[dependabot]

Bumps the all-minor-and-patch group with 69 updates in the / directory:

Package	From	To
@biomejs/biome	2.5.15	2.6.4
knip	6.39.0	6.44.0
turbo	2.11.7	2.11.10
posthog-node	5.55.0	5.60.1
@types/node	26.6.4	26.6.6
rolldown	1.2.12	1.2.16
vitest	5.0.3	5.0.5
@base-ui/react	1.8.0	1.9.0
@fontsource/inter	5.2.8	5.3.0
@modelcontextprotocol/sdk	1.32.0	1.32.2
@scalar/api-reference-react	0.9.77	0.9.86
@tabler/icons-react	3.48.0	3.50.0
@takumi-rs/core	2.14.0	2.19.0
@tanstack/devtools-vite	0.8.5	0.8.6
@tanstack/react-devtools	0.10.13	0.10.14
@tanstack/react-query	5.104.1	5.105.0
@tanstack/react-query-devtools	5.104.1	5.105.0
@tanstack/react-router	1.170.41	1.170.46
@tanstack/react-start	1.168.60	1.169.4
@tanstack/react-virtual	3.14.13	3.14.24
auth0	7.3.0	7.6.0
drizzle-orm	0.45.3	0.45.4
html2canvas-pro	2.5.1	2.6.0
lucide-react	1.51.0	1.65.0
pg-boss	12.36.0	12.38.0
posthog-js	1.435.8	1.442.1
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
uuid	14.0.2	14.0.3
zod	4.6.5	4.6.7
@storybook/addon-vitest	10.6.1	10.6.5
@storybook/react	10.6.1	10.6.5
@storybook/react-vite	10.6.1	10.6.5
@vitejs/plugin-react	6.1.1	6.1.2
@vitest/browser-playwright	5.0.3	5.0.5
@vitest/coverage-v8	5.0.3	5.0.5
playwright	1.63.0	1.64.1
storybook	10.6.1	10.6.5
vite	8.3.2	8.3.5
@sentry/node	11.4.0	11.10.0
@mux/mux-player-react	3.13.4	3.14.1
@upstash/redis	1.39.0	1.40.0
fumadocs-core	16.16.0	16.17.9
fumadocs-mdx	15.4.6	15.4.10
fumadocs-openapi	12.2.0	12.5.7
fumadocs-ui	16.16.0	16.17.9
@vercel/blob	2.8.0	2.8.2
tar-stream	3.2.0	3.2.2
@redocly/cli	2.57.0	2.72.1
@better-auth/stripe	1.7.7	1.7.14
better-auth	1.7.7	1.7.14
resend	6.32.0	6.35.0
@ai-sdk/anthropic	4.0.71	4.0.92
@ai-sdk/openai	4.0.83	4.0.105
@better-auth/api-key	1.7.7	1.7.14
@better-auth/cimd	1.7.7	1.7.14
@better-auth/core	1.7.7	1.7.14
@better-auth/mcp	1.7.7	1.7.14
@better-auth/oauth-provider	1.7.7	1.7.14
@better-auth/sso	1.7.7	1.7.14
ai	7.0.127	7.0.142
dataforseo-client	2.1.8	2.1.10
jose	6.2.12	6.2.14
linkedom	0.18.13	0.18.14
auth	1.7.7	1.7.14
@takumi-rs/helpers	2.14.0	2.19.0
react-hook-form	7.89.0	7.91.0
@playwright/test	1.63.0	1.64.1
@usebruno/cli	4.2.0	4.3.0

Updates @biomejs/biome from 2.5.15 to 2.6.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.4

2.6.4

Patch Changes

• #12261 19fbfb2 Thanks @​dyc3! - Added the new nursery rule noConsoleSpaces, which reports a leading or trailing space in a console.log(), console.debug(), console.info(), console.warn(), or console.error() argument that sits next to another argument. These methods already put a space between arguments, so such a space prints twice.

  console.log("abc ", "def");

• #12469 cd716d3 Thanks @​dyc3! - Added the new nursery rule noMagicArrayFlatDepth, which reports number literals other than 1 passed as the depth of Array.prototype.flat() unless a comment inside the parentheses explains them.

  const items = array.flat(2);

• #12470 92c9e81 Thanks @​dyc3! - Added the nursery rule noNull, which reports uses of the null literal and suggests undefined instead. Strict comparisons such as foo === null are allowed.

  let foo = null;

• #12483 9bd3527 Thanks @​dyc3! - Added the nursery rule noReturnArrayPush, which reports code that uses the return value of push() or unshift(). These methods return the new length of the array, not the added item or the array.

  function add(item) {
    return items.push(item);
  }

• #12477 a384892 Thanks @​dyc3! - Added the nursery rule noUnreadableIife, which reports arrow functions that are called right where they are defined and whose body is wrapped in parentheses.

  const foo = (bar => (bar ? bar.baz : baz))(getBar());

• #12447 0a963e4 Thanks @​dyc3! - Added the nursery rule noUselessRecursion, which reports functions that return a call to themselves when a loop can do the same work. Too many nested calls can crash the program with a stack overflow error.

  function findRoot(node) {
      if (node.parent) {
          return findRoot(node.parent);
      }
      return node;
  }

• #12554 2eddda9 Thanks @​dyc3! - Added the nursery rule noVueComputedPropertiesInData, which reports computed properties used inside the data function of a Vue component. Vue runs data before it sets up computed properties, so the value read there is undefined.

... (truncated)

Commits

• 5653874 ci: release (#12647)
• 824df15 feat(lint): add noVueDeprecatedDeleteSet (#12586)
• 861b288 feat(lint): add noVueUnusedRefs (#12603)
• 2eddda9 feat(lint): add noVueComputedPropertiesInData (#12554)
• 5d7553b feat(lint): add noVueMultipleSlotArgs (#12562)
• de1188f feat(lint): add noVueDeprecatedScopeAttribute (#12631)
• 2e520d8 feat(lint): add noVueMutatingProps (#12513)
• ade9845 feat(lint): add useVueDefineOptions (#12615)
• 6fc1a51 feat(lint): add noVueDeprecatedRouterLinkTagProp (#12648)
• a810209 feat(lint): add useVueValidDefineEmits (#12591)
• Additional commits viewable in compare view

Updates knip from 6.39.0 to 6.44.0

Release notes

Sourced from knip's releases.

Release 6.44.0

• Clarify that custom entry still adds entry files from package.json (#2206) (4099ddeef28406ed8c9b798cf5ce525241818642) - thanks @​MannXo!
• Resolve expanded package scripts against the directory of their manifest (#2209) (9d8464dd7335b9898a17a0db59c3c33a7ae460f4) - thanks @​fixfon!
• Track exports through namespace member chains of any depth (#2210) (75697027e89e176c16e3d567cff3d6e016d0e9f0) - thanks @​fixfon!
• Do not treat Windows drive letters as package names (#2217) (d412c5be3a5c2d69583ce54b32e033813c1d2972) - thanks @​Cherry!
• Generate built-in compilers list from source (#2216) (d6f594cc767fa41c6f94cf49bfa0302be4b9de40) - thanks @​abrahamguo!
• Update to pnpm@^11 + pnpm dedupe (ef5b819eddbb0b4ff92804524aca590797a199fc)
• Stop growing and rewriting the analysis cache on warm runs (close #2213) (54b02dd84181867f41f98a6c80209dad32fa3da6)
• Use entry in plugins that do not resolve their config files (0b0e3285e3a440650b86a776b5e2a1fc1816bca8)
• Reuse graph reachability for incremental sessions (#2190) (38d926a652e820a375fe59d04ba0980393882153) - thanks @​jakeleventhal!
• fix: reload discovered configuration in watch sessions (#2211) (cefef30891c4428635e5cfc7b147faa42857247d) - thanks @​jakeleventhal!
• Keep editor sessions and views current (#2215) (cfe91abb5e6064230a71926f0d7565fce94486c0) - thanks @​jakeleventhal!
• Add Lingui plugin (#2212) (611e7dbe1c6675612e457324aae411bf4cda5b11) - thanks @​clean99!
• Update dependency bun to v1.4.4 (#2219) (3f35bbdf863057f69f237ab507053271019fc315) - thanks @​renovate[bot]!
• Read CSpell configuration from package.json (#2228) (86ab963cf3cd279a8b8af3a3f0098d24762c59cb) - thanks @​clean99!
• Ignore file discovery order in session configuration test (51a8d33dbe04e76da8f2e2ed24d8943d0e9e15fe)
• Fix strict mode for caught optional peer imports (#2218) (e535f40b8cacea80c830282544975f0be2191323) - thanks @​jay23606!
• Add kysely-codegen plugin (#2223) (a50e8423d28406bd20c213334d3aac4857c1cce0) - thanks @​clean99!
• Add PurgeCSS plugin (#2224) (668aea696a217d7c537791771be6044fc5ae375b) - thanks @​clean99!
• Document plugin args and path bases, issue key order and real-world fixes (8e48df60c4502c66d9daba87d5f436898ae60116)
• Add Mastra plugin (#2227) (dd4e1f72de127eb8328dd941fa4492034f29d69d) - thanks @​ashokram-si!
• Count findPackageJSON() bare specifiers as dependencies (#2235) (d4e387b31235d49fe755acb79553b385aa0de4c9) - thanks @​abrahamguo!
• Add universal hooks file to SvelteKit entries (#2237) (f286584f168d27255769bd9529b49a3518e4f788) - thanks @​APX403!
• Attribute extended tsconfig plugins correctly (#2230) (8d1d1d1e54204287b8321a0a5d50cbfa4562759e) - thanks @​gioboa!
• Resolve reporter in the Mocha plugin (#2232) (c413715a334be72094a02af0dbb37e36e878e262) - thanks @​X-Guardian!
• Read nyc.config.cjs and nyc.config.mjs in the nyc plugin (#2240) (724c3c9bd44d9919f35fa5b5be955fa3b6c9339d) - thanks @​SwastikTripathi!
• Read hidden .biome.json and .biome.jsonc in the Biome plugin (#2239) (dde22a754d9cd7a4e98aaeef6b0ad8b22b14040d) - thanks @​SwastikTripathi!
• fix: narrow Remix plugin enabler to @​remix-run/dev (#2242) (5e10c52abfe21839dc9bd515fd900ff035fac170) - thanks @​gioboa!
• Document alsoReferenceOwner on Input (387e97f0988da93d74df53ad46a906db3d29dba8)
• Document path bases and the dir option per input type (98180d375b154663d8c9b967c9b8b54c0de06927)
• Emit the Gatsby production entries from resolveConfig (c224f16c629cec5ec56ce06b8bcf9207255ba69f)
• Emit the TanStack Router entry files from resolveConfig (c2598a3dae1e9616191d88d81eafcde6ab0f5b82)
• Discover Marko tag files when only marko-tag.json files exist (c264697fab8c0783f2e23c983aacb1d4178953fc)
• Remove the static public/sw.js production entry from the vite-plugin-pwa plugin (b3f9a56216195e279ec73935f0de1e6ff490230c)
• Keep absolute build.lib.entry paths in the Vitest plugin (5d974fa1bdfe3bbc696645139cc04bb963d5f9d9)
• Resolve Vite alias targets from the workspace without prefixing absolute paths (8f93e9d3425e47d9933baec078d1cdf9ad8a49ca)
• Keep absolute testDir paths in the Playwright plugin (4e3e6b3d8b978a7f4a99438c661a86a93c73745d)
• Keep absolute stories paths in the Storybook plugin (321decc499e3ec15b75c4abace3a58a0cd8f6b50)
• Resolve an absolute basePath in the Karma plugin (64e8b1bbe28e0c0f9f80112683b5c5f51f7d4512)
• Keep absolute local plugin paths in the Docusaurus plugin (058930d9eb30490c796af1ee8bab3682e852dae2)
• Keep absolute local plugin paths in the Serverless Framework plugin (0176d78dec4cd8ba9204c61c3c0ec7385a02ae9c)
• Resolve Nx run-commands cwd from the workspace root (39c08aab2149cf11f74c60195b3fdf0bcadc29f2)
• Resolve package specifiers in Marko tag definitions (168ee52857cf646ac0f1b18528bf6867fdd10c4f)
• Keep absolute include paths in the Taskfile plugin (7945ec15a327bd65ad6ed00809ba4f12b3f3d814)
• Resolve Lefthook root from the repository root (f28fae68d56c527f9c6388d983344e5694e5a906)
• Pass specifiers with dir instead of absolutizing them in the webpack, Nx and textlint plugins (1ad804d6f24f55c28ffd9d306b1bb43175064429)
• Drop redundant relative calls on entry patterns in the rstest and Marko plugins (9096f254bade552cdd556255157dd440ee634b27)
• Use toAbsolute in the Jasmine, Lunaria and electron-vite plugins (b4266efef59359dcb2632b97a7c6335f9d47251d)
• Mark inputs from the start script as production (2fb10243bb1385060d8f94204081f750405460ec)
• Mark inputs from scripts in production files as production (af469e9c88bd87e3b71b8d010abf069115cf2a19)

... (truncated)

Commits

• 0d14731 Release knip@6.44.0
• 153ba1e Escape pipes in symbols in the markdown reporter (#2254)
• 624da93 Detect SWC plugins in options set directly on a webpack rule (#2252)
• acbbbf5 Support pnpm workspace config includes (#2238)
• e118ef4 Treat packageExtensions peers as optional (#2246)
• 1a58eb5 Add --output-file option to write reporter output to a file (#2243)
• 5d10668 Let core resolve script entries from dir in the Playwright, Railway and mis...
• 381e3e3 Parse MCP server commands against their cwd
• 98d0b98 Parse GitHub Actions step scripts against their working directory
• 2070464 Pin the scope of negations and workspace exclusions for plugin entry patterns...
• Additional commits viewable in compare view

Updates turbo from 2.11.7 to 2.11.10

Release notes

Sourced from turbo's releases.

Turborepo v2.11.10

What's Changed

Changelog

• fix: Allow non-recursive Turbo commands in root tasks by @​sahyl in vercel/turborepo#14814
• chore: Release Turborepo 2.11.9 by @​github-actions[bot] in vercel/turborepo#14824
• chore(deps): Update dependency @​vercel/geistdocs to v2 by @​vercel-gh-bot-4[bot] in vercel/turborepo#14417
• chore: Update with-gatsby example by @​vercel-gh-bot-3[bot] in vercel/turborepo#14796
• fix: Avoid pnpm batch-shim shutdown hangs on Windows by @​sahyl in vercel/turborepo#14819
• chore(deps): Update dependency @​vercel/geistdocs to v2.11.0 by @​vercel-gh-bot-3[bot] in vercel/turborepo#14832
• fix: Exclude tool-managed directories from local dependency inputs by @​PedroRosalba in vercel/turborepo#14696
• fix: Match git's text=auto binary detection in file hashing by @​PedroRosalba in vercel/turborepo#14697
• fix: Drop @​react-router/dev from Remix match list by @​Pcmhacker-piro in vercel/turborepo#14800
• fix: Match package configuration files and directory inputs in task-level affected detection by @​PedroRosalba in vercel/turborepo#14804
• fix: Parse pnpm 8 single-project lockfiles by @​PedroRosalba in vercel/turborepo#14806
• fix: Keep task env vars in the hash when globalEnv excludes inferred vars by @​PedroRosalba in vercel/turborepo#14805
• docs: Generate the sitemap from Geistdocs sources by @​molebox in vercel/turborepo#14865
• fix: Restore cached symlinks when outputs are already on disk by @​PedroRosalba in vercel/turborepo#14807
• chore: Remove CODEOWNERS file by @​anthonyshew with @​Copilot in vercel/turborepo#14810
• feat: Enable WebMCP for Turborepo docs by @​anthonyshew in vercel/turborepo#14828
• fix: Exit quietly when turbo ls output is piped to a closed reader by @​drakeo338 in vercel/turborepo#14868
• fix: Distrust compromised eMudhra intermediate certificates by @​anthonyshew in vercel/turborepo#14876

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

Turborepo v2.11.9

What's Changed

Changelog

• chore: Release Turborepo 2.11.8 by @​github-actions[bot] in vercel/turborepo#14789
• perf: Prefetch Cargo metadata during lazy graph construction by @​anthonyshew in vercel/turborepo#14497
• perf: Compute Berry lockfile closures once across workspaces by @​anthonyshew in vercel/turborepo#14499
• perf: Check cache hit outputs in place instead of on the blocking pool by @​anthonyshew in vercel/turborepo#14524
• perf: Speed up Berry lockfile loading by @​anthonyshew in vercel/turborepo#14500
• perf: Parse bun.lock without building a JSON syntax tree by @​anthonyshew in vercel/turborepo#14502
• perf: Skip the dry run cache batch window when there is no remote cache by @​anthonyshew in vercel/turborepo#14505
• perf: Emit lockfile closures pre-sorted and cheapen closure interning by @​anthonyshew in vercel/turborepo#14525
• perf: Reuse configuration derived from turbo.json between the shim and the CLI by @​anthonyshew in vercel/turborepo#14521
• feat: Report locked tools-only setup plans by @​anthonyshew in vercel/turborepo#14483
• perf: Compute Bun lockfile closures once across workspaces by @​anthonyshew in vercel/turborepo#14501
• perf: Reuse open parent directories when restoring cache archives by @​anthonyshew in vercel/turborepo#14506
• perf: Skip dropping the run right before turbo run exits by @​anthonyshew in vercel/turborepo#14507
• perf: Match literal input exclusions without compiling globs by @​anthonyshew in vercel/turborepo#14510
• perf: Copy pruned package files in parallel by @​anthonyshew in vercel/turborepo#14512
• feat: Report proposed first-lock and refresh setup plans by @​anthonyshew in vercel/turborepo#14571
• perf: Compress large cache archives with multithreaded zstd by @​anthonyshew in vercel/turborepo#14698
• perf: Read tracked file stats from directory listings on Windows by @​anthonyshew in vercel/turborepo#14633

... (truncated)

Commits

• e521641 publish 2.11.10 to registry
• aaf5a3a fix: Distrust compromised eMudhra intermediate certificates (#14876)
• 9816503 fix: Exit quietly when turbo ls output is piped to a closed reader (#14868)
• af866e5 feat: Enable WebMCP for Turborepo docs (#14828)
• b42cc68 chore: Remove CODEOWNERS file (#14810)
• 921155f fix: Restore cached symlinks when outputs are already on disk (#14807)
• 9330903 docs: Generate the sitemap from Geistdocs sources (#14865)
• 6048038 fix: Keep task env vars in the hash when globalEnv excludes inferred vars (#1...
• 57ecce3 fix: Parse pnpm 8 single-project lockfiles (#14806)
• d926d6a fix: Match package configuration files and directory inputs in task-level aff...
• Additional commits viewable in compare view

Updates posthog-node from 5.55.0 to 5.60.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.60.1

5.60.1

Patch Changes

• #5471 0058ef9 Thanks @​gustavohstrassburger! - fix: let later conditions resolve a flag locally when an unexpected error follows a filter that local evaluation cannot check, instead of failing the whole flag (2026-10-29)

• #5471 0058ef9 Thanks @​gustavohstrassburger! - fix: fall back to the server when a flag depends on a flag that only the server can evaluate (for example, one with a static cohort), instead of letting a later condition choose a different value locally. unresolvedFlags reports such a flag as unresolved_dependency (2026-10-29)

posthog-node@5.60.0

5.60.0

Minor Changes

• #5270 4b25f7f Thanks @​DanielVisca! - The Express and NestJS integrations can read the session ID, and the distinct ID of an identified user, from the posthog-js cookie when a request has no tracing headers, so backend events link to browser sessions on same-site requests without frontend configuration. Turn it on with the readPostHogCookie option. (2026-10-29)

posthog-node@5.59.0

5.59.0

Minor Changes

• #5252 503c3ea Thanks @​andehen! - Reads from an evaluateFlags() snapshot now honor sendFeatureFlagEvent: false, and isEnabled() / getFlag() accept a sendFeatureFlagEvents option that overrides it for one read. If you set sendFeatureFlagEvent: false and rely on snapshot reads for experiment exposures, pass sendFeatureFlagEvents: true on those reads. (2026-10-28)

Patch Changes

• Updated dependencies [503c3ea]:
  • @​posthog/core@​1.61.2

posthog-node@5.58.0

5.58.0

Minor Changes

• #5314 096131d Thanks @​pauldambra! - Add an optional OpenTelemetry context processor, and an optional signal that ends a context's lifetime. (2026-10-28)

posthog-node@5.57.2

5.57.2

Patch Changes

• #5422 b5036c4 Thanks @​posthog! - fix: esbuild no longer fails to bundle posthog-node when the optional @opentelemetry/api peer is not installed (2026-10-25)

posthog-node@5.57.1

5.57.1

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.60.1

Patch Changes

• #5471 0058ef9 Thanks @​gustavohstrassburger! - fix: let later conditions resolve a flag locally when an unexpected error follows a filter that local evaluation cannot check, instead of failing the whole flag (2026-10-29)

• #5471 0058ef9 Thanks @​gustavohstrassburger! - fix: fall back to the server when a flag depends on a flag that only the server can evaluate (for example, one with a static cohort), instead of letting a later condition choose a different value locally. unresolvedFlags reports such a flag as unresolved_dependency (2026-10-29)

5.60.0

Minor Changes

• #5270 4b25f7f Thanks @​DanielVisca! - The Express and NestJS integrations can read the session ID, and the distinct ID of an identified user, from the posthog-js cookie when a request has no tracing headers, so backend events link to browser sessions on same-site requests without frontend configuration. Turn it on with the readPostHogCookie option. (2026-10-29)

5.59.0

Minor Changes

• #5252 503c3ea Thanks @​andehen! - Reads from an evaluateFlags() snapshot now honor sendFeatureFlagEvent: false, and isEnabled() / getFlag() accept a sendFeatureFlagEvents option that overrides it for one read. If you set sendFeatureFlagEvent: false and rely on snapshot reads for experiment exposures, pass sendFeatureFlagEvents: true on those reads. (2026-10-28)

Patch Changes

• Updated dependencies [503c3ea]:
  • @​posthog/core@​1.61.2

5.58.0

Minor Changes

• #5314 096131d Thanks @​pauldambra! - Add an optional OpenTelemetry context processor, and an optional signal that ends a context's lifetime. (2026-10-28)

5.57.2

Patch Changes

• #5422 b5036c4 Thanks @​posthog! - fix: esbuild no longer fails to bundle posthog-node when the optional @opentelemetry/api peer is not installed (2026-10-25)

5.57.1

Patch Changes

• #5385 faacff0 Thanks @​carlos-marchal-ph! - Apply the client privacyMode option to AI integrations, keep prompts out of errors, provider metadata and OTel spans in privacy mode, and redact MCP tool credentials (2026-10-23)

... (truncated)

Commits

• 4949cec chore: update versions and lockfile [version bump]
• 0058ef9 fix(node): keep local flag evaluation consistent with the server (#5471)
• 73d787a chore: update versions and lockfile [version bump]
• 4b25f7f feat(node): opt-in posthog-js cookie fallback for request context (#5270)
• 6f11d8e chore: update versions and lockfile [version bump]
• 503c3ea feat(node): honor sendFeatureFlagEvent in evaluateFlags snapshots, with a per...
• 4044a5c chore: update versions and lockfile [version bump]
• 096131d feat(node): add request context to OpenTelemetry spans (#5314)
• 196b7f9 chore: update versions and lockfile [version bump]
• b5036c4 fix(node): stop esbuild failing when @​opentelemetry/api is not installed (#5422)
• Additional commits viewable in compare view

Updates @types/node from 26.6.4 to 26.6.6

Commits

• See full diff in compare view

Updates rolldown from 1.2.12 to 1.2.16

Release notes

Sourced from rolldown's releases.

v1.2.16

[1.2.16] - 2026-10-29

🚀 Features

• perf-kit: check rendered output against the original build (#11140) by @​IWANABETHATGUY
• perf-kit: node/deno server startup mode (#10601) by @​IWANABETHATGUY
• perf-kit: browser page-load perf harness for coding agents (#10365) by @​IWANABETHATGUY
• devtools: report mode - agent-readable build metrics report (#10364) by @​IWANABETHATGUY
• inline-common-chunks: print record factories parenthesized so they compile eagerly (#11282) by @​mattlewis92
• fold 'key' in ns on namespace imports with statically known exports (#11333) by @​danielroe
• inline-common-chunks: inline chunks using import.meta.hot in dev mode (#11339) by @​hyfdev
• support experimentalInlineCommonChunks in dev mode (#11335) by @​hyfdev
• use INVALID_TLA_FORMAT error for Rollup compatibility (#11266) by @​sapphi-red

🐛 Bug Fixes

• await bundle.close() in loadConfig and clean up every generated config file (#10347) by @​Brooooooklyn
• deps: update mimalloc-safe to 0.1.69 (#11376) by @​shulaoda
• transform: don't crash when the working directory has been deleted (#11352) by @​shulaoda
• import-glob: follow directory symlinks on the wasm binding (#10624) by @​hyfdev
• tree-shaking: preserve exported rest bindings from dynamic imports (#11365) by @​shuvroroy
• transform: report tsconfigFilePaths for a tsconfig resolved through TsconfigCache (#11346) by @​cainrus
• tsconfig: don't apply tsconfig when resolving imports from virtual modules (#11089) by @​rubas
• code-splitting: handle emitted entries the same as input entries when placing the runtime (#11353) by @​IWANABETHATGUY
• error: make Diagnostic::add_file idempotent (#10610) by @​Nic-Polumeyv
• avoid retaining callable builtin callback owners (#10961) by @​IWANABETHATGUY
• code-splitting: only host the runtime in a chunk that every consumer's entries load (#11293) by @​IWANABETHATGUY
• code-splitting: keep the source order of chunk imports (#11298) by @​IWANABETHATGUY
• dev: don't treat a wrapped module's init as a no-op in dev mode (#11334) by @​hyfdev
• treat cwd as a literal path in relative glob filters (#11291) by @​onmax
• deps: update emnapi to 2.0.0-beta.2 and pin @napi-rs/wasm-runtime to 1.2.6 (#11292) by @​IWANABETHATGUY
• chunk-import-map: hash stable module ids so keys don't depend on the build folder (#11277) by @​mandyheg
• respect CPU limits when sizing native runtime workers (#11280) by @​Brooooooklyn
• deconflict the namespace of a module without module syntax (#11256) by @​IWANABETHATGUY
• code-splitting: rebuild an absorbed dynamic entry's namespace from what its imports read (#11200) by @​mattlewis92
• escape line terminators in debug-info comments (#11258) by @​IWANABETHATGUY

🚜 Refactor

• extract callable builtin hook wrapper (#10964) by @​IWANABETHATGUY

📚 Documentation

• add an in-depth explanation for inline common chunks (#11239) by @​hyfdev

⚡ Performance

• incremental cycle check for avoidRedundantChunkLoads (#11320) by @​IWANABETHATGUY
• avoid copying module code for renderedLength and share chunk.code across plugins (#11342) by @​IWANABETHATGUY

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.16] - 2026-10-29

🚀 Features

• perf-kit: check rendered output against the original build (#11140) by @​IWANABETHATGUY
• perf-kit: node/deno server startup mode (#10601) by @​IWANABETHATGUY
• perf-kit: browser page-load perf harness for coding agents (#10365) by @​IWANABETHATGUY
• devtools: report mode - agent-readable build metrics report (#10364) by @​IWANABETHATGUY
• inline-common-chunks: print record factories parenthesized so they compile eagerly (#11282) by @​mattlewis92
• fold 'key' in ns on namespace imports with statically known exports (#11333) by @​danielroe
• inline-common-chunks: inline chunks using import.meta.hot in dev mode (#11339) by @​hyfdev
• support experimentalInlineCommonChunks in dev mode (#11335) by @​hyfdev
• use INVALID_TLA_FORMAT error for Rollup compatibility (#11266) by @​sapphi-red

🐛 Bug Fixes

• await bundle.close() in loadConfig and clean up every generated config file (#10347) by @​Brooooooklyn
• deps: update mimalloc-safe to 0.1.69 (#11376) by @​shulaoda
• transform: don't crash when the working directory has been deleted (#11352) by @​shulaoda
• import-glob: follow directory symlinks on the wasm binding (#10624) by @​hyfdev
• tree-shaking: preserve exported rest bindings from dynamic imports (#11365) by @​shuvroroy
• transform: report tsconfigFilePaths for a tsconfig resolved through TsconfigCache (#11346) by @​cainrus
• tsconfig: don't apply tsconfig when resolving imports from virtual modules (#11089) by @​rubas
• code-splitting: handle emitted entries the same as input entries when placing the runtime (#11353) by @​IWANABETHATGUY
• error: make Diagnostic::add_file idempotent (#10610) by @​Nic-Polumeyv
• avoid retaining callable builtin callback owners (#10961) by @​IWANABETHATGUY
• code-splitting: only host the runtime in a chunk that every consumer's entries load (#11293) by @​IWANABETHATGUY
• code-splitting: keep the source order of chunk imports (#11298) by @​IWANABETHATGUY
• dev: don't treat a wrapped module's init as a no-op in dev mode (#11334) by @​hyfdev
• treat cwd as a literal path in relative glob filters (#11291) by @​onmax
• deps: update emnapi to 2.0.0...

  Description has been truncated