chore(deps): update github-actions #7075

renovate · 2025-11-16T16:19:43Z

This PR contains the following updates:

Package	Type	Update	Change
CodSpeedHQ/action	action	patch	`v4.3.3` -> `v4.3.4`
github/codeql-action	action	patch	`v4.31.2` -> `v4.31.3`
oxc-project/setup-rust	action	patch	`v1.0.8` -> `v1.0.9`
taiki-e/install-action	action	patch	`v2.62.49` -> `v2.62.51`

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

`v4.3.4`

Compare Source

Release Notes

🚀 Features

Make get_commit_hash different based on the provider by @GuillaumeLagrange in #151

🐛 Bug Fixes

Use GITHUB_WORKSPACE env var when computing root path by @GuillaumeLagrange
Ensure perf also fails when the command fails by @not-matthias in #150
Ensure working directory is used when running the cmd by @not-matthias
Use debug! instead of println for debug data by @art049

⚙️ Internals

chore: bump runner version to 4.3.4 by @github-actions[bot] in #154

Install codspeed-runner 4.3.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/runner/releases/download/v4.3.4/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.3.4

File	Platform	Checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.3.3...v4.3.4

github/codeql-action (github/codeql-action)

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

oxc-project/setup-rust (oxc-project/setup-rust)

`v1.0.9`

Compare Source

What's Changed

chore(deps): update taiki-e/install-action action to v2.62.47 by @renovate[bot] in #26

Full Changelog: oxc-project/setup-rust@v1.0.8...v1.0.9

taiki-e/install-action (taiki-e/install-action)

`v2.62.51`

Compare Source

Initial release

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

graphite-app · 2025-11-16T16:19:51Z

How to use the Graphite Merge Queue

Add the label graphite: merge to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

netlify · 2025-11-16T16:20:29Z

✅ Deploy Preview for rolldown-rs canceled.

Name	Link
🔨 Latest commit	`a06f749`
🔍 Latest deploy log	https://app.netlify.com/projects/rolldown-rs/deploys/691a092a9118b700088d17f0

github-actions · 2025-11-16T16:47:24Z

Benchmarks Rust

target: main(c8c8ccf)
pr: renovate/github-actions(a06f749)

group                                                        pr                                     target
-----                                                        --                                     ------
bundle/bundle@multi-duplicated-top-level-symbol              1.00     71.1±1.56ms        ? ?/sec    1.00     71.2±1.49ms        ? ?/sec
bundle/bundle@multi-duplicated-top-level-symbol-sourcemap    1.00     78.3±1.49ms        ? ?/sec    1.00     78.0±1.46ms        ? ?/sec
bundle/bundle@rome_ts                                        1.00    113.1±2.74ms        ? ?/sec    1.01    113.7±1.80ms        ? ?/sec
bundle/bundle@rome_ts-sourcemap                              1.00    126.8±3.46ms        ? ?/sec    1.00    126.7±3.10ms        ? ?/sec
bundle/bundle@threejs                                        1.00     41.7±0.67ms        ? ?/sec    1.00     41.8±0.55ms        ? ?/sec
bundle/bundle@threejs-sourcemap                              1.00     45.3±0.68ms        ? ?/sec    1.01     45.6±0.51ms        ? ?/sec
bundle/bundle@threejs10x                                     1.00    411.8±4.80ms        ? ?/sec    1.00    409.7±4.88ms        ? ?/sec
bundle/bundle@threejs10x-sourcemap                           1.00    471.6±4.19ms        ? ?/sec    1.00    470.9±7.31ms        ? ?/sec
scan/scan@rome_ts                                            1.00     89.0±1.55ms        ? ?/sec    1.00     88.6±1.59ms        ? ?/sec
scan/scan@threejs                                            1.00     29.9±0.42ms        ? ?/sec    1.01     30.0±0.46ms        ? ?/sec
scan/scan@threejs10x                                         1.00    307.3±4.92ms        ? ?/sec    1.00    308.3±5.75ms        ? ?/sec

Copilot

Pull Request Overview

This PR updates four GitHub Actions dependencies with patch version increments. All updates include routine bug fixes and improvements with no breaking changes.

Updates CodSpeedHQ/action from v4.3.3 to v4.3.4 with bug fixes for command failure handling and working directory usage
Updates github/codeql-action from v4.31.2 to v4.31.3 with CodeQL bundle update to 2.23.5
Updates oxc-project/setup-rust from v1.0.8 to v1.0.9 with dependency updates
Updates taiki-e/install-action from v2.62.49 to v2.62.51 with incremental improvements

Reviewed Changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/vite-tests.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/reusable-wasi-build.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/reusable-release-build.yml	Updates oxc-project/setup-rust to v1.0.9 and taiki-e/install-action to v2.62.51
.github/workflows/reusable-node-test.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/reusable-cargo-test.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/prepare-release.yml	Updates taiki-e/install-action to v2.62.51
.github/workflows/metric.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/dprint.yml	Updates taiki-e/install-action to v2.62.51
.github/workflows/deny.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/copilot-setup-steps.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/ci.yml	Updates oxc-project/setup-rust to v1.0.9 across multiple jobs
.github/workflows/ci-security.yml	Updates taiki-e/install-action to v2.62.51 and github/codeql-action to v4.31.3
.github/workflows/cache-warmup.yml	Updates oxc-project/setup-rust to v1.0.9 across multiple jobs
.github/workflows/benchmark-rust.yml	Updates oxc-project/setup-rust to v1.0.9 and CodSpeedHQ/action to v4.3.4
.github/workflows/benchmark-node.yml	Updates oxc-project/setup-rust to v1.0.9
.github/workflows/autofix.yml	Updates oxc-project/setup-rust to v1.0.9

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@shulaoda

## [1.0.0-beta.51] - 2025-11-19 ### 💥 BREAKING CHANGES - rolldown_plugin_vite_react_refresh_wrapper: add vite prefix (#7086) by @shulaoda - rolldown_plugin_vite_web_worker_post: add vite prefix (#7085) by @shulaoda - rolldown_plugin_vite_wasm_helper: add vite prefix (#7084) by @shulaoda - rolldown_plugin_vite_wasm_fallback: add vite prefix (#7083) by @shulaoda - rolldown_plugin_vite_transform: add vite prefix (#7082) by @shulaoda - rolldown_plugin_vite_reporter: add vite prefix (#7081) by @shulaoda - rolldown_plugin_vite_module_preload_polyfill: add vite prefix (#7080) by @shulaoda - rolldown_plugin_vite_manifest: add vite prefix (#7079) by @shulaoda - rolldown_plugin_vite_load_fallback: add vite prefix (#7072) by @shulaoda - rolldown_plugin_vite_json: add vite prefix (#7071) by @shulaoda - rolldown_plugin_vite_import_glob: add vite prefix (#7070) by @shulaoda - rolldown_plugin_vite_html_inline_proxy: add vite prefix (#7069) by @shulaoda - rolldown_plugin_vite_dynamic_import_vars: add vite prefix (#7068) by @shulaoda - rolldown_plugin_vite_build_import_analysis: add vite prefix (#7067) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: add vite prefix (#7066) by @shulaoda - rolldown_plugin_vite_alias: add vite prefix (#7065) by @shulaoda - rolldown_plugin_vite_asset_plugin: add vite prefix (#7064) by @shulaoda ### 🚀 Features - export sync APIs to experimental (#7122) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: implement template literal support for dynamic URLs (#7118) by @shulaoda - rolldown_plugin_vite_asset_import_meta_url: implement AST-based URL detection (#7113) by @shulaoda - add isPathFragment validation for filename patterns (rollup compat) (#7101) by @IWANABETHATGUY - rolldown_plugin_vite_asset_import_meta_url: align filter logic (#7103) by @shulaoda - rolldown: oxc v0.98.0 (#6961) by @camc314 - show error contexts for unhandleable errors (#7095) by @sapphi-red - rolldown_plugin_utils: extract `get_hash` utility function (#7059) by @shulaoda - rolldown_plugin_asset: initialize `CSSEntriesCache` (#7015) by @shulaoda - rolldown_plugin_vite_html: align `transformIndexHtml` logic (#7010) by @shulaoda - builtin-plugin: support `bindingifyViteHtmlPlugin` (#7008) by @shulaoda - impl `generatedCode.symbols` for reexport dynamic modules. (#6993) by @IWANABETHATGUY - rolldown_plugin_manifest: support v2 logic (#6979) by @shulaoda - support Node.js `module.exports` ESM export (#6967) by @Copilot - change "could not clean directory" from error to warning (#6955) by @Copilot - rolldown_binding: add context to errors thrown by plugin hooks (#6964) by @sapphi-red ### 🐛 Bug Fixes - content hash should be affected by the minify behavior (#7102) by @hyf0 - `canonical name not found for "__toESM"` error when only named imports are used from a CJS module (#7094) by @sapphi-red - preserve directory structure in chunk names with preserveModules (#6872) by @IWANABETHATGUY - rolldown_plugin_asset: correct bundle deletion index calculation (#7063) by @shulaoda - rolldown_plugin_utils: correct string slicing in `render_asset_url_in_js` (#7061) by @shulaoda - rolldown_plugin_vite_html: use transformed result in asset URL handling (#7060) by @shulaoda - rolldown_plugin_vite_html: skip redundant path resolution for processed URLs (#7058) by @shulaoda - rolldown_plugin_vite_css_post: data race in CSS URL processing (#7055) by @shulaoda - rolldown_plugin_vite_css_post: always compute css asset dirname in build command (#7054) by @shulaoda - rolldown_plugin_vite_css: ensure consistent url in import and export (#7053) by @shulaoda - rolldown_plugin_vite_css_post: use `get_or_insert_default` for `HTMLProxyResult` (#7052) by @shulaoda - rolldown_plugin_vite_css: skip `commonjs-proxy` CSS requests (#7050) by @shulaoda - rolldown_plugin_utils: correct `is_css_module` (#7049) by @shulaoda - rolldown_plugin_utils: correct `is_css_request` (#7048) by @shulaoda - rolldown_plugin_vite_html: use correct inline module index (#7046) by @shulaoda - rolldown_plugin_vite_html: correct scripts url update logic (#7045) by @shulaoda - rolldown_plugin_vite_html: fallback to original url on NotFound error (#7043) by @shulaoda - rolldown_plugin_vite_html: move src_tasks to correct branch (#7040) by @shulaoda - rolldown_plugin_vite_html: correct `handle_style_tag_or_attribute` (#7038) by @shulaoda - builtin-plugin: add `config` to `htmlInlineProxyPlugin` (#7036) by @shulaoda - missing CJS default export when SafelyMergeCjsNs optimization is enabled (#7006) by @Copilot - reserve global names before deconflicting external symbols (#7022) by @IWANABETHATGUY - rolldown_plugin_build_import_analysis: process all bundle outputs correctly (#7020) by @shulaoda - rolldown_plugin_vite_css_post: process all bundle outputs correctly (#7019) by @shulaoda - rolldown_plugin_vite_css_post: remove `/*$vite$:1*/` correctly (#7018) by @shulaoda - rolldown_plugin_vite_html: use correct span for `style_urls` (#7017) by @shulaoda - rolldown_plugin_vite_html: track full element span from start to end tag (#7016) by @shulaoda - builtin-plugin: correct `viteHtmlPlugin` related logic (#7013) by @shulaoda - remove unused module namespace object exporting (#7002) by @IWANABETHATGUY - rust/dev: allow to recover from hmr rebuild failure (#6991) by @hyf0 - rust/dev: `ensure_latest_bundle_output` shouldn't loop infinitely (#6974) by @hyf0 - rust/dev: `DevEngine#ensure_latest_bundle_output` should schedule a rebuild task if there're no queued tasks (#6968) by @hyf0 - add Symbol.toStringTag to module facades when generatedCode.symbols is enabled (#6784) by @Copilot ### 🚜 Refactor - extension checking to use constant array (#7057) by @Copilot - rust/devtools: tweak namings and introduction comments (#7028) by @hyf0 - rolldown_plugin_vite_html: use `root` instead of `cwd` (#7035) by @shulaoda - rolldown_plugin_vite_css_post: use `root` instead of `cwd` (#7034) by @shulaoda - rolldown_plugin_vite_css: use `root` instead of `cwd` (#7033) by @shulaoda - rolldown_plugin_transform: use `root` instead of `cwd` (#7032) by @shulaoda - rolldown_plugin_reporter: use `root` instead of `cwd` (#7031) by @shulaoda - rolldown_plugin_asset: use `root` instead of `cwd` (#7030) by @shulaoda - rolldown_plugin_html_inline_proxy: use `root` instead of `cwd` (#7029) by @shulaoda - rust/dev: remove dead code of `rolldown_dev` crate (#6997) by @hyf0 - rust: move dev related code into new `rolldown_dev` crate (#6996) by @hyf0 - rolldown_resolver: use consistent generic parameter name `Fs` (#6998) by @shulaoda - rolldown_resolver: improve resolve method clarity and documentation (#6986) by @shulaoda - rename `is_module_facade()` to `is_entry_point()` for clarity (#6994) by @IWANABETHATGUY - rust/dev: unwrap `Result<_>` from the return type of `BundleCoordinator::schedule_build_if_stale` (#6980) by @sapphi-red - rolldown_resolver: reorganize impl blocks (#6984) by @shulaoda - rolldown_resolver: extract configuration logic into separate module (#6983) by @shulaoda - rolldown_resolver: improve error messages (#6982) by @shulaoda - rust/dev: rename `CoordinatorStatus` to `CoordinatorStateSnapshot` (#6973) by @hyf0 - rust/dev: replace `InitialBuildState` with `CoordinatorState` (#6972) by @hyf0 - ast_scanner: derive `Debug`, `Clone`, `Copy` for `CjsGlobalAssignmentType` (#6971) by @camc314 - rust: filter out devtools specific events for normal tracing (#6965) by @hyf0 - rust/dev: replace `CoordinatorMsg::HasLatestBuildOutput` with `GetStatus` (#6960) by @hyf0 - rust/dev: `ensure_current_build_finish` shouldn't block the coordinator's event loop (#6959) by @hyf0 ### 📚 Documentation - in-depth/directives: remove TODOs and fix code (#7112) by @sapphi-red - clarify concepts of rolldown's test infra (#7047) by @hyf0 - contrib/style: add suggestions about choosing file names (#6989) by @hyf0 ### ⚡ Performance - rolldown_plugin_vite_css_post: cache CSS URL processing results (#7056) by @shulaoda - remove unnecessary `collect_vec` (#6999) by @IWANABETHATGUY ### 🧪 Testing - add testcase for #6880 and #6879 (#7107) by @IWANABETHATGUY - vite-tests: use integration branch for vite compatibility tests (#7091) by @shulaoda ### ⚙️ Miscellaneous Tasks - remove redundant chunk level linefeed (#7109) by @IWANABETHATGUY - pin oxc-minify to 0.97.0 (#7108) by @IWANABETHATGUY - deps: update oxc apps (#7104) by @renovate[bot] - deps: update glob for security (#7105) by @shulaoda - rolldown: add aliases for renamed vite plugins (#7087) by @shulaoda - automate weekly beta releases (#7089) by @Boshen - deps: update dependency oxlint-tsgolint to v0.7.0 (#7088) by @renovate[bot] - deps: update github-actions (#7075) by @renovate[bot] - deps: update dependency oxlint-tsgolint to v0.6.0 (#7037) by @renovate[bot] - deps: update npm packages (#7076) by @renovate[bot] - deps: update rust crates (#7077) by @renovate[bot] - add retry to flaky tests (#7041) by @sapphi-red - rust: rename `rolldown_debug` to `rolldown_devtools` (#7026) by @hyf0 - deps: update crate-ci/typos action to v1.39.2 (#7001) by @renovate[bot] - ai/github: make copilot review check rust api style (#6988) by @hyf0 - move test `recover_from_initial_build_error` to `error_recovery/from_initial_build_syntax_error` (#6990) by @hyf0 - oxlint: enable `typescript/consistent-type-imports` rule (#6987) by @shulaoda - deps: update crate-ci/typos action to v1.39.1 (#6975) by @renovate[bot] - build.ts: separate import type (#6921) by @iiio2 - format rolldown runtime (#6966) by @IWANABETHATGUY Co-authored-by: shulaoda <[email protected]>

renovate bot enabled auto-merge (squash) November 16, 2025 16:19

renovate-approve bot approved these changes Nov 16, 2025

View reviewed changes

renovate bot force-pushed the renovate/github-actions branch from c39686d to 8d982a6 Compare November 16, 2025 16:24

shulaoda self-assigned this Nov 16, 2025

renovate bot force-pushed the renovate/github-actions branch from 8d982a6 to 57dd51a Compare November 16, 2025 16:26

shulaoda marked this pull request as draft November 16, 2025 16:54

auto-merge was automatically disabled November 16, 2025 16:54
Pull request was converted to draft

renovate bot force-pushed the renovate/github-actions branch from 57dd51a to c5194f7 Compare November 16, 2025 17:10

shulaoda force-pushed the renovate/github-actions branch 2 times, most recently from 36857ff to e25e20d Compare November 16, 2025 17:25

chore(deps): update github-actions

a06f749

renovate bot force-pushed the renovate/github-actions branch from e25e20d to a06f749 Compare November 16, 2025 17:26

shulaoda marked this pull request as ready for review November 16, 2025 17:37

Copilot AI review requested due to automatic review settings November 16, 2025 17:37

shulaoda marked this pull request as draft November 16, 2025 17:37

Copilot started reviewing on behalf of shulaoda November 16, 2025 17:37 View session

Copilot finished reviewing on behalf of shulaoda November 16, 2025 17:38

Copilot AI reviewed Nov 16, 2025

View reviewed changes

shulaoda marked this pull request as ready for review November 16, 2025 17:39

renovate bot enabled auto-merge (squash) November 16, 2025 17:46

shulaoda disabled auto-merge November 16, 2025 18:13

shulaoda merged commit a29683a into main Nov 16, 2025
55 checks passed

shulaoda deleted the renovate/github-actions branch November 16, 2025 18:13

This was referenced Nov 18, 2025

release: v1.0.0-beta.51 #7106

Closed

release: v1.0.0-beta.51 #7121

Closed

release: v1.0.0-beta.51 #7124

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github-actions #7075

chore(deps): update github-actions #7075

Uh oh!

renovate bot commented Nov 16, 2025

Uh oh!

graphite-app bot commented Nov 16, 2025

Uh oh!

netlify bot commented Nov 16, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Nov 16, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): update github-actions #7075

chore(deps): update github-actions #7075

Uh oh!

Conversation

renovate bot commented Nov 16, 2025

Release Notes

v4.3.4

Release Notes

🚀 Features

🐛 Bug Fixes

⚙️ Internals

Install codspeed-runner 4.3.4

Install prebuilt binaries via shell script

Download codspeed-runner 4.3.4

v4.31.3

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

v1.0.9

What's Changed

v2.62.51

Configuration

Uh oh!

graphite-app bot commented Nov 16, 2025

How to use the Graphite Merge Queue

Uh oh!

netlify bot commented Nov 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for rolldown-rs canceled.

Uh oh!

github-actions bot commented Nov 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks Rust

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v4.3.4`

`v4.31.3`

`v1.0.9`

`v2.62.51`

netlify bot commented Nov 16, 2025 •

edited

Loading

github-actions bot commented Nov 16, 2025 •

edited

Loading