Skip to content

chore(deps-dev)(deps-dev): Bump es-module-lexer from 2.3.1 to 3.0.2 - #30699

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/es-module-lexer-3.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/es-module-lexer-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps es-module-lexer from 2.3.1 to 3.0.2.

Release notes

Sourced from es-module-lexer's releases.

3.0.2

What's Changed

Full Changelog: guybedford/es-module-lexer@3.0.1...3.0.2

3.0.1

What's Changed

Full Changelog: guybedford/es-module-lexer@3.0.0...3.0.1

3.0.0

Breaking

  • Full build records are tagged unions discriminated by type (static | reexport-star | dynamic | import-meta; direct | reexport | reexport-all) with descriptive fields (specifier, importStart/importEnd, attributes, phase, name, localName, from, importIndex, exportStart) replacing the terse v2 names and numeric type tags. (#233)
  • es-module-lexer/minimal is a new entry point holding the v2-shaped API: parse returns [imports, exports] only; at is dropped (read attributes via source.slice(a, se - 1)); export { a as b } from 'c' reports the imported name in ln/ls/le. (#211, #240)
  • ImportType is a type-only union of named numeric literal aliases (StaticImportType = 1, DynamicImportType = 2, …); no runtime enum is exported. initSync is no longer exported — parse initializes on first use. (#240)
  • es-module-lexer/js is the asm.js build; the unmaintained pure-JS port is removed. (#204)
  • Invalid escape sequences in static specifiers throw a parse error instead of yielding undefined. (#238)
  • Node.js 18+ is required. (#232)

Features

  • TypeScript: type-only imports, exports, aliases, interfaces and ambient declarations are lexed as accepted by Node.js type stripping; type-only edges carry typeOnly, dynamic imports carry a best-effort probablyTypeOnly, and erased declaration bodies never leak nested import() types. Full builds only. (#220, #241)
  • Export origin analysis: reexports resolve to their originating import (importName, from, importIndex) regardless of statement order; export * from appears in exports as reexport-all and its import as reexport-star. (#229)
  • Template globs: a dynamic import whose argument is a single template literal reports a glob specifier with each ${…} collapsed to * (./locales/*.js), disambiguated by the parser so regex/division inside substitutions is handled. (#205)
  • Dynamic import attributes is typed null; the options argument is located by attributesStart. (#240)
  • parse initializes the Wasm synchronously on first call; await init is only required on browser main threads, and all four entry points export the same parse / init API. (#237, #240)

Performance

  • SIMD scanning for long line comments and templates in the full Wasm build (the minimal build stays Wasm MVP). (#231, #235)
  • Identifier and number runs are skipped in bulk: ~15% faster sweeps across Wasm and asm.js. (#227)
  • Module strings decode without eval: one-import parse 354 → 238 ns, and the Wasm builds now work under --disallow-code-generation-from-strings. (#239)
  • Short sources (< 64 chars) copy via the typed-array loop rather than Buffer. (#242)
  • Strict specifier decoding avoids V8's sloppy/strict cache mismatch. (#220)

Fixes

  • Bounds checks on the open-token and dynamic-import stacks; nesting past 1024 brackets or 512 dynamic imports is a parse error rather than memory corruption. (#243)
  • Unannotated declare let/var and shorthand declare module 'm' no longer erase the following statement; export default interface Foo {} reports Foo as its local name. (#241)
  • Typed export binding lists collect every declarator; export { type as } / type as as follow TypeScript's specifier table; U+00A0 is whitespace around import/export names. (#220)
  • Minimal build enforces Wasm MVP (no post-MVP features) and is tested in Firefox 67. (#234)

Docs & tooling

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner October 12, 2026 19:24
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026
@coderabbitai

coderabbitai Bot commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: prisma/orm
  • Branch: main
  • File: .coderabbit.yml
  • Commit: 4f70a33
  • Layers: Repository YAML
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 77048bfd-219d-4db6-b32f-fd9833e921f8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/es-module-lexer-3.0.2 branch 2 times, most recently from 510bd73 to b1c0eca Compare October 21, 2026 16:40
@dependabot dependabot Bot changed the title chore(deps-dev)(deps-dev): Bump es-module-lexer from 2.3.1 to 3.0.2 chore(deps-dev)(deps-dev): Bump es-module-lexer from 2.3.1 to 2.3.2 Oct 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/es-module-lexer-3.0.2 branch from b1c0eca to 3b9e991 Compare October 22, 2026 18:08
@pkg-pr-new

pkg-pr-new Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-arktype-json@30699

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-middleware-cache@30699

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-paradedb@30699

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-pgvector@30699

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-postgis@30699

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-extension-supabase@30699

@prisma/orm-family-mongo

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-family-mongo@30699

@prisma/orm-family-sql

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-family-sql@30699

@prisma/orm-framework

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-framework@30699

@prisma/orm-mongo

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-mongo@30699

@prisma/orm-mysql

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-mysql@30699

@prisma/orm-postgres

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-postgres@30699

@prisma/orm-sqlite

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-sqlite@30699

@prisma/orm-target-mongo

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-target-mongo@30699

@prisma/orm-target-mysql

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-target-mysql@30699

@prisma/orm-target-postgres

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-target-postgres@30699

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-target-sqlite@30699

@prisma/orm-toolchain

npm i https://pkg.pr.new/prisma/orm/@prisma/orm-toolchain@30699

commit: cff8ed0

@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
postgres / no-emit 268.59 KB (0%)
postgres / emit 236.57 KB (0%)
mongo / no-emit 223.19 KB (0%)
mongo / emit 183 KB (0%)
cf-worker / no-emit 330.18 KB (0%)
cf-worker / emit 294.8 KB (0%)

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/es-module-lexer-3.0.2 branch from 3b9e991 to cff8ed0 Compare October 27, 2026 20:45
Bumps [es-module-lexer](https://github.com/guybedford/es-module-lexer) from 2.3.1 to 3.0.2.
- [Release notes](https://github.com/guybedford/es-module-lexer/releases)
- [Commits](guybedford/es-module-lexer@2.3.1...3.0.2)

---
updated-dependencies:
- dependency-name: es-module-lexer
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev)(deps-dev): Bump es-module-lexer from 2.3.1 to 2.3.2 chore(deps-dev)(deps-dev): Bump es-module-lexer from 2.3.1 to 3.0.2 Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/es-module-lexer-3.0.2 branch from cff8ed0 to dbe43c1 Compare October 30, 2026 13:48

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants