chore(deps): update dependency @rsbuild/plugin-react to v1.4.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@rsbuild/plugin-react (source)	1.4.5 → 1.4.6

---

Release Notes

web-infra-dev/rsbuild (@​rsbuild/plugin-react)

v1.4.6

Compare Source

What's Changed

New Features 🎉

• feat(deps): update @​rspack/core to v1.4.6 by @​chenjiahan in #​5578

Bug Fixes 🐞

• fix: update Node.js engine requirement to >=16.17.0 by @​chenjiahan in #​5567
• fix: patch open to maintaining Node 16.10 compatibility by @​chenjiahan in #​5570

Document 📖

• docs: update plugin development introduction by @​chenjiahan in #​5565
• docs: add note on Node.js 16 support by @​chenjiahan in #​5568
• docs: enhance HTML tags with detailed JSDoc by @​chenjiahan in #​5569
• docs: explain tag options of html.tags config by @​chenjiahan in #​5573
• docs: correct translations for html.tags by @​chenjiahan in #​5574

Other Changes

• chore(deps): update dependency @​biomejs/biome to ^2.1.1 by @​renovate in #​5571
• chore(deps): update pnpm to v10.13.1 by @​renovate in #​5572
• release: 1.4.6 by @​chenjiahan in #​5579

Full Changelog: web-infra-dev/rsbuild@v1.4.5...v1.4.6

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 08:00 AM and 11:59 AM, only on Tuesday (* 8-11 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bito-code-review]

Code Review Agent Run #27d293

Actionable Suggestions - 0

Review Details

• Files reviewed - 2 · Commit Range: 20899a4..20899a4

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

Impact Analysis by Bito

Cross-Repository Impact Analysis

What Changed	Impact of Change	Suggested Review Actions
@rsbuild/plugin-react devDependency version bump from 1.4.5 to 1.4.6 in two React Web SDK implementation packages	- No cross-repo consumers found for @rsbuild/plugin-react in the organization: Searched all indexed repositories; no other repos depend on @rsbuild/plugin-react. The packages (react-web-sdk, web-sdk_react) are private implementation packages within the optimization monorepo.	- Verify the build succeeds after pnpm install: cd implementations/react-web-sdk && pnpm install && pnpm build - Verify the build succeeds: cd implementations/web-sdk_react && pnpm install && pnpm build - Run e2e tests if available to confirm the Rsbuild React plugin upgrade does not introduce regressions

Code Paths Analyzed

Impact:
Minor patch-level dependency update. The @rsbuild/plugin-react version bump (1.4.5 → 1.4.6) affects only local build tooling in two private implementation packages. No cross-repo impacts detected.

Flow:
pnpm install (updates pnpm-lock.yaml) → rsbuild build uses updated plugin-react

Direct Changes (Diff Files):
• implementations/react-web-sdk/package.json [9-10] — DevDependency @rsbuild/plugin-react bumped from 1.4.5 to 1.4.6 (patch version for bug fixes/internal improvements)
• implementations/web-sdk_react/package.json [9-10] — DevDependency @rsbuild/plugin-react bumped from 1.4.5 to 1.4.6 (same patch update applied to second React web implementation)

Repository Impact:
• implementations/react-web-sdk: React web SDK implementation uses @rsbuild/plugin-react as a devDependency. Updated to 1.4.6.
• implementations/web-sdk_react: Second React web SDK implementation uses @rsbuild/plugin-react as a devDependency. Updated to 1.4.6.

Cross-Repository Dependencies:
• No external repository dependencies detected: searchCode across all indexed org repositories found zero matches for @rsbuild/plugin-react. This dependency is not consumed by any other repo in the organization.

Database/Caching Impact:
• None

API Contract Violations:
• No API contracts are affected. This is a devDependency version bump for a build tool plugin; it does not change any exported APIs, endpoints, or runtime behavior visible to consumers.

Infrastructure Dependencies:
• Build tooling: @rsbuild/plugin-react 1.4.5 → 1.4.6 (devDependency, used only during local build/development). No production infrastructure or CI/CD changes detected in the diff.

Additional Insights:
• Version semantics: 1.4.5 → 1.4.6 is a patch-level bump. By semver conventions, patch versions contain bug fixes and internal improvements with no API changes. It is safe to upgrade without consumer impact analysis, though standard build verification is recommended.

Testing Recommendations

Frontend Impact:
• Run pnpm install && pnpm build in implementations/react-web-sdk to verify the Rsbuild React plugin upgrade produces a valid build
• Run pnpm install && pnpm build in implementations/web-sdk_react to verify the same for the second implementation
• If e2e tests are configured, run pnpm test:e2e in both implementations to confirm no runtime regressions

Service Integration:
• None.

Data Serialization:
• None.

Privacy Compliance:
• None.

Backward Compatibility:
• @rsbuild/plugin-react is a devDependency used only at build time. It does not affect runtime behavior or exported APIs, so backward compatibility is not a concern for consumers.

OAuth Functionality:
• None

Reliability Testing:
• None

Additional Insights:
• The pnpm-lock.yaml file (not shown in diff but regenerated by pnpm install) should be committed alongside these package.json changes to ensure reproducible builds
• Consider running pnpm dedupe after the version bump to ensure lockfile consistency

_{Analysis based on known dependency patterns and edges. Actual impact may vary.}

[bito-code-review]

✅ Review Settings Overridden

Status: Overridden Successfully

Guidelines:

• Accepted:

  • General : Review Posture, Repo Truth And Boundaries, Domain Invariants

  • Language : typescript= TypeScript Review Evidence

Note: Extra guidelines beyond 3 general purpose guidelines and 1 language specific guideline per language are not processed. Guidelines are fetched from the source branch.