chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@actions/core (source)	3.0.0 → 3.0.1
@napi-rs/wasm-runtime (source)	1.1.1 → 1.1.4
emnapi	1.8.1 → 1.10.0
enhanced-resolve	5.19.0 → 5.21.0
lint-staged	16.2.7 → 16.4.0
prettier (source)	3.8.1 → 3.8.3

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

actions/toolkit (@​actions/core)

v3.0.1

• Bump undici from 6.23.0 to 6.24.1 #​2348

napi-rs/napi-rs (@​napi-rs/wasm-runtime)

v1.1.4

Compare Source

Bug Fixes

• wasm-runtime: preserve full bigint values in fs proxy codec (#​3233) (0cb8eef)

v1.1.3

Compare Source

Note: Version bump only for package @​napi-rs/wasm-runtime

v1.1.2

Compare Source

Bug Fixes

• ensure emnapi version is synced (#​3151) (bc728d0)

toyobayashi/emnapi (emnapi)

v1.10.0

Compare Source

What's Changed

• fix: early update wasm memory for views (https://github.com/hardfist/emnapi-shared-memory-grow-repro)
• fix!: napi_adjust_external_memory no longer grow wasm memory
• fix: add missing from64 wrap
• fix: coalesce tsfn (js version) send message
• ci: restructure CI workflows
• ci: prebuilt liraries using llvm 22

Thanks @​hardfist

Full Changelog: toyobayashi/emnapi@v1.9.2...v1.10.0

v1.9.2

Compare Source

What's Changed

• fix: allow maximum memory 4GB by @​toyobayashi in #​205

Full Changelog: toyobayashi/emnapi@v1.9.1...v1.9.2

v1.9.1

Compare Source

fix for emscripten 5.0.3
emscripten-core/emscripten@3051725

Full Changelog: toyobayashi/emnapi@v1.9.0...v1.9.1

v1.9.0

Compare Source

What's Changed

• fix data race and use-after-free in napi_threadsafe_function by @​toyobayashi in #​199
  • fix tsfn not work in JS based async_work workers
  • fix pthread_create not work in JS based async_work workers
  • emnapi_basic[-mt].a includes libuv symbols now
• refactor: dispatch async work queue in shared memory by @​toyobayashi in #​200
  • Avoids deadlock when main thread block on waiting queued async work starting. Completed work can not be dispatched to main thread that cause no new worker available, then queued work never start.
  • wasm32-wasip1-threads target spawn async worker in JS will use pthread_create, no longer maintain a separate worker pool.
• rename node_api_create_object_with_properties by @​toyobayashi in #​193
• fix: execute tsfn finalizer after queue drains when aborted
• feat: add required config hint in package entry

  const { requiredConfig } = require('emnapi')
  console.log(requiredConfig.clang.wasmld)

  [
    '--import-memory',
    '--shared-memory',
    '--export-table',
    '--export=malloc',
    '--export=free',
    '--export=napi_register_wasm_v1',
    '--export-if-defined=node_api_module_get_api_version_v1',
    '--export=emnapi_thread_crashed',
    '--export-if-defined=emnapi_async_worker_create',
    '--export-if-defined=emnapi_async_worker_init'
  ]
  

Full Changelog: toyobayashi/emnapi@v1.8.1...v1.9.0

webpack/enhanced-resolve (enhanced-resolve)

v5.21.0

Compare Source

Minor Changes

• Added promise API and support to resolve without context and resolveContext. (by @​alexander-akait in #​520)

• Add extensionAliasForExports option. When true, extensionAlias also applies to paths resolved through the package.json exports field. Off by default to match Node.js; opt in for full TypeScript-resolver parity with packages that ship .ts sources alongside the compiled .js they declare in exports. (by @​alexander-akait in #​554)

Patch Changes

• Properly handle DOS device paths (\\?\… and \\.\…). (by @​alexander-akait in #​551)

• Prevent fallback to parent node_modules when the exports field target file is not found. (by @​xiaoxiaojx in #​495)

• Imports field spec deviation: non-relative targets (e.g. "#a": "#b") no longer re-enter imports resolution, aligning with the Node.js ESM spec where PACKAGE_IMPORTS_RESOLVE does not recursively resolve # specifiers. (by @​xiaoxiaojx in #​503)

  Previously { "#a": "#b", "#b": "./the.js" } would chain-resolve #a to ./the.js; now it correctly fails, matching Node.js behavior.

• Move cachedJoin/cachedDirname/createCachedBasename caches from module-level globals to per-Resolver instances. This prevents unbounded memory growth in long-running processes — when a Resolver is garbage collected, its join/dirname/basename caches are released with it. (by @​xiaoxiaojx in #​507)

• Fixed when tsconfig: true is used (default config file) and no tsconfig.json exists. (by @​xiaoxiaojx in #​502)

• Apply the extensionAlias option to the imports field to be align with typescript resolution. (by @​alexander-akait in #​549)

• Improved performance of the many plugins. (by @​alexander-akait in #​529)

• Replace the Set<string>-based resolver stack with a singly-linked StackEntry class that exposes a Set-compatible API. (by @​xiaoxiaojx in #​526)

  Each doResolve call now prepends a single linked-list node instead of cloning the entire Set, making stack push O(1) in time and memory. Recursion detection walks the linked list (O(n)), but because the stack is typically shallow this is much cheaper than cloning a Set per call.

• Cache the result of stripJsonComments + JSON.parse in readJson using a WeakMap keyed by the raw file buffer. This avoids redundant comment-stripping and JSON parsing on every resolve call that reads tsconfig.json files (via stripComments: true), improving TsconfigPathsPlugin warm performance by ~20-35% depending on the depth of the extends chain. (by @​xiaoxiaojx in #​524)

• Avoid OOM in CachedInputFileSystem when duration is Infinity. (by @​alexander-akait in #​527)

v5.20.1

Compare Source

Patch Changes

• Optimize TsconfigPathsPlugin and fix extends resolution bugs. (by @​alexander-akait in #​492)

• Improve resolver cache hit rate. (by @​alexander-akait in #​492)

v5.20.0

Compare Source

Features

• Added the baseUrl option to override the tsconfig.json's baseUrl
• Enabled trailing commas support for JSONC

Fixes

• Detect circular extends to prevent infinite loop in tsconfig.json
• Support JSONC comments in tsconfig.json

lint-staged/lint-staged (lint-staged)

v16.4.0

Compare Source

Minor Changes

• #​1739 687fc90 Thanks @​hyperz111! - Replace micromatch with picomatch to reduce dependencies.

v16.3.4

Compare Source

Patch Changes

• #​1742 9d6e827 Thanks @​iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

v16.3.3

Compare Source

Patch Changes

• #​1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

v16.3.2

Compare Source

Patch Changes

• #​1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

v16.3.1

Compare Source

Patch Changes

• #​1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Compare Source

Minor Changes

• #​1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #​1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #​1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed-hq]

Merging this PR will improve performance by 29.77%

⚡ 1 improved benchmark
✅ 11 untouched benchmarks

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
⚡	Memory	resolver[resolve from symlinks multi thread]	730.3 KB	562.7 KB	+29.77%

---

_{Comparing renovate/npm-packages (4eb3b83) with main (e5cbe7d)}