[Snyk] Upgrade rollup from 3.29.4 to 4.11.0 #270
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade rollup from 3.29.4 to 4.11.0. See this package in npm: https://www.npmjs.com/package/rollup See this project in Snyk: https://app.snyk.io/org/leonardoadame/project/24f06ee5-2488-4266-bbc4-812693d272b6?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade rollup from 3.29.4 to 4.11.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
Release notes
Package name: rollup
-
4.11.0 - 2024-02-15
- Add
- Ensure namespace reexport code can be parsed by cjs-module-lexer (#5380)
- Throw when trying to reassing
- #5380: fix: separately export
- #5388: Add const reassign rule (@ TrickyPi)
-
4.10.0 - 2024-02-10
- Support base-36 and base-16 hashes again via new
- Do not crash process for panics in native code but throw them as JavaScript errors (#5383)
- #5359: chore(deps): update actions/cache action to v4 (@ renovate[bot])
- #5360: chore(deps): update dependency pretty-ms to v9 (@ renovate[bot])
- #5366: chore(deps): update dependency husky to v9 (@ renovate[bot])
- #5367: chore(deps): update peter-evans/create-or-update-comment action to v4 (@ renovate[bot])
- #5368: chore(deps): update peter-evans/find-comment action to v3 (@ renovate[bot])
- #5369: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5370: Fix dependency range for Node types (@ lukastaegert)
- #5371: Implement "output.hashCharacters" option to define character set for file hashes (@ lukastaegert)
- #5372: Roll back vitepress as 1.0.0-rc.40 breaks the development build (@ lukastaegert)
- #5382: Update documentation (@ TrickyPi)
- #5383: Catch Rust panics and then throw them in JS (@ TrickyPi)
- #5384: chore(deps): update codecov/codecov-action action to v4 (@ renovate[bot])
- #5385: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5386: Resolve all rollup imports to node_modules to avoid type conflict (@ TrickyPi)
-
4.9.6 - 2024-01-21
- Detect side effects when an element that was pushed into an array is modified via the array (#5352)
- #5337: Generate AST transformers from config (@ lukastaegert)
- #5340: Also type-check d.ts files (@ lukastaegert)
- #5348: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5351: chore(deps): update dependency vite to v5.0.12 [security] (@ renovate[bot])
- #5352: Track mutations of elements pushed into arrays (@ lukastaegert)
-
4.9.5 - 2024-01-12
- Fix issue where on Windows, Rollup would not load due to problems with the MSVC executable (#5335)
- #5334: Fix typo in commondir.ts (@ akiomik)
- #5335: build: static link msvc runtime on Windows x64 platform (@ Brooooooklyn)
- #5338: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
-
4.9.4 - 2024-01-06
- Use quotes for keys in namespaces that are only numbers but are not valid integers (#5328)
- Allow to have comments between pure annotations and the annoted node (#5332)
- #5328: Correctly handling number key (@ LongTengDao)
- #5332: Handle pure annotations that are separated by a comment (@ lukastaegert)
-
4.9.3 - 2024-01-05
- Support
- Use ESTree AST type over custom type in user-facing types (#5323)
- #5313: Correctly handling proto export as module object key (@ LongTengDao)
- #5323: fix: Add estree.Program type to rollup.d.ts (@ TrickyPi)
- #5326: docs: fix grammar (@ gigabites19)
- #5329: chore(deps): update dependency @ vue/eslint-config-prettier to v9 (@ renovate[bot])
- #5330: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
-
4.9.2 - 2023-12-30
- Extend support for arbitrary namespace identifiers in SystemJS (#5321)
- Do not wrongly flag functions without side effects as side effects if moduleSideEffects is false (#5322)
- #5305: Add JSDoc types to internal scripts (@ lukastaegert)
- #5309: chore(deps): update actions/download-artifact action to v4 (@ renovate[bot])
- #5311: chode: add node badge (@ btea)
- #5312: Remove rollup-plugin-thatworks from devDeps (@ TrickyPi)
- #5318: chore(deps): update dependency eslint-plugin-unicorn to v50 (@ renovate[bot])
- #5319: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5321: Handle arbitrary namespace identifiers in some SystemJS scenarios (@ lukastaegert)
- #5322: Do not handle declarations in modules without side effects as TDZ (@ lukastaegert)
-
4.9.1 - 2023-12-17
-
4.9.0 - 2023-12-13
-
4.8.0 - 2023-12-11
-
4.7.0 - 2023-12-08
-
4.6.1 - 2023-11-30
-
4.6.0 - 2023-11-26
-
4.5.2 - 2023-11-24
-
4.5.1 - 2023-11-21
-
4.5.0 - 2023-11-18
-
4.4.1 - 2023-11-14
-
4.4.0 - 2023-11-12
-
4.3.1 - 2023-11-11
-
4.3.0 - 2023-11-03
-
4.2.0 - 2023-10-31
-
4.1.6 - 2023-10-31
-
4.1.5 - 2023-10-28
-
4.1.4 - 2023-10-16
-
4.1.3 - 2023-10-15
-
4.1.1 - 2023-10-15
-
4.1.0 - 2023-10-14
-
4.0.2 - 2023-10-06
-
4.0.1 - 2023-10-06
-
4.0.0 - 2023-10-05
-
4.0.0-25 - 2023-10-05
-
4.0.0-24 - 2023-10-03
-
4.0.0-23 - 2023-09-26
-
4.0.0-22 - 2023-09-26
-
4.0.0-21 - 2023-09-24
-
4.0.0-20 - 2023-09-24
-
4.0.0-19 - 2023-09-15
-
4.0.0-18 - 2023-09-15
-
4.0.0-17 - 2023-09-15
-
4.0.0-16 - 2023-09-15
-
4.0.0-15 - 2023-09-15
-
4.0.0-14 - 2023-09-15
-
4.0.0-13 - 2023-08-24
-
4.0.0-12 - 2023-08-23
-
4.0.0-10 - 2023-08-21
-
4.0.0-9 - 2023-08-20
-
4.0.0-8 - 2023-08-20
-
4.0.0-7 - 2023-08-20
-
4.0.0-6 - 2023-08-20
-
4.0.0-5 - 2023-08-20
-
4.0.0-4 - 2023-08-04
-
4.0.0-3 - 2023-08-04
-
4.0.0-2 - 2023-08-01
-
4.0.0-1 - 2023-08-01
-
3.29.4 - 2023-09-28
from rollup GitHub release notes4.11.0
2024-02-15
Features
output.reexportProtoFromExternaloption to disable special code for handling__proto__reexports (#5380)Bug Fixes
constvariables (#5388)Pull Requests
__proto__for compatibility with CJS Transpiler Re-exports (@ TrickyPi)4.10.0
2024-02-10
Features
output.hashCharactersoption (#5371)Bug Fixes
Pull Requests
4.9.6
2024-01-21
Bug Fixes
Pull Requests
4.9.5
2024-01-12
Bug Fixes
Pull Requests
4.9.4
2024-01-06
Bug Fixes
Pull Requests
4.9.3
2024-01-05
Bug Fixes
__proto__as export/import name (#5313)Pull Requests
4.9.2
2023-12-30
Bug Fixes
Pull Requests
Read more
Read more
Read more
Commit messages
Package name: rollup
#) in project path breaks vite sveltejs/kit#5384)afterLoadlifecycle function likeafterNavigatesveltejs/kit#5368)export function GET() {...}etc) sveltejs/kit#5367)Error: unfinished hook action(s) on exit: (vite-plugin-svelte-kit) writeBundleinpnpmworkspace sveltejs/kit#5352)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs