[dependabot]

Bumps the development-dependencies group with 17 updates:

Package	From	To
@changesets/cli	3.0.0	3.0.3
@playwright/test	1.61.1	1.64.1
@tanstack/intent	0.3.6	0.5.6
@types/semver	7.5.8	7.8.0
@vitejs/plugin-vue	6.0.1	6.0.10
concurrently	9.2.4	9.2.5
supabase	2.112.0	2.122.0
wrangler	4.114.0	4.152.0
tsdown	0.22.13	0.23.2
@tsconfig/node22	22.0.2	22.0.6
@types/node	22.17.2	22.20.5
sass-embedded	1.90.0	1.106.1
unocss	66.7.5	66.11.0
vite	7.3.6	7.3.7
vite-plugin-vue-devtools	8.0.0	8.2.1
sass	1.101.6	1.106.1
wxt	0.20.27	0.21.4

Updates @changesets/cli from 3.0.0 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

@​changesets/cli@​3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

@​changesets/cli@​3.0.1

Patch Changes

• #2239 fdfdc93 Thanks @​bluwy! - Update links in default generated .changeset/README.md file
• Updated dependencies [d0386b6]:
  • @​changesets/write@​1.0.1

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

3.0.1

Patch Changes

• #2239 fdfdc93 Thanks @​bluwy! - Update links in default generated .changeset/README.md file
• Updated dependencies [d0386b6]:
  • @​changesets/write@​1.0.1

Commits

• c9269c0 Version Packages (#2291)
• ca9d110 Fix pnpm 10 publishing with npm 12 (#2276)
• 7be7fde Build(deps): Bump the production-dependencies group across 1 directory with 6...
• b430ce0 Move e2e tests to an on-demand workspace (#2275)
• 93314a8 test: add happy path tests for add (#2289)
• d13a39e test: use inline snapshots for publish plan tests (#2284)
• d7e4a2d Version Packages (#2266)
• 68affee Upgrade to Vitest 5 (#2281)
• 5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
• a0a4dc6 Add review message on pre exit (#2270)
• Additional commits viewable in compare view

Updates @playwright/test from 1.61.1 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @tanstack/intent from 0.3.6 to 0.5.6

Release notes

Sourced from @​tanstack/intent's releases.

@​tanstack/intent@​0.5.6

Patch Changes

• #344 597771f - Skip redundant filesystem probes when scanning packages and rewriting skill load paths during intent list and intent load; behavior does not change.

• #345 fbabfec - Load validate and review command modules in intent maintainer only when the requested action uses them. maintainer setup, add, remove, and sync no longer evaluate the validation, example-checking, and review command bundles at startup; behavior does not change.

• #337 79d7cc2 - Make intent maintainer setup faster when a repository already has skills. Discovery and registration now share package context, checked paths, and parsed SKILL.md frontmatter across the batch instead of repeating them per skill; behavior does not change.

• #343 8b2e645 - Keep jsonc-parser's editing and formatting modules out of the shared project-context chunk so read-only commands (intent list, intent load, intent stale, and intent validate) do not load JSONC edit and format code on startup; behavior does not change.

• #341 1ff7b0f - Make intent stale reuse its per-run filesystem cache across target discovery, workspace enumeration, and skill-policy filtering, and compute each package's relative path to _artifacts once per package instead of once per artifact entry; behavior does not change.

• #336 da10e09 - Skip the _artifacts coverage scan in intent stale when a workspace package already has a generated SKILL.md. buildWorkspaceCoverageSignals checked whether each package had a generated skill and then still searched artifacts.skills before using that result; continuing as soon as a generated skill is found avoids scanning the artifact list for covered packages without changing reported signals.

• #340 cb45f14 - Make intent validate and intent repair reuse their per-run filesystem cache across project-context resolution, workspace discovery, and package.json reads instead of repeating those walks and reads within a single run; behavior does not change.

