Skip to content

chore(deps): update dependency rollup to v4 #764

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): update dependency rollup to v4 #764

wants to merge 1 commit into from

Conversation

tradeshift-renovate[bot]
Copy link
Contributor

@tradeshift-renovate tradeshift-renovate bot commented Jul 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
rollup (source) devDependencies major ^2.79.2 -> ^4.46.2

Release Notes

rollup/rollup (rollup)

v4.46.2

Compare Source

2025-07-29

Bug Fixes
  • Fix in-operator handling for external namespace and when the left side cannot be analyzed (#​6041)
Pull Requests

v4.46.1

Compare Source

2025-07-28

Bug Fixes
  • Do not fail when using the in operator on external namespaces (#​6036)
Pull Requests

v4.46.0

Compare Source

2025-07-27

Features
  • Optimize in checks on namespaces to keep them treeshake-able (#​6029)
Pull Requests

v4.45.3

Compare Source

2025-07-26

Bug Fixes
  • Do not fail build if a const is reassigned but warn instead (#​6020)
  • Fail with a helpful error message if an exported binding is not defined (#​6023)
Pull Requests

v4.45.1

Compare Source

2025-07-15

Bug Fixes
  • Resolve crash when using certain conditional expressions (#​6009)
Pull Requests

v4.45.0

Compare Source

2025-07-12

Features
  • Improve tree-shaking when both branches of a conditional expression return the same boolean value (#​6000)
  • In environments that support both CJS and ESM, prefer the ESM build of Rollup (#​6005)
Bug Fixes
  • Ensure static blocks do not prevent tree-shaking if they access this (#​6001)
Pull Requests

v4.44.2

Compare Source

2025-07-04

Bug Fixes
  • Correctly handle @__PURE__ annotations after new keyword (#​5998)
  • Generate correct source mapping for closing braces of block statements (#​5999)
Pull Requests

v4.44.1

Compare Source

2025-06-26

Bug Fixes
  • Reinstate maxParallelFileOps limit of 1000 to resolve the issue for some (#​5992)
Pull Requests

v4.44.0

Compare Source

2025-06-19

Features
  • Remove limit on maxParallelFileOps as this could break watch mode with the commonjs plugin (#​5986)
Bug Fixes
  • Provide better source mappings when coarse intermediate maps are used (#​5985)
Pull Requests

v4.43.0

Compare Source

2025-06-11

Features
  • Provide new fs option and this.fs API to replace file system (#​5944)
Pull Requests

v4.42.0

Compare Source

2025-06-06

Features
  • Add option to allow the input to be located in the output in watch mode (#​5966)
Pull Requests

v4.41.2

Compare Source

2025-06-06

Bug Fixes
  • Detect named export usages in dynamic imports with then and non-arrow function expressions (#​5977)
  • Do not replace usages of constant variables with their values for readability (#​5968)
Pull Requests

v4.41.1

Compare Source

2025-05-24

Bug Fixes
  • If a plugin calls this.resolve with skipSelf: true, subsequent calls when handling this by the same plugin with same parameters will return null to avoid infinite recursions (#​5945)
Pull Requests

v4.41.0

Compare Source

2025-05-18

Features
  • Detect named exports in more dynamic import scenarios (#​5954)
Pull Requests

v4.40.2

Compare Source

2025-05-06

Bug Fixes
  • Create correct IIFE/AMD/UMD bundles when using a mutable default export (#​5934)
  • Fix execution order when using top-level await for dynamic imports with inlineDynamicImports (#​5937)
  • Throw when the output is watched in watch mode (#​5939)
Pull Requests

v4.40.1

Compare Source

2025-04-28

Bug Fixes
  • Limit hash size for asset file names to the supported 21 (#​5921)
  • Do not inline user-defined entry chunks or chunks with explicit file name (#​5923)
  • Avoid top-level-await cycles when non-entry chunks use top-level await (#​5930)
  • Expose package.json via exports (#​5931)
Pull Requests

v4.40.0

Compare Source

2025-04-12

Features
  • Only show eval warnings on first render and only when the call is not tree-shaken (#​5892)
  • Tree-shake non-included dynamic import members when the handler just maps to one named export (#​5898)
Bug Fixes
  • Consider dynamic imports nested within top-level-awaited dynamic import expressions to be awaited as well (#​5900)
  • Fix namespace rendering when tree-shaking is disabled (#​5908)
  • When using multiple transform hook filters, all of them need to be satisfied together (#​5909)
Pull Requests

v4.39.0

Compare Source

2025-04-02

Features
  • Do not create separate facade chunks if a chunk would contain several entry modules that allow export extension if there are no export name conflicts (#​5891)
Bug Fixes
  • Mark the id property as optional in the filter for the resolveId hook (#​5896)
Pull Requests

v4.38.0

Compare Source

2025-03-29

Features
  • Support .filter option in resolveId, load and transform hooks (#​5882)
Pull Requests

v4.37.0

Compare Source

2025-03-23

Features
  • Support Musl Linux on Riscv64 architectures (#​5726)
  • Handles class decorators placed before the export keyword (#​5871)
Bug Fixes
  • Log Rust panic messages to the console when using the WASM build (#​5875)
Pull Requests

v4.36.0

Compare Source

2025-03-17

Features
  • Extend renderDynamicImport hook to provide information about static dependencies of the imported module (#​5870)
  • Export several additional types used by Vite (#​5879)
Bug Fixes
  • Do not merge chunks if that would create a top-level await cycle between chunks (#​5843)
Pull Requests

v4.35.0

Compare Source

2025-03-08

Features
  • Pass build errors to the closeBundle hook (#​5867)
Pull Requests

v4.34.9

Compare Source

2025-03-01

Bug Fixes
  • Support JSX modes in WASM (#​5866)
  • Allow the CustomPluginOptions to be extended (#​5850)
Pull Requests

v4.34.8

Compare Source

2025-02-17

Bug Fixes
  • Do not make assumptions about the value of nested paths in logical expressions if the expression cannot be simplified (#​5846)
Pull Requests
  • #​5846: return UnknownValue if the usedbranch is unkown and the path is not empty (@​TrickyPi)

v4.34.7

Compare Source

2025-02-14

Bug Fixes
  • Ensure that calls to parameters are included correctly when using try-catch deoptimization (#​5842)
Pull Requests

v4.34.6

Compare Source

2025-02-07

Bug Fixes
  • Retain "void 0" in the output for smaller output and fewer surprises (#​5838)
Pull Requests

v4.34.5

Compare Source

2025-02-07

Bug Fixes
  • Ensure namespace reexports always include all properties of all exports (#​5837)
Pull Requests

v4.34.4

Compare Source

2025-02-05

Bug Fixes
  • Do not tree-shake properties if a rest element is used in destructuring (#​5833)
Pull Requests

v4.34.3

Compare Source

2025-02-05

Bug Fixes
  • Ensure properties of "this" are included in getters (#​5831)
Pull Requests

v4.34.2

Compare Source

2025-02-04

Bug Fixes
  • Fix an issue where not all usages of a function were properly detected (#​5827)
Pull Requests

v4.34.1

Compare Source

2025-02-03

Bug Fixes
  • Ensure throwing objects includes the entire object (#​5825)
Pull Requests

v4.34.0

Compare Source

2025-02-01

Features
  • Tree-shake unused properties in object literals (re-implements #​5420) (#​5737)
Pull Requests

v4.33.0

Compare Source

2025-02-01

Features
  • Correctly detect literal value of more negated expressions (#​5812)
Bug Fixes
  • Use the correct with/assert attribute key in dynamic imports (#​5818)
  • Fix an issue where logical expressions were considered to have the wrong value (#​5819)
Pull Requests

v4.32.1

Compare Source

2025-01-28

Bug Fixes
  • Fix possible crash when optimizing logical expressions (#​5804)
Pull Requests

v4.32.0

Compare Source

2025-01-24

Features
  • Add watch.onInvalidate option to trigger actions immediately when a file is changed (#​5799)
Bug Fixes
  • Fix incorrect urls in CLI warnings (#​5809)
Pull Requests

v4.31.0

Compare Source

2025-01-19

Features
  • Do not immediately quit when trying to use watch mode from within non-TTY environments (#​5803)
Bug Fixes
  • Handle files with more than one UTF-8 BOM header (#​5806)
Pull Requests

v4.30.1

Compare Source

2025-01-07

Bug Fixes
  • Prevent invalid code when simplifying unary expressions in switch cases (#​5786)
Pull Requests

v4.30.0

Compare Source

2025-01-06

Features
  • Inline values of resolvable unary expressions for improved tree-shaking (#​5775)
Pull Requests

v4.29.2

Compare Source

2025-01-05

Bug Fixes
  • Keep import attributes when using dynamic ESM import() expressions from CommonJS (#​5781)
Pull Requests

v4.29.1

Compare Source

2024-12-21

Bug Fixes
  • Fix crash from deoptimized logical expressions (#​5771)
Pull Requests

v4.29.0

Compare Source

2024-12-20

Features
  • Treat objects as truthy and always check second argument to better simplify logical expressions (#​5763)
Pull Requests

v4.28.1

Compare Source

2024-12-06

Bug Fixes
  • Support running Rollup natively on LoongArch (#​5749)
  • Add optional debugId to SourceMap types (#​5751)
Pull Requests

v4.28.0

Compare Source

2024-11-30

Features
  • Allow to specify how to handle import attributes when transpiling Rollup config files (#​5743)
Pull Requests

v4.27.4

Compare Source

2024-11-23

Bug Fixes
  • Update bundled magic-string to support sourcemap debug ids (#​5740)
Pull Requests

v4.27.3

Compare Source

2024-11-18

Bug Fixes
  • Revert object property tree-shaking for now (#​5736)
Pull Requests

v4.27.2

Compare Source

2024-11-15

Bug Fixes
  • Ensure unused variables in patterns are always deconflicted if rendered (#​5728)
Pull Requests

v4.27.1

Compare Source

2024-11-15

Bug Fixes
  • Fix some situations where parameter declarations could put Rollup into an infinite loop (#​5727)
Pull Requests

v4.27.0

Compare Source

2024-11-15

Features
  • Tree-shake unused properties in object literals (#​5420)
Bug Fixes
  • Change hash length limit to 21 to avoid inconsistent hash length (#​5423)
Pull Requests

v4.26.0

Compare Source

2024-11-13

Features
  • Allow to avoid await bundle.close() via explicit resource management in TypeScript (#​5721)
Pull Requests

v4.25.0

Compare Source

2024-11-09

Features
  • Add output.sourcemapDebugIds option to add matching debug ids to sourcemaps and code for tools like Sentry or Ro

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "every weekday in 2125" (UTC).

🚦 Automerge: Enabled.

♻️ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@tradeshift-renovate tradeshift-renovate bot requested a review from a team as a code owner July 1, 2025 08:21
@tradeshift-renovate tradeshift-renovate bot added dependencies Pull requests that update a dependency file dev labels Jul 1, 2025
@tradeshift-renovate tradeshift-renovate bot requested a review from a team as a code owner July 1, 2025 08:21
@tradeshift-renovate
Copy link
Contributor Author

tradeshift-renovate bot commented Jul 1, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: rollup-plugin-terser@7.0.2
npm error Found: rollup@4.46.2
npm error node_modules/rollup
npm error   dev rollup@"^4.46.2" from the root project
npm error   peerOptional rollup@"^1.20.0||^2.0.0||^3.0.0||^4.0.0" from @rollup/plugin-babel@6.0.4
npm error   node_modules/@rollup/plugin-babel
npm error     dev @rollup/plugin-babel@"^6.0.4" from the root project
npm error   5 more (@rollup/plugin-commonjs, @rollup/plugin-json, ...)
npm error
npm error Could not resolve dependency:
npm error peer rollup@"^2.0.0" from rollup-plugin-terser@7.0.2
npm error node_modules/rollup-plugin-terser
npm error   dev rollup-plugin-terser@"^7.0.2" from the root project
npm error
npm error Conflicting peer dependency: rollup@2.79.2
npm error node_modules/rollup
npm error   peer rollup@"^2.0.0" from rollup-plugin-terser@7.0.2
npm error   node_modules/rollup-plugin-terser
npm error     dev rollup-plugin-terser@"^7.0.2" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2025-08-04T13_13_55_520Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2025-08-04T13_13_55_520Z-debug-0.log

@tradeshift-renovate tradeshift-renovate bot added dependencies Pull requests that update a dependency file dev labels Jul 1, 2025
@tradeshift-renovate tradeshift-renovate bot force-pushed the renovate/rollup-4.x branch from 002d1f7 to b232208 Compare July 1, 2025 12:11
@ts-sonarqube TS Sonarqube
Copy link

ts-sonarqube bot commented Aug 4, 2025

Passed Quality Gate passed

Issues

Measures

Project ID: elements

View in SonarQube

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tssecurity tssecurity tssecurity approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file dev
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@tssecurity