chore: update dependencies

.github/actions/tag-git-release/action.yml

@@ -21,17 +21,17 @@ runs:
     - name: Install git-cliff
       uses: taiki-e/install-action@v2
       with:
-        tool: git-cliff@2.8.0
+        tool: git-cliff@2.10.0
 
     - name: Install cargo-edit
       uses: taiki-e/install-action@v2
       with:
-        tool: cargo-edit@0.12.2
+        tool: cargo-edit@0.13.7
 
     - name: "Setup jq"
-      uses: dcarbone/install-jq-action@v2
+      uses: dcarbone/install-jq-action@v3
       with:
-        version: "1.7"
+        version: "1.8.1"
         force: true
 
     - uses: webfactory/[email protected]

.github/dependabot.yml

@@ -0,0 +1,66 @@
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates#setting-up-a-cooldown-period-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: cargo
+    directories:
+      - /
+      - bindings
+      - crates/swc_core/tests/fixture/*
+      - crates/swc_plugin_backend_tests/tests/css-plugins/swc_noop_plugin
+      - crates/swc_plugin_backend_tests/tests/fixture/*
+      - packages/core/e2e/fixtures/*
+    schedule:
+      interval: weekly
+    groups: # 1 PR per week and group
+      cargo-major:
+        update-types: ["major"]
+      cargo-minor:
+        update-types: ["minor"]
+      cargo-patch:
+        update-types: ["patch"]
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups: # 1 PR per week for all images
+      actions:
+        patterns: ["*"]
+  - package-ecosystem: gitsubmodule
+    directory: /
+    schedule:
+      interval: weekly
+    groups: # 1 PR per week for all submodules
+      submodules:
+        patterns: ["*"]
+  - package-ecosystem: npm
+    directories:
+      - /
+      - .github/bot
+      - .github/swc-ecosystem-ci
+      - bindings/binding_core_wasm
+      - bindings/binding_core_wasm/example
+      - bindings/binding_minifier_wasm
+      - bindings/binding_typescript_wasm
+      - crates/swc/tests/fixture/jsc-paths/vercel-site/1/input
+      - crates/swc_ecma_loader/tests/hoisting/packages/app
+      - crates/swc_ecma_parser/tests/test262-parser
+      - crates/swc_ecma_transforms_proposal/tests/decorator-tests
+      - crates/swc_estree_compat/tests
+      - crates/swc_node_bundler/tests
+      - crates/swc_node_bundler/tests/integration/react
+      - crates/swc_node_bundler/tests/pass/resolve-name-fix/input
+      - packages/*
+      - packages/core/scripts/npm/*
+      - packages/html/scripts/npm/*
+      - packages/minifier/scripts/npm/*
+      - packages/react-compiler/scripts/npm/*
+    schedule:
+      interval: weekly
+    groups: # 1 PR per week and group
+      npm-major:
+        update-types: ["major"]
+      npm-minor:
+        update-types: ["minor"]
+      npm-patch:
+        update-types: ["patch"]

.github/workflows/CI.yml

@@ -72,7 +72,7 @@ jobs:
       - name: Install cargo-deny
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-deny@0.14.15
+          tool: cargo-deny@0.18.3
 
       - name: Check licenses
         run: |
@@ -92,7 +92,7 @@ jobs:
       - name: Install cargo-shear
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-shear@1.3.3
+          tool: cargo-shear@1.4.1
 
       - name: cargo-shear
         run: cargo shear --fix
@@ -127,7 +127,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "22"
           cache: "yarn"
 
       - name: Install node dependencies
@@ -175,7 +175,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "22"
           cache: "yarn"
 
       - name: Install node dependencies
@@ -230,7 +230,7 @@ jobs:
       # Source map format
       - uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "22"
           cache: "yarn"
 
       # We explicitly do this to cache properly.
@@ -244,25 +244,25 @@ jobs:
           # toolchain: stable
           # override: true
 
-      - uses: denoland/setup-deno@v1
+      - uses: denoland/setup-deno@v2
         if: matrix.settings.crate == 'swc_bundler'
         with:
-          deno-version: v1.x
+          deno-version: v2.x
 
       - name: Install node dependencies
         shell: bash
         run: |
           corepack enable
           yarn
           # I don't want to think deeply about this
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || \
-          yarn global add jest@27 mocha || true
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || \
+          yarn global add jest@30 mocha || true
 
       - name: Configure path (windows)
         shell: bash
@@ -282,7 +282,7 @@ jobs:
           echo "SWC_ECMA_TESTING_CACHE_DIR=$(pwd)/.swc-exec-cache" >> $GITHUB_ENV
 
       - name: Cache execution results
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: ${{ matrix.settings.crate }} == 'swc' || ${{ startsWith(matrix.settings.crate, 'swc_ecma_transforms_') }}
         with:
           path: |
@@ -346,7 +346,7 @@ jobs:
         uses: taiki-e/install-action@v2
         if: matrix.settings.os == 'ubuntu-latest'
         with:
-          tool: cargo-hack@0.5.29
+          tool: cargo-hack@0.6.37
 
       - name: Check compilation
         if: matrix.settings.os == 'ubuntu-latest'
@@ -426,7 +426,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: "22"
           cache: "yarn"
 
       - name: Set platform name
@@ -457,7 +457,7 @@ jobs:
           cargo clean
           (cd ./bindings && cargo clean)
 
-          npm install -g @swc/cli@0.1.56
+          npm install -g @swc/cli@0.7.8
           npm link
           npm install -g file:$PWD
 
@@ -488,7 +488,7 @@ jobs:
           # yarn global add qunit failonlyreporter
 
           # Download
-          # git clone --depth 1 https://github.com/reduxjs/redux.git -b v4.1.0 tests/integration/redux/repo
+          # git clone --depth 1 https://github.com/reduxjs/redux.git -b v5.0.1 tests/integration/redux/repo
           # TODO
           # swc --sync tests/integration/redux/repo/src/ -d tests/integration/redux/repo/lib/
           # echo "module.exports=require('./index')" > tests/integration/redux/repo/lib/redux.js

.github/workflows/bench.yml

@@ -65,7 +65,7 @@ jobs:
       - name: Install cargo-codspeed
         uses: taiki-e/install-action@v2
         with:
-          tool: [email protected].2
+          tool: [email protected].5
 
       - name: Build the benchmark target(s)
         run: ./scripts/bench/build-crate.sh ${{ matrix.crate }}

.github/workflows/ecosystem-ci.yml

@@ -88,7 +88,7 @@ jobs:
 
       # - if: ${{ failure() && github.event.inputs.mode == 'passing' }}
       #   name: Notify failure
-      #   uses: tsickert/discord-webhook@v5.3.0
+      #   uses: tsickert/discord-webhook@v7.0.0
       #   with:
       #     webhook-url: ${{ secrets.DISCORD_WEBHOOK_URL }}
       #     content: |
@@ -97,7 +97,7 @@ jobs:
 
       # - if: ${{ success() &&github.event.inputs.mode == 'ignored' }}
       #   name: Notify success
-      #   uses: tsickert/discord-webhook@v5.3.0
+      #   uses: tsickert/discord-webhook@v7.0.0
       #   with:
       #     webhook-url: ${{ secrets.DISCORD_WEBHOOK_URL }}
       #     content: |

.github/workflows/lock.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'swc-project'
     steps:
-      - uses: dessant/lock-threads@v3
+      - uses: dessant/lock-threads@v5
         with:
           github-token: ${{ secrets.BOT_GH_TOKEN }}
           issue-inactive-days: 30

.github/workflows/publish-crates.yml

@@ -40,7 +40,7 @@ jobs:
       - name: Install cargo-edit
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-edit@0.12.2
+          tool: cargo-edit@0.13.7
 
       - name: Install cargo-mono
         uses: taiki-e/install-action@v2

.github/workflows/publish-npm-package.yml

@@ -220,7 +220,7 @@ jobs:
       - name: Setup node x64
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: yarn
           architecture: x64
       - name: Output toolchain
@@ -233,17 +233,17 @@ jobs:
         with:
           targets: ${{ matrix.settings.target }}
           toolchain: ${{ steps.toolchain.outputs.version }}
-      - uses: goto-bus-stop/setup-zig@v2
+      - uses: goto-bus-stop/setup-zig@v2  # unmaintained
         if: ${{ matrix.settings.target == 'armv7-unknown-linux-gnueabihf' }}
         with:
-          version: 0.12.0
+          version: 0.14.1
       - name: Cache cargo registry
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.cargo/registry
           key: ${{ matrix.settings.target }}-node@20-cargo-registry-trimmed
       - name: Cache cargo index
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.cargo/git
           key: ${{ matrix.settings.target }}-node@20-cargo-index-trimmed
@@ -270,7 +270,7 @@ jobs:
         uses: actions/setup-node@v4
         if: matrix.settings.target == 'i686-pc-windows-msvc'
         with:
-          node-version: 20
+          node-version: 22
           architecture: x86
       - name: Build in docker
         uses: addnab/docker-run-action@v3
@@ -330,7 +330,7 @@ jobs:
       - name: Install dependencies
         run: corepack enable && yarn install --network-timeout 300000
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: bindings-${{ inputs.package }}-${{ inputs.version}}-${{ matrix.settings.target }}
           path: ./packages/${{ inputs.package }}
@@ -369,7 +369,7 @@ jobs:
       - name: Install dependencies
         run: corepack enable && yarn install
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: bindings-${{ inputs.package }}-${{ inputs.version}}-x86_64-unknown-linux-gnu
           path: ./packages/${{ inputs.package }}
@@ -379,7 +379,7 @@ jobs:
       - name: Build TypeScript
         run: yarn build:ts
       - name: Test bindings
-        run: docker run --rm -v $(pwd):/swc -w /swc node:${{ matrix.node }}-slim sh -c 'npm install -f -g [email protected].19 && env DISABLE_PLUGIN_E2E_TESTS=true yarn test:${{ inputs.package }}'
+        run: docker run --rm -v $(pwd):/swc -w /swc node:${{ matrix.node }}-slim sh -c 'npm install -f -g [email protected] && env DISABLE_PLUGIN_E2E_TESTS=true yarn test:${{ inputs.package }}'
   test-linux-x64-musl-binding:
     name: Test bindings on x86_64-unknown-linux-musl - node@${{ matrix.node }}
     needs:
@@ -409,7 +409,7 @@ jobs:
           yarn config set supportedArchitectures.libc "musl"
           yarn install
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: bindings-${{ inputs.package }}-${{ inputs.version}}-x86_64-unknown-linux-musl
           path: ./packages/${{ inputs.package }}
@@ -419,7 +419,7 @@ jobs:
       - name: Build TypeScript
         run: yarn build:ts
       - name: Test bindings
-        run: docker run --rm -v $(pwd):/swc -w /swc node:${{ matrix.node }}-alpine sh -c 'npm install -f -g [email protected].19 && env DISABLE_PLUGIN_E2E_TESTS=true yarn test:${{ inputs.package }}'
+        run: docker run --rm -v $(pwd):/swc -w /swc node:${{ matrix.node }}-alpine sh -c 'npm install -f -g [email protected] && env DISABLE_PLUGIN_E2E_TESTS=true yarn test:${{ inputs.package }}'
   # test-linux-aarch64-musl-binding:
   #   name: Test bindings on aarch64-unknown-linux-musl - node@lts
   #   needs:
@@ -432,7 +432,7 @@ jobs:
   #     - name: Corepack
   #       run: corepack enable
   #     - name: Download artifacts
-  #       uses: actions/download-artifact@v4
+  #       uses: actions/download-artifact@v5
   #       with:
   #         name: bindings-${{ inputs.package }}-${{ inputs.version}}-aarch64-unknown-linux-musl
   #         path: ./packages/${{ inputs.package }}
@@ -481,7 +481,7 @@ jobs:
   #     - name: Corepack
   #       run: corepack enable
   #     - name: Download artifacts
-  #       uses: actions/download-artifact@v4
+  #       uses: actions/download-artifact@v5
   #       with:
   #         name: bindings-${{ inputs.package }}-${{ inputs.version}}-armv7-unknown-linux-gnueabihf
   #         path: ./packages/${{ inputs.package }}
@@ -539,7 +539,7 @@ jobs:
         run: corepack enable && yarn install
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           pattern: "bindings-${{ inputs.package }}-${{ inputs.version}}-*"
           path: ./packages/${{ inputs.package }}/artifacts
@@ -631,10 +631,10 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/

.github/workflows/stale.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'swc-project'
     steps:
-      - uses: actions/stale@v4
+      - uses: actions/stale@v9
         id: stale
         name: "Close stale issues with no reproduction"
         with: