chore(deps): update all non-major devdependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
oxlint (source)	1.70.0 → 1.71.0
rollup (source)	4.62.0 → 4.62.2
smol-toml	1.6.1 → 1.7.0

---

Release Notes

oxc-project/oxc (oxlint)

v1.71.0

Compare Source

🚀 Features

• 0dc2405 linter: Add schema for eslint/no-restricted-properties (#​23619) (Sysix)
• b638d0e linter: Add schema for node/callback-return (#​23615) (Sysix)
• eb8bedc linter: Add schema for import/extensions (#​23557) (WaterWhisperer)
• 46f3625 linter: Implement node/no-sync rule (#​23589) (fujitani sora)
• b01739a linter: Add schema for unicorn/numeric-separators-style (#​23554) (Mikhail Baev)
• 68afd2a linter/node: Implement no-mixed-requires rule (#​23539) (fujitani sora)
• a421215 linter: Add schema for eslint/prefer-destructuring (#​23410) (WaterWhisperer)
• 84438be linter/jsdoc: Added missing options to require-param-description (#​23416) (kapobajza)
• 51910df linter/jsdoc: Add missing options to require-param-type rule (#​23418) (kapobajza)
• e90925f linter/unicorn: Implement prefer-number-coercion rule (#​23497) (Shekhu☺️)
• dd1c866 linter/vue: Implement no-async-in-computed-properties rule (#​23493) (bab)
• b02444e linter: Add schema for react/jsx-no-script-url (#​23475) (WaterWhisperer)
• a8dce46 linter/unicorn: Implement max-nested-calls rule (#​23461) (arieleli01212)

🐛 Bug Fixes

• a303c23 linter/jsx-a11y: Align anchor-is-valid config with upstream (#​23446) (camc314)

📚 Documentation

• b50bf4d linter: Remove manually written options doc for eslint/arrow-body-style (#​23490) (Mikhail Baev)

rollup/rollup (rollup)

v4.62.2

Compare Source

2026-06-19

Bug Fixes

• Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#​6411)

Pull Requests

• #​6411: Skip side-effect-free external imports when hoisting is disabled (@​morgan-coded, @​lukastaegert)
• #​6416: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (@​fabianbernhart, @​lukastaegert)

v4.62.1

Compare Source

2026-06-19

Bug Fixes

• Preserve multipart file extensions when deconflicting output chunks (#​6408)
• Fix an issue where getLogFilter would match additional logs (#​6415)

Pull Requests

• #​6393: Use import attributes for importing JSON (@​selfisekai, @​lukastaegert)
• #​6408: fix: insert conflict numbers before first extension in multi-extension filenames (@​LeSingh1, @​lukastaegert)
• #​6415: fix: advance value past wildcard prefix before suffix check in getLogFilter (@​JSap0914, @​lukastaegert)
• #​6417: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (@​renovate[bot])
• #​6418: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6419: chore(deps): update dependency eslint-plugin-unicorn to v66 (@​renovate[bot])
• #​6420: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	smol-toml@​1.7.0
	oxlint@​1.70.0 ⏵ 1.71.0	+1		+1	+1
	rollup@​4.62.2

View full report