[Snyk] Upgrade rollup from 2.75.6 to 4.13.0 #4
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade rollup from 2.75.6 to 4.13.0. See this package in npm: https://www.npmjs.com/package/rollup See this project in Snyk: https://app.snyk.io/org/cmaier274/project/5dd2da43-0126-40f8-9b8a-3a8f98cde033?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade rollup from 2.75.6 to 4.13.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-GETFUNCNAME-5923417
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-KOACORS-6117545
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-MOCHA-2863123
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-SEMVER-3247795
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-SEMVER-3247795
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-JSON5-3182856
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-MINIMATCH-3050818
Why? Proof of Concept exploit, CVSS 8.6
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: rollup
-
4.13.0 - 2024-03-12
- Ensure that the location of parse errors and other logs is encoded in the error message as well (#5424)
- #5417: chore(deps): lock file maintenance minor/patch updates ( @ renovate[bot])
- #5418: chore(deps): lock file maintenance (@ renovate[bot])
- #5419: chore: fix typo (@ OnlyWick)
- #5424: Add locations to logs, warnings and error messages ( @ lukastaegert)
-
4.12.1 - 2024-03-06
- Escape special characters in file references (#5404)
- #5398: Rename
- #5399: chore(deps): lock file maintenance minor/patch updates ( @ renovate[bot])
- #5404: fix: escape ids in
- #5406: chore(deps): lock file maintenance minor/patch updates ( @ renovate[bot])
- #5407: chore(deps): lock file maintenance (@ renovate[bot])
- #5411: Chunk assignment - Fix comment line breaks and typo (@ yoavweiss, @ lukastaegert)
-
4.12.0 - 2024-02-16
- Improve raw bundling performance by 10-15% when not using the cache or plugins that return an AST (#5391)
- #5391: Improve performance by directly constructing AST from buffer (@ lukastaegert)
- #5393: chore(deps): update dependency eslint-plugin-unicorn to v51 (@ renovate[bot])
- #5394: chore(deps): update typescript-eslint monorepo to v7 (major) (@ renovate[bot])
- #5395: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
-
4.11.0 - 2024-02-15
- Add
- Ensure namespace reexport code can be parsed by cjs-module-lexer (#5380)
- Throw when trying to reassing
- #5380: fix: separately export
- #5388: Add const reassign rule (@ TrickyPi)
-
4.10.0 - 2024-02-10
- Support base-36 and base-16 hashes again via new
- Do not crash process for panics in native code but throw them as JavaScript errors (#5383)
- #5359: chore(deps): update actions/cache action to v4 (@ renovate[bot])
- #5360: chore(deps): update dependency pretty-ms to v9 (@ renovate[bot])
- #5366: chore(deps): update dependency husky to v9 (@ renovate[bot])
- #5367: chore(deps): update peter-evans/create-or-update-comment action to v4 (@ renovate[bot])
- #5368: chore(deps): update peter-evans/find-comment action to v3 (@ renovate[bot])
- #5369: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5370: Fix dependency range for Node types (@ lukastaegert)
- #5371: Implement "output.hashCharacters" option to define character set for file hashes (@ lukastaegert)
- #5372: Roll back vitepress as 1.0.0-rc.40 breaks the development build (@ lukastaegert)
- #5382: Update documentation (@ TrickyPi)
- #5383: Catch Rust panics and then throw them in JS (@ TrickyPi)
- #5384: chore(deps): update codecov/codecov-action action to v4 (@ renovate[bot])
- #5385: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5386: Resolve all rollup imports to node_modules to avoid type conflict (@ TrickyPi)
-
4.9.6 - 2024-01-21
- Detect side effects when an element that was pushed into an array is modified via the array (#5352)
- #5337: Generate AST transformers from config (@ lukastaegert)
- #5340: Also type-check d.ts files (@ lukastaegert)
- #5348: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #5351: chore(deps): update dependency vite to v5.0.12 [security] (@ renovate[bot])
- #5352: Track mutations of elements pushed into arrays (@ lukastaegert)
-
4.9.5 - 2024-01-12
- Fix issue where on Windows, Rollup would not load due to problems with the MSVC executable (#5335)
- #5334: Fix typo in commondir.ts (@ akiomik)
- #5335: build: static link msvc runtime on Windows x64 platform (@ Brooooooklyn)
- #5338: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
-
4.9.4 - 2024-01-06
- Use quotes for keys in namespaces that are only numbers but are not valid integers (#5328)
- Allow to have comments between pure annotations and the annoted node (#5332)
- #5328: Correctly handling number key (@ LongTengDao)
- #5332: Handle pure annotations that are separated by a comment (@ lukastaegert)
-
4.9.3 - 2024-01-05
-
4.9.2 - 2023-12-30
-
4.9.1 - 2023-12-17
-
4.9.0 - 2023-12-13
-
4.8.0 - 2023-12-11
-
4.7.0 - 2023-12-08
-
4.6.1 - 2023-11-30
-
4.6.0 - 2023-11-26
-
4.5.2 - 2023-11-24
-
4.5.1 - 2023-11-21
-
4.5.0 - 2023-11-18
-
4.4.1 - 2023-11-14
-
4.4.0 - 2023-11-12
-
4.3.1 - 2023-11-11
-
4.3.0 - 2023-11-03
-
4.2.0 - 2023-10-31
-
4.1.6 - 2023-10-31
-
4.1.5 - 2023-10-28
-
4.1.4 - 2023-10-16
-
4.1.3 - 2023-10-15
-
4.1.1 - 2023-10-15
-
4.1.0 - 2023-10-14
-
4.0.2 - 2023-10-06
-
4.0.1 - 2023-10-06
-
4.0.0 - 2023-10-05
-
4.0.0-25 - 2023-10-05
-
4.0.0-24 - 2023-10-03
-
4.0.0-23 - 2023-09-26
-
4.0.0-22 - 2023-09-26
-
4.0.0-21 - 2023-09-24
-
4.0.0-20 - 2023-09-24
-
4.0.0-19 - 2023-09-15
-
4.0.0-18 - 2023-09-15
-
4.0.0-17 - 2023-09-15
-
4.0.0-16 - 2023-09-15
-
4.0.0-15 - 2023-09-15
-
4.0.0-14 - 2023-09-15
-
4.0.0-13 - 2023-08-24
-
4.0.0-12 - 2023-08-23
-
4.0.0-10 - 2023-08-21
-
4.0.0-9 - 2023-08-20
-
4.0.0-8 - 2023-08-20
-
4.0.0-7 - 2023-08-20
-
4.0.0-6 - 2023-08-20
-
4.0.0-5 - 2023-08-20
-
4.0.0-4 - 2023-08-04
-
4.0.0-3 - 2023-08-04
-
4.0.0-2 - 2023-08-01
-
4.0.0-1 - 2023-08-01
-
3.29.4 - 2023-09-28
-
3.29.3 - 2023-09-24
-
3.29.2 - 2023-09-15
-
3.29.1 - 2023-09-10
-
3.29.0 - 2023-09-06
-
3.28.1 - 2023-08-22
-
3.28.0 - 2023-08-09
-
3.27.2 - 2023-08-04
-
3.27.1 - 2023-08-03
-
3.27.0 - 2023-07-28
-
3.26.3 - 2023-07-17
-
3.26.2 - 2023-07-06
-
3.26.1 - 2023-07-05
-
3.26.0 - 2023-06-30
-
3.25.3 - 2023-06-26
-
3.25.2 - 2023-06-24
-
3.25.1 - 2023-06-12
-
3.25.0 - 2023-06-11
-
3.24.1 - 2023-06-10
-
3.24.0 - 2023-06-07
-
3.23.1 - 2023-06-04
-
3.23.0 - 2023-05-22
-
3.22.1 - 2023-05-21
-
3.22.0 - 2023-05-17
-
3.22.0-0 - 2023-05-13
-
3.21.8 - 2023-05-16
-
3.21.7 - 2023-05-13
-
3.21.6 - 2023-05-09
-
3.21.5 - 2023-05-05
-
3.21.4 - 2023-05-03
-
3.21.3 - 2023-05-02
-
3.21.2 - 2023-04-30
-
3.21.1 - 2023-04-29
-
3.21.0 - 2023-04-23
-
3.20.7 - 2023-04-21
-
3.20.6 - 2023-04-18
-
3.20.5 - 2023-04-18
-
3.20.4 - 2023-04-17
-
3.20.3 - 2023-04-16
-
3.20.3-0 - 2023-04-14
-
3.20.2 - 2023-03-24
-
3.20.1 - 2023-03-23
-
3.20.0 - 2023-03-20
-
3.19.1 - 2023-03-10
-
3.19.0 - 2023-03-09
-
3.18.0 - 2023-03-01
-
3.18.0-0 - 2023-02-27
-
3.17.3 - 2023-02-25
-
3.17.3-1 - 2023-02-23
-
3.17.3-0 - 2023-02-22
-
3.17.2 - 2023-02-20
-
3.17.1 - 2023-02-18
-
3.17.0 - 2023-02-18
-
3.16.0 - 2023-02-17
-
3.15.1-1 - 2023-02-14
-
3.15.1-0 - 2023-02-13
-
3.15.0 - 2023-02-10
-
3.14.0 - 2023-02-05
-
3.13.0 - 2023-02-03
-
3.12.1 - 2023-02-01
-
3.12.0 - 2023-01-28
-
3.11.0 - 2023-01-26
-
3.10.1 - 2023-01-20
-
3.10.0 - 2023-01-12
-
3.9.1 - 2023-01-02
-
3.9.0 - 2022-12-28
-
3.8.1 - 2022-12-23
-
3.8.0 - 2022-12-22
-
3.7.6-0 - 2022-12-18
-
3.7.5 - 2022-12-17
-
3.7.5-0 - 2022-12-16
-
3.7.4 - 2022-12-13
-
3.7.3 - 2022-12-11
-
3.7.3-0 - 2022-12-10
-
3.7.2 - 2022-12-10
-
3.7.1 - 2022-12-09
-
3.7.1-0 - 2022-12-08
-
3.7.0 - 2022-12-08
-
3.6.1-0 - 2022-12-06
-
3.6.0 - 2022-12-05
-
3.6.0-1 - 2022-12-05
-
3.6.0-0 - 2022-11-27
-
3.5.1 - 2022-12-01
-
3.5.0 - 2022-11-27
-
3.5.0-0 - 2022-11-25
-
3.4.0 - 2022-11-22
-
3.4.0-1 - 2022-11-21
-
3.4.0-0 - 2022-11-18
-
3.3.0 - 2022-11-12
-
3.3.0-0 - 2022-11-08
-
3.2.5 - 2022-11-01
-
3.2.4 - 2022-10-31
-
3.2.3 - 2022-10-18
-
3.2.2 - 2022-10-16
-
3.2.1 - 2022-10-16
-
3.2.0 - 2022-10-15
-
3.1.0 - 2022-10-12
-
3.0.1 - 2022-10-12
-
3.0.0 - 2022-10-11
-
3.0.0-8 - 2022-10-11
-
3.0.0-7 - 2022-09-23
-
3.0.0-6 - 2022-09-06
-
3.0.0-5 - 2022-08-31
-
3.0.0-4 - 2022-08-15
-
3.0.0-3 - 2022-07-30
-
3.0.0-2 - 2022-07-15
-
3.0.0-1 - 2022-07-08
-
3.0.0-0 - 2022-07-05
-
2.79.1 - 2022-09-22
-
2.79.0 - 2022-08-31
-
2.78.1 - 2022-08-19
-
2.78.0 - 2022-08-14
-
2.77.4-1 - 2022-12-07
-
2.77.4-0 - 2022-12-04
-
2.77.3 - 2022-08-11
-
2.77.2 - 2022-07-27
-
2.77.1 - 2022-07-26
-
2.77.0 - 2022-07-15
-
2.76.0 - 2022-07-08
-
2.75.7 - 2022-06-20
-
2.75.6 - 2022-06-07
from rollup GitHub release notes4.13.0
2024-03-12
Features
Pull Requests
4.12.1
2024-03-06
Bug Fixes
Pull Requests
getRollupErortogetRollupError(@ MrRefactoring)import.meta.ROLLUP_FILE_URL_referenceIdcorrectly (@ sapphi-red)4.12.0
2024-02-16
Features
Pull Requests
4.11.0
2024-02-15
Features
output.reexportProtoFromExternaloption to disable special code for handling__proto__reexports (#5380)Bug Fixes
constvariables (#5388)Pull Requests
__proto__for compatibility with CJS Transpiler Re-exports (@ TrickyPi)4.10.0
2024-02-10
Features
output.hashCharactersoption (#5371)Bug Fixes
Pull Requests
4.9.6
2024-01-21
Bug Fixes
Pull Requests
4.9.5
2024-01-12
Bug Fixes
Pull Requests
4.9.4
2024-01-06
Bug Fixes
Pull Requests
Read more
Commit messages
Package name: rollup
make test-addonsnodejs/node#5424)MakeCallbacknodejs/node#5419)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs