feat(deps): upgrade upstream dependencies (#536)

Automated daily upgrade of upstream dependencies:
- rolldown (latest tag)
- rolldown-vite (latest tag)
- vitest (latest npm version)
- tsdown (latest npm version)

Build status: success

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Primarily a dependency/tooling upgrade, but it changes the CLI’s
`oxlint` binary resolution logic and bumps multiple core build/test
tools, which could affect linting execution and build/test behavior
across platforms.
> 
> **Overview**
> **Updates upstream tooling versions** (notably bundled `vite` beta,
`rolldown-vite` pin, and various build/lint/test deps including
`oxfmt`/`oxlint`/`oxlint-tsgolint`), with corresponding `pnpm-lock.yaml`
refresh.
> 
> **Fixes `vite-plus lint` binary resolution** by deriving the `oxlint`
executable path from `resolve('oxlint')` (package root) instead of
`resolve('oxlint/bin/oxlint')`, accommodating package `exports`
restrictions.
> 
> **Refreshes CLI help snapshots** to reflect the updated formatter
options (adds `biome` as a migration source).
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
8059653. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: Brooooooklyn

packages/cli/snap-tests/command-helper/snap.txt

@@ -78,7 +78,7 @@ Usage: [-c=PATH] [PATH]...
 Mode Options:
         --init               Initialize `.oxfmtrc.json` with default values
         --migrate=SOURCE     Migrate configuration to `.oxfmtrc.json` from specified source
-                             Available sources: prettier
+                             Available sources: prettier, biome
         --lsp                Start language server protocol (LSP) server
         --stdin-filepath=PATH  Specify the file name to use to infer which parser to use
 

packages/cli/src/resolve-lint.ts

@@ -32,8 +32,14 @@ export async function lint(): Promise<{
   binPath: string;
   envs: Record<string, string>;
 }> {
-  // Resolve the oxlint binary directly (it's a native executable)
-  const binPath = resolve('oxlint/bin/oxlint');
+  // Resolve the oxlint package path first, then navigate to the bin file.
+  // The bin/oxlint subpath is not exported in package.json exports, so we
+  // resolve the main entry point and derive the bin path from it.
+  // resolve('oxlint') returns .../oxlint/dist/index.js, so we need to go up
+  // two directories (past 'dist') to reach the package root.
+  const oxlintMainPath = resolve('oxlint');
+  const oxlintPackageRoot = dirname(dirname(oxlintMainPath));
+  const binPath = join(oxlintPackageRoot, 'bin', 'oxlint');
   let oxlintTsgolintPath = resolve('oxlint-tsgolint/bin/tsgolint');
   if (process.platform === 'win32') {
     // If on Windows, resolve the tsgolint binary from the local node_modules

packages/core/package.json

@@ -197,7 +197,7 @@
     "node": "^20.19.0 || >=22.12.0"
   },
   "bundledVersions": {
-    "vite": "8.0.0-beta.11",
+    "vite": "8.0.0-beta.12",
     "rolldown": "1.0.0-rc.2",
     "tsdown": "0.20.1"
   }

packages/tools/.upstream-versions.json

@@ -7,6 +7,6 @@
   "rolldown-vite": {
     "repo": "https://github.com/vitejs/vite.git",
     "branch": "main",
-    "hash": "b68900bf6090b65d35bba3b759a55fa51e99fee5"
+    "hash": "f124ed846fff2dca679d3b0dd2b27b029ed4ec5c"
   }
 }