build(deps): bump the npm_and_yarn group across 10 directories with 4 updates by dependabot[bot] · Pull Request #285 · codecov/codecov-javascript-bundler-plugins
Bumps the npm_and_yarn group with 1 update in the /examples/astro directory: @astrojs/node.
Bumps the npm_and_yarn group with 1 update in the /examples/next-js directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/next-js-15 directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/vite directory: vite.
Bumps the npm_and_yarn group with 1 update in the /integration-tests/test-apps/astro-4 directory: @astrojs/node.
Bumps the npm_and_yarn group with 1 update in the /integration-tests/test-apps/nextjs directory: next.
Bumps the npm_and_yarn group with 1 update in the /integration-tests/test-apps/sveltekit directory: vite.
Bumps the npm_and_yarn group with 1 update in the /packages/bundle-analyzer directory: vite.
Bumps the npm_and_yarn group with 1 update in the /packages/remix-vite-plugin directory: vite.
Bumps the npm_and_yarn group with 1 update in the /packages/rollup-plugin directory: rollup.
Updates @astrojs/node from 8.3.4 to 9.5.4
Release notes
Sourced from @astrojs/node's releases.
@astrojs/node@9.5.4Patch Changes
#15564
522f880Thanks@matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.#15572
ef851bfThanks@matthewp! - Upgrade astro package supportastro@5.17.3 includes a fix to prevent Action payloads from exhausting memory.
@astrojs/nodenow depends on this version of Astro as a minimum requirement.
@astrojs/node@9.5.3Patch Changes
c13b536Thanks@matthewp! - Improves error page loading to read from disk first before falling back to configured host
Changelog
Sourced from @astrojs/node's changelog.
9.5.4
Patch Changes
#15564
522f880Thanks@matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.#15572
ef851bfThanks@matthewp! - Upgrade astro package supportastro@5.17.3 includes a fix to prevent Action payloads from exhausting memory.
@astrojs/nodenow depends on this version of Astro as a minimum requirement.9.5.3
Patch Changes
c13b536Thanks@matthewp! - Improves error page loading to read from disk first before falling back to configured host9.5.2
Patch Changes
#15196
a8317c1Thanks@ematipico! - Fixes an issue where some prendered pages weren't correctly rendered when using the Node.js adapter in middleware mode.#15169
b803d8bThanks@rururux! - fix: fix image 500 error when moving dist directory in standalone Node9.5.1
Patch Changes
9.5.0
Minor Changes
#14441
62ec8eaThanks@upsuper! - Updates redirect handling to be consistent acrossstaticandserveroutput, aligning with the behavior of other adapters.Previously, the Node.js adapter used default HTML files with meta refresh tags when in
staticoutput. This often resulted in an extra flash of the page on redirect, while also not applying the proper status code for redirections. It's also likely less friendly to search engines.This update ensures that configured redirects are always handled as HTTP redirects regardless of output mode, and the default HTML files for the redirects are no longer generated in
staticoutput. It makes the Node.js adapter more consistent with the other official adapters.No change to your project is required to take advantage of this new adapter functionality. It is not expected to cause any breaking changes. However, if you relied on the previous redirecting behavior, you may need to handle your redirects differently now. Otherwise you should notice smoother redirects, with more accurate HTTP status codes, and may potentially see some SEO gains.
9.4.6
Patch Changes
- #14514
66a26d7Thanks@matthewp! - Fixes compatibility issue with older versions of Astro by makinggetAllowedDomains()call optional and updating peer dependency to requireastro@^5.14.39.4.5
... (truncated)
Commits
- See full diff in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @astrojs/node since your current version.
Updates next from 14.2.25 to 15.5.10
Release notes
Sourced from next's releases.
v15.5.10
Please refer the following changelogs for more information about this security release:
- https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
- https://vercel.com/changelog/summary-of-cve-2026-23864
v15.4.11
Please see this changelog for more information about this security patch.
v15.3.9
Please see this changelog for more information about this security patch.
v15.2.9
Please see this changelog for more information about this security patch.
v15.1.12
Please see this changelog for more information about this security patch.
v15.0.8
Please see this changelog for more information about this security patch.
Commits
60a2aa9v15.5.10e5b834dfetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)39a2f6afeat(next/image)!: addimages.maximumResponseBodyconfig (#88183)bf9f084Sync DoS mitigations for React Flightc5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)- Additional commits viewable in compare view
Updates next from 15.1.0 to 15.5.10
Release notes
Sourced from next's releases.
v15.5.10
Please refer the following changelogs for more information about this security release:
- https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
- https://vercel.com/changelog/summary-of-cve-2026-23864
v15.4.11
Please see this changelog for more information about this security patch.
v15.3.9
Please see this changelog for more information about this security patch.
v15.2.9
Please see this changelog for more information about this security patch.
v15.1.12
Please see this changelog for more information about this security patch.
v15.0.8
Please see this changelog for more information about this security patch.
Commits
60a2aa9v15.5.10e5b834dfetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)39a2f6afeat(next/image)!: addimages.maximumResponseBodyconfig (#88183)bf9f084Sync DoS mitigations for React Flightc5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)- Additional commits viewable in compare view
Updates vite from 6.3.5 to 6.4.1
Release notes
Sourced from vite's releases.
create-vite@6.4.1
Please refer to CHANGELOG.md for details.
v6.4.1
Please refer to CHANGELOG.md for details.
v6.4.0
Please refer to CHANGELOG.md for details.
v6.3.7
Please refer to CHANGELOG.md for details.
v6.3.6
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
8.0.0-beta.15 (2026-02-19)
Features
Bug Fixes
- dev: only treat EADDRINUSE as port conflict in wildcard pre-check (#21642) (e54e25f)
- dev: prevent concurrent server restarts (#21636) (8ce23a3)
- dev: return "502 Bad Gateway" on proxy failures instead of 500 (#21652) (e240df2)
Performance Improvements
- ssr: skip circular import check for already-evaluated modules (#21632) (235140b)
- use tsconfig cache for oxc transform in dev (#21643) (57ff177)
Miscellaneous Chores
- deps: remove
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)- deps: update dependency
@rollup/plugin-aliasto v6 (#21097) (44b5bdf)8.0.0-beta.14 (2026-02-12)
Features
- update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)
- wasm: add SSR support for
.wasm?init(#21102) (216a3b5)Bug Fixes
- clear tsconfig cache only when tsconfig.json is cached (#21622) (50c9675)
- deps: update all non-major dependencies (#21594) (becdc5d)
- lib: CSS injection point error with nested name IIFE output (#21606) (5003de6)
- module-runner: incorrect column with
sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)- module-runner: prevent crash on negative column in stacktrace (#21585) (a075590)
- rolldownOptions/rollupOptions merging at environment level (#21612) (db2ecc7)
Miscellaneous Chores
- fix broken link for future deprecations (#21603) (25f4501)
- update
customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
- enable some native plugins even with enable native plugin false (#21608) (5a4f692)
- use
rolldown/utils(#21577) (e56103f)- use internal devtools config (#21609) (9aea20f)
- use parseEnv (#21586) (f859d2c)
- wasm: remove native wasm helper plugin usage (#21566) (71a86be)
Tests
... (truncated)
Commits
0a0c50arefactor: simplify pluginFilter implementation (#19828)59d0b35perf(css): avoid constructingrenderedModules(#19775)175a839fix: reject requests with#in request-target (#19830)e2e11b1fix(module-runner): allow already resolved id as entry (#19768)7200deefix: correct the behavior when multiple transform filter options are specifie...b125172fix(css): remove empty chunk imports correctly when chunk file name contained...8fe3538test: tweak generateCodeFrame test (#19812)36935b5fix(types): remove thekeepProcessEnvfrom theDefaultEnvironmentOptions...a0e1a04docs(vite): fix description oftransformIndexHtmlhook (#19799)71227befix: unbundlefdirto fixcommonjsOptions.dynamicRequireTargets(#19791)- Additional commits viewable in compare view
Updates @astrojs/node from 8.3.4 to 9.5.4
Release notes
Sourced from @astrojs/node's releases.
@astrojs/node@9.5.4Patch Changes
#15564
522f880Thanks@matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.#15572
ef851bfThanks@matthewp! - Upgrade astro package supportastro@5.17.3 includes a fix to prevent Action payloads from exhausting memory.
@astrojs/nodenow depends on this version of Astro as a minimum requirement.
@astrojs/node@9.5.3Patch Changes
c13b536Thanks@matthewp! - Improves error page loading to read from disk first before falling back to configured host
Changelog
Sourced from @astrojs/node's changelog.
9.5.4
Patch Changes
#15564
522f880Thanks@matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.#15572
ef851bfThanks@matthewp! - Upgrade astro package supportastro@5.17.3 includes a fix to prevent Action payloads from exhausting memory.
@astrojs/nodenow depends on this version of Astro as a minimum requirement.9.5.3
Patch Changes
c13b536Thanks@matthewp! - Improves error page loading to read from disk first before falling back to configured host9.5.2
Patch Changes
#15196
a8317c1Thanks@ematipico! - Fixes an issue where some prendered pages weren't correctly rendered when using the Node.js adapter in middleware mode.#15169
b803d8bThanks@rururux! - fix: fix image 500 error when moving dist directory in standalone Node9.5.1
Patch Changes
9.5.0
Minor Changes
#14441
62ec8eaThanks@upsuper! - Updates redirect handling to be consistent acrossstaticandserveroutput, aligning with the behavior of other adapters.Previously, the Node.js adapter used default HTML files with meta refresh tags when in
staticoutput. This often resulted in an extra flash of the page on redirect, while also not applying the proper status code for redirections. It's also likely less friendly to search engines.This update ensures that configured redirects are always handled as HTTP redirects regardless of output mode, and the default HTML files for the redirects are no longer generated in
staticoutput. It makes the Node.js adapter more consistent with the other official adapters.No change to your project is required to take advantage of this new adapter functionality. It is not expected to cause any breaking changes. However, if you relied on the previous redirecting behavior, you may need to handle your redirects differently now. Otherwise you should notice smoother redirects, with more accurate HTTP status codes, and may potentially see some SEO gains.
9.4.6
Patch Changes
- #14514
66a26d7Thanks@matthewp! - Fixes compatibility issue with older versions of Astro by makinggetAllowedDomains()call optional and updating peer dependency to requireastro@^5.14.39.4.5
... (truncated)
Commits
- See full diff in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @astrojs/node since your current version.
Updates next from 14.2.25 to 15.5.10
Release notes
Sourced from next's releases.
v15.5.10
Please refer the following changelogs for more information about this security release:
- https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
- https://vercel.com/changelog/summary-of-cve-2026-23864
v15.4.11
Please see this changelog for more information about this security patch.
v15.3.9
Please see this changelog for more information about this security patch.
v15.2.9
Please see this changelog for more information about this security patch.
v15.1.12
Please see this changelog for more information about this security patch.
v15.0.8
Please see this changelog for more information about this security patch.
Commits
60a2aa9v15.5.10e5b834dfetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)39a2f6afeat(next/image)!: addimages.maximumResponseBodyconfig (#88183)bf9f084Sync DoS mitigations for React Flightc5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)- Additional commits viewable in compare view
Updates vite from 6.3.5 to 6.4.1
Release notes
Sourced from vite's releases.
create-vite@6.4.1
Please refer to CHANGELOG.md for details.
v6.4.1
Please refer to CHANGELOG.md for details.
v6.4.0
Please refer to CHANGELOG.md for details.
v6.3.7
Please refer to CHANGELOG.md for details.
v6.3.6
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
8.0.0-beta.15 (2026-02-19)
Features
Bug Fixes
- dev: only treat EADDRINUSE as port conflict in wildcard pre-check (#21642) (e54e25f)
- dev: prevent concurrent server restarts (#21636) (8ce23a3)
- dev: return "502 Bad Gateway" on proxy failures instead of 500 (#21652) (e240df2)
Performance Improvements
- ssr: skip circular import check for already-evaluated modules (#21632) (235140b)
- use tsconfig cache for oxc transform in dev (#21643) (57ff177)
Miscellaneous Chores
- deps: remove
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)- deps: update dependency
@rollup/plugin-aliasto v6 (#21097) (44b5bdf)8.0.0-beta.14 (2026-02-12)
Features
- update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)
- wasm: add SSR support for
.wasm?init(#21102) (216a3b5)Bug Fixes
- clear tsconfig cache only when tsconfig.json is cached (#21622) (50c9675)
- deps: update all non-major dependencies (#21594) (becdc5d)
- lib: CSS injection point error with nested name IIFE output (#21606) (5003de6)
- module-runner: incorrect column with
sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)- module-runner: prevent crash on negative column in stacktrace (#21585) (a075590)
- rolldownOptions/rollupOptions merging at environment level (#21612) (db2ecc7)
Miscellaneous Chores
- fix broken link for future deprecations (#21603) (25f4501)
- update
customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
- enable some native plugins even with enable native plugin false (#21608) (5a4f692)
- use
rolldown/utils(#21577) (e56103f)- use internal devtools config (#21609) (9aea20f)
- use parseEnv (#21586) (f859d2c)
- wasm: remove native wasm helper plugin usage (#21566) (71a86be)
Tests
... (truncated)
Commits
0a0c50arefactor: simplify pluginFilter implementation (#19828)59d0b35perf(css): avoid constructingrenderedModules(#19775)175a839fix: reject requests with#in request-target (#19830)e2e11b1fix(module-runner): allow already resolved id as entry (#19768)7200deefix: correct the behavior when multiple transform filter options are specifie...b125172fix(css): remove empty chunk imports correctly when chunk file name contained...8fe3538test: tweak generateCodeFrame test (#19812)36935b5fix(types): remove thekeepProcessEnvfrom theDefaultEnvironmentOptions...a0e1a04docs(vite): fix description oftransformIndexHtmlhook (#19799)71227befix: unbundlefdirto fixcommonjsOptions.dynamicRequireTargets(#19791)- Additional commits viewable in compare view
Updates vite from 6.3.5 to 6.4.1
Release notes
Sourced from vite's releases.
create-vite@6.4.1
Please refer to CHANGELOG.md for details.
v6.4.1
Please refer to CHANGELOG.md for details.
v6.4.0
Please refer to CHANGELOG.md for details.
v6.3.7
Please refer to CHANGELOG.md for details.
v6.3.6
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
8.0.0-beta.15 (2026-02-19)
Features
Bug Fixes
- dev: only treat EADDRINUSE as port conflict in wildcard pre-check (#21642) (e54e25f)
- dev: prevent concurrent server restarts (#21636) (8ce23a3)
- dev: return "502 Bad Gateway" on proxy failures instead of 500 (#21652) (e240df2)
Performance Improvements
- ssr: skip circular import check for already-evaluated modules (#21632) (235140b)
- use tsconfig cache for oxc transform in dev (#21643) (57ff177)
Miscellaneous Chores
- deps: remove
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)- deps: update dependency
@rollup/plugin-aliasto v6 (#21097) (44b5bdf)8.0.0-beta.14 (2026-02-12)
Features
- update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)
- wasm: add SSR support for
.wasm?init(#21102) (216a3b5)Bug Fixes
- clear tsconfig cache only when tsconfig.json is cached (#21622) (50c9675)
- deps: update all non-major dependencies (#21594) (becdc5d)
- lib: CSS injection point error with nested name IIFE output (#21606) (5003de6)
- module-runner: incorrect column with
sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)- module-runner: prevent crash on negative column in stacktrace (#21585) (a075590)
- rolldownOptions/rollupOptions merging at environment level (#21612) (db2ecc7)
Miscellaneous Chores
- fix broken link for future deprecations (#21603) (25f4501)
- update
customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
- enable some native plugins even with enable native plugin false (#21608) (5a4f692)
- use
rolldown/utils(#21577) (e56103f)- use internal devtools config (#21609) (9aea20f)
- use parseEnv (#21586) (f859d2c)
- wasm: remove native wasm helper plugin usage (#21566) (71a86be)
Tests
... (truncated)
Commits
0a0c50arefactor: simplify pluginFilter implementation (#19828)59d0b35perf(css): avoid constructingrenderedModules(#19775)175a839fix: reject requests with#in request-target (#19830)e2e11b1fix(module-runner): allow already resolved id as entry (#19768)7200deefix: correct the behavior when multiple transform filter options are specifie...b125172fix(css): remove empty chunk imports correctly when chunk file name contained...8fe3538test: tweak generateCodeFrame test (#19812)36935b5fix(types): remove thekeepProcessEnvfrom theDefaultEnvironmentOptions...a0e1a04docs(vite): fix description oftransformIndexHtmlhook (#19799)71227befix: unbundlefdirto fixcommonjsOptions.dynamicRequireTargets(#19791)- Additional commits viewable in compare view
Updates vite from 6.3.5 to 6.4.1
Release notes
Sourced from vite's releases.
create-vite@6.4.1
Please refer to CHANGELOG.md for details.
v6.4.1
Please refer to CHANGELOG.md for details.
v6.4.0
Please refer to CHANGELOG.md for details.
v6.3.7
Please refer to CHANGELOG.md for details.
v6.3.6
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
8.0.0-beta.15 (2026-02-19)
Features
Bug Fixes
- dev: only treat EADDRINUSE as port conflict in wildcard pre-check (#21642) (e54e25f)
- dev: prevent concurrent server restarts (#21636) (8ce23a3)
- dev: return "502 Bad Gateway" on proxy failures instead of 500 (#21652) (e240df2)
Performance Improvements
- ssr: skip circular import check for already-evaluated modules (#21632) (235140b)
- use tsconfig cache for oxc transform in dev (#21643) (57ff177)
Miscellaneous Chores
- deps: remove
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)- deps: update dependency
@rollup/plugin-aliasto v6 (#21097) (44b5bdf)8.0.0-beta.14 (2026-02-12)
Features
- update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)
- wasm: add SSR support for
.wasm?init(#21102) (216a3b5)Bug Fixes
- clear tsconfig cache only when tsconfig.json is cached (#21622) (50c9675)
- deps: update all non-major dependencies (#21594) (becdc5d)
- lib: CSS injection point error with nested name IIFE output (#21606) (5003de6)
- module-runner: incorrect column with
sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)- module-runner: prevent crash on negative column in stacktrace (#21585) (a075590)
- rolldownOptions/rollupOptions merging at environment level (#21612) (db2ecc7)
Miscellaneous Chores
- fix broken link for future deprecations (#21603) (25f4501)
- update
customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
- enable some native plugins even with enable native plugin false (#21608) (5a4f692)
- use
rolldown/utils(#21577) (e56103f)- use internal devtools config (#21609) (9aea20f)
- use parseEnv (#21586) (f859d2c)
- wasm: remove native wasm helper plugin usage (#21566) (71a86be)
Tests
... (truncated)
Commits
0a0c50arefactor: simplify pluginFilter implementation (