build(deps-dev): bump @rspack/cli from 2.0.5 to 2.0.6

[dependabot]

Bumps @rspack/cli from 2.0.5 to 2.0.6.

Release notes

Sourced from @​rspack/cli's releases.

v2.0.6

Highlights

React Server Components: enforce server-only / client-only boundaries

RSC builds now validate the server-only and client-only marker packages. Importing a client-only module from a server-graph module (or a server-only module from a client-graph module) is reported as a diagnostic. This marker-package validation always runs and is independent of disableClientApiChecks, which now only scopes the React client-API checks.

// server component (server graph)
import 'client-only'; // ❌ reported: client-only imported in a server module
// client component (client graph)
import 'server-only'; // ❌ reported: server-only imported in a client module

Expose DeterministicModuleIdsPlugin

The webpack-compatible deterministic module id plugin is now exposed through the JS API as rspack.ids.DeterministicModuleIdsPlugin, giving you fine-grained control over module ids for long-term caching. It supports the webpack options test, maxLength, salt, fixedLength, and failOnConflict.

const rspack = require('@rspack/core');
module.exports = {
optimization: { moduleIds: false },
plugins: [
new rspack.ids.DeterministicModuleIdsPlugin({
maxLength: 5,
failOnConflict: true,
}),
],
};

CSS Modules: preserve composes cascade order

CSS Modules now use a shared topological sort to keep the source order of composes, so composed declarations land in the output cascade in the order you authored them. This fixes subtle specificity surprises when composing local class names across modules.

What's Changed

New Features 🎉

• feat(rsc): validate server-only and client-only imports by @​SyMind in web-infra-dev/rspack#14190
• feat(css): ensure CSS compose module order by @​intellild in web-infra-dev/rspack#14156
• feat: expose DeterministicModuleIdsPlugin by @​intellild in web-infra-dev/rspack#14214

Performance 🚀

• perf: reduce sourcemap benchmark overhead by @​hardfist in web-infra-dev/rspack#14186
• perf(sources): lazily compute CachedSourceChunks source by @​SyMind in web-infra-dev/rspack#14202
• perf(deps): bump rspack_resolver to 0.9.2 by @​stormslowly in web-infra-dev/rspack#14192
• perf(core): cache resolved module rule options by @​intellild in web-infra-dev/rspack#14158

Bug Fixes 🐞

• fix: remove wasmtime threads feature by @​hardfist in web-infra-dev/rspack#14199
• fix: limit tsfn lifecycle to prevent memory leak by @​SyMind in web-infra-dev/rspack#13565

... (truncated)

Commits

• 5a2e911 chore: ⬆️ release 2.0.6
• 8e2cfd4 chore(deps): update dependency @​rslib/core to ^0.22.0 (#14224)
• 1abc53d chore(deps): update patch npm dependencies (#14222)
• 783f31a chore: release version 2.0.5 (#14155)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)