Skip to content

Bump rolldown from 1.2.3 to 1.2.5 in the rolldown group across 1 directory - #495

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/rolldown-10069b02e3
Open

Bump rolldown from 1.2.3 to 1.2.5 in the rolldown group across 1 directory#495
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/rolldown-10069b02e3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the rolldown group with 1 update in the / directory: rolldown.

Updates rolldown from 1.2.3 to 1.2.5

Release notes

Sourced from rolldown's releases.

v1.2.5

[1.2.5] - 2026-08-19

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

  • agents: point the never-edit list at the binding files that exist (#10719) by @​melbinjp

🧪 Testing

  • deconflict: pin renaming the external process binding away from the global (#10702) by @​hyfdev
  • dev: expect a hot update across a circular import (#10700) by @​hyfdev

⚙️ Miscellaneous Tasks

❤️ New Contributors

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.5] - 2026-08-19

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

  • agents: point the never-edit list at the binding files that exist (#10719) by @​melbinjp

🧪 Testing

  • deconflict: pin renaming the external process binding away from the global (#10702) by @​hyfdev
  • dev: expect a hot update across a circular import (#10700) by @​hyfdev

⚙️ Miscellaneous Tasks

❤️ New Contributors

... (truncated)

Commits
  • 84c904b release: v1.2.5 (#10720)
  • 62281fb chore(deps): upgrade oxc to 0.146.0 (#10707)
  • e859fb2 feat(bench): record per-suite peak memory in the node benchmark (#10704)
  • 2d0cac8 feat(binding): allocation-tracking global allocator behind the `tracking_allo...
  • 1dfeb76 feat: add armv7 android (armv7-linux-androideabi) support (#10691)
  • 3745db1 fix(dev): flush re-emitted assets when their content changes (#10637)
  • 84010dc feat: add NAMESPACE_CONFLICT warning for conflicting star re-exports (#7452)
  • 483c648 release: v1.2.4 (#10667)
  • e782fea chore(deps): update napi (#10649)
  • a743bf9 chore(wasi): point the wasm skips at the right place (#10644)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 19, 2026
@dependabot dependabot Bot changed the title Bump rolldown from 1.2.3 to 1.2.4 in the rolldown group Bump rolldown from 1.2.3 to 1.2.5 in the rolldown group across 1 directory Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/rolldown-10069b02e3 branch from 390d378 to a8eab3b Compare August 25, 2026 11:38
@socket-security

socket-security Bot commented Aug 25, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​prisma/​internals@​7.10.0931007799100
Addedrolldown@​1.2.5901007899100
Added@​prisma/​adapter-pg@​7.10.01001008399100
Added@​prisma/​client@​7.10.0991008499100
Addedprisma@​7.10.0941009796100

View full report

Bumps the rolldown group with 1 update in the / directory: [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown).


Updates `rolldown` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.5/packages/rolldown)

---
updated-dependencies:
- dependency-name: rolldown
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rolldown
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/rolldown-10069b02e3 branch from a8eab3b to 7a8a7c8 Compare August 26, 2026 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants