Skip to content

feat(deps): upgrade upstream dependencies #1646

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fengmk2 merged 7 commits into from
May 21, 2026
Merged

feat(deps): upgrade upstream dependencies #1646

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
11b4372
feat(deps): upgrade upstream dependencies
voidzero-guard[bot] May 20, 2026
b784c1c
fix: address new clippy lints from nightly toolchain bump
fengmk2 May 21, 2026
285e8b8
ci: clone rolldown before security-action so cargo-deny can resolve w…
fengmk2 May 21, 2026
af55f42
ci(security): scope contents read permission to security job
fengmk2 May 21, 2026
386037a
fix(clippy): allow unfulfilled lint expectations workspace-wide
fengmk2 May 21, 2026
f46db5f
chore(rust): align nightly toolchain with vite-task (2026-03-05)
fengmk2 May 21, 2026
778ce0f
ci(security): clone only rolldown, skip unused vite checkout
fengmk2 May 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .github/actions/build-upstream/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,6 @@ runs:
- name: Build upstream TypeScript packages
shell: bash
run: |
pnpm --filter @rolldown/pluginutils build
pnpm --filter rolldown build-node
pnpm --filter vite build-types
pnpm --filter "@voidzero-dev/*" build
Expand Down
24 changes: 24 additions & 0 deletions .github/workflows/security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,29 @@ jobs:
security:
name: Security Analysis
runs-on: ubuntu-latest
permissions:
contents: read
steps:
# Checkout self and clone upstream rolldown so the bundled cargo-deny check
# inside security-action can resolve workspace members that reference
# `rolldown/crates/*`. Then clear origin so security-action's nested
# taiki-e/checkout-action can re-add it without conflict.
- uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2

- name: Output rolldown hash
id: upstream-versions
shell: bash
run: node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT

- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
repository: rolldown/rolldown
path: rolldown
ref: ${{ steps.upstream-versions.outputs.ROLLDOWN_HASH }}
persist-credentials: false

- name: Clear git origin for nested checkout
shell: bash
run: git remote remove origin

- uses: oxc-project/security-action@77e230508eccbb400b23746dab6c573a8ea7483e # v1.0.5
Loading
Loading