chore(deps): lock file maintenance minor/patch updates #5160
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Thank you for your contribution! ❤️You can try out this pull request locally by installing Rollup via npm install rollup/rollup#renovate/minorpatch-updatesNotice: Ensure you have installed Rust nightly. If you haven't installed it yet, please first see https://www.rust-lang.org/tools/install to learn how to download Rustup and install Rust, then see https://rust-lang.github.io/rustup/concepts/channels.html to learn how to install Rust nightly. or load it into the REPL: |
Codecov Report
@@ Coverage Diff @@
## master #5160 +/- ##
=======================================
Coverage 98.94% 98.94%
=======================================
Files 226 226
Lines 8447 8447
Branches 2319 2319
=======================================
Hits 8358 8358
Misses 32 32
Partials 57 57 |
lukastaegert
approved these changes
Sep 29, 2023
|
This PR has been released as part of rollup@4.0.0-24. Note that this is a pre-release, so to test it, you need to install Rollup via |
|
This PR has been released as part of rollup@4.0.0-25. Note that this is a pre-release, so to test it, you need to install Rollup via |
|
This PR has been released as part of rollup@4.0.0. You can test it via |
Woodpile37
added a commit
to Woodpile37/ethers.js
that referenced
this pull request
Oct 27, 2023
<p>This PR was automatically created by Snyk using the credentials of a
real user.</p><br /><h3>Snyk has created this PR to upgrade rollup from
3.29.4 to 4.0.0.</h3>
:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.
<hr/>
*Warning:* This is a major version upgrade, and may be a breaking
change.
- The recommended version is **25 versions** ahead of your current
version.
- The recommended version was released **21 days ago**, on 2023-10-05.
<details>
<summary><b>Release notes</b></summary>
<br/>
<details>
<summary>Package name: <b>rollup</b></summary>
<ul>
<li>
<b>4.0.0</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.0">2023-10-05</a></br><h2>4.0.0</h2>
<p><em>2023-10-05</em></p>
<h3>BREAKING CHANGES</h3>
<h4>General Changes</h4>
<ul>
<li>The minimal required Node version is now 18.0.0 (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899815236" data-permission-text="Title is private"
data-url="rollup/rollup#5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5142">#5142</a>)</li>
<li>The browser build now relies on a WASM artifact that needs to be
provided as well (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The NodeJS build now relies on an optional native binary; for
unsupported platforms, users can use the <code>@ rollup/wasm-node</code>
package that has the same interface as Rollup but relies on WASM
artifacts (<a class="issue-link js-issue-link" data-error-text="Failed
to load title" data-id="1820063431" data-permission-text="Title is
private" data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The "with" syntax for import attributes is not yet supported,
awaiting support in SWC (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The <code>INVALID_IMPORT_ASSERTION</code> error code has been
replaced with <code>INVALID_IMPORT_ATTRIBUTE</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Rollup will now warn for <code>@ __PURE__</code> and <code>@
__NO_SIDE_EFFECTS__</code> annotations in invalid locations (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1921228669" data-permission-text="Title is private"
data-url="rollup/rollup#5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5165">#5165</a>)</li>
<li>If an entry module starts with a shebang comment <code>#!...</code>,
this comment will be prepended to the output for <code>es</code> and
<code>cjs</code> formats (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1920177473"
data-permission-text="Title is private"
data-url="rollup/rollup#5163"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5163/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5163">#5163</a>)</li>
<li>File hashes will now use url-safe base64 encoded hashes (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1911769288" data-permission-text="Title is private"
data-url="rollup/rollup#5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5155">#5155</a>)</li>
<li>The maximum hash length has been reduced to 22 characters (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1911769288" data-permission-text="Title is private"
data-url="rollup/rollup#5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5155">#5155</a>)</li>
<li>The <code>RollupWarning</code> type has been removed in favor of the
<code>RollupLog</code> type (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1906127628"
data-permission-text="Title is private"
data-url="rollup/rollup#5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5147">#5147</a>)</li>
</ul>
<h4>Changes to Rollup Options</h4>
<ul>
<li>Acorn plugins are no longer supported, the
<code>acornInjectPlugins</code> option has been removed (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The <code>acorn</code> option has been removed (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li><code>output.externalImportAssertions</code> has been deprecated in
favor of <code>output.externalImportAttributes</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li><code>inlineDynamicImports</code>, <code>manualChunks</code> and
<code>preserveModules</code> have been removed on input option level:
Please use the corresponding output options of the same names (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
<li>Removed output options (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1899897351"
data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>):
<ul>
<li><code>output.experimentalDeepDynamicChunkOptimization</code>: This
option is no longer needed as Rollup now always runs the full chunking
algorithm</li>
<li><code>output.dynamicImportFunction</code>: Use the
<code>renderDynamicImport</code> plugin hook instead</li>
<li><code>output.namespaceToStringTag</code>: Use
<code>output.generatedCode.symbols</code> instead</li>
<li><code>output.preferConst</code>: Use
<code>output.generatedCode.constBindings</code> instead</li>
</ul>
</li>
</ul>
<h4>Plugin API Changes</h4>
<ul>
<li>For <code>this.resolve</code>, the default of the
<code>skipSelf</code> option is now <code>true</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899815236" data-permission-text="Title is private"
data-url="rollup/rollup#5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5142">#5142</a>)</li>
<li><code>this.parse</code> now only supports the
<code>allowReturnOutsideFunction</code> option for now (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Import assertions now use the <a
href="https://snyk.io/redirect/github/estree/estree/blob/master/experimental/import-attributes.md">new
import attribute AST structure</a> (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>"assertions" have been replaced with "attributes" in various places
of the plugin interface (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>If the import of a module id is handled by the <code>load</code>
hook of a plugin, <code>rollup.watch</code> no longer watches the actual
file if the module id corresponds to a real path; if this is intended,
then the plugin is responsible for calling
<code>this.addWatchFile</code> for any dependency files (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1908157110" data-permission-text="Title is private"
data-url="rollup/rollup#5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5150">#5150</a>)</li>
<li>The normalized input options provided by <code>buildStart</code> and
other hooks no longer contain an <code>onwarn</code> handler; plugins
should use <code>onLog</code> instead (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1906127628" data-permission-text="Title is private"
data-url="rollup/rollup#5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5147">#5147</a>)</li>
<li><code>this.moduleIds</code> has been removed from the plugin
context: Use <code>this.getModuleIds()</code> instead (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
<li>The <code>hasModuleSideEffects</code> flag has been removed from the
<code>ModuleInfo</code> returned by <code>thi s.getModuleInfo()</code>:
Use <code>moduleSideEffects</code> on the <code>ModuleInfo</code>
instead (<a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>Improve parsing speed by switching to a native SWC-based parser (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Rollup will now warn for <code>@ __PURE__</code> and <code>@
__NO_SIDE_EFFECTS__</code> annotations in invalid locations (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1921228669" data-permission-text="Title is private"
data-url="rollup/rollup#5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5165">#5165</a>)</li>
<li>The parser is now exposed as a separate export <code>parseAst</code>
(<a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="1928078406" data-permission-text="Title is private"
data-url="rollup/rollup#5169"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5169/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5169">#5169</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Rollup no longer tries to watch virtual files if their name
corresponds to an actual file name; instead, plugins handle watching via
<code>this.addWatchFile()</code> (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1908157110"
data-permission-text="Title is private"
data-url="rollup/rollup#5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5150">#5150</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard">#5073</a>:
[v4.0] Switch parser to SWC and introduce native/WASM code (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard">#5142</a>:
[v4.0] Set the default of skipSelf to true (<a class="user-mention
notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard">#5143</a>:
[v4.0] Remove deprecated features (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5144"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5144/hovercard">#5144</a>:
[v4.0] Imporve the performance of generating ast and rollup ast nodes
(<a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard">#5147</a>:
[v4.0] Remove onwarn from normalized input options (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard">#5150</a>:
[v4.0] feat: Do not watch files anymore if their content is returned by
the load hook (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5154"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5154/hovercard">#5154</a>:
[v4.0] Add parse option to allow return outside function (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard">#5155</a>:
[v4.0] feat: implement hashing content in Rust (<a class="user-mention
notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5157"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5157/hovercard">#5157</a>:
[v4.0] Handle empty exports (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5160"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5160/hovercard">#5160</a>:
chore(deps): lock file maintenance minor/patch updates (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/renovate/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/renovate">@
renovate</a>[bot])</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5163"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5163/hovercard">#5163</a>:
[v4.0] feat: preserve shebang in entry module for CJS and ESM outputs
(<a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5164"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5164/hovercard">#5164</a>:
[v4.0] fix: also strip BOM from code strings in JS (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard">#5165</a>:
[v4.0] warn for invalid annotations (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5168"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5168/hovercard">#5168</a>:
[v4.0] Ensure we support new import attribute "with" syntax (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5169"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5169/hovercard">#5169</a>:
[v4.0] Expose parser (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
</ul>
</li>
<li>
<b>4.0.0-25</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.0-25">2023-10-05</a></br><p>4.0.0-25</p>
</li>
<li>
<b>4.0.0-24</b> - 2023-10-03
</li>
<li>
<b>4.0.0-23</b> - 2023-09-26
</li>
<li>
<b>4.0.0-22</b> - 2023-09-26
</li>
<li>
<b>4.0.0-21</b> - 2023-09-24
</li>
<li>
<b>4.0.0-20</b> - 2023-09-24
</li>
<li>
<b>4.0.0-19</b> - 2023-09-15
</li>
<li>
<b>4.0.0-18</b> - 2023-09-15
</li>
<li>
<b>4.0.0-17</b> - 2023-09-15
</li>
<li>
<b>4.0.0-16</b> - 2023-09-15
</li>
<li>
<b>4.0.0-15</b> - 2023-09-15
</li>
<li>
<b>4.0.0-14</b> - 2023-09-15
</li>
<li>
<b>4.0.0-13</b> - 2023-08-24
</li>
<li>
<b>4.0.0-12</b> - 2023-08-23
</li>
<li>
<b>4.0.0-10</b> - 2023-08-21
</li>
<li>
<b>4.0.0-9</b> - 2023-08-20
</li>
<li>
<b>4.0.0-8</b> - 2023-08-20
</li>
<li>
<b>4.0.0-7</b> - 2023-08-20
</li>
<li>
<b>4.0.0-6</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.0-6">2023-08-20</a></br><p>Check
publish</p>
</li>
<li>
<b>4.0.0-5</b> - 2023-08-20
</li>
<li>
<b>4.0.0-4</b> - 2023-08-04
</li>
<li>
<b>4.0.0-3</b> - 2023-08-04
</li>
<li>
<b>4.0.0-2</b> - 2023-08-01
</li>
<li>
<b>4.0.0-1</b> - 2023-08-01
</li>
<li>
<b>3.29.4</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v3.29.4">2023-09-28</a></br><h2>3.29.4</h2>
<p><em>2023-09-28</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix static analysis when an exported function uses callbacks (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1914196648" data-permission-text="Title is private"
data-url="rollup/rollup#5158"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5158/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5158">#5158</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5158"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5158/hovercard">#5158</a>:
Deoptimize all parameters when losing track of a function (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
</ul>
</li>
</ul>
from <a
href="https://snyk.io/redirect/github/rollup/rollup/releases">rollup
GitHub release notes</a>
</details>
</details>
<details>
<summary><b>Commit messages</b></summary>
</br>
<details>
<summary>Package name: <b>rollup</b></summary>
<ul>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/2f261358c62b4f9e62cb86bf99de8d4ff3668994">2f26135</a>
4.0.0</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/4e8e5b40cf6eb1be278c9e2146c073db8ea603ec">4e8e5b4</a>
[v4.0] Expose parser (#5169)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/cade24fbf3390a31734301a1f803b24e34b6cedd">cade24f</a>
[v4.0] Ensure we support new import attribute "with" syntax
(#5168)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/dd709c3fab369232c7c08089162981e1a44bdd60">dd709c3</a>
[v4.0] warn for invalid annotations (#5165)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/bfbea66569491f5466fbba99de2ba6a0225f851b">bfbea66</a>
[v4.0] feat: preserve shebang in entry module for CJS and ESM outputs
(#5163)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/4e562e52db3f55832de17ce02fabcc05c292861f">4e562e5</a>
[v4.0] fix: also strip BOM from code strings in JS (#5164)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/fbc25afcc2e494b562358479524a88ab8fe0f1bf">fbc25af</a>
[v4.0] feat: implement hashing content in Rust (#5155)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/0b0eabd8cd93de7c6b69c95a4cac24559c040b80">0b0eabd</a>
[v4.0] Handle empty exports (#5157)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/fda977bb38ab31638c3a4a18e0c4f8b9c8482e6c">fda977b</a>
[v4.0] Add parse option to allow return outside function (#5154)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/7325320ad95955540e1bb38dab9d600f569d915c">7325320</a>
[v4.0] Remove onwarn from normalized input options (#5147)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/accd66a4247dfdb4d7f2605b399d12d001e5a3ed">accd66a</a>
[v4.0] feat: Do not watch files anymore if their content is returned by
the load hook (#5150)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/55abe0fbf7116c9160a53da6a27cc9bce2eafd40">55abe0f</a>
[v4.0] Remove deprecated features (#5143)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/62cbff4a20030c5d787f3162ea29981e40525030">62cbff4</a>
[v4.0] Imporve the performance of generating ast and rollup ast nodes
(#5144)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/92864d48896dd09c0381d4b1cbef769a03c3f7d1">92864d4</a>
[v4.0] Set the default of skipSelf to true (#5142)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/643272e0d11a28bd56491719b75f95147bb66ac7">643272e</a>
[v4.0] Switch parser to SWC and introduce native/WASM code (#5073)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/4576ef3dfaf83415b319c851acd1a85b100e4ad1">4576ef3</a>
[v4.0] Set minimum Node version to 18</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/fac5f1c1c12dc0409ff090664e305586747dc2f7">fac5f1c</a>
chore(deps): lock file maintenance minor/patch updates (#5160)</li>
</ul>
<a
href="https://snyk.io/redirect/github/rollup/rollup/compare/a6448b99f725d457e35821b73a865b5c4d4c6a61...2f261358c62b4f9e62cb86bf99de8d4ff3668994">Compare</a>
</details>
</details>
<hr/>
**Note:** *You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs.*
For more information: <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIwNGFkNWFlMS01YjE4LTQ3N2MtOGZiOC05MzI3MzQ0MjJlYmEiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjA0YWQ1YWUxLTViMTgtNDc3Yy04ZmI4LTkzMjczNDQyMmViYSJ9fQ=="
width="0" height="0"/>
🧐 [View latest project
report](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302/settings/integration?pkg=rollup&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
<!---
(snyk:metadata:{"prId":"04ad5ae1-5b18-477c-8fb8-932734422eba","prPublicId":"04ad5ae1-5b18-477c-8fb8-932734422eba","dependencies":[{"name":"rollup","from":"3.29.4","to":"4.0.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"edb93f5a-17e2-4a56-beb9-1796f0e58302","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":25,"publishedDate":"2023-10-05T15:15:21.062Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":true,"isBreakingChange":true,"priorityScoreList":[]})
--->
Woodpile37
added a commit
to Woodpile37/ethers.js
that referenced
this pull request
Nov 1, 2023
<p>This PR was automatically created by Snyk using the credentials of a
real user.</p><br /><h3>Snyk has created this PR to upgrade rollup from
4.0.0 to 4.0.2.</h3>
:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.
<hr/>
- The recommended version is **2 versions** ahead of your current
version.
- The recommended version was released **22 days ago**, on 2023-10-06.
<details>
<summary><b>Release notes</b></summary>
<br/>
<details>
<summary>Package name: <b>rollup</b></summary>
<ul>
<li>
<b>4.0.2</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.2">2023-10-06</a></br><h2>4.0.2</h2>
<p><em>2023-10-06</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix annotation detection logic to not fail when a non-ASCII
character precedes a double underscore (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1930196242" data-permission-text="Title is private"
data-url="rollup/rollup#5178"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5178/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5178">#5178</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5178"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5178/hovercard">#5178</a>:
Handle special characters before double underscores (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
</ul>
</li>
<li>
<b>4.0.1</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.1">2023-10-06</a></br><h2>4.0.1</h2>
<p><em>2023-10-06</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Do not panic on trailing semicolons after class methods (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1929429451" data-permission-text="Title is private"
data-url="rollup/rollup#5173"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5173/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5173">#5173</a>)</li>
<li>Add artifact for arm64 linux musl target (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1929668290" data-permission-text="Title is private"
data-url="rollup/rollup#5176"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5176/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5176">#5176</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5172"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5172/hovercard">#5172</a>:
chore(deps): lock file maintenance minor/patch updates (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/renovate/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/renovate">@
renovate</a>[bot])</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5173"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5173/hovercard">#5173</a>: fix:
ignores empty statements in class body that is returned by SWC parser
(<a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5176"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5176/hovercard">#5176</a>: Fix
linux arm musl build (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
</ul>
</li>
<li>
<b>4.0.0</b> - <a
href="https://snyk.io/redirect/github/rollup/rollup/releases/tag/v4.0.0">2023-10-05</a></br><h2>4.0.0</h2>
<p><em>2023-10-05</em></p>
<h3>BREAKING CHANGES</h3>
<h4>General Changes</h4>
<ul>
<li>The minimal required Node version is now 18.0.0 (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899815236" data-permission-text="Title is private"
data-url="rollup/rollup#5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5142">#5142</a>)</li>
<li>The browser build now relies on a WASM artifact that needs to be
provided as well (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The NodeJS build now relies on an optional native binary; for
unsupported platforms, users can use the <code>@ rollup/wasm-node</code>
package that has the same interface as Rollup but relies on WASM
artifacts (<a class="issue-link js-issue-link" data-error-text="Failed
to load title" data-id="1820063431" data-permission-text="Title is
private" data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The "with" syntax for import attributes is not yet supported,
awaiting support in SWC (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The <code>INVALID_IMPORT_ASSERTION</code> error code has been
replaced with <code>INVALID_IMPORT_ATTRIBUTE</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Rollup will now warn for <code>@ __PURE__</code> and <code>@
__NO_SIDE_EFFECTS__</code> annotations in invalid locations (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1921228669" data-permission-text="Title is private"
data-url="rollup/rollup#5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5165">#5165</a>)</li>
<li>If an entry module starts with a shebang comment <code>#!...</code>,
this comment will be prepended to the output for <code>es</code> and
<code>cjs</code> formats (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1920177473"
data-permission-text="Title is private"
data-url="rollup/rollup#5163"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5163/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5163">#5163</a>)</li>
<li>File hashes will now use url-safe base64 encoded hashes (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1911769288" data-permission-text="Title is private"
data-url="rollup/rollup#5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5155">#5155</a>)</li>
<li>The maximum hash length has been reduced to 22 characters (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1911769288" data-permission-text="Title is private"
data-url="rollup/rollup#5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5155">#5155</a>)</li>
<li>The <code>RollupWarning</code> type has been removed in favor of the
<code>RollupLog</code> type (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1906127628"
data-permission-text="Title is private"
data-url="rollup/rollup#5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5147">#5147</a>)</li>
</ul>
<h4>Changes to Rollup Options</h4>
<ul>
<li>Acorn plugins are no longer supported, the
<code>acornInjectPlugins</code> option has been removed (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>The <code>acorn</code> option has been removed (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li><code>output.externalImportAssertions</code> has been deprecated in
favor of <code>output.externalImportAttributes</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li><code>inlineDynamicImports</code>, <code>manualChunks</code> and
<code>preserveModules</code> have been removed on input option level:
Please use the corresponding output options of the same names (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
<li>Removed output options (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1899897351"
data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>):
<ul>
<li><code>output.experimentalDeepDynamicChunkOptimization</code>: This
option is no longer needed as Rollup now always runs the full chunking
algorithm</li>
<li><code>output.dynamicImportFunction</code>: Use the
<code>renderDynamicImport</code> plugin hook instead</li>
<li><code>output.namespaceToStringTag</code>: Use
<code>output.generatedCode.symbols</code> instead</li>
<li><code>output.preferConst</code>: Use
<code>output.generatedCode.constBindings</code> instead</li>
</ul>
</li>
</ul>
<h4>Plugin API Changes</h4>
<ul>
<li>For <code>this.resolve</code>, the default of the
<code>skipSelf</code> option is now <code>true</code> (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899815236" data-permission-text="Title is private"
data-url="rollup/rollup#5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5142">#5142</a>)</li>
<li><code>this.parse</code> now only supports the
<code>allowReturnOutsideFunction</code> option for now (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Import assertions now use the <a
href="https://snyk.io/redirect/github/estree/estree/blob/master/experimental/import-attributes.md">new
import attribute AST structure</a> (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>"assertions" have been replaced with "attributes" in various places
of the plugin interface (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1820063431"
data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>If the import of a module id is handled by the <code>load</code>
hook of a plugin, <code>rollup.watch</code> no longer watches the actual
file if the module id corresponds to a real path; if this is intended,
then the plugin is responsible for calling
<code>this.addWatchFile</code> for any dependency files (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1908157110" data-permission-text="Title is private"
data-url="rollup/rollup#5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5150">#5150</a>)</li>
<li>The normalized input options provided by <code>buildStart</code> and
other hooks no longer contain an <code>onwarn</code> handler; plugins
should use <code>onLog</code> instead (<a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="1906127628" data-permission-text="Title is private"
data-url="rollup/rollup#5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5147">#5147</a>)</li>
<li><code>this.moduleIds</code> has been removed from the plugin
context: Use <code>this.getModuleIds()</code> instead (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
<li>The <code>hasModuleSideEffects</code> flag has been removed from the
<code>ModuleInfo</code> returned by <code>thi s.getModuleInfo()</code>:
Use <code>moduleSideEffects</code> on the <code>ModuleInfo</code>
instead (<a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="1899897351" data-permission-text="Title is private"
data-url="rollup/rollup#5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5143">#5143</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>Improve parsing speed by switching to a native SWC-based parser (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1820063431" data-permission-text="Title is private"
data-url="rollup/rollup#5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5073">#5073</a>)</li>
<li>Rollup will now warn for <code>@ __PURE__</code> and <code>@
__NO_SIDE_EFFECTS__</code> annotations in invalid locations (<a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="1921228669" data-permission-text="Title is private"
data-url="rollup/rollup#5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5165">#5165</a>)</li>
<li>The parser is now exposed as a separate export <code>parseAst</code>
(<a class="issue-link js-issue-link" data-error-text="Failed to load
title" data-id="1928078406" data-permission-text="Title is private"
data-url="rollup/rollup#5169"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5169/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5169">#5169</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Rollup no longer tries to watch virtual files if their name
corresponds to an actual file name; instead, plugins handle watching via
<code>this.addWatchFile()</code> (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="1908157110"
data-permission-text="Title is private"
data-url="rollup/rollup#5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard"
href="https://snyk.io/redirect/github/rollup/rollup/pull/5150">#5150</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5073"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5073/hovercard">#5073</a>:
[v4.0] Switch parser to SWC and introduce native/WASM code (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5142"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5142/hovercard">#5142</a>:
[v4.0] Set the default of skipSelf to true (<a class="user-mention
notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5143"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5143/hovercard">#5143</a>:
[v4.0] Remove deprecated features (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5144"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5144/hovercard">#5144</a>:
[v4.0] Imporve the performance of generating ast and rollup ast nodes
(<a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5147"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5147/hovercard">#5147</a>:
[v4.0] Remove onwarn from normalized input options (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5150"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5150/hovercard">#5150</a>:
[v4.0] feat: Do not watch files anymore if their content is returned by
the load hook (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5154"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5154/hovercard">#5154</a>:
[v4.0] Add parse option to allow return outside function (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5155"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5155/hovercard">#5155</a>:
[v4.0] feat: implement hashing content in Rust (<a class="user-mention
notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5157"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5157/hovercard">#5157</a>:
[v4.0] Handle empty exports (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5160"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5160/hovercard">#5160</a>:
chore(deps): lock file maintenance minor/patch updates (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/renovate/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/renovate">@
renovate</a>[bot])</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5163"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5163/hovercard">#5163</a>:
[v4.0] feat: preserve shebang in entry module for CJS and ESM outputs
(<a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5164"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5164/hovercard">#5164</a>:
[v4.0] fix: also strip BOM from code strings in JS (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/TrickyPi/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/TrickyPi">@ TrickyPi</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5165"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5165/hovercard">#5165</a>:
[v4.0] warn for invalid annotations (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5168"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5168/hovercard">#5168</a>:
[v4.0] Ensure we support new import attribute "with" syntax (<a
class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
<li><a href="https://snyk.io/redirect/github/rollup/rollup/pull/5169"
data-hovercard-type="pull_request"
data-hovercard-url="/rollup/rollup/pull/5169/hovercard">#5169</a>:
[v4.0] Expose parser (<a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/lukastaegert/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://snyk.io/redirect/github/lukastaegert">@
lukastaegert</a>)</li>
</ul>
</li>
</ul>
from <a
href="https://snyk.io/redirect/github/rollup/rollup/releases">rollup
GitHub release notes</a>
</details>
</details>
<details>
<summary><b>Commit messages</b></summary>
</br>
<details>
<summary>Package name: <b>rollup</b></summary>
<ul>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/3d9c833c4fcb666301967554bac7ab0a0a698efe">3d9c833</a>
4.0.2</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/b132bd43144b7699eda599ac5aa4693b7f5c0867">b132bd4</a>
Handle special characters before double underscores (#5178)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/fcab1f610fefb24621ce001dfb0831dd30e59ab3">fcab1f6</a>
4.0.1</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/10eb5e8e43613ef91ee9e1bf0c46eb34dbac6110">10eb5e8</a>
Fix linux arm musl build (#5176)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/4611d8170cbd70a18d9096b166db975a2118f645">4611d81</a>
fix: ignores empty statements in class body that is returned by SWC
parser (#5173)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/7d88ef0709e3c4719b51ee206d0b664bcb4ff8b6">7d88ef0</a>
chore(deps): lock file maintenance minor/patch updates (#5172)</li>
<li><a
href="https://snyk.io/redirect/github/rollup/rollup/commit/95c2da8a46263b5f0f59e1e5cc85710e2fef8ea4">95c2da8</a>
Fix REPL artifacts workflow</li>
</ul>
<a
href="https://snyk.io/redirect/github/rollup/rollup/compare/2f261358c62b4f9e62cb86bf99de8d4ff3668994...3d9c833c4fcb666301967554bac7ab0a0a698efe">Compare</a>
</details>
</details>
<hr/>
**Note:** *You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs.*
For more information: <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI2ZDFmNzdkNi04ZTQ3LTQ3MmEtYTUwMy01YTAxNmY4MmMxMjMiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjZkMWY3N2Q2LThlNDctNDcyYS1hNTAzLTVhMDE2ZjgyYzEyMyJ9fQ=="
width="0" height="0"/>
🧐 [View latest project
report](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302/settings/integration?pkg=rollup&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
<!---
(snyk:metadata:{"prId":"6d1f77d6-8e47-472a-a503-5a016f82c123","prPublicId":"6d1f77d6-8e47-472a-a503-5a016f82c123","dependencies":[{"name":"rollup","from":"4.0.0","to":"4.0.2"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/woodpile37/project/edb93f5a-17e2-4a56-beb9-1796f0e58302?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"edb93f5a-17e2-4a56-beb9-1796f0e58302","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":2,"publishedDate":"2023-10-06T14:19:12.344Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[]})
--->
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^6.9.0->^6.9.1^6.5.3->^6.5.4^6.19.0->^6.20.21.0.1->1.0.2~14.18.61->~14.18.63^21.0.0->^21.0.1^6.7.2->^6.7.3^6.7.2->^6.7.3^8.49.0->^8.50.0^3.29.2->^3.29.33.29.4^5.19.4->^5.20.0^1.0.0-rc.14->^1.0.0-rc.20🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
codemirror/view (@codemirror/view)
v6.20.2Compare Source
Bug fixes
Fix an issue in the way the DOM selection is being read that could break backspacing of widgets on Android.
Fix a bug where the editor could incorrectly computate its transform scale when it was small.
v6.20.1Compare Source
Bug fixes
Fix a crash in plugin event handlers after dynamic reconfiguration.
Fix an issue where, on Chrome, tooltips would no longer use fixed positioning.
typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v6.7.3Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v6.7.3Compare Source
Note: Version bump only for package @typescript-eslint/parser
You can read about our versioning strategy and releases on our website.
eslint/eslint (eslint)
v8.50.0Compare Source
Features
27d5a9efeat: add suggestions to array-callback-return (#17590) (Tanuj Kanti)f9082fffeat: flat-rule-tester make sure default config always matches (#17585) (fnx)83914adfeat: Implement SourceCode#applyInlineConfig() (#17351) (Nicholas C. Zakas)22a5582feat: add ruleno-object-constructor, deprecateno-new-object(#17576) (Francesco Trotta)85a3d9efeat: allowVoid option in array-callback-return (#17564) (Tanuj Kanti)Bug Fixes
cc4d26bfix: Ensure deprecated context.parserServices warns (#17593) (Nicholas C. Zakas)1ea4cfbfix: Ensure all RuleTester tests all deprecated context methods (#17587) (Nicholas C. Zakas)aa1b657fix: wrong suggestion and message inno-misleading-character-class(#17571) (Yosuke Ota)Documentation
1800537docs: Fix and standardize JSX code examples (#17591) (Francesco Trotta)48a44a7docs: Add correct/incorrect tags toprefer-arrow-callback(#17589) (Francesco Trotta)20893d4docs: fix incorrect tag's place (#17575) (Tanuj Kanti)bd7a71fdocs: Update README (GitHub Actions Bot)Chores
f8a8a2dchore: upgrade @eslint/js@8.50.0 (#17599) (Milos Djermanovic)38ada6dchore: package.json update for @eslint/js release (ESLint Jenkins)rollup/rollup (rollup)
v3.29.3Compare Source
2023-09-24
Bug Fixes
Pull Requests
vuejs/vitepress (vitepress)
v1.0.0-rc.20Compare Source
Bug Fixes
v1.0.0-rc.19Compare Source
v1.0.0-rc.18Compare Source
v1.0.0-rc.17Compare Source
v1.0.0-rc.16Compare Source
Configuration
📅 Schedule: Branch creation - "before 4am on Friday" (UTC), Automerge - "after 10am on Friday" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.