Replace rollup-plugin-license with rolldown-license-plugin

[silverwind]

Replace rollup-plugin-license and wrap-ansi with rolldown-license-plugin, a zero-dependency plugin with async parallel I/O and built-in word wrapping.

• Removes rollup-plugin-license (pulls in lodash, moment) and wrap-ansi from the dependency tree
• License build time reduced by ~40% (370ms vs 640ms)
• Added e2e test for licenses.txt

---

This PR was written with the help of Claude Opus 4.6

[Copilot]

Pull request overview

This PR removes the rollup-plugin-license dependency and replaces it with a small inline Vite plugin that scans the build bundle to generate licenses.txt, aiming to reduce dependency surface area and address reported security issues in the rollup-based solution.

Changes:

• Removed rollup-plugin-license from package.json and lockfile.
• Added a custom licensesPlugin() in vite.config.ts that walks bundle modules, finds package roots, and writes public/assets/licenses.txt.
• Updated pnpm-lock.yaml to reflect dependency graph changes after removing the rollup plugin (and related transitive updates).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.

File	Description
vite.config.ts	Replaces rollup-based license generation with a custom Vite plugin that collects license text from bundled node_modules and Go license JSON.
package.json	Drops the rollup-plugin-license dependency.
pnpm-lock.yaml	Removes rollup-related packages and updates transitive dependencies after lockfile re-resolution.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[silverwind]

I'm considering extracting this to its own repo/npm module, given that I also have the same need in other projects and there's no suitable 0-dependency module available yet.

[silverwind]

Done, extracted https://github.com/silverwind/rolldown-license-plugin. Build time is ~60% faster then on main branch, while producing more licenses in the output. wrap-ansi was also removed because we are not wrapping text with ansi escape codes, and it was a cause for slowness.

Notably, modules where no license files was found still render with empty text into licenses.txt, but that is the same behaviour as on main branch, so I kept it.

[silverwind]

Fixed the regex and implemented license violation options in the plugin. Did not enable them, so violations will only produce warnings like it did before in webpack and with the previous plugin.

[silverwind]

Backport so we eliminate the rollup dependency (less dependency vulns).

[GiteaBot]

I was unable to create a backport for 1.26. @silverwind, please send one manually. 🍵

go run ./contrib/backport 37130
...  // fix git conflicts if any
go run ./contrib/backport --continue