mask
mask copied to clipboard
Bump rollup from 3.6.0 to 3.29.5 in /Build
Bumps rollup from 3.6.0 to 3.29.5.
Release notes
Sourced from rollup's releases.
v3.29.4
3.29.4
2023-09-28
Bug Fixes
- Fix static analysis when an exported function uses callbacks (#5158)
Pull Requests
- #5158: Deoptimize all parameters when losing track of a function (
@lukastaegert
)v3.29.3
3.29.3
2023-09-24
Bug Fixes
- Fix a bug where code was wrongly tree-shaken after mutating function parameters (#5153)
Pull Requests
- #5145: docs: improve the docs repl appearance in the light mode (
@TrickyPi
)- #5148: chore(deps): update dependency
@vue/eslint-config-typescript
to v12 (@renovate
[bot])- #5149: chore(deps): lock file maintenance minor/patch updates (
@renovate
[bot])- #5153: Fully deoptimize first level path when deoptimizing nested parameter paths (
@lukastaegert
)v3.29.2
3.29.2
2023-09-15
Bug Fixes
- Export
TreeshakingPreset
type (#5131)Pull Requests
- #5131: fix: exports
TreeshakingPreset
(@moltar
)- #5134: docs: steps to enable symlinks on windows (
@thebanjomatic
)- #5137: chore(deps): lock file maintenance minor/patch updates (
@renovate
[bot])v3.29.1
3.29.1
2023-09-10
Bug Fixes
... (truncated)
Changelog
Sourced from rollup's changelog.
rollup changelog
4.22.4
2024-09-21
Bug Fixes
- Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)
Pull Requests
- #5670: refactor: Use object.prototype to check for reserved properties (
@YuHyeonWook
)- #5671: Fix DOM Clobbering CVE (
@lukastaegert
)4.22.3
2024-09-21
Bug Fixes
- Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)
Pull Requests
- #5669: Ensure impure dependencies of pure modules are added (
@lukastaegert
)4.22.2
2024-09-20
Bug Fixes
- Revert fix for side effect free modules until other issues are investigated (#5667)
Pull Requests
- #5667: Partially revert #5658 and re-apply #5644 (
@lukastaegert
)4.22.1
2024-09-20
Bug Fixes
- Revert #5644 "stable chunk hashes" while issues are being investigated
Pull Requests
- #5663: chore(deps): update dependency inquirer to v11 (
@renovate
[bot],@lukastaegert
)
... (truncated)
Commits
dfd233d
3.29.52ef77c0
Fix DOM Clobbering CVEa6448b