chore(deps): bump the example-dependencies group across 7 directories with 4 updates #525

dependabot · 2026-02-02T15:55:55Z

Bumps the example-dependencies group with 2 updates in the /examples/components/bundled-esbuild directory: fast-xml-parser and @bytecodealliance/jco.
Bumps the example-dependencies group with 1 update in the /examples/components/bundled-rsbuild directory: @bytecodealliance/jco.
Bumps the example-dependencies group with 3 updates in the /examples/components/http-axios directory: @bytecodealliance/jco, axios and rollup.
Bumps the example-dependencies group with 1 update in the /examples/components/http-hello-world directory: @bytecodealliance/jco.
Bumps the example-dependencies group with 2 updates in the /examples/components/http-password-checker directory: @bytecodealliance/jco and rollup.
Bumps the example-dependencies group with 2 updates in the /examples/components/http-server-with-hono directory: @bytecodealliance/jco and rollup.
Bumps the example-dependencies group with 1 update in the /examples/components/http-streaming directory: @bytecodealliance/jco.

Updates fast-xml-parser from 5.3.3 to 5.3.4

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

5.3.4 / 2026-01-30

fix: handle HTML numeric and hex entities when out of range

5.3.3 / 2025-12-12

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

5.3.2 / 2025-11-14

fix for import statement for v6

5.3.1 / 2025-11-03

Performance improvement for stopNodes (By Maciek Lamberski)

5.3.0 / 2025-10-03

Use Uint8Array in place of Buffer in Parser

5.2.5 / 2025-06-08

Inform user to use fxp-cli instead of in-built CLI feature

Export typings for direct use

5.2.4 / 2025-06-06

fix (#747): fix EMPTY and ANY with ELEMENT in DOCTYPE

5.2.3 / 2025-05-11

fix (#747): support EMPTY and ANY with ELEMENT in DOCTYPE

5.2.2 / 2025-05-05

fix (#746): update strnum to fix parsing issues related to enotations

5.2.1 / 2025-04-22

fix: read DOCTYPE entity value correctly

read DOCTYPE NOTATION, ELEMENT exp but not using read values

5.2.0 / 2025-04-03

feat: support metadata on nodes (#593) (By Steven R. Loomis)

5.1.0 / 2025-04-02

feat: declare package as side-effect free (#738) (By Thomas Bouffard)

fix cjs build mode

fix builder return type to string

5.0.9 / 2025-03-14

fix: support numeric entities with values over 0xFFFF (#726) (By Marc Durdin)

fix: update strnum to fix parsing 0 if skiplike option is used

5.0.8 / 2025-02-27

... (truncated)

Commits

753e770 update release details
4e387f6 handle html entities when out of range
088b47a correct typo (#780)
See full diff in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates axios from 1.13.3 to 1.13.4

Release notes

Sourced from axios's releases.

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)

Fixed issues discovered in v1.13.3 release

Cleaned up interceptor test files

Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)

Major refactoring of CI/CD workflows

Consolidated workflow files for better maintainability

Added mise configuration for the development environment

Improved sponsor block update automation

Enhanced issue and PR templates

Added automatic release notes generation

Implemented workflow cancellation for concurrent runs

chore: codegen and some updates to workflows (76cf77b)

Code generation improvements

Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

jasonsaayman - Release management and CI/CD improvements

Changelog

Sourced from axios's changelog.

Changelog

Commits

9336cf9 chore(release): prepare release 1.13.4 (#7353)
ee90dfc fix: issues with version 1.13.3 (#7352)
af4f6d9 fix: release branch yml
253e3ad fix: all merge configs
8ff6c19 refactor: ci and build (#7340)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.

Updates rollup from 4.56.0 to 4.57.1

Release notes

Sourced from rollup's releases.

v4.57.1

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

#6255: chore(deps): lock file maintenance (@renovate[bot])

v4.57.0

4.57.0

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)

Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)

#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6245: chore(deps): lock file maintenance (@renovate[bot])

#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Changelog

Sourced from rollup's changelog.

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

#6255: chore(deps): lock file maintenance (@renovate[bot])

4.57.0

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)

Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)

#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6245: chore(deps): lock file maintenance (@renovate[bot])

#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Commits

d37675f 4.57.1
eafac0b chore(deps): lock file maintenance (#6255)
47fa568 chore(deps): update dependency lru-cache to v11 (#6252)
416f476 Fully include dynamic imports in a try-catch (#6254)
5e393e3 fix: Isolate and cache process.report.getReport() calls in a child process ...
c931d23 chore(deps): lock file maintenance minor/patch updates (#6253)
c79e6c2 Mitigate vulnerability that would allow to steal credentials
743d054 4.57.0
74121c7 extend more hooks to include import attributes and add warnings (#5700)
c519d82 Refactor to reduce Rollup 5 upgrade diff (#6246)
Additional commits viewable in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates rollup from 4.56.0 to 4.57.1

Release notes

Sourced from rollup's releases.

v4.57.1

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

#6255: chore(deps): lock file maintenance (@renovate[bot])

v4.57.0

4.57.0

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)

Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)

#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6245: chore(deps): lock file maintenance (@renovate[bot])

#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Changelog

Sourced from rollup's changelog.

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

#6255: chore(deps): lock file maintenance (@renovate[bot])

4.57.0

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)

Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)

#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6245: chore(deps): lock file maintenance (@renovate[bot])

#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Commits

d37675f 4.57.1
eafac0b chore(deps): lock file maintenance (#6255)
47fa568 chore(deps): update dependency lru-cache to v11 (#6252)
416f476 Fully include dynamic imports in a try-catch (#6254)
5e393e3 fix: Isolate and cache process.report.getReport() calls in a child process ...
c931d23 chore(deps): lock file maintenance minor/patch updates (#6253)
c79e6c2 Mitigate vulnerability that would allow to steal credentials
743d054 4.57.0
74121c7 extend more hooks to include import attributes and add warnings (#5700)
c519d82 Refactor to reduce Rollup 5 upgrade diff (#6246)
Additional commits viewable in compare view

Updates @bytecodealliance/jco from 1.15.4 to 1.16.0

Release notes

Sourced from @bytecodealliance/jco's releases.

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

(jco) error on attempt to set async imports for sync transpile by @vados-cosmonic

(jco) enable p3 async post return test by @vados-cosmonic

🐛 Bug Fixes

(jco) test use of push context by @vados-cosmonic

(jco) browser tests by @vados-cosmonic

(jco) tests, async tick() behavior by @vados-cosmonic

🧪 Testing

(jco) test telemetry directive by @vados-cosmonic in #1228

(jco) re-add basic custom component tests by @vados-cosmonic

(jco) re-add basic backpressure test by @vados-cosmonic

(jco) update previously deleted test to use test components by @vados-cosmonic

(jco) add machinery for building local rust p3 test components by @vados-cosmonic

(jco) simply remove outdated async component tests by @vados-cosmonic

(jco) fix the post-return tests for updated upstream deps by @vados-cosmonic

(jco) update error-context tests by @vados-cosmonic

(jco) update error context to newer binaries by @vados-cosmonic

(jco) fix ts generation helper usage by @vados-cosmonic

(jco) refactor typescript fixture generation code by @vados-cosmonic

(jco) use p2-shim in strings test by @vados-cosmonic

(jco) update browser template by @vados-cosmonic

(jco) update async context test by @vados-cosmonic

... (truncated)

Commits

9ab3667 release: jco v1.16.0
bc8a3b7 release: js-component-bindgen v1.14.0
eccfde2 fix(ci): add missing permissions for crate publish
42ae4ae chore(bindgen): wit-bindgen -> 0.52.0
bd4c038 test(jco): test telemetry directive
f9613a0 feat(bindgen): add "use jco" telemetry directive
c01ff75 chore(deps): bump taiki-e/install-action from 2.67.15 to 2.67.16
da132e2 release: preview2-shim v0.17.7
f275102 chore(deps): bump actions/cache from 5.0.2 to 5.0.3
e6ba78c chore(deps): bump taiki-e/install-action from 2.67.13 to 2.67.15
Additional commits viewable in compare view

Updates rollup from 4.56.0 to 4.57.1

Release notes

Sourced from rollup's releases.

v4.57.1

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

#6255: chore(deps): lock file maintenance (@renovate[bot])

v4.57.0

4.57.0

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)

Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)

#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6245: chore(deps): lock file maintenance (@renovate[bot])

#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Changelog

Sourced from rollup's changelog.

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update depen...
Description has been truncated

… with 4 updates Bumps the example-dependencies group with 2 updates in the /examples/components/bundled-esbuild directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [@bytecodealliance/jco](https://github.com/bytecodealliance/jco). Bumps the example-dependencies group with 1 update in the /examples/components/bundled-rsbuild directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco). Bumps the example-dependencies group with 3 updates in the /examples/components/http-axios directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco), [axios](https://github.com/axios/axios) and [rollup](https://github.com/rollup/rollup). Bumps the example-dependencies group with 1 update in the /examples/components/http-hello-world directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco). Bumps the example-dependencies group with 2 updates in the /examples/components/http-password-checker directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco) and [rollup](https://github.com/rollup/rollup). Bumps the example-dependencies group with 2 updates in the /examples/components/http-server-with-hono directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco) and [rollup](https://github.com/rollup/rollup). Bumps the example-dependencies group with 1 update in the /examples/components/http-streaming directory: [@bytecodealliance/jco](https://github.com/bytecodealliance/jco). Updates `fast-xml-parser` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.3.3...v5.3.4) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `axios` from 1.13.3 to 1.13.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.13.3...v1.13.4) Updates `rollup` from 4.56.0 to 4.57.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.56.0...v4.57.1) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `rollup` from 4.56.0 to 4.57.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.56.0...v4.57.1) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) Updates `rollup` from 4.56.0 to 4.57.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.56.0...v4.57.1) Updates `@bytecodealliance/jco` from 1.15.4 to 1.16.0 - [Release notes](https://github.com/bytecodealliance/jco/releases) - [Commits](bytecodealliance/jco@jco-v1.15.4...jco-v1.16.0) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: axios dependency-version: 1.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: example-dependencies - dependency-name: rollup dependency-version: 4.57.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: rollup dependency-version: 4.57.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: rollup dependency-version: 4.57.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies - dependency-name: "@bytecodealliance/jco" dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: example-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 2, 2026

dependabot bot requested review from a team as code owners February 2, 2026 15:55

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 2, 2026

lachieh approved these changes Feb 3, 2026

View reviewed changes

lachieh merged commit f727bdf into main Feb 3, 2026
36 checks passed

lachieh deleted the dependabot/npm_and_yarn/examples/components/bundled-esbuild/example-dependencies-dfd38c037e branch February 3, 2026 15:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the example-dependencies group across 7 directories with 4 updates #525

chore(deps): bump the example-dependencies group across 7 directories with 4 updates #525

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the example-dependencies group across 7 directories with 4 updates #525

chore(deps): bump the example-dependencies group across 7 directories with 4 updates #525

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 2, 2026

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

v1.13.4

Overview

What's New in v1.13.4

Bug Fixes

Infrastructure & CI/CD

Migration Notes

Breaking Changes

Deprecations

Contributors

Changelog

v4.57.1

4.57.1

Bug Fixes

Pull Requests

v4.57.0

4.57.0

Features

Pull Requests

4.57.1

Bug Fixes

Pull Requests

4.57.0

Features

Pull Requests

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

v4.57.1

4.57.1

Bug Fixes

Pull Requests

v4.57.0

4.57.0

Features

Pull Requests

4.57.1

Bug Fixes

Pull Requests

4.57.0

Features

Pull Requests

jco-v1.16.0

Changelog

[1.16.0] - 2026-02-01

🚀 Features

🐛 Bug Fixes

🧪 Testing

v4.57.1