fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #54 · rstackjs/rstack-ecosystem-ci

renovate · 2026-05-31T16:50:40Z

This PR contains the following updates:

Package	Change	Age	Confidence
@rsbuild/core (source)	`^2.0.7` → `^2.0.9`
@rsbuild/plugin-react (source)	`^2.0.0` → `^2.0.1`
@tanstack/react-virtual (source)	`^3.13.25` → `^3.13.26`
pnpm (source)	`10.33.4` → `10.34.1`
react-router-dom (source)	`^7.15.1` → `^7.16.0`
verdaccio (source)	`^6.7.1` → `^6.7.2`

Release Notes

web-infra-dev/rsbuild (@rsbuild/core)

`v2.0.9`

Compare Source

Highlights

Safer npm Staged Publishing

Rsbuild 2.0.9 updates the release workflow so all packages are now published through npm staged publishing, making package releases safer by staging them before final publication.

What's Changed

New Features 🎉

feat(core): support async HTML config callbacks by @chenjiahan in #7782

Bug Fixes 🐞

fix(core): avoid shell interpolation in browser opener by @chenjiahan in #7789

Document 📖

docs: update Vite migration for import.meta.glob by @chenjiahan in #7784

Other Changes

test: add import.meta.glob e2e cases by @chenjiahan in #7783
chore(build): enable Rslib isolated declarations by @Timeless0911 in #7785
chore: use npm staged publishing by @chenjiahan in #7788
chore(deps): update dependency @rsbuild/plugin-check-syntax to v2 by @renovate[bot] in #7786
chore(deps): update dependency rspack-merge to v1 by @renovate[bot] in #7787

Full Changelog: web-infra-dev/rsbuild@v2.0.8...v2.0.9

`v2.0.8`

Compare Source

Highlights

Tailwind CSS Plugin

Rsbuild 2.0.8 introduces @rsbuild/plugin-tailwindcss, a first-party plugin for integrating Tailwind CSS v4 through @tailwindcss/webpack.

Compared with the @tailwindcss/postcss package, it avoids running Tailwind CSS transforms through PostCSS and provides better build performance.

import { pluginTailwindcss } from '@&#8203;rsbuild/plugin-tailwindcss';

export default {
  plugins: [pluginTailwindcss()],
};

What's Changed

New Features 🎉

feat(core): support autoExternal exclude by @chenjiahan in #7722
feat(core): support autoExternal packageJson option by @chenjiahan in #7728
feat: add tailwindcss plugin by @chenjiahan in #7745
feat: support tailwindcss inline imports by @chenjiahan in #7746
feat: support tailwindcss url imports by @chenjiahan in #7747
feat(plugin-tailwindcss): add optimize option by @chenjiahan in #7750
feat(plugin-babel): support multiple babel rules by @chenjiahan in #7764
feat(deps): update @rspack/core to 2.0.5 by @chenjiahan in #7780

Bug Fixes 🐞

fix(core): remove redundant autoExternal rules by @chenjiahan in #7713
fix(deps): update all patch dependencies by @renovate[bot] in #7741
fix(plugin-tailwindcss): skip main rule when css is not emitted by @chenjiahan in #7748
fix(core): correct base middleware path matching by @chenjiahan in #7761
fix(deps): update @swc/helpers to v0.5.22 by @chenjiahan in #7763
fix(plugin-babel): restrict Babel rule ID matching by @chenjiahan in #7765
fix(deps): update @swc/helpers to v0.5.23 by @CPunisher in #7769
fix(types): allow webpack-compatible rspack plugins by @chenjiahan in #7771
fix(types): update rspack plugin types by @chenjiahan in #7772
fix(core): support async html template parameters by @vegerot in #7773

Refactor 🔨

refactor: move plugin-stylus to separate repo by @chenjiahan in #7715
refactor(core): simplify autoExternal rules by @chenjiahan in #7738

Document 📖

docs: add autoExternal version history by @chenjiahan in #7712
docs: recommend autoExternal for SSR by @chenjiahan in #7718
docs: update Vite ssr.external migration by @chenjiahan in #7721
docs: update autoExternal docs by @chenjiahan in #7723
docs: clarify module federation output module limit by @chenjiahan in #7726
docs(skills): update e2e helper guidance by @chenjiahan in #7727
docs: update README credits by @chenjiahan in #7729
docs: clarify autoExternal usage by @chenjiahan in #7740
docs(plugin-tailwindcss): add plugin docs by @chenjiahan in #7752
docs: remove outdated README branch note by @chenjiahan in #7753
docs: update Tailwind CSS v4 guide by @chenjiahan in #7754
docs: simplify wording in docs by @chenjiahan in #7757
docs: clarify Tailwind CSS scan scope by @chenjiahan in #7759
docs: update html template parameters docs by @chenjiahan in #7777

Other Changes

chore: update skills by @chenjiahan in #7711
test(e2e): replace vue react mix with solid react by @chenjiahan in #7714
chore: restore Renovate workspace scanning by @Timeless0911 in #7716
chore(deps): update module federation to v2.4.0 by @renovate[bot] in #7717
test: cover SSR autoExternal by @chenjiahan in #7719
chore(deps): migrate workspace deps to pnpm catalog by @chenjiahan in #7720
test: cover externals overriding autoExternal by @chenjiahan in #7725
chore(deps): update sass to ^1.100.0 by @renovate[bot] in #7733
chore(deps): update swc monorepo to ^12.10.0 by @renovate[bot] in #7734
test: improve autoExternal e2e cases by @chenjiahan in #7730
chore(deps): update module federation to v2.5.0 by @renovate[bot] in #7732
chore(deps): update dependency @shikijs/transformers to ^4.1.0 by @renovate[bot] in #7735
chore(deps): update dependency ws to ^8.21.0 by @renovate[bot] in #7736
chore: externalize supports-color in core build by @chenjiahan in #7737
test: cover autoExternal web CommonJS output by @chenjiahan in #7739
chore(deps): update node.js to v24.16.0 by @renovate[bot] in #7742
chore(deps): update rstackjs/rstack-ecosystem-ci to v0.3.1 by @renovate[bot] in #7731
test(plugin-tailwindcss): add injectStyles e2e by @chenjiahan in #7749
release: @rsbuild/plugin-tailwindcss v2.0.0 by @chenjiahan in #7751
test(plugin-tailwindcss): add React HMR e2e case by @chenjiahan in #7755
test: reorganize tailwindcss e2e cases by @chenjiahan in #7758
test: add Tailwind CSS source scope cases by @chenjiahan in #7760
test(plugin-tailwindcss): add Vue and Svelte e2e cases by @chenjiahan in #7762
chore(deps): update babel to ^7.29.7 by @renovate[bot] in #7756
release: @rsbuild/plugin-babel v1.2.0 by @chenjiahan in #7766
chore(deps): upgrade pnpm to 11.3.0 by @chenjiahan in #7767
chore(deps): update dependency @rsbuild/plugin-babel to ^1.2.0 by @renovate[bot] in #7774
test: simplify path resolution in entry by @chenjiahan in #7778
chore(core): upgrade reduce-configs to v2 by @chenjiahan in #7779

Full Changelog: web-infra-dev/rsbuild@v2.0.7...v2.0.8

TanStack/virtual (@tanstack/react-virtual)

`v3.13.26`

Compare Source

Patch Changes

Updated dependencies [fc992ab]:
- @tanstack/virtual-core@3.16.0

pnpm/pnpm (pnpm)

`v10.34.1`: pnpm 10.34.1

Compare Source

Patch Changes

Reject pnpm-lock.yaml entries whose remote tarball resolution: block is missing the integrity field. Previously the worker that extracts a downloaded tarball skipped hash verification when no integrity was supplied and minted a fresh one from the unverified bytes, so an attacker who could both alter the lockfile (e.g. via a pull request that strips integrity:) and serve modified content at the referenced tarball URL could install a tampered package without any error — including under --frozen-lockfile. pnpm now fails closed at lockfile-read time with ERR_PNPM_MISSING_TARBALL_INTEGRITY. Git-hosted tarballs (gitHosted: true or a URL on codeload.github.com / bitbucket.org / gitlab.com) and file: tarballs are exempt — the commit SHA in a git-host URL and the user-controlled local path already anchor the bytes.

Platinum Sponsors

Gold Sponsors

`v10.34.0`

Compare Source

remix-run/react-router (react-router-dom)

`v7.16.0`

Compare Source

Patch Changes

Remove stale/invalid unpkg field from package.json. This was removed from other packages with the release of v7 but missed in the react-router-dom re-export package (#15075)
Updated dependencies:
- react-router@7.16.0

verdaccio/verdaccio (verdaccio)

`v6.7.2`

Compare Source

Patch Changes

a89aca1: chore: fix unit test
a28cf71: chore: add missing types #5889 by @mbtools

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 and 15 of the month (* 0-3 1,15 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

fix(deps): update all non-major dependencies

f0c27bc

fi3ework merged commit e853652 into main Jun 1, 2026
29 of 34 checks passed

fi3ework deleted the renovate/all-minor-patch branch June 1, 2026 03:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#54

fix(deps): update all non-major dependencies#54
fi3ework merged 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented May 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 31, 2026

Release Notes

v2.0.9

Highlights

Safer npm Staged Publishing

What's Changed

New Features 🎉

Bug Fixes 🐞

Document 📖

Other Changes

v2.0.8

Highlights

Tailwind CSS Plugin

What's Changed

New Features 🎉

Bug Fixes 🐞

Refactor 🔨

Document 📖

Other Changes

v3.13.26

Patch Changes

v10.34.1: pnpm 10.34.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.34.0

v7.16.0

Patch Changes

v6.7.2

Patch Changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v2.0.9`

`v2.0.8`

`v3.13.26`

`v10.34.1`: pnpm 10.34.1

`v10.34.0`

`v7.16.0`

`v6.7.2`