• #342 9400b3e - Spawn the TypeScript 7 tsgo compiler process from the parent directory in withNativeCompiler while keeping --cwd set to the project root, so Windows callers can remove or rename the checked directory immediately after intent validate or intent repair without hitting EPERM.

@​tanstack/intent@​0.5.5

Patch Changes

• #330 0365fc6 - Leave a SKILL.md that review.ignore matches out of the skills that review and maintainer setup discover. A Claude Code plugin kept beside the library, such as plugins/<name>/skills/, was reviewed as a library skill and reported No source paths declared, and maintainer setup registered it. A skill that the tree declares is still reviewed.

@​tanstack/intent@​0.5.4

Patch Changes

• #324 755bd33 - Make the installed package 28 kB smaller by bundling yaml from its ES module build instead of its CommonJS build. A YAML warning, such as an unresolved tag in skill frontmatter, is now written to stderr by console.warn, with a stack trace; before, it went through process.emitWarning, and intent list and intent stale exited before Node printed it. The LOG_STREAM and LOG_TOKENS environment variables no longer make the YAML parser print its tokens to stdout.

• #322 71cd72c - Start each command faster. The command-line parser processed the arguments one time for each registered command; Intent now gives it only the command being run. A call saves between 0.1 and 0.2 ms.

• #314 29ac2d1 - Print the installed version for intent --version. The CLI had no version flag, so it printed the help text and exited with code 1. It now prints the version alone and exits with code 0.

• #325 594fd9d - Stop shipping a type declaration file for the CLI entry. Nothing could import dist/cli.d.mts, so the installed package is 2,655 bytes smaller. The types for @tanstack/intent and @tanstack/intent/core do not change.

• #319 9d8a463 - Add fence properties that control how intent validate checks one code example. no-check after the language skips a fragment that is not a complete source file. expect-error requires the example to report an error, and expect-error=TS2322 requires that error code, so a deliberately wrong example fails validation once it compiles.

• #326 cd5a024 - Write the command parser in the hook script as fixed text, so the script content no longer changes with the build tooling. Hook behavior does not change. The next intent hooks install rewrites the installed script once and reports Updated Intent hooks; later runs report no changes.

• #313 39d2af8 - Allow workspace packages to register skills with the same name. intent maintainer commands failed with Duplicate skill identity or path in a monorepo where two packages each had, for example, a getting-started skill; a skill name is now unique within its owning package, a prerequisite name refers to a skill in the same package, and maintainer remove <name> accepts --package <directory> when more than one package registers the name.

• #317 894ab61 - Recognize a skill_tree.yaml entry whose path repeats its package directory. intent maintainer status and check reported every such skill as Missing skill although the file existed; they now find the skill and list the tree as a file to synchronize, and intent maintainer sync rewrites the path relative to the package.

• #315 f7619bf - Report intent.skills entries that name a skill the package does not ship. An exact entry such as @tanstack/query#fetching yielded no skill and no message when the installed package had removed or renamed that skill; Intent now reports the entry as not discovered.

• #323 5a0ec60 - Make the installed package 35 kB smaller. intent stale now bundles only the semver functions it uses instead of the whole library; behavior does not change.

• #310 c16a6a8 - Stop intent stale from reporting artifact library version drift for a skill whose library_version matches the current version of its own package. Monorepos that version packages independently no longer get this false warning, and a review signal raised by more than one artifact file now prints once in the text output.

• #327 a7c93e0 - Make the installed package 16 kB smaller and load fewer files in each command. intent validate and intent stale imported modules a second time through a deferred import, although the same files had already loaded them. Those modules are now imported directly, so the bundle keeps only the parts of yaml that Intent uses; behavior does not change.

... (truncated)

Commits

• b9f205d ci: changeset release (#339)
• fbabfec perf: defer validate and review imports in maintainer command (#345)
• 597771f perf: skip redundant filesystem probes during discovery and load path rewriti...
• 8b2e645 perf: split jsonc-parser edit and format out of project-context (#343)
• 9400b3e fix: make Windows unit and integration test suites pass under test:pr (#342)
• 1ff7b0f perf: hoist relative package paths and reuse project context in intent stale ...
• cb45f14 perf: share the filesystem cache across validate and repair (#340)
• 79d7cc2 perf: share package context, path checks, and frontmatter across maintainer b...
• da10e09 perf: skip artifact coverage scan when a workspace package has a generated sk...
• ab9877c chore(deps): update dependency smol-toml@<=1.7.0 to v1.9.0 [security] (#334)
• Additional commits viewable in compare view

Updates @types/semver from 7.5.8 to 7.8.0

Commits

• See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.1 to 6.0.10

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.10

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.9

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.8

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

• plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)
• plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

• plugin-vue: clarify compiler initialization hooks (55d0cab)

6.0.9 (2026-09-14)

Bug Fixes

• deps: update all non-major dependencies (#812) (b2b559d)
• plugin-vue: initialize compiler correctly (#475) (127b03f)
• plugin-vue: transpile TS in templates with empty script block (#838) (189148e)

Miscellaneous Chores

• deps: update dependency obug to v3 (#846) (3180192)

6.0.8 (2026-07-14)

Features

• plugin-vue: add forced vapor mode option (#766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#781) (d369e5a)

6.0.7 (2026-05-15)

Features

• use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#762) (9e825b8)
• deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

... (truncated)

Commits

• a03675e release: plugin-vue@6.0.10
• 7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)
• ccc06dd fix(plugin-vue): correct AST reuse checks and allow Vue 3.6 RC
• 55d0cab docs(plugin-vue): clarify compiler initialization hooks
• 822c69d release: plugin-vue@6.0.9
• 127b03f fix(plugin-vue): initialize compiler correctly (#475)
• 3180192 chore(deps): update dependency obug to v3 (#846)
• 189148e fix(plugin-vue): transpile TS in templates with empty script block (#838)
• b2b559d fix(deps): update all non-major dependencies (#812)
• d8ff7d0 release: plugin-vue@6.0.8
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-vue since your current version.

Updates concurrently from 9.2.4 to 9.2.5

Release notes

Sourced from concurrently's releases.

v9.2.5

What's Changed

• deps: update shell-quote to 1.12.0 by @​Abicodexi and @​Mayvis in open-cli-tools/concurrently#622

Full Changelog: open-cli-tools/concurrently@v9.2.4...v9.2.5

Commits

• 4fb52e2 9.2.5
• dac54d0 deps: update shell-quote to 1.12.0 (#622)
• See full diff in compare view

Updates supabase from 2.112.0 to 2.122.0

Release notes

Sourced from supabase's releases.

v2.122.0

Supabase CLI v2.122.0 — 2026-10-23

This release is mostly fixes. The headline changes are supabase/supabase.lock for pinning stack service versions, PGSSL* and TLS settings now reaching db push --linked and pg_dump, and clearer config parse errors. Several fixes cover start/stop on Podman and stack reliability.

Highlights

• Pin stack service versions in a lock file — stack mode can run any published service version, match your hosted project after supabase link, and reproduce the whole local stack from a committed supabase/supabase.lock. (#7195)
• Postgres TLS settings now apply to db push --linked and pg_dump — PGSSLMODE, PGSSLROOTCERT, and PGSSLCERT/PGSSLKEY are read from your shell on direct connections, and remote db dump and the first db pull pass the resolved TLS settings through. Before, verify-full was ignored and client-cert servers rejected the dump. (#7261, #7266)

New features

• supabase --help shows token permissions — every command's help now has a PERMISSIONS section listing the personal access token permissions it needs, so you can scope tokens for CI without guessing. (#7268)
• supabase stack can run any published service version — the lock file (see Highlights) also lets you try a hotfix or match production versions. (#7195)

Improvements

• Config errors say what's wrong and where — start, status, stop, and functions serve used to print a bare CliConfigParseError. They now point to the bad line. inf and nan numbers are rejected at load time instead of slipping through. (#7267)
• Heads-up: the default target is changing — the CLI now warns before the upcoming switch to a local default target. Check your scripts if you rely on the current default. (#7186)
• db pull and pg_dump honor TLS config — see Highlights. (#7266)

Bug fixes

• supabase start and stop no longer fail every few runs on Podman — when there's no docker on PATH (macOS with podman machine), you no longer hit failed to inspect docker image or ssh: handshake failed: EOF. (#7270)
• supabase stop --no-backup no longer exits 1 with older Docker CLIs — it works with Docker CLI older than 23.0 talking to a newer daemon. (#7177)
• Piping CLI output into head or another reader that exits early exits cleanly — the CLI used to crash with Unknown: Stdio.stdout (exit 1), and with --output json it could hang forever. It now exits 0. (#7175)
• db diff --from linked --to linked no longer fails without a database password — it used to fail with password authentication failed for user "cli_login_postgres" when no password was set via --password, SUPABASE_DB_PASSWORD, or supabase/.env. (#7139)
• functions deploy --use-api uploads multiline dynamic imports — functions with import( split across lines, or with import attributes, no longer throw Module not found after deploy. (#7282)
• supabase init test OTP example works — the [auth.sms.test_otp] example now includes the country code, so +14152127777 gets the test code instead of sending a real SMS. (#7279)
• Stack: concurrent native stacks no longer share a backend port — two stacks started at once could bind Logflare to the same private port. (#7184)
• Stack: idle gateway connections stay open for 75 s — a short pause between API calls no longer ends in TypeError: fetch failed. (#7193)
• Stack: local Studio logs work again — analytics is pinned to Logflare 1.50.15, so logs pages no longer show "Backend error". (#7182)
• Stack: rest starts when a db_pre_request hook rejects requests without an app header — it used to hang on readiness. (#7216)
• Stack: native launches are more reliable — the launcher waits for a cache lock instead of failing, and Realtime waits for its own bind line before it's marked ready. (#7145)

Internal

Plus 6 internal improvements and dependency updates.

Full changelog: supabase/cli@v2.121.0...v2.122.0

v2.122.0-beta.15

No release notes provided.

v2.122.0-beta.14

No release notes provided.

v2.122.0-beta.13

No release notes provided.

... (truncated)

Commits

• 5afad87 docs(cli): refresh db pull overlay for pg-delta (#6557)
• d50b53f test(cli): fix 1 flaky test in live branch create (#7256)
• d7d7266 ci(cli): retry on the OCI toomanyrequests error code when detecting unmirrore...
• 531c926 chore(stack): bump postgres to 15.19.0.007-r0 (#7291)
• 7a6fd00 feat(cli): honor tls settings in pg_dump (CLI-2753) (#7266)
• ce77899 ci(cli): retry rate-limited registry probes when detecting unmirrored images ...
• 522a516 chore(stack): bump storage to v1.84.19-r0 (#7284)
• 37e309e chore(cli): bump pg-delta to 1.0.0-alpha.60 (#7283)
• e76408c fix(cli): upload multiline dynamic imports on deploy (CLI-2827) (#7282)
• 2e9975e fix(cli): add the country code to the test_otp example (CLI-2820) (#7279)
• Additional commits viewable in compare view

Updates wrangler from 4.114.0 to 4.152.0

Release notes

Sourced from wrangler's releases.

wrangler@4.151.3

Patch Changes

• #15611 4508172 Thanks @​taylorlee! - Allow wrangler dev to start module Workers without a default export

  Previously, wrangler dev failed to start module Workers that exported only named entrypoints, such as RPC services, unless an unused default export was added. These Workers now start normally in local development without that workaround.

• #16370 61fc739 Thanks @​WalshyDev! - Fetch the remote config diff from the configured compliance region

  When a Worker was last deployed from the dashboard, wrangler deploy and wrangler versions upload download its remote configuration to compare with the local one. These requests ignored the compliance_region field in the Wrangler configuration file and only honoured the CLOUDFLARE_COMPLIANCE_REGION environment variable. A FedRAMP High Worker configured through the config file would send them to api.cloudflare.com instead of api.fed.cloudflare.com, and the deploy would fail with authentication errors. They now use the same compliance region as the rest of the deploy.

• #15846 a88cac4 Thanks @​oddharsh! - Fail with an error instead of hanging when local dev requests can't work under Bun

  Bun's fetch() ignores the undici dispatcheroven-sh/bun#39247createTestHarness()'s server.fetch() and server.getWorker()'s fetch(), email() and scheduled() now throw a UserError, requests to the dev server URL get a 503 naming the cause, and starting remote bindings throws a UserError. Each of these used to hang with no error. server.getWorker().getEnv() and getExport() keep working under Bun.

• #16359 262021d Thanks @​tw4! - Stop --strict deploys and version uploads from aborting when the API omits optional binding fields

  Previously, wrangler deploy --strict and wrangler versions upload --strict could report a destructive change for an unchanged configuration, for example an R2 bucket in the default jurisdiction, because a field the API left out was compared as removed. Missing and unset optional fields are now treated as equal, so these commands proceed when the local configuration matches the deployed Worker.

• Updated dependencies [3464abc]:

  • miniflare@5.20261019.1-beta

wrangler@4.151.2

Patch Changes

• #16307 37ab91c Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261006.1	^5.20261016.1
  workerd	1.20261012.1	1.20261016.1

• #16352 0ae7926 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261016.1	^5.20261019.1
  workerd	1.20261016.1	1.20261019.1

• Updated dependencies [37ab91c, 0ae7926]:

  • miniflare@5.20261019.0-beta

wrangler@4.151.1

Patch Changes

• #15541 e13d5cc Thanks @​mack-erel! - Keep remote dev sessions alive through transient network failures

... (truncated)

Commits

• See full diff in compare view

Updates tsdown from 0.22.13 to 0.23.2

Release notes

Sourced from tsdown's releases.

v0.23.2

   🚀 Features

• Add JSON schema for config  -  by @​Sandbye and @​sxzz in rolldown/tsdown#1074 (2410e)

   🐞 Bug Fixes

• css: Respect Lightning CSS modules options  -  by @​sxzz in rolldown/tsdown#1103 (490ec)

    View changes on GitHub

v0.23.1

   🐞 Bug Fixes

• Preserve false tsconfig option  -  by @​Masutayunikon in rolldown/tsdown#1065 (407f8)
• entry: Honor custom root for object entry  -  by @​giaBaoJS in rolldown/tsdown#1072 (17452)
• pkg: Pack tarball inside npm publish --dry-run  -  by @​giaBaoJS in rolldown/tsdown#1076 (83f0c)

    View changes on GitHub

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

• config:
  • bundle: false → unbundle: true; bundle: true can be removed
  • outExtension → outExtensions
  • publicDir / --public-dir → copy / --copy
  • removeNodeProtocol: true → nodeProtocol: 'strip'
  • injectStyle → css.inject
• deps:
  • inlineOnly / deps.onlyAllowBundle → deps.onlyBundle
  • skipNodeModulesBundle: true → deps.neverBundle: true
  • resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior
• dts:
  • rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5
  • dts.oxc: true → dts.generator: 'oxc'
  • dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators
  • dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins
  • Custom languages, including vue, now throw when combined with an incompatible generator
  • dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass
• attw:
  • The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks
• programmatic API:
  • build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()
• requirements:
  • Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0
  • rolldown-plugin-dts now requires Rolldown 1.2.x
  • Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

... (truncated)

Commits

• 3c0c854 chore: release v0.23.2
• 76fbfbf chore: upgrade deps
• 490ecd6 fix(css): respect Lightning CSS modules options (#1103)