Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 25, 2025

Bumps the compiling group with 2 updates in the / directory: @minify-html/node and rolldown.

Updates @minify-html/node from 0.16.4 to 0.18.1

Changelog

Sourced from @​minify-html/node's changelog.

0.18.1

  • Fix WASM builds.

0.18.0

  • Fix WASM builds.
  • [Java] BREAKING: Minimum Java version increased from 7 to 8.

0.17.1

  • Bump Ubuntu version for GitHub Actions.

0.17.0

  • [Node.js] BREAKING: Minimum Node.js version increased from 8.6.0 to 10.0.0.
  • [Ruby] BREAKING: Minimum Ruby version increased from 2.7 to 3.2.
  • Replace minify-js with oxc_minifier for JavaScript minification.
  • [Python] Add musl builds for Linux.
  • Bump Windows version for GitHub Actions.
  • Migrate to Central Portal for Java.

0.16.5

  • Bump Java version for GitHub Actions.
  • [CLI] Add missing exit status on I/O errors.
  • [Internal] Loosen ahash dependency version.
  • [Internal] Bump lightningcss.
  • [Python] Add Python 3.14 support.
Commits

Updates rolldown from 1.0.0-beta.53 to 1.0.0-beta.56

Release notes

Sourced from rolldown's releases.

v1.0.0-beta.56

[1.0.0-beta.56] - 2025-12-22

✨ Support importerId hook filter

  • The hook filter supports filtering by importer ID
  • Useful when you only want to handle imports from specific modules
import { defineConfig } from 'rolldown';
import { importerId, include } from '@rolldown/pluginutils';
export default defineConfig({
input: ['./index.ts'],
plugins: [{
name: 'my-plugin',
resolveId: {
filter: [include(importerId(/main.js$/))],
handler(id, importer) {
// ...
},
},
}],
});

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.0.0-beta.56] - 2025-12-22

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 18ac822 release: v1.0.0-beta.56 (#7620)
  • a5124fa fix(types): better "go to definition" experience for interface OutputPlugin...
  • c6babdd fix: use sanitized filename for preserve modules chunk name (#7603)
  • 006b25d chore(deps): update notify (#7594)
  • f7863c4 feat: add ids property to CIRCULAR_DEPENDENCY error (#7591)
  • 52ed0ae chore: add JSDoc documentation for memfs type (#7587)
  • db6b40b feat(node/dev): expose devMode.lazy (#7549)
  • f3fb807 fix: make cleanDir work with default output directory (#7579)
  • 640c76f chore(deps): update oxc resolver to v11.16.0 (#7574)
  • 517f29d feat: set log and pos properties for parseAst function errors (#7568)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies [Dependabot Only] Pull requests that update a dependency file javascript [Dependabot Only] Pull requests that update Javascript code labels Dec 25, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 25, 2025 17:30
@dependabot dependabot bot added the javascript [Dependabot Only] Pull requests that update Javascript code label Dec 25, 2025
@vercel
Copy link

vercel bot commented Dec 25, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
api-docs-tooling Error Error Dec 25, 2025 10:39pm

@codecov
Copy link

codecov bot commented Dec 25, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.12%. Comparing base (f14b31c) to head (099aa7a).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #534   +/-   ##
=======================================
  Coverage   80.12%   80.12%           
=======================================
  Files         123      123           
  Lines       12142    12142           
  Branches      856      856           
=======================================
  Hits         9729     9729           
  Misses       2410     2410           
  Partials        3        3           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link

api-links Generator

apilinks.json
Expected values to be strictly deep-equal:
+ actual - expected
... Skipped lines

  {
    'Agent.defaultMaxSockets': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L227',
    'Buffer.alloc': 'https://github.com/nodejs/node/tree/HEAD/lib/buffer.js#L403',
    'Buffer.allocUnsafe': 'https://github.com/nodejs/node/tree/HEAD/lib/buffer.js#L417',
    'Buffer.allocUnsafeSlow': 'https://github.com/nodejs/node/tree/HEAD/lib/buffer.js#L429',
...
    'agent.addRequest': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L292',
+   'agent.createConnection': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L231',
-   'agent.createConnection': 'https://github.com/nodejs/node/tree/HEAD/lib/https.js#L326',
    'agent.createSocket': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L363',
    'agent.destroy': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L595',
+   'agent.getName': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L261',
-   'agent.getName': 'https://github.com/nodejs/node/tree/HEAD/lib/https.js#L484',
    'agent.keepSocketAlive': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L552',
    'agent.removeSocket': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L491',
    'agent.reuseSocket': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_agent.js#L588',
    'assert.assert': 'https://github.com/nodejs/node/tree/HEAD/lib/assert.js#L185',
    'asyncResource.asyncId': 'https://github.com/nodejs/node/tree/HEAD/lib/async_hooks.js#L229',
...
    'server.address': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2221',
+   'server.close': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L611',
+   'server.closeAllConnections': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L621',
+   'server.closeIdleConnections': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L633',
-   'server.close': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2354',
-   'server.closeAllConnections': 'https://github.com/nodejs/node/tree/HEAD/lib/https.js#L120',
-   'server.closeIdleConnections': 'https://github.com/nodejs/node/tree/HEAD/lib/https.js#L122',
    'server.getConnections': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2316',
    'server.listen': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2038',
    'server.ref': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2459',
+   'server.setTimeout': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L649',
-   'server.setTimeout': 'https://github.com/nodejs/node/tree/HEAD/lib/https.js#L124',
    'server.unref': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2468',
+   'server[SymbolAsyncDispose]': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L617',
+   'server[undefined]': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L656',
-   'server[SymbolAsyncDispose]': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2394',
-   'server[undefined]': 'https://github.com/nodejs/node/tree/HEAD/lib/net.js#L2423',
    'serverresponse._finish': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L244',
    'serverresponse._implicitHeader': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L351',
    'serverresponse.assignSocket': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L294',
    'serverresponse.detachSocket': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L305',
    'serverresponse.statusCode': 'https://github.com/nodejs/node/tree/HEAD/lib/_http_server.js#L267',

Bumps the compiling group with 2 updates in the / directory: [@minify-html/node](https://github.com/wilsonzlin/minify-html) and [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown).


Updates `@minify-html/node` from 0.16.4 to 0.18.1
- [Release notes](https://github.com/wilsonzlin/minify-html/releases)
- [Changelog](https://github.com/wilsonzlin/minify-html/blob/master/CHANGELOG.md)
- [Commits](wilsonzlin/minify-html@v0.16.4...v0.18.1)

Updates `rolldown` from 1.0.0-beta.53 to 1.0.0-beta.56
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-beta.56/packages/rolldown)

---
updated-dependencies:
- dependency-name: "@minify-html/node"
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compiling
- dependency-name: rolldown
  dependency-version: 1.0.0-beta.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compiling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/compiling-401895e96d branch from 7b04175 to 099aa7a Compare December 25, 2025 22:39
@ovflowd
Copy link
Member

ovflowd commented Dec 25, 2025

@nodejs/web-infra something is really broken with this new version of minify html. Can y'all investigate?

@MattIPv4
Copy link
Member

MattIPv4 commented Dec 25, 2025

Error: /lib64/libm.so.6: version 'GLIBC_2.35' not found (required by /vercel/path0/node_modules/@minify-html/node-linux-x64/index.node)

@MattIPv4
Copy link
Member

I imagine we're going to need to use a custom build command on Vercel to install a newer version of C?

@ovflowd
Copy link
Member

ovflowd commented Dec 25, 2025

I imagine we're going to need to use a custom build command on Vercel to install a newer version of C?

This is so weird? Why would this lib require a specific version of C? Why isn't it using node-gyp if it needs bindings? I'd probably recommend an alternative library actually.

@MattIPv4
Copy link
Member

This is so weird? Why would this lib require a specific version of C? Why isn't it using node-gyp if it needs bindings?

Beyond me, but looks like they're shipping pre-built .node files in arch-specific packages. It does look like the main package will try a local build if there is one in the package, but we'd need to clone the package's source to build that.

I'd probably recommend an alternative library actually.

I'm +1 to that given this library is doing some funky stuff with dependencies, but defer to folks that know this repo better as to what would be a suitable replacement.

@avivkeller
Copy link
Member

@avivkeller
Copy link
Member

TL;DR Amazon's Lambda is out of date 😢

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies [Dependabot Only] Pull requests that update a dependency file javascript [Dependabot Only] Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants