[Snyk] Upgrade rollup from 0.57.1 to 1.32.0 #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade rollup from 0.57.1 to 1.32.0. See this package in NPM: https://www.npmjs.com/package/rollup See this project in Snyk: https://app.snyk.io/org/tjenkinson/project/614ed006-0fdb-48c5-a56f-097e41888b4c?utm_source=github&utm_medium=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade rollup from 0.57.1 to 1.32.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-ACORN-559469
SNYK-JS-ACORN-559469
Release notes
Package name: rollup
-
1.32.0 - 2020-02-28
- Allow adding plugins on the command line via
- #3379: introduce CLI --plugin support (@kzc)
- #3390: fix typo: this.addWatchfile (@mistlog)
- #3392: Bump codecov from 3.6.1 to 3.6.5
- #3404: Update resolveFileUrl docs (@jakearchibald)
-
1.31.1 - 2020-02-14
- Make sure errored files are always re-evaluated in watch mode to avoid an issue in the typescript plugin (#3388)
- #3366: Correct spelling minifaction to minification (@VictorHom)
- #3371: Adjust bug template to mention REPL.it (@lukastaegert)
- #3388: Run transform hooks again in watch mode on files that errored (@lukastaegert)
-
1.31.0 - 2020-01-31
- Always disable tree-shaking for asm.js functions to maintain semantics (#3362)
- #3362: Preserve asm.js code (@lukastaegert)
-
1.30.1 - 2020-01-27
- Do not mistreat static entgry points as dynamic ones when chunking (#3357)
- Resolve a crash when chunking circular dynamic imports (#3357)
- #3357:Resolve issues with circular dynamic entries (@lukastaegert)
-
1.30.0 - 2020-01-27
- Do not split chunks when dynamically imported modules import modules that are already loaded by all dynamic importers (#3354)
- Add
- Make sure polyfills are always loaded first when each static entry point contains them as first import (#3354)
- #3353: Add option to avoid hoisting transitive imports (@lukastaegert)
- #3354: Improve chunking algorithm for dynamic imports (@tjenkinson and @lukastaegert)
-
1.29.1 - 2020-01-21
- Avoid crashes for circular reexports when named exports cannot be found (#3350)
- #3335: Fix typo (@robbinworks)
- #3342: Remove ":" from test file names for Windows and update dependencies (@lukastaegert)
- #3350: Properly handle circular reexports (@lukastaegert)
-
1.29.0 - 2020-01-08
- Enable top-level await by default (#3089)
- Add typings for watch events (#3302)
- Deconflict files that would conflict only on a case-insensitive OS (#3317)
- Do not fail in certain scenarios where a logical expression inside a sequence expression was being directly included (#3327)
- #3089: Move top-level await out of experimental (@guybedford)
- #3302: Adds type definitions for RollupWatcher events (@NotWoods)
- #3317: Fix module id conflict on a case insensitive OS (@yesmeck)
- #3327: Handle deoptimizations while a node is being included (@lukastaegert)
-
1.28.0 - 2020-01-04
- Allow piping in stdin via the command line interface (#3312, #3290)
- Allow plugins to mark modules as having syntheticNamedExports for e.g. better CJS interoperability (#3295)
- Ignore variable reassignments in dead code when tree-shaking to remove more unneeded code (#3212)
- Properly respect tree-shaken code when generating sourcemaps (#3318)
- #3212: Handle assignments in dead code (@tjenkinson)
- #3290: Implement stdin input with optional "-" as the file name (@kzc)
- #3295: Add syntheticNamedExports (@manucorporat)
- #3300: Add note about setting
- #3303: Use ! to assert not-null in TypeScript (@NotWoods)
- #3312: Implement stdin input (@lukastaegert)
- #3318: Update magic-string and other dependencies (@lukastaegert)
-
1.27.14 - 2019-12-22
- Update references to official rollup plugins in error messages (#3297, #3298)
- #3286: Update link to JavaScript API documentation (@romankaravia)
- #3294: Update deprecated references to the node-resolve plugin in the documentation (@Vlad-Shcherbina)
- #3297: Update references to rollup-plugin-json (@cprecioso)
- #3298: Update references to official rollup plugins (@cprecioso)
-
1.27.13 - 2019-12-14
- Do not truncate environment variable values at the first colon when using the
- #3283: Allow environment variables to contain colons (@tlaverdure)
-
1.27.12 - 2019-12-13
-
1.27.11 - 2019-12-12
-
1.27.10 - 2019-12-11
-
1.27.9 - 2019-12-07
-
1.27.8 - 2019-12-02
-
1.27.7 - 2019-12-01
-
1.27.6 - 2019-11-30
-
1.27.5 - 2019-11-25
-
1.27.4 - 2019-11-22
-
1.27.3 - 2019-11-20
-
1.27.2 - 2019-11-18
-
1.27.1 - 2019-11-18
-
1.27.0 - 2019-11-12
-
1.26.5 - 2019-11-11
-
1.26.4 - 2019-11-09
-
1.26.3 - 2019-11-02
-
1.26.2 - 2019-10-31
-
1.26.1 - 2019-10-31
-
1.26.0 - 2019-10-27
-
1.25.2 - 2019-10-23
-
1.25.1 - 2019-10-20
-
1.25.0 - 2019-10-18
-
1.24.0 - 2019-10-15
-
1.23.1 - 2019-10-05
-
1.23.0 - 2019-10-03
-
1.22.0 - 2019-09-29
-
1.21.4 - 2019-09-16
-
1.21.3 - 2019-09-14
-
1.21.2 - 2019-09-09
-
1.21.1 - 2019-09-09
-
1.21.0 - 2019-09-08
-
1.20.3 - 2019-08-28
-
1.20.2 - 2019-08-25
-
1.20.1 - 2019-08-22
-
1.20.0 - 2019-08-21
-
1.19.4 - 2019-08-07
-
1.19.3 - 2019-08-06
-
1.19.2 - 2019-08-05
-
1.19.1 - 2019-08-05
-
1.19.0 - 2019-08-05
-
1.18.0 - 2019-08-01
-
1.17.0 - 2019-07-15
-
1.16.7 - 2019-07-09
-
1.16.6 - 2019-07-04
-
1.16.5 - 2019-07-04
-
1.16.4 - 2019-07-02
-
1.16.3 - 2019-06-29
-
1.16.2 - 2019-06-22
-
1.16.1 - 2019-06-21
-
1.16.0 - 2019-06-21
-
1.15.6 - 2019-06-16
-
1.15.5 - 2019-06-14
-
1.15.4 - 2019-06-14
-
1.15.3 - 2019-06-13
-
1.15.2 - 2019-06-13
-
1.15.1 - 2019-06-11
-
1.15.0 - 2019-06-11
-
1.14.6 - 2019-06-10
-
1.14.5 - 2019-06-09
-
1.14.4 - 2019-06-07
-
1.14.3 - 2019-06-06
-
1.14.2 - 2019-06-05
-
1.14.1 - 2019-06-05
-
1.14.0 - 2019-06-05
-
1.13.1 - 2019-06-01
-
1.13.0 - 2019-05-31
-
1.12.5 - 2019-05-30
-
1.12.4 - 2019-05-27
-
1.12.3 - 2019-05-19
-
1.12.2 - 2019-05-17
-
1.12.1 - 2019-05-16
-
1.12.0 - 2019-05-15
-
1.11.3 - 2019-05-05
-
1.11.2 - 2019-05-04
-
1.11.1 - 2019-05-04
-
1.11.0 - 2019-05-03
-
1.10.1 - 2019-04-19
-
1.10.0 - 2019-04-11
-
1.9.3 - 2019-04-10
-
1.9.2 - 2019-04-10
-
1.9.1 - 2019-04-10
-
1.9.0 - 2019-04-05
-
1.8.0 - 2019-04-02
-
1.7.4 - 2019-03-28
-
1.7.3 - 2019-03-25
-
1.7.2 - 2019-03-24
-
1.7.1 - 2019-03-24
-
1.7.0 - 2019-03-20
-
1.6.1 - 2019-03-20
-
1.6.0 - 2019-03-08
-
1.5.0 - 2019-03-07
-
1.4.2 - 2019-03-07
-
1.4.1 - 2019-03-04
-
1.4.0 - 2019-03-01
-
1.3.3 - 2019-03-01
-
1.3.2 - 2019-02-27
-
1.3.1 - 2019-02-27
-
1.3.0 - 2019-02-26
-
1.2.5 - 2019-02-26
-
1.2.4 - 2019-02-26
-
1.2.3 - 2019-02-23
-
1.2.2 - 2019-02-19
-
1.2.1 - 2019-02-17
-
1.2.0 - 2019-02-17
-
1.1.2 - 2019-01-21
-
1.1.1 - 2019-01-19
-
1.1.0 - 2019-01-09
-
1.0.2 - 2019-01-05
-
1.0.1 - 2019-01-03
-
1.0.0 - 2018-12-28
-
0.68.2 - 2018-12-23
-
0.68.1 - 2018-12-19
-
0.68.0 - 2018-12-16
-
0.67.4 - 2018-12-03
-
0.67.3 - 2018-11-17
-
0.67.2 - 2018-11-17
-
0.67.1 - 2018-11-11
-
0.67.0 - 2018-11-04
-
0.66.6 - 2018-10-10
-
0.66.5 - 2018-10-09
-
0.66.4 - 2018-10-04
-
0.66.3 - 2018-10-03
-
0.66.2 - 2018-09-21
-
0.66.1 - 2018-09-19
-
0.66.0 - 2018-09-16
-
0.65.2 - 2018-09-05
-
0.65.1 - 2018-09-05
-
0.65.0 - 2018-08-25
-
0.64.1 - 2018-08-07
-
0.64.0 - 2018-08-07
-
0.63.5 - 2018-08-01
-
0.63.4 - 2018-07-20
-
0.63.3 - 2018-07-20
-
0.63.2 - 2018-07-18
-
0.63.1 - 2018-07-18
-
0.63.0 - 2018-07-17
-
0.62.0 - 2018-06-27
-
0.61.2 - 2018-06-23
-
0.61.1 - 2018-06-21
-
0.61.0 - 2018-06-20
-
0.60.7 - 2018-06-14
-
0.60.6 - 2018-06-14
-
0.60.5 - 2018-06-14
-
0.60.4 - 2018-06-13
-
0.60.3 - 2018-06-13
-
0.60.2 - 2018-06-11
-
0.60.1 - 2018-06-07
-
0.60.0 - 2018-06-06
-
0.59.4 - 2018-05-28
-
0.59.3 - 2018-05-24
-
0.59.2 - 2018-05-21
-
0.59.1 - 2018-05-16
-
0.59.0 - 2018-05-15
-
0.58.2 - 2018-04-23
-
0.58.1 - 2018-04-18
-
0.58.0 - 2018-04-16
-
0.57.1 - 2018-03-17
from rollup GitHub release notes2020-02-28
Features
--plugin <plugin>(#3379)Pull Requests
2020-02-14
Bug Fixes
Pull Requests
2020-01-31
Features
Pull Requests
2020-01-27
Bug Fixes
Pull Requests
2020-01-27
Features
hoistTransitiveImportsoption to disable hoisting imports of static dependencies into entry chunks (#3353)Bug Fixes
Pull Requests
2020-01-21
Bug Fixes
Pull Requests
2020-01-08
Features
Bug Fixes
Pull Requests
2020-01-04
Features
Bug Fixes
Pull Requests
typesin tsconfig file (@tjenkinson)2019-12-22
Bug Fixes
Pull Requests
2019-12-14
Bug Fixes
--environmentoption (#3283)Pull Requests
Commit messages
Package name: rollup
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
[//]: # (snyk:metadata:{"dependencies":[{"name":"rollup","from":"0.57.1","to":"1.32.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/tjenkinson/project/614ed006-0fdb-48c5-a56f-097e41888b4c?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"614ed006-0fdb-48c5-a56f-097e41888b4c","env":"prod","prType":"upgrade","vulns":["SNYK-JS-ACORN-559469","SNYK-JS-ACORN-559469"],"issuesToFix":[{"issueId":"SNYK-JS-ACORN-559469","severity":"high","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-ACORN-559469","severity":"high","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit"}],"upgrade":["SNYK-JS-ACORN-559469","SNYK-JS-ACORN-559469"],"upgradeInfo":{"versionsDiff":166,"publishedDate":"2020-02-28T05:49:36.750Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":true,"isBreakingChange":true})