fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
publint (source)	^0.3.23 → ^0.3.24
rolldown (source)	^1.2.4 → ^1.2.5

---

Release Notes

publint/publint (publint)

v0.3.24

Compare Source

Patch Changes

• #​257 7c4d25a - Check the repository.url value even when repository.type is omitted. type is optional and defaults to git, so packages using the object form without it were previously skipped for the deprecated-protocol, invalid-git-url, and shorthand-URL checks.

rolldown/rolldown (rolldown)

v1.2.5

Compare Source

🚀 Features

• bench: record per-suite peak memory in the node benchmark (#​10704) by @​IWANABETHATGUY
• binding: allocation-tracking global allocator behind the tracking_allocator feature (#​10703) by @​IWANABETHATGUY
• add armv7 android (armv7-linux-androideabi) support (#​10691) by @​shulaoda
• add NAMESPACE_CONFLICT warning for conflicting star re-exports (#​7452) by @​AliceLanniste

🐛 Bug Fixes

• rolldown_plugin_vite_reporter: avoid ANSI erase-line escape in non-TTY output (#​10692) by @​shulaoda
• rolldown_plugin_vite_resolve: preserve Yarn PnP virtual importer (#​10591) by @​Freakazo
• exclude hash placeholders from case-insensitive filename deconfliction (#​10590) by @​Nic-Polumeyv
• code-splitting: fold already-loaded side-effectful libraries into eager entries (#​10645) by @​JoviDeCroock
• dev: flush re-emitted assets when their content changes (#​10637) by @​btea
• renamer: rename nested require/__filename/__dirname bindings in CJS output (#​10655) by @​marcoroth
• silence two wasm-only warnings (#​10668) by @​IWANABETHATGUY

🚜 Refactor

• skip case folding for filenames with hash placeholders (#​10689) by @​hyfdev
• code-splitting: remove redundant synthetic statement owner (#​10503) by @​hyfdev
• renamer: move the cjs check into rename_bindings_shadowing_cjs_ambient_names (#​10672) by @​IWANABETHATGUY

📚 Documentation

• agents: point the never-edit list at the binding files that exist (#​10719) by @​melbinjp

🧪 Testing

• deconflict: pin renaming the external process binding away from the global (#​10702) by @​hyfdev
• dev: expect a hot update across a circular import (#​10700) by @​hyfdev

⚙️ Miscellaneous Tasks

• deps: upgrade oxc to 0.146.0 (#​10707) by @​Boshen
• deps: update rust crates (#​10684) by @​renovate[bot]
• deps: update npm packages (#​10685) by @​renovate[bot]
• build the benchmark comparison window from the JSON lines (#​10701) by @​IWANABETHATGUY
• wasi: retry the Node Test step to absorb the shared-dlmalloc flake (#​10699) by @​hyfdev
• append benchmark results to storage as JSON lines (#​10682) by @​IWANABETHATGUY
• deps: update github actions (#​10683) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.2 (#​10679) by @​renovate[bot]
• deps: update dependency rolldown-plugin-dts to v0.28.1 (#​10674) by @​renovate[bot]

❤️ New Contributors

• @​melbinjp made their first contribution in #​10719
• @​Freakazo made their first contribution in #​10591
• @​marcoroth made their first contribution in #​10655

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.