Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency rollup to v4 #210

Merged
merged 1 commit into from
Jan 22, 2024
Merged

chore(deps): update dependency rollup to v4 #210

merged 1 commit into from
Jan 22, 2024

Conversation

tradeshift-renovate[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
rollup (source) devDependencies major ^3.22.0 -> ^4.0.0

Release Notes

rollup/rollup (rollup)

v4.9.6

Compare Source

2024-01-21

Bug Fixes
  • Detect side effects when an element that was pushed into an array is modified via the array (#​5352)
Pull Requests

v4.9.5

Compare Source

2024-01-12

Bug Fixes
  • Fix issue where on Windows, Rollup would not load due to problems with the MSVC executable (#​5335)
Pull Requests

v4.9.4

Compare Source

2024-01-06

Bug Fixes
  • Use quotes for keys in namespaces that are only numbers but are not valid integers (#​5328)
  • Allow to have comments between pure annotations and the annoted node (#​5332)
Pull Requests

v4.9.3

Compare Source

2024-01-05

Bug Fixes
  • Support __proto__ as export/import name (#​5313)
  • Use ESTree AST type over custom type in user-facing types (#​5323)
Pull Requests

v4.9.2

Compare Source

2023-12-30

Bug Fixes
  • Extend support for arbitrary namespace identifiers in SystemJS (#​5321)
  • Do not wrongly flag functions without side effects as side effects if moduleSideEffects is false (#​5322)
Pull Requests

v4.9.1

Compare Source

2023-12-17

Bug Fixes
  • Fix an issue where break statements could include the wrong label (#​5297)
Pull Requests

v4.9.0

Compare Source

2023-12-13

Features
  • Fully support arbitrary strings as import and export identifiers (#​5298)
Pull Requests

v4.8.0

Compare Source

2023-12-11

Features
  • Improve experimentalMinChunkSize to take already loaded modules from dynamic imports into account (#​5294)
Pull Requests

v4.7.0

Compare Source

2023-12-08

Features
  • Add build for Linux riscv64 architecture (#​5288)
Bug Fixes
  • Improve error message when native Windows build does not start (#​5284)
Pull Requests

v4.6.1

Compare Source

2023-11-30

Bug Fixes
  • Resolve a situation where declaring the same var several times was considered a conflict (#​5276)
Pull Requests

v4.6.0

Compare Source

2023-11-26

Features
  • Allow this.addWatchFile in all plugin hooks (#​5270)
Bug Fixes
  • Show helpful error when native binaries are not installed due to an npm issue (#​5267)
  • Do not access this context in this.addWatchFile so it does not need to be bound when passed around (#​5270)
Pull Requests

v4.5.2

Compare Source

2023-11-24

Bug Fixes
  • Handle files with UTF-8 BOM when using the commonjs plugin (#​5268)
Pull Requests

v4.5.1

Compare Source

2023-11-21

Bug Fixes
  • Do not error when a function expression uses the same name for a parameter and its id (#​5262)
Pull Requests

v4.5.0

Compare Source

2023-11-18

Bug Fixes
  • Show a proper error when using native Rollup on armv7 musl Linux (#​5255)
Pull Requests

v4.4.1

Compare Source

2023-11-14

Bug Fixes
  • Do not flag duplicate function declarations in function scopes as syntax errors (#​5248)
Pull Requests

v4.4.0

Compare Source

2023-11-12

Features
  • Replace SWC linting with faster internal linting to error on duplicate declarations etc. (#​5207)
Bug Fixes
  • Show proper error when an entry exports non-existing bindings (#​5207)
Pull Requests

v4.3.1

Compare Source

2023-11-11

Bug Fixes
  • Fix rename error when handling errors in watch mode (#​5240)
  • Prevent warning when using --forceExit (#​5245)
Pull Requests

v4.3.0

Compare Source

2023-11-03

Features
  • Add forceExit CLI flag for situations where the CLI does not exit gracefully (#​5195)
Bug Fixes
  • Properly catch errors when removing a temporary config file fails (#​5198)
Pull Requests

v4.2.0

Compare Source

2023-10-31

Features
  • Run parsing in multiple threads and introduce parseAstAsync helper function (#​5202)
Pull Requests

v4.1.6

Compare Source

2023-10-31

Bug Fixes
  • Fix a bug where emtpy block comments in certain positions could freeze Rollup (#​5231)
Pull Requests

v4.1.5

Compare Source

2023-10-28

Bug Fixes
  • Fix an issue where actual entries that were also implicit entries could remain implicit (#​5220)
Pull Requests

v4.1.4

Compare Source

2023-10-16

Bug Fixes
Pull Requests

v4.1.3

Compare Source

2023-10-15

Bug Fixes
  • Fix WASM build as hash function was not exported (#​5203)
Pull Requests

v4.1.1

Compare Source

2023-10-15

Bug Fixes
  • Improve Node parsing performance (#​5201)
Pull Requests

v4.1.0

Compare Source

2023-10-14

Features
  • Reduce memory usage of Rollup builds (#​5133)
Pull Requests

v4.0.2

Compare Source

2023-10-06

Bug Fixes
  • Fix annotation detection logic to not fail when a non-ASCII character precedes a double underscore (#​5178)
Pull Requests

v4.0.1

Compare Source

2023-10-06

Bug Fixes
  • Do not panic on trailing semicolons after class methods (#​5173)
  • Add artifact for arm64 linux musl target (#​5176)
Pull Requests

v4.0.0

Compare Source

2023-10-05

BREAKING CHANGES
General Changes
  • The minimal required Node version is now 18.0.0 (#​5142)
  • The browser build now relies on a WASM artifact that needs to be provided as well (#​5073)
  • The NodeJS build now relies on an optional native binary; for unsupported platforms, users can use the @rollup/wasm-node package that has the same interface as Rollup but relies on WASM artifacts (#​5073)
  • The INVALID_IMPORT_ASSERTION error code has been replaced with INVALID_IMPORT_ATTRIBUTE (#​5073)
  • Rollup will now warn for @__PURE__ and @__NO_SIDE_EFFECTS__ annotations in invalid locations (#​5165)
  • If an entry module starts with a shebang comment #!..., this comment will be prepended to the output for es and cjs formats (#​5163)
  • File hashes will now use url-safe base64 encoded hashes (#​5155)
  • The maximum hash length has been reduced to 22 characters (#​5155)
  • The RollupWarning type has been removed in favor of the RollupLog type (#​5147)
Changes to Rollup Options
  • Acorn plugins are no longer supported, the acornInjectPlugins option has been removed (#​5073)
  • The acorn option has been removed (#​5073)
  • output.externalImportAssertions has been deprecated in favor of output.externalImportAttributes (#​5073)
  • inlineDynamicImports, manualChunks and preserveModules have been removed on input option level: Please use the corresponding output options of the same names (#​5143)
  • Removed output options (#​5143):
    • output.experimentalDeepDynamicChunkOptimization: This option is no longer needed as Rollup now always runs the full chunking algorithm
    • output.dynamicImportFunction: Use the renderDynamicImport plugin hook instead
    • output.namespaceToStringTag: Use output.generatedCode.symbols instead
    • output.preferConst: Use output.generatedCode.constBindings instead
Plugin API Changes
  • For this.resolve, the default of the skipSelf option is now true (#​5142)
  • this.parse now only supports the allowReturnOutsideFunction option for now (#​5073)
  • Import assertions now use the new import attribute AST structure (#​5073)
  • "assertions" have been replaced with "attributes" in various places of the plugin interface (#​5073)
  • If the import of a module id is handled by the load hook of a plugin, rollup.watch no longer watches the actual file if the module id corresponds to a real path; if this is intended, then the plugin is responsible for calling this.addWatchFile for any dependency files (#​5150)
  • The normalized input options provided by buildStart and other hooks no longer contain an onwarn handler; plugins should use onLog instead (#​5147)
  • this.moduleIds has been removed from the plugin context: Use this.getModuleIds() instead (#​5143)
  • The hasModuleSideEffects flag has been removed from the ModuleInfo returned by this.getModuleInfo(): Use moduleSideEffects on the ModuleInfo instead (#​5143)
Features
  • Improve parsing speed by switching to a native SWC-based parser (#​5073)
  • Rollup will now warn for @__PURE__ and @__NO_SIDE_EFFECTS__ annotations in invalid locations (#​5165)
  • The parser is now exposed as a separate export parseAst (#​5169)
Bug Fixes
  • Rollup no longer tries to watch virtual files if their name corresponds to an actual file name; instead, plugins handle watching via this.addWatchFile() (#​5150)
Pull Requests

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@tradeshift-renovate tradeshift-renovate bot requested review from a team as code owners January 22, 2024 20:24
@tradeshift-renovate tradeshift-renovate bot added dependencies Pull requests that update a dependency file dev labels Jan 22, 2024
@tradeshift-renovate tradeshift-renovate bot enabled auto-merge (squash) January 22, 2024 20:24
@tradeshift-renovate
Copy link
Contributor Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm WARN config cert `key` and `cert` are no longer used for most registry operations.
npm WARN config Use registry scoped `keyfile` and `certfile` instead.
npm WARN config     Example:
npm WARN config     //other-registry.tld/:keyfile=/path/to/key.pem
npm WARN config     //other-registry.tld/:certfile=/path/to/cert.crt
npm WARN config key `key` and `cert` are no longer used for most registry operations.
npm WARN config Use registry scoped `keyfile` and `certfile` instead.
npm WARN config     Example:
npm WARN config     //other-registry.tld/:keyfile=/path/to/key.pem
npm WARN config     //other-registry.tld/:certfile=/path/to/cert.crt
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @rollup/plugin-babel@6.0.3
npm ERR! Found: rollup@4.9.6
npm ERR! node_modules/rollup
npm ERR!   dev rollup@"^4.0.0" from the root project
npm ERR!   peerOptional rollup@"^1.20.0||^2.0.0||^3.0.0||^4.0.0" from @rollup/plugin-json@6.1.0
npm ERR!   node_modules/@rollup/plugin-json
npm ERR!     dev @rollup/plugin-json@"^6.0.0" from the root project
npm ERR!   2 more (@rollup/plugin-node-resolve, @rollup/pluginutils)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peerOptional rollup@"^1.20.0||^2.0.0||^3.0.0" from @rollup/plugin-babel@6.0.3
npm ERR! node_modules/@rollup/plugin-babel
npm ERR!   dev @rollup/plugin-babel@"^6.0.3" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: rollup@3.29.4
npm ERR! node_modules/rollup
npm ERR!   peerOptional rollup@"^1.20.0||^2.0.0||^3.0.0" from @rollup/plugin-babel@6.0.3
npm ERR!   node_modules/@rollup/plugin-babel
npm ERR!     dev @rollup/plugin-babel@"^6.0.3" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! 
npm ERR! For a full report see:
npm ERR! /tmp/renovate/cache/others/npm/_logs/2024-01-22T20_24_21_695Z-eresolve-report.txt

npm ERR! A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-01-22T20_24_21_695Z-debug-0.log

@tradeshift-renovate tradeshift-renovate bot merged commit 57df18b into master Jan 22, 2024
1 check failed
@tradeshift-renovate tradeshift-renovate bot deleted the renovate/rollup-4.x branch January 22, 2024 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tssecurity tssecurity tssecurity approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file dev
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@tssecurity