[Snyk] Upgrade rollup-plugin-typescript2 from 0.20.1 to 0.36.0

[nickfnblum]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade rollup-plugin-typescript2 from 0.20.1 to 0.36.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 30 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-09-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Validation Bypass SNYK-JS-KINDOF-537849	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: rollup-plugin-typescript2

• 0.36.0 - 2023-09-27
  

  Features/bugfixes

  • support newer moduleResolution kinds, update build to TS 5.x by @ ezolenko in #453
  • fix: hardcode declaration extension check by @ agilgur5 in #456

  Internal (testing, refactors)

  • github: mark dist/* as generated code by @ agilgur5 in #457
  • deps: auto-update semver via npm audit fix by @ agilgur5 in #459
  • switching from tslint (deprecated) to eslint by @ ezolenko in #463

  Full Changelog: 0.35.0...0.36.0

• 0.35.0 - 2023-06-23
  

  Features

  • Support module: "ES2022" by @ ezolenko in #450
  • Support cts/mts file types by @ ezolenko in #451

  Bugfixes

  • Disable cache in watch mode by @ ezolenko in #452

  Full Changelog: 0.34.1...0.35.0

• 0.34.1 - 2022-10-03
  

  Bugfixes

  • fix: don't error out while catching a buildStart error by @ agilgur5 in #422
    • This fixes an initialization regression in 0.34.0 where users saw TypeError: Cannot read property 'done' of undefined instead of their actual initialization error, such as a tsconfig issue (such as with #421)
  • fix: add compatibility checks w/ semver by @ agilgur5 in #424
    • 0.34.0 introduced a type-only fix that relied on Rollup 2.60.0+ and would (accidentally) error out on older versions of Rollup. This fix handles it gracefully with a clear warning message instead and skips that check when using an older version of Rollup (i.e. partly backward-compatible).
    • This also adds an error if peerDependencies minimum versions have not been met
  • fix: don't resolve filtered files by @ agilgur5 in #428
    • This fixes a regression from 0.33.0 that could cause rpt2 to (accidentally) resolve files that should have been filtered out by the plugin include/exclude (such as with #427)

  Internal (testing, refactors)

  • clean(deps): remove unused @ types/resolve by @ agilgur5 in #423
  • test: increase no-errors integration timeout to 20s by @ agilgur5 in #425

  Full Changelog: 0.34.0...0.34.1

• 0.34.0 - 2022-09-12
  

  Bugfixes

  • fix: handle all type-only imports by piping TS imports by @ agilgur5 in #406
    • If you have ever had issues with some files not being type-checked or not generating declarations, this should conclusively fix all such issues. This type of issue used to occur if you had a type-only / interface-only / emit-less file, i.e. a file with only TS types and interfaces that would produce no JS.
      • For instance: #211, #298, #409, etc
    • NOTE: This requires Rollup version 2.60.0+ as it requires the use of this.load
      • 0.34.0 will (accidentally) error out on older versions of Rollup. 0.34.1 patched this to instead give a warning and skip this check on older versions of Rollup.
  More Fixes ...

  • fix(dx): remove extra quote in emitDeclarationOnly log statement by @ agilgur5 in #412

  Docs

  • docs: add a simple CHANGELOG.md that references GH releases by @ agilgur5 in #419
    • i.e. it references this page

  Internal (testing, refactors)

  • test: ensure declarationMap sources are correct by @ agilgur5 in #403
  • test: add print-diagnostics spec by @ agilgur5 in #405
  More Internal ...

  • refactor(test): heavily simplify the context helper by @ agilgur5 in #404
  • refactor: combine check-tsconfig with parse-tsconfig by @ agilgur5 in #413
  • clean: remove ConsoleContext entirely by using buildStart by @ agilgur5 in #414
  • refactor(cache): simplify creating / using the cache var by @ agilgur5 in #415
  • refactor: consolidate diagnostics funcs into single file by @ agilgur5 in #415

  Full Changelog: 0.33.0.1...0.34.0

• 0.33.0 - 2022-08-19
  
  • similar to the other safety checks in clean, this won't be hit during normal usage
• 0.32.1 - 2022-06-06
  

  Bugfixes

  • deps: upgrade @ rollup/plugin-commonjs to v22 to fix try/catch requires by @ agilgur5 in #340
    • This fixes a regression in 0.32.0 that caused users with certain environments to experience ReferenceError: window is not defined when importing rpt2. See #339

  Full Changelog: 0.32.0...0.32.1

• 0.32.0 - 2022-06-01
  Read more
• 0.31.2 - 2022-02-01
  

  What's Changed

  • chore: should not lock deps version by @ bluelovers in #293
  • Add trace method to the LanguageServiceHost to enable usage with traceResolution by @ Andarist in #296

  Full Changelog: 0.31.1...0.31.2

• 0.31.1 - 2021-11-23
  

  Fix for #291

  Full Changelog: 0.31.0...0.31.1

• 0.31.0 - 2021-11-17
• 0.30.0 - 2021-02-18
• 0.29.0 - 2020-10-30
• 0.28.0 - 2020-10-16
• 0.27.3 - 2020-09-25
• 0.27.2 - 2020-08-07
• 0.27.1 - 2020-05-12
• 0.27.0 - 2020-03-27
• 0.26.0 - 2020-02-12
• 0.25.3 - 2019-12-03
• 0.25.2 - 2019-11-05
• 0.24.3 - 2019-09-26
• 0.24.2 - 2019-09-12
• 0.24.1 - 2019-09-09
• 0.24.0 - 2019-08-28
• 0.23.0 - 2019-08-23
• 0.22.1 - 2019-07-26
• 0.22.0 - 2019-07-11
• 0.21.2 - 2019-06-17
• 0.21.1 - 2019-05-17
• 0.21.0 - 2019-04-23
• 0.20.1 - 2019-03-13

from rollup-plugin-typescript2 GitHub release notes

Commit messages

Package name: rollup-plugin-typescript2

• e9ede1d - build
• 592ed5c switching from tslint (deprecated) to eslint (No Makefile or INSTALL file in linux binary package nodejs/node#463)
• fc85376 - build version
• ce2038d support newer `moduleResolution` kinds
• b43001e deps: auto-update `semver` via `npm audit fix` (fixed spelling nodejs/node#459)
• 976dadb fix: hardcode declaration extension check (Packages that currently do not work with io.js [List] nodejs/node#456)
• 61c7392 github: mark `dist/*` as generated code (crypto: use X509_V_FLAG_TRUSTED_FIRST for tls nodejs/node#457)
• 68017ae Adding node 20.x to unit test environments
• 31f61f7 - build for 0.35.0
• bb78363 - fix for unittest
• 2cb2660 cts/mts support (stream: add isFlowing method nodejs/node#451)
• f861350 - disabling cache in watch mode (Trouble with tls.createSecureContext nodejs/node#452)
• 59817c4 - enabling ES2022 module (response.setHeader (iojs 1.0.1) != response.setHeader (node 11.14) nodejs/node#450)
• f6db596 fix: don't resolve `filter`ed files (plans on incorporating LibreSSL nodejs/node#428)
• 3ef3289 fix: add compatibility checks w/ `semver` (iojs.org doesn't support resumable downloads nodejs/node#424)
• a1ae42b test: increase `no-errors` integration timeout to 20s (doc: update cluster entry in CHANGELOG nodejs/node#425)
• ffb562d clean(deps): remove unused `@ types/resolve` (deps: update libuv to 1.2.1 nodejs/node#423)
• e8f59ef fix: don't error out while catching a `buildStart` error (deps: make node-gyp work again on windows nodejs/node#422)
• 0b99f8e - build for 34.0
• ba26293 refactor: consolidate `diagnostics` funcs into single file (Should all the python and shell tools be rewritten into js?  nodejs/node#416)
• e98e0ed docs: add a simple CHANGELOG.md that references GH releases (url: improve parsing speed and code style nodejs/node#419)
• 560ed8d fix: handle all type-only imports by piping TS imports (Improve performance of event and timer interfaces nodejs/node#406)
• c6be0eb refactor(cache): simplify creating / using the `cache` var (deps: make node-gyp fetch .lib from correct url nodejs/node#415)
• 1e71d50 clean: remove `ConsoleContext` entirely by using `buildStart` (Gulp won't work after update from node v0.10.35 to io.js 1.0.1 nodejs/node#414)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[probot-cc]

You have succesfully installed probot-cc, now please create a .github/customizable-comments.yml file in your repository to customize this message.