chore(deps-dev): bump @rslib/core from 0.16.1 to 0.17.0

[dependabot]

Bumps @rslib/core from 0.16.1 to 0.17.0.

Release notes

Sourced from @​rslib/core's releases.

v0.17.0

Highlights 💡

Improved ESM output

Optimizing ESM output has long been one of the key challenges faced by Rspack. Previously, we relied on module concatenation to optimize ESM outputs, but that approach had several limitations:

• Impure output – The generated files contained Rspack's runtime code.
• Prone to errors – Some modules could not be correctly concatenated, leading to unexpected runtime issues.
• Limited code-splitting support – Split bundles became complex and difficult to analyze or optimize statically.

To address these issues once and for all, we introduced an experimental plugin called EsmLibraryPlugin, purpose-built for constructing clean and efficient ESM libraries:

• Full control over the bundling process – All modules are linked during compilation, eliminating reliance on Rspack's runtime.
• Code-splitting support – Code after splitting can be statically analyzed and is tree-shaking friendly.

The image below compares the code splitting output before and after using this plugin — the left side shows the previous output, while the right side shows the cleaner output produced by EsmLibraryPlugin:

In Rslib, the EsmLibraryPlugin is now integrated out-of-the-box with experiments.advancedEsm enabled to generate ESM output that is high-quality, more friendly to static analysis, and supports code splitting.

export default {
  lib: [
    {
      format: 'esm',
      bundle: true,
      experiments: {
        advancedEsm: true,
      },
    },
  ],
};

[!TIP] Currently this option only takes effect in bundle mode when format is 'esm'.

What's Changed

New Features 🎉

• feat: introduce experiments.advancedEsm with Rspack's EsmLibraryPlugin by @​JSerFeng in web-infra-dev/rslib#1273

Other Changes

• chore(deps): update all non-major dependencies by @​renovate[bot] in web-infra-dev/rslib#1293
• chore(deps): update dependency nx to v22 by @​renovate[bot] in web-infra-dev/rslib#1294
• ci: add ecosystem CI by @​fi3ework in web-infra-dev/rslib#1296
• ci: add per commit notify by @​fi3ework in web-infra-dev/rslib#1298
• ci: fix yaml file by @​fi3ework in web-infra-dev/rslib#1299
• ci: add main branch to ecosystem-ci by @​fi3ework in web-infra-dev/rslib#1300
• ci: remove useless input by @​fi3ework in web-infra-dev/rslib#1301
• chore(deps): bump Rsbuild 1.6.0 by @​Timeless0911 in web-infra-dev/rslib#1303

... (truncated)

Commits

• 647f4d3 Release v0.17.0 (#1304)
• 1cc2fb9 chore(deps): bump Rsbuild 1.6.0 (#1303)
• fe8ce3e feat: introduce experiments.advancedEsm with Rspack's EsmLibraryPlugin (#1273)
• 3be1979 chore(deps): update all non-major dependencies (#1293)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)