[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@commitlint/cli (source)	devDependencies	patch	^21.2.3 → ^21.2.4
@commitlint/config-conventional (source)	devDependencies	patch	^21.2.3 → ^21.2.4
@rslib/core (source)	devDependencies	patch	^1.0.3 → ^1.0.4
@swc/core (source)	devDependencies	patch	~1.16.13 → ~1.16.20
@types/node (source)	devDependencies	patch	26.6.4 → 26.6.5
lefthook	devDependencies	patch	^2.2.1 → ^2.2.2
react (source)	peerDependencies	patch	>=19.3.0 → >=19.3.1
react (source)	devDependencies	patch	^19.3.0 → ^19.3.1
react-dom (source)	peerDependencies	patch	>=19.3.0 → >=19.3.1
stefanzweifel/git-auto-commit-action	action	patch	v7.2.0 → v7.2.1

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.4

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v21.2.4

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

web-infra-dev/rslib (@​rslib/core)

v1.0.4

Compare Source

Highlights

TypeScript 7.1 support

Rslib now supports TypeScript 7.1 Beta for declaration generation.

You can also use Content Mappers by configuring contentMappers in tsconfig.json.

Install TypeScript 7.1 Beta to try it:

npm install -D typescript@7.1.0-beta

What's Changed

New Features 🎉

• feat(wasm): support source phase imports for ?inline wasm modules by @​elecmonkey in #​1959
• feat(create-rslib): display version in startup banner by @​chenjiahan in #​1962
• feat(create-rslib): use TypeScript 7 in supported templates and examples by @​Timeless0911 in #​1966
• feat(deps): update @​rsbuild/core to ~2.3.0-beta.0 by @​Timeless0911 in #​1967
• feat(dts): support TypeScript 7.1 API and content mappers by @​Timeless0911 in #​1955

Bug Fixes 🐞

• fix(examples): support Preact 11 in peer dependencies by @​Timeless0911 in #​1954
• fix(create-rslib): add Rspress preview command to AGENTS.md by @​Timeless0911 in #​1964
• fix(core): respect compression settings in bundleless size totals by @​Timeless0911 in #​1968

Refactor 🔨

• refactor(create-rslib): move rstest setup files into tests by @​Timeless0911 in #​1963

Document 📖

• docs: correct configuration page descriptions by @​chenjiahan in #​1952
• docs: update Rsdoctor guide for v2 by @​Timeless0911 in #​1961
• docs: update Wasm source phase imports guidance by @​Timeless0911 in #​1965

Other Changes

• chore(deps): upgrade local rslib to 1.0.3 by @​Timeless0911 in #​1948
• chore(deps): update dependency preact to v11 by @​renovate[bot] in #​1951
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1950
• chore(deps): update dependency happy-dom to v21 by @​renovate[bot] in #​1956
• chore(skills): update rstack docs writer by @​Timeless0911 in #​1957
• chore(deps): upgrade Rspress to 2.1.0-beta.1 by @​SoonIter in #​1958
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1960

Full Changelog: web-infra-dev/rslib@v1.0.3...v1.0.4

swc-project/swc (@​swc/core)

v1.16.20

Compare Source

Bug Fixes

• (es/codegen) Disambiguate TSX generic arrows (#​12505) (2c9d198)

• (es/codegen) Preserve non-null token boundaries (#​12504) (410ae3a)

• (es/codegen) Parenthesize typed arrow parameters (#​12503) (aa1ffd6)

• (es/codegen) Preserve TypeScript token boundaries (#​12523) (9f36ae0)

• (es/codegen) Emit space after div if rhs starts with a regex (#​12544) (dddf716)

• (es/codegen) Preserve optional call type arguments (#​12549) (f7bef4d)

• (es/compat) Scope private access modes to each member (#​12526) (c0e3fa1)

• (es/fixer) Preserve TypeScript expression grouping (#​12518) (b9d3f8f)

• (es/fixer) Preserve TypeScript operand grouping (#​12539) (7c4a214)

• (es/fixer) Avoid panicking on recovered parenthesized assignment targets (#​12551) (ec34371)

• (es/fixer) Preserve optional chain boundaries (#​12550) (01d5630)

• (es/fixer) Wrap function declarations in sloppy-mode loop bodies (#​12567) (76ff943)

• (es/minifier) Bound literal expressions copied by the sequential inliner (#​12521) (60c700f)

• (es/minifier) Preserve rest array identity when its reference runs more than once (#​12546) (4768dbe)

• (es/minifier) Keep trimLeft and trimRight on string literals (#​12574) (663ffb0)

• (es/minifier) Keep directive prologue when merging if returns (#​12580) (fd0edaf)

• (es/minifier) Preserve new async and generator (#​12558) (8f06994)

• (es/minifier) Release utils API required by registry builds (#​12582) (b5a52b9)

• (es/parser) Isolate enum await context (#​12506) (b789495)

• (es/parser) Allow await function names in async arrow parameters (#​12517) (0827541)

• (es/parser) Preserve invalid JSX numeric entities as literal text (#​12524) (31b5fb9)

• (es/parser) Allow namespace await identifiers (#​12507) (3daa5dc)

• (es/parser) Align TypeScript expression lookahead (#​12535) (7ef5966)

• (es/parser) Do not treat optional get/set fields as accessors (#​12559) (a2fedec)

• (es/parser) Recover non-entity expressions in TypeScript heritage clauses (#​12552) (48586cb)

• (native) Allow unmapped overflow owners in Linux cache ancestors (#​12547) (8ce7daa)

• (native-addon) Use ProgramData after unsafe Windows profile caches (#​12534) (47394b8)

• (react-compiler) Preserve intrinsic JSX tags during binding renames (#​12536) (c25e42e)

• (ts/fast-strip) Preserve runtime boundaries during type erasure (#​12575) (ccdc3c1)

Documentation

• Prohibit references to issue-linked PRs and external SWC forks (#​12513) (5092a16)

• Add CodSpeed sponsor logo to README (#​12590) (9c5b1df)

Features

• (es/minifier) Inline async function used only once (#​12416) (b9b2ebe)

• (es/minifier) Implement more rules for if-break (#​12561) (644f85a)

Performance

• (es/parser) Streamline numeric separator stripping (#​12515) (220a82c)

• (hstr) Allow Atom::as_str to inline across crates (#​12522) (c07290b)

Testing

• (es/transforms) Isolate transform timing from AST cloning (#​12540) (63ee4aa)

Ci

• Allow vjeux as a React contributor (#​12520) (4e8ee99)

• Allow jimmyhmiller in the Next.js group (#​12532) (346a025)

• Ignore unreachable ruzstd advisory in Wasmer (#​12533) (1a55a5b)

• Remove empty contributor changeset (#​12537) (3986d88)

• Require changesets for crate changes (#​12583) (ee2cd8a)

v1.16.18

Compare Source

Bug Fixes

• (bindings) Fall back to a safe cache root on Unix (#​12500) (2125403)

• (es/minifier) Check decl for side effect (#​12501) (6841927)

v1.16.17

Compare Source

Bug Fixes

• (bindings) Fall back to a secure Windows profile cache (#​12452) (2c0fb89)

• (bindings) Allow opting out of Unix cache root security checks (#​12469) (e87fa40)

• (ci) Run main CodSpeed benchmarks after policy skips (1b6d869)

• (ci) Match Rust's z10 baseline in s390x release builds (#​12489) (b96f92f)

• (ci) Raise native addon MSRV to Rust 1.85 (#​12491) (54a2324)

• (ci) Repair empty crate release changeset (#​12499) (6bf5f8c)

• (cli) Resolve out-dir source map paths relative to output (#​12481) (717914f)

• (deps) Update cargo (#​10278) (fc7a9e2)

• (es/compat) Preserve consecutive loop labels (#​12472) (28c3370)

• (es/estree) Fix AST roundtrip bugs and implement missing conversions (#​12440) (898b592)

  • BREAKING: fix AST roundtrip bugs and implement missing conversions (#​12440)

• (es/fixer) Preserve parentheses in JSX sequence expressions (#​12485) (7a36735)

• (es/preset-env) Lower for-await in native async functions (#​12414) (2b3d306)

• (react-compiler) Protect long call chains from stack overflow (#​12473) (a19b101)

• Direct unapproved contributors to open issues (#​12479) (3fac5ec)

Features

• (ci) Restrict pull requests to trusted contributors (#​12463) (ee297d6)

• (es/codegen) Support configurable output indentation (#​12490) (2058335)

  • BREAKING: support configurable output indentation (#​12490)

Miscellaneous Tasks

• (deps) Replace dependency babel-eslint with @​babel/eslint-parser ^7.11.0 (#​12456) (a933f98)

• (deps) Replace dependency npm-run-all with npm-run-all2 ^5.0.0 (#​12457) (98e6c6e)

• (deps) Update npm (#​12468) (7c75e36)

Performance

• (es/compat) Skip empty block-scoping renames (#​12478) (952db74)

• (es/parser) Scan template literals with byte search (#​12474) (3c46139)

Refactor

• (es/parser) Isolate parser state and make grammar parameters explicit (#​12425) (5898e8a)

Ci

• Refresh CodSpeed main baseline (c19d531)

evilmartians/lefthook (lefthook)

v2.2.2

Compare Source

• fix: cleanup only current stash hash (#​1597) by @​mrexox
• refactor: simplify mimetype matching (#​1596) by @​scop
• packaging: add support for android (#​1591) by @​mrexox

react/react (react)

v19.3.1: 19.3.1 (October 14th, 2026)

Compare Source

React Server Components

• Improve transport protocol (#​37845 by @​unstubbable and @​eps1lon)

stefanzweifel/git-auto-commit-action

v7.2.1

Compare Source

Fixed

• Accept repositories where .git is a file (#​417) @​stefanzweifel
• README: Update actions (#​413) @​jackbayliss
• Remove unused gitStatusMessage variable in the entrypoint (#​415) @​ChihweiLHBird

---

Configuration

📅 Schedule: (in timezone Europe/Lisbon)

• Branch creation
  • "before 3am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.