chore(deps): update all non-major dependencies (main)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@playwright/test (source)	^1.59.1 → ^1.63.0			devDependencies	minor
@rollup/pluginutils (source)	^5.3.0 → ^5.4.0			devDependencies	minor
@rsbuild/core (source)	2.0.3 → 2.2.12			devDependencies	minor
@rslib/core (source)	^0.21.3 → ^0.23.2			devDependencies	minor
@rslint/core	^0.5.1 → ^0.9.4			devDependencies	minor
@types/node (source)	^24.12.2 → ^24.19.1			devDependencies	minor
@types/semver (source)	^7.7.1 → ^7.8.0			devDependencies	minor
node	24.15.0 → 24.21.0			uses-with	minor
pnpm (source)	10.33.2 → 10.34.6			packageManager	minor
prettier (source)	^3.8.3 → ^3.9.9			devDependencies	minor
semver	^7.7.4 → ^7.8.5			devDependencies	minor
simple-git-hooks	^2.13.1 → ^2.14.0			devDependencies	minor

---

Release Notes

microsoft/playwright (@​playwright/test)

v1.63.0

Compare Source

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group.
Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments,
and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API
steps, the subtitle is the locator or the navigation url — for example, Click with subtitle getByRole('button').
Both are rendered next to the step title in the trace viewer and the HTML report.

🖼️ Aria and screen snapshots in traces

The snapshots option of tracing.start() and the testOptions.trace fixture option now accept an
object selecting what to capture on every action:

// playwright.config.ts
export default defineConfig({
  use: {
    trace: {
      mode: 'on',
      snapshots: { dom: true, aria: true, screen: true }
    },
  },
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

• httpCredentials now also accepts an array of credentials. The first entry matching the request origin is used, and entries without an origin match any request.
• New option opfs includes the origin private file system in the storage state, so it can be persisted and restored into later contexts.
• New events page.on('dialogclosed') and browserContext.on('dialogclosed') are emitted when a JavaScript dialog is accepted, dismissed or closed by the user.

Locators

• New locator.ariaSnapshotJSON() and page.ariaSnapshotJSON() return the aria snapshot as a JSON value instead of YAML markup, with mode, depth and boxes options.
• apiRequestContext.get() and other request methods accept a type argument that types the response json():

const response = await request.get<User>('/api/users/42');
const user = await response.json(); // typed as User

Test runner

• New standalone testOptions.reducedMotion, testOptions.forcedColors and testOptions.contrast options.
• New --add-reporter command line option appends a reporter on top of the ones configured in playwright.config, instead of replacing them like --reporter does.
• New omitTags option for the list, line, dot, github and junit reporters suppresses the tags that are automatically appended to test titles.

Command line

• npx playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
• npx playwright codegen --http-credentials records against pages behind HTTP authentication.

Miscellaneous

• New built-in perfetto reporter writes a Trace Event Format file for the Perfetto UI or chrome://tracing, rendering the test run as a timeline with a lane per worker.
• The HTML report renders a duration waterfall next to test steps.

Announcements

• ⚠️ The experimental @playwright/experimental-ct-react, @playwright/experimental-ct-react17 and @playwright/experimental-ct-vue packages will no longer be updated. Follow the migration guide to move to the stories model introduced in 1.62. Story ids passed to fixtures.mount() can now be typed through the generated Stories registry.
• ⚠️ Ubuntu 20.04 is not supported anymore.
• 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

Browser Versions

• Chromium 153.0.8010.12
• Mozilla Firefox 155.0
• WebKit 26.6

This version was also tested against the following stable channels:

• Google Chrome 153
• Microsoft Edge 153

v1.62.1

Compare Source

Bug Fixes

• #​41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #​41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #​41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #​42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #​42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

Compare Source

🧱 New component testing model

Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand.
The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);

await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');

// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

class MyReporter {
  async preprocess({ config, suite, testRun }) {
    for (const test of suite.allTests()) {
      if (shouldSkip(test))
        testRun.skip(test);
    }
  }
}

🔁 Isolated retries

New testConfig.retryStrategy controls when failed tests are retried.
The default 'immediate' retries as soon as a worker is free; 'isolated' runs all retries at the end, one by one in a single worker, to minimize interference with the rest of the suite:

// playwright.config.ts
export default defineConfig({
  retries: 2,
  retryStrategy: 'isolated',
});

New APIs

Browser and Context

• New option credentials includes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.

Actions

• New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scroll-into-view.

Network

• New apiResponse.timing() returns resource timing information for an API response.

Evaluation

• New locator.waitForFunction() waits until a function — called with the matching element — returns a truthy value.
• page.evaluate() and related methods now accept functions as evaluate arguments.
• page.addInitScript() / browserContext.addInitScript() now accept functions as init-script arguments.

Command line & MCP

• Playwright now bundles the Playwright MCP server and playwright-cli, runnable via npx playwright mcp and npx playwright cli.

Reporters

• The HTML report's Merge files grouping — previously only a UI toggle — can now be enabled from the config with the new mergeFiles reporter option:

// playwright.config.ts
export default defineConfig({
  reporter: [['html', { mergeFiles: true }]],
});

Announcements

• ⚠️ Debian 11 is not supported anymore.

Browser Versions

• Chromium 151.0.7922.34
• Mozilla Firefox 153.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 151
• Microsoft Edge 151

v1.61.1

Compare Source

Bug Fixes

• #​41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #​41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #​41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #​41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #​41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

• New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
• The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

• The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
• Supported expect.soft.poll(...).
• New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
• New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
• testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
• New -G command line shorthand for --grep-invert.

🛠️ Other improvements

• Playwright now supports Ubuntu 26.04.
• HAR and trace recordings now include WebSocket requests.

Browser Versions

• Chromium 149.0.7827.55
• Mozilla Firefox 151.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 149
• Microsoft Edge 149

v1.60.0

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

• expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
• New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

• Event browser.on('context') — fired when a new context is created on the browser.
• BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

• New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
• New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
• New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

• webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
• New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

• New webError.location() mirrors consoleMessage.location().
• consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
• New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
• reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

• New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
• Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

• HTML reporter:
  • npx playwright show-report accepts .zip files directly — no need to unzip first.
  • Steps that contain attachments inside nested children show an indicator on the parent step.
  • The repeatEachIndex is shown in the test header when non-zero.
• Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

• Removed long-deprecated APIs:
  • Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
  • handle option on BrowserContext.exposeBinding and Page.exposeBinding.
  • logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
  • Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

• Chromium 148.0.7778.96
• Mozilla Firefox 150.0.2
• WebKit 26.4

This version was also tested against the following stable channels:

• Google Chrome 147
• Microsoft Edge 147

rollup/plugins (@​rollup/pluginutils)

v5.4.0

2026-05-29

Features

• feat: named exports for reserved-word keys + fix duplicate default export in dataToEsm (#​2002)

web-infra-dev/rsbuild (@​rsbuild/core)

v2.2.12

Compare Source

What's Changed

New Features 🎉

• feat(core): add tapOnce to internal async hooks by @​chenjiahan in #​8594

Performance 🚀

• perf(server): skip unnecessary HTML path normalization by @​chenjiahan in #​8628
• perf(server): reduce gzip overhead for large responses by @​chenjiahan in #​8627
• perf(core): avoid reading assets that writeToDisk skips by @​guru-irl in #​8615
• perf(core): avoid buffering compressed output for size reporting by @​chenjiahan in #​8613

Bug Fixes 🐞

• fix(server): decode request paths when completing HTML files by @​kwy404 in #​8618
• fix(plugin-solid): align refresh with Solid rc.13 by @​chenjiahan in #​8623
• fix(server): close gzip streams when responses close by @​chenjiahan in #​8617
• fix(server): avoid leaking file streams for HEAD requests by @​chenjiahan in #​8614
• fix(core): preserve proxy logger formatting arguments by @​hardfist in #​8609
• fix(core): respect minimizer options for CSS URL imports by @​chenjiahan in #​8607
• fix(core): avoid minifying CSS URL assets twice by @​chenjiahan in #​8606
• fix(core): resolve asset URLs in CSS ?url imports by @​chenjiahan in #​8604
• fix(core): preserve externals for classic worker targets by @​chenjiahan in #​8600
• fix(server): use one-time internal dev server hooks by @​chenjiahan in #​8588

Document 📖

• docs: preserve arguments in logger override examples by @​chenjiahan in #​8611
• docs: explain Node.js externals for Cloudflare Workers by @​chenjiahan in #​8605
• docs: explain workerd export conditions by @​chenjiahan in #​8603
• docs: explain Cloudflare built-in module externals by @​chenjiahan in #​8602
• docs: explain externals for classic workers by @​chenjiahan in #​8601

Other Changes

• release: v2.2.12 by @​chenjiahan in #​8631
• release: @​rsbuild/plugin-solid v2.0.0-rc.1 by @​chenjiahan in #​8630
• chore(deps): update all patch dependencies by @​renovate in #​8619
• chore: use chore prefix for all Renovate updates by @​chenjiahan in #​8626
• chore(deps): update dependency octane to ^0.8.0 by @​renovate in #​8625
• chore(deps): update pnpm to v12.9.1 by @​renovate in #​8624
• chore(deps): update memfs to v4.80.0 by @​renovate in #​8622
• chore(deps): update dependency @​tsrx/typescript-plugin to ^0.6.1 by @​renovate in #​8621
• chore(deps): update dependency @​shikijs/transformers to ^4.5.0 by @​renovate in #​8620
• chore(deps): update dependency node to v24.21.0 by @​renovate in #​8612

Full Changelog: web-infra-dev/rsbuild@v2.2.11...v2.2.12

v2.2.11

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to 2.2.8 by @​chenjiahan in #​8598

Performance 🚀

• perf(core): skip Node.js compile cache in CI by @​chenjiahan in #​8565
• perf(core): avoid copying complete asset buffers by @​chenjiahan in #​8595

Bug Fixes 🐞

• fix(core): respect CI=false consistently by @​chenjiahan in #​8567
• fix(core): preserve externals for module worker targets by @​chenjiahan in #​8573
• fix(deps): update dependency octane to ^0.6.0 by @​renovate[bot] in #​8575
• fix(server): share graceful shutdown listeners across instances by @​chenjiahan in #​8580
• fix(server): clean up preview shortcuts on close by @​chenjiahan in #​8582
• fix(client): clean up overlay keyboard listeners on removal by @​chenjiahan in #​8584
• fix(server): preserve shared stdin for active shortcuts by @​chenjiahan in #​8583
• fix(client): clear runtime error history on hot updates by @​chenjiahan in #​8585
• fix(plugin-react): apply reactCompiler only to web environments by @​BleedingDev in #​8568
• fix(server): release closed socket server reference by @​chenjiahan in #​8589

Document 📖

• docs: clarify worker chunk splitting behavior by @​chenjiahan in #​8577
• docs: explain Cloudflare Workers build configuration by @​chenjiahan in #​8581
• docs: clarify React Compiler usage in non-web environments by @​chenjiahan in #​8587

Other Changes

• test(core): verify module worker runtime behavior by @​chenjiahan in #​8564
• test(core): cover shared chunks in module worker targets by @​chenjiahan in #​8566
• chore(deps): update all patch dependencies by @​renovate[bot] in #​8569
• chore(deps): update memfs to v4.79.0 by @​renovate[bot] in #​8571
• chore(deps): update dependency ws to ^8.22.0 by @​renovate[bot] in #​8570
• chore(deps): update sass to ^1.105.0 by @​renovate[bot] in #​8572
• test(core): cover shared chunks in classic workers by @​chenjiahan in #​8574
• chore(deps): update swc monorepo to v15 by @​renovate[bot] in #​8576
• chore(test): remove FORCE_COLOR workaround for Rstest by @​fi3ework in #​8578
• test(core): cover module worker entry exports by @​chenjiahan in #​8579
• release: @​rsbuild/plugin-react v2.1.1 by @​chenjiahan in #​8586
• release: v2.2.11 by @​chenjiahan in #​8599

Full Changelog: web-infra-dev/rsbuild@v2.2.10...v2.2.11

v2.2.10

Compare Source

What's Changed

New Features 🎉

• feat(core): support output.module for web-worker target by @​BleedingDev in #​8557

Performance 🚀

• perf(core): cache source map resolution per browser error by @​chenjiahan in #​8531
• perf(core): skip disk copy work before reading asset content by @​chenjiahan in #​8561

Bug Fixes 🐞

• fix(core): flush gzip buffers for streaming responses by @​chenjiahan in #​8533
• fix(core): limit response flushing to the gzip stream by @​chenjiahan in #​8534
• fix(types): expose optional flush on middleware responses by @​chenjiahan in #​8536
• fix(core): handle missing ESM HMR manifests by @​chenjiahan in #​8537
• fix(core): reset compile done state on watch restart by @​chenjiahan in #​8538
• fix(core): avoid treating sibling dist paths as nested by @​kwy404 in #​8544
• fix(core): dedupe nested paths with dot-prefixed names by @​chenjiahan in #​8549
• fix(core): check path boundaries in lazy compilation logs by @​chenjiahan in #​8550
• fix(core): normalize and share path containment checks by @​chenjiahan in #​8551
• fix(core): avoid printing 60.0s in build time logs by @​kwy404 in #​8552
• fix(core): avoid writing assets twice when writeToDisk is true by @​kwy404 in #​8556
• fix(core): avoid retaining CJS runner module scopes by @​chenjiahan in #​8559
• fix(server): remove WebSocket upgrade listeners on close by @​chenjiahan in #​8562

Document 📖

• docs: explain flushing compressed streaming responses by @​chenjiahan in #​8535
• docs: keep tests minimal and behavior-focused by @​chenjiahan in #​8540

Other Changes

• chore(deps): upgrade pnpm to 12.6 and enable autoDedupe by @​chenjiahan in #​8539
• chore(deps): update dependency octane to ^0.5.0 by @​renovate in #​8547
• chore(deps): group memfs and jsonjoy Renovate updates by @​chenjiahan in #​8548
• test(core): cover writeToDisk writes in e2e by @​chenjiahan in #​8560
• release: v2.2.10 by @​chenjiahan in #​8563

Full Changelog: web-infra-dev/rsbuild@v2.2.9...v2.2.10

v2.2.9

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to 2.2.7 by @​chenjiahan in #​8528

Performance 🚀

• perf(deps): upgrade html-rspack-plugin to v6.1.11 by @​chenjiahan in #​8513
• perf(core): cache remapping import in transform loader by @​chenjiahan in #​8519
• perf(core): cache trace-mapping import in browser logs by @​chenjiahan in #​8520
• perf(core): cache range-parser import in assets middleware by @​chenjiahan in #​8521
• perf(core): reuse vm module in ESM runner by @​chenjiahan in #​8522
• perf(core): statically import util and zlib in server helpers by @​chenjiahan in #​8523
• perf(core): cache imports for watchers, hashing and manifests by @​chenjiahan in #​8526
• perf(core): reuse dynamic import function in CJS runner by @​chenjiahan in #​8525
• perf(core): defer SSR runner file reads until cache misses by @​chenjiahan in #​8527

Bug Fixes 🐞

• fix(types): prebundle ws declarations by @​chenjiahan in #​8510

Document 📖

• docs: remove redundant CLAUDE.md setup tip by @​chenjiahan in #​8518

Other Changes

• chore(deps): upgrade Rstack to 0.7.6 and Rstest to 0.12 by @​chenjiahan in #​8511
• test: configure Playwright launch options via helper by @​chenjiahan in #​8512
• chore(deps): update pnpm to v12.5.1 by @​renovate[bot] in #​8515
• chore(deps): update all patch dependencies by @​renovate[bot] in #​8514
• chore(deps): update dependency octane to ^0.3.0 by @​renovate[bot] in #​8517
• chore(deps): update rstest to ^0.12.0 by @​renovate[bot] in #​8516
• chore(deps): upgrade rstack to v0.8.0 by @​SoonIter in #​8524
• release: v2.2.9 by @​chenjiahan in #​8529

Full Changelog: web-infra-dev/rsbuild@v2.2.8...v2.2.9

v2.2.8

Compare Source

What's Changed

New Features 🎉

• feat(core): add environment hot.onConnect API by @​chenjiahan in #​8504
• feat(deps): update @​rspack/core to 2.2.6 by @​chenjiahan in #​8508

Performance 🚀

• perf(core): reduce memory filesystem buffer allocations by @​chenjiahan in #​8507

Refactor 🔨

• refactor(core): support sending HMR messages to a single socket by @​chenjiahan in #​8503

Document 📖

• docs: document environment hot.onConnect API by @​chenjiahan in #​8506

Other Changes

• test(core): cover node chunk filename conflicts by @​chenjiahan in #​8500
• chore(deps): update dependency memfs to ^4.78.0 by @​renovate[bot] in #​8502
• chore(deps): update dependency @​tsrx/typescript-plugin to ^0.4.1 by @​renovate[bot] in #​8501
• release: v2.2.8 by [@​chenjiahan](https://red

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.