build: update all non-major dependencies (main)

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
rolldown (source)	1.0.0-beta.58 → 1.0.0-beta.59
sass	1.97.1 → 1.97.2
undici (source)	7.18.0 → 7.18.2
vite (source)	7.3.0 → 7.3.1

---

Release Notes

rolldown/rolldown (rolldown)

v1.0.0-beta.59

Compare Source

🚀 Features

• plugin_timings: add 3s threshold and doc link to warning message (#​7741) by @​shulaoda
• improve treeshaking logic to handle empty parameter list in dynamic import .then() callbacks (#​7781) by @​Copilot
• dev/lazy: don't include already executed modules (#​7745) by @​hyf0
• dev/lazy: support dynamic import(..) (#​7726) by @​hyf0
• inline dynamic imports that imports statically imported modules (#​7742) by @​IWANABETHATGUY
• option: add experimental option to control chunk optimization (#​7738) by @​IWANABETHATGUY

🐛 Bug Fixes

• inline dynamic entry to user defined entry with esm wrap kind (#​7783) by @​IWANABETHATGUY
• use canonical namespace reference for property access (#​7777) by @​IWANABETHATGUY
• dynamic entry merged into common chunk with cjs and esm wrap kind (#​7771) by @​IWANABETHATGUY
• tla: should not await non-tla-related modules (#​7768) by @​hyf0
• dynamic entry captured by common chunk with CJS format (#​7757) by @​IWANABETHATGUY
• module_loader: mark emitted chunks as user-defined entry when already loaded (#​7765) by @​shulaoda
• normalize preserveModulesRoot path (#​7737) by @​IWANABETHATGUY
• linker: resolve race condition in side effects computation for export-star (#​7728) by @​camc314

🚜 Refactor

• plugin_timings: filter out plugins with duration < 1s from timing warnings (#​7785) by @​shulaoda
• module_loader: remove unnecessary collect before extend (#​7769) by @​shulaoda
• rename _id suffixes to _idx for oxc_index types (#​7767) by @​IWANABETHATGUY
• remove duplicate preserve_entry_signatures from AddEntryModuleMsg (#​7762) by @​shulaoda
• module_loader: pass user_defined_entries by reference (#​7756) by @​shulaoda
• dev/lazy: get proxy entry's ResolvedId correctly (#​7746) by @​hyf0
• simplify try_rewrite_import_expression control flow (#​7753) by @​IWANABETHATGUY
• module_loader: remove unnecessary dynamic import handling for runtime module (#​7754) by @​shulaoda
• inline __toDynamicImportESM (#​7747) by @​IWANABETHATGUY
• use From impl for ModuleLoaderOutput conversion (#​7732) by @​shulaoda
• remove duplicate fields from ModuleLoader (#​7731) by @​shulaoda
• tweak resolve_user_defined_entries (#​7727) by @​shulaoda

📚 Documentation

• add rolldown-string reference to native MagicString compatibility section (#​7778) by @​Copilot
• improve comments for export star side effects handling (#​7730) by @​IWANABETHATGUY

🧪 Testing

• use assertion instead of console.log for some testcase (#​7744) by @​IWANABETHATGUY

⚙️ Miscellaneous Tasks

• tweak some output.dynamicImportInCjs related rollup test results (#​7776) by @​sapphi-red
• mark esbuild/dce/dce_of_symbol_ctor_call as passed (#​7775) by @​sapphi-red
• deps: update oxc apps (#​7772) by @​renovate[bot]
• vite-tests: allow running on PRs with test: vite-tests label (#​7770) by @​shulaoda
• deps: update oxc apps (#​7760) by @​renovate[bot]
• deps: update rollup submodule for tests to v4.55.1 (#​7763) by @​sapphi-red
• deps: update test262 submodule for tests (#​7764) by @​sapphi-red
• deps: update oxc to v0.107.0 (#​7758) by @​camc314
• deps: update taiki-e/install-action action to v2.65.13 (#​7751) by @​renovate[bot]
• deps: update rust crates (#​7750) by @​renovate[bot]
• deps: update npm packages (#​7749) by @​renovate[bot]
• deps: update github-actions (#​7748) by @​renovate[bot]
• deps: update dependency oxlint-tsgolint to v0.10.1 (#​7729) by @​renovate[bot]
• deps: update crate-ci/typos action to v1.41.0 (#​7725) by @​renovate[bot]

sass/dart-sass (sass)

v1.97.2

Compare Source

• Additional fixes for implicit configuration when nested imports are involved.

nodejs/undici (undici)

v7.18.2

Compare Source

What's Changed

• fix(decompress): limit Content-Encoding chain to 5 to prevent resourc… by @​mcollina in #​4729

Full Changelog: nodejs/undici@v7.18.1...v7.18.2

v7.18.1

Compare Source

What's Changed

• Test and Fix running without SSL by @​mcollina in #​4727
• docs: add security warning for strictContentLength option by @​mcollina in #​4726
• build(deps): bump step-security/harden-runner from 2.13.1 to 2.14.0 by @​dependabot[bot] in #​4718
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​4719

Full Changelog: nodejs/undici@v7.18.0...v7.18.1

vitejs/vite (vite)

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

---

• If you want to rebase/retry this PR, check this box

[hybrist]

This PR was merged into the repository. The changes were merged into the following branches:

• main: 27c5508

[hlovdal]

Notice that the update of undici to version 7.18.2 fixes a securiy issue.

[hlovdal]

This update eventually ended up being included in release 21.1.1.