[Snyk] Upgrade rollup from 4.22.4 to 4.52.4 #428
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade rollup from 4.22.4 to 4.52.4. See this package in npm: rollup See this project in Snyk: https://app.snyk.io/org/nerds-github/project/cff36355-d877-492a-a8fd-40687822fe66?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade rollup from 4.22.4 to 4.52.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 92 versions ahead of your current version.
The recommended version was released 22 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-CROSSSPAWN-8303230
SNYK-JS-BRACEEXPANSION-9789073
Release notes
Package name: rollup
-
4.52.4 - 2025-10-03
- Fix an issue where the wrong branch of nullish coalescing was picked (#6133)
- #6128: Enable npm OIDC publishing (@ lukastaegert)
- #6133: Correct nullish coalescing branch resolution for symbol left value (@ TrickyPi)
- #6134: fix(deps): lock file maintenance minor/patch updates (@ renovate[bot], @ lukastaegert)
-
4.52.4-3 - 2025-09-28
-
4.52.4-2 - 2025-09-28
-
4.52.4-1 - 2025-09-28
-
4.52.3 - 2025-09-27
- Fix check in native loader for environments that do not support reports (#6123)
- #6123: fix(native-loader): safely handle report.getReport() on Termux/Android (@ Jobians, @ lukastaegert)
- #6124: chore(deps): pin msys2/setup-msys2 action to fb197b7 (@ renovate[bot])
- #6125: fix(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #6126: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
-
4.52.2 - 2025-09-23
- Fix Android build crashing due to failed dlopen (#6109)
- #6109: fix(rust): use prebuilt std when it is available (@ cyyynthia)
-
4.52.1 - 2025-09-23
- Opt-out of dynamic import optimization when using top-level await to effectively prevent deadlocks (#6121)
- #6121: Simplify top-level await deadlock prevention (@ lukastaegert)
-
4.52.0 - 2025-09-19
- Add option
- Add support for x86_64-pc-windows-gnu platform (#6110)
- #6087: fix: manualChunks and non manualChunks shared dependencies are merged with the first manualChunk encountered alphabetically (@ maiieul)
- #6110: Add support x86_64-pc-windows-gnu (@ lsq, @ lukastaegert)
- #6118: Automatically remove REPL artefacts label from PRs (@ lukastaegert)
-
4.51.1-0 - 2025-09-19
-
4.51.0 - 2025-09-19
- Support ROLLUP_FILE_URL_OBJ placeholder to inject file URLs into the generated code (#6108)
- Improve OpenHarmony build to work in more situations (#6115)
- #6108: feat: support ROLLUP_FILE_URL_OBJ for URL object instead of string (@ guybedford, @ lukastaegert)
- #6112: Disable Cargo cache for Android (@ lukastaegert)
- #6113: fix(deps): update rust crate swc_compiler_base to v35 (@ renovate[bot])
- #6114: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #6115: Disable local_dynamic_tls for OpenHarmony (@ hqzing)
- #6116: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #6117: chore(deps): lock file maintenance (@ renovate[bot])
-
4.50.3-0 - 2025-09-19
-
4.50.2 - 2025-09-15
- Resolve an issue where unused destructured array pattern declarations would conflict with included variables (#6100)
- #6100: Tree-shake un-included elements in array pattern (@ TrickyPi)
- #6102: chore(deps): update actions/setup-node action to v5 (@ renovate[bot])
- #6103: chore(deps): update dependency eslint-plugin-unicorn to v61 (@ renovate[bot])
- #6104: fix(deps): update swc monorepo (major) (@ renovate[bot])
- #6105: fix(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #6107: Improve CI stability (@ lukastaegert)
-
4.50.2-2 - 2025-09-15
-
4.50.1 - 2025-09-07
- Resolve a situation where a destructuring default value was removed (#6090)
- #6088: feat(www): shorter repl shareables (@ cyyynthia, @ lukastaegert)
- #6090: Call includeNode for self or children nodes in includeDestructuredIfNecessary (@ TrickyPi)
- #6091: fix(deps): update rust crate swc_compiler_base to v33 (@ renovate[bot])
- #6092: chore(deps): lock file maintenance minor/patch updates (@ renovate[bot])
- #6094: perf: replace startsWith with strict equality (@ btea)
-
4.50.0 - 2025-08-31
-
4.49.0 - 2025-08-27
-
4.48.1 - 2025-08-25
-
4.48.0 - 2025-08-23
-
4.48.0-0 - 2025-08-22
-
4.47.1 - 2025-08-21
-
4.47.0 - 2025-08-21
-
4.46.4 - 2025-08-20
-
4.46.3 - 2025-08-18
-
4.46.2 - 2025-07-29
-
4.46.1 - 2025-07-28
-
4.46.0 - 2025-07-27
-
4.45.3 - 2025-07-26
-
4.45.1 - 2025-07-15
-
4.45.0 - 2025-07-12
-
4.44.2 - 2025-07-04
-
4.44.1 - 2025-06-26
-
4.44.0 - 2025-06-19
-
4.43.0 - 2025-06-11
-
4.42.0 - 2025-06-06
-
4.41.2 - 2025-06-06
-
4.41.1 - 2025-05-24
-
4.41.0 - 2025-05-18
-
4.40.2 - 2025-05-06
-
4.40.1 - 2025-04-28
-
4.40.0 - 2025-04-12
-
4.39.0 - 2025-04-02
-
4.38.0 - 2025-03-29
-
4.37.0 - 2025-03-23
-
4.36.0 - 2025-03-17
-
4.35.0 - 2025-03-08
-
4.34.9 - 2025-03-01
-
4.34.8 - 2025-02-17
-
4.34.7 - 2025-02-14
-
4.34.6 - 2025-02-07
-
4.34.5 - 2025-02-07
-
4.34.4 - 2025-02-05
-
4.34.3 - 2025-02-05
-
4.34.2 - 2025-02-04
-
4.34.1 - 2025-02-03
-
4.34.0 - 2025-02-01
-
4.33.0 - 2025-02-01
-
4.33.0-0 - 2025-01-28
-
4.32.1 - 2025-01-28
-
4.32.0 - 2025-01-24
-
4.31.0 - 2025-01-19
-
4.31.0-0 - 2025-01-14
-
4.30.1 - 2025-01-07
-
4.30.0 - 2025-01-06
-
4.30.0-1 - 2024-12-30
-
4.30.0-0 - 2024-12-21
-
4.29.2 - 2025-01-05
-
4.29.1 - 2024-12-21
-
4.29.0 - 2024-12-20
-
4.29.0-2 - 2024-12-20
-
4.29.0-1 - 2024-12-19
-
4.29.0-0 - 2024-12-16
-
4.28.1 - 2024-12-06
-
4.28.0 - 2024-11-30
-
4.27.4 - 2024-11-23
-
4.27.3 - 2024-11-18
-
4.27.2 - 2024-11-15
-
4.27.1 - 2024-11-15
-
4.27.1-1 - 2024-11-15
-
4.27.1-0 - 2024-11-15
-
4.27.0 - 2024-11-15
-
4.27.0-1 - 2024-11-14
-
4.27.0-0 - 2024-11-13
-
4.26.0 - 2024-11-13
-
4.25.0 - 2024-11-09
-
4.25.0-0 - 2024-10-29
-
4.24.4 - 2024-11-04
-
4.24.3 - 2024-10-29
-
4.24.2 - 2024-10-27
-
4.24.1 - 2024-10-27
-
4.24.0 - 2024-10-02
-
4.23.0 - 2024-10-01
-
4.22.5 - 2024-09-27
-
4.22.4 - 2024-09-21
from rollup GitHub release notes4.52.4
2025-10-03
Bug Fixes
Pull Requests
4.52.3
2025-09-27
Bug Fixes
Pull Requests
4.52.2
2025-09-23
Bug Fixes
Pull Requests
4.52.1
2025-09-23
Bug Fixes
Pull Requests
4.52.0
2025-09-19
Features
output.onlyExplicitManualChunksto turn off merging additional dependencies into manual chunks (#6087)Pull Requests
4.51.1-0
4.51.0
2025-09-19
Features
Bug Fixes
Pull Requests
4.50.3-0
4.50.2
2025-09-15
Bug Fixes
Pull Requests
4.50.1
2025-09-07
Bug Fixes
Pull Requests
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: