Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade rollup from 2.26.6 to 2.73.0 #57

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Jun 4, 2022

Snyk has created this PR to upgrade rollup from 2.26.6 to 2.73.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 126 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-05-13.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-YARGSPARSER-560381
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Information Exposure
SNYK-JS-NANOID-2332193
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: rollup
  • 2.73.0 - 2022-05-13

    2022-05-13

    Features

    • Do not treat Object.defineProperty/ies as side effect when called on an unused object (#4493)
    • Do not assume that assigning a property can create a getter with side effects (#4493)
    • Do not treat string.prototype.replace(All) as side effect when used with two literals (#4493)

    Bug Fixes

    • Detect side effects when manually declaring getters on functions (#4493)

    Pull Requests

  • 2.72.1 - 2022-05-07

    2022-05-07

    Bug Fixes

    • Improve tree-shaking of classes with super classes in certain scenarios (#4489)

    Pull Requests

  • 2.72.0 - 2022-05-05

    2022-05-05

    Features

    • Add CLI hooks to run external commands at certain points in watch mode (#4457)

    Bug Fixes

    • Fix an issue that could accidentally treat relevant assignments as side effect free (#4486)

    Pull Requests

  • 2.71.1 - 2022-04-30

    2022-04-30

    Bug Fixes

    • Allow importing loadConfigFile without extension (#4483)

    Pull Requests

  • 2.71.0 - 2022-04-30

    2022-04-30

    Features

    • Mark Object.hasOwn as pure (#4482)

    Bug Fixes

    • Prevent infinite recursion and display proper warning for recursive reexports (#4472)
    • Fix type issue in TypeScript nightly (#4471)

    Pull Requests

  • 2.70.2 - 2022-04-15

    2022-04-15

    Bug Fixes

    • Do not enforce undefined return values in TypeScript types (#4463)

    Pull Requests

  • 2.70.1 - 2022-03-14

    2022-03-14

    Bug Fixes

    • Handle unfinished hook action errors as regular errors and avoid console logging (#4434)
    • Allow access to "dist" folder in a Node 17 compatible way (#4436)

    Pull Requests

  • 2.70.0 - 2022-03-07

    2022-03-07

    Features

    • Make the watchChange and closeWatcher hooks asynchronous and make Rollup wait for these hooks before continuing (#4427)

    Bug Fixes

    • Do not abort watch mode for errors in watchChange but display them properly (#4427)

    Pull Requests

  • 2.69.2 - 2022-03-06

    2022-03-06

    Bug Fixes

    • Mark Object.entries and Object.fromEntries as pure (#4429)
    • Make sure new properties on Array.prototype and Object.prototype are not evaluated as "undefined" (#4428)

    Pull Requests

  • 2.69.1 - 2022-03-04

    2022-03-04

    Bug Fixes

    • Approximate source position instead of ignoring it when using a low-resolution source map in a transform hook (#4334)

    Pull Requests

  • 2.69.0 - 2022-03-02
  • 2.68.0 - 2022-02-22
  • 2.67.3 - 2022-02-18
  • 2.67.2 - 2022-02-10
  • 2.67.1 - 2022-02-07
  • 2.67.0 - 2022-02-02
  • 2.66.1 - 2022-01-25
  • 2.66.0 - 2022-01-22
  • 2.65.0 - 2022-01-21
  • 2.64.0 - 2022-01-14
  • 2.63.0 - 2022-01-04
  • 2.62.0 - 2021-12-24
  • 2.61.1 - 2021-12-11
  • 2.61.0 - 2021-12-09
  • 2.60.2 - 2021-11-30
  • 2.60.1 - 2021-11-22
  • 2.60.0 - 2021-11-12
  • 2.59.0 - 2021-11-01
  • 2.59.0-1 - 2021-11-11
  • 2.59.0-0 - 2021-10-23
  • 2.58.3 - 2021-10-25
  • 2.58.2 - 2021-10-25
  • 2.58.1 - 2021-10-25
  • 2.58.0 - 2021-10-01
  • 2.57.0 - 2021-09-22
  • 2.56.3 - 2021-08-23
  • 2.56.2 - 2021-08-10
  • 2.56.1 - 2021-08-08
  • 2.56.0 - 2021-08-05
  • 2.55.1 - 2021-07-29
  • 2.55.0 - 2021-07-28
  • 2.54.0 - 2021-07-25
  • 2.53.3 - 2021-07-21
  • 2.53.2 - 2021-07-15
  • 2.53.1 - 2021-07-11
  • 2.53.0 - 2021-07-09
  • 2.52.8 - 2021-07-07
  • 2.52.7 - 2021-07-02
  • 2.52.6 - 2021-07-01
  • 2.52.5 - 2021-07-01
  • 2.52.4 - 2021-06-30
  • 2.52.3 - 2021-06-25
  • 2.52.2 - 2021-06-21
  • 2.52.1 - 2021-06-17
  • 2.52.0 - 2021-06-16
  • 2.51.2 - 2021-06-11
  • 2.51.1 - 2021-06-08
  • 2.51.0 - 2021-06-06
  • 2.50.6 - 2021-06-03
  • 2.50.5 - 2021-05-30
  • 2.50.4 - 2021-05-29
  • 2.50.3 - 2021-05-28
  • 2.50.2 - 2021-05-27
  • 2.50.1 - 2021-05-26
  • 2.50.0 - 2021-05-25
  • 2.49.0 - 2021-05-23
  • 2.49.0-1 - 2021-05-20
  • 2.49.0-0 - 2021-05-18
  • 2.48.0 - 2021-05-15
  • 2.47.0 - 2021-05-04
  • 2.46.0 - 2021-04-29
  • 2.45.2 - 2021-04-13
  • 2.45.1 - 2021-04-10
  • 2.45.0 - 2021-04-09
  • 2.44.0 - 2021-03-29
  • 2.43.1 - 2021-03-28
  • 2.43.0 - 2021-03-27
  • 2.42.4 - 2021-03-24
  • 2.42.3 - 2021-03-22
  • 2.42.2 - 2021-03-22
  • 2.42.1 - 2021-03-20
  • 2.42.0 - 2021-03-19
  • 2.41.5 - 2021-03-18
  • 2.41.4 - 2021-03-16
  • 2.41.3 - 2021-03-16
  • 2.41.2 - 2021-03-12
  • 2.41.1 - 2021-03-11
  • 2.41.0 - 2021-03-09
  • 2.40.0 - 2021-02-26
  • 2.39.1 - 2021-02-23
  • 2.39.0 - 2021-02-12
  • 2.38.5 - 2021-02-05
  • 2.38.4 - 2021-02-02
  • 2.38.3 - 2021-02-01
  • 2.38.2 - 2021-01-31
  • 2.38.1 - 2021-01-28
  • 2.38.0 - 2021-01-22
  • 2.37.1 - 2021-01-20
  • 2.37.0 - 2021-01-19
  • 2.36.2 - 2021-01-16
  • 2.36.1 - 2021-01-06
  • 2.36.0 - 2021-01-05
  • 2.35.1 - 2020-12-14
  • 2.35.0 - 2020-12-14
  • 2.34.2 - 2020-12-06
  • 2.34.1 - 2020-12-03
  • 2.34.0 - 2020-11-29
  • 2.33.3 - 2020-11-18
  • 2.33.2 - 2020-11-14
  • 2.33.1 - 2020-11-02
  • 2.33.0 - 2020-11-01
  • 2.32.1 - 2020-10-21
  • 2.32.0 - 2020-10-16
  • 2.31.0 - 2020-10-15
  • 2.30.0 - 2020-10-13
  • 2.29.0 - 2020-10-08
  • 2.28.2 - 2020-09-24
  • 2.28.1 - 2020-09-21
  • 2.28.0 - 2020-09-21
  • 2.27.1 - 2020-09-17
  • 2.27.0 - 2020-09-16
  • 2.26.11 - 2020-09-08
  • 2.26.10 - 2020-09-04
  • 2.26.9 - 2020-09-01
  • 2.26.8 - 2020-08-29
  • 2.26.7 - 2020-08-28
  • 2.26.6 - 2020-08-27
from rollup GitHub release notes
Commit messages
Package name: rollup

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant