014 release: v7.2.3
• acfe939 perf(deps): replace debug with obug (#21107)
• 4f8171e fix(deps): update all non-major dependencies (#21128)
• 5029720 chore(deps): update rolldown-related dependencies (#21127)
• 5909efd fix: allow multiple bindCLIShortcuts calls with shortcut merging (#21103)
• 39a0a15 chore(deps): update rolldown-related dependencies (#21095)
• 6a34ac3 fix(deps): update all non-major dependencies (#21096)
• 02ceaec chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#21099)
• 572aaca release: v7.2.2
• 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
• Additional commits viewable in compare view

Updates linkedom from 0.18.12 to 0.18.13

Commits

• fcd88e0 0.18.13
• 195f7aa brought in better spec-compliant style and getComputed
• b9ee7fd fix: reading an unset style property returns "" per CSSOM, not undefined (#328)
• 2450493 Fix #320 - Updated build status
• d001308 removed unnecessary .npmrc line + updated dev/dependencies - not htmlparser2
• See full diff in compare view

Updates magic-string from 0.30.21 to 1.1.0

Release notes

Sourced from magic-string's releases.

v1.1.0

   🐞 Bug Fixes

• Trim replacements longer than the range they replace  -  by @​sarathfrancis90 in Rich-Harris/magic-string#312 (ec1a1)

   🏎 Performance

• Use a Map for tracking chunks  -  by @​43081j in Rich-Harris/magic-string#313 (25d74)

    View changes on GitHub

v1.0.0

In magic-string v1.0.0, it's now pure ESM, and the type declarations are built from the TypeScript source. This means the previous CJS, UMD, and IIFE builds are now dropped as we believe the ecosystem is moving forward for ESM. The version was bumped to v1.0.0 instead of v0.31 to distinguish this breaking change, and since magic-string has been verified by the ecosystem for over a decade, the API is stable enough to be marked as v1.

Genreated changelogs:

   🚨 Breaking Changes

• Migrate build to pure ESM and TypeScript  -  by @​sxzz in Rich-Harris/magic-string#310 (0e228)

   🐞 Bug Fixes

• Avoid crash when moving a zero-length range  -  by @​sarathfrancis90 and @​antfu in Rich-Harris/magic-string#307 (56fe8)

   🏎 Performance

• Add fast path for non-exclusion indent  -  by @​43081j in Rich-Harris/magic-string#308 (992ba)

    View changes on GitHub

Changelog

Sourced from magic-string's changelog.

1.1.0 (2026-07-23)

Bug Fixes

• trim replacements longer than the range they replace (#312) (ec1a139)

Performance Improvements

• use a Map for tracking chunks (#313) (25d7461)

1.0.0 (2026-07-16)

Bug Fixes

• avoid crash when moving a zero-length range (#307) (56fe8cb)

Performance Improvements

• add fast path for non-exclusion indent (#308) (992baba)

Commits

• f51bfc9 chore: release v1.1.0
• ec1a139 fix: trim replacements longer than the range they replace (#312)
• 25d7461 perf: use a Map for tracking chunks (#313)
• 80c16ca chore: disable sourcemaps (#311)
• 2da7cf0 chore: release v1.0.0
• 56fe8cb fix: avoid crash when moving a zero-length range (#307)
• 992baba perf: add fast path for non-exclusion indent (#308)
• 0e22897 feat!: migrate build to pure ESM and TypeScript (#310)
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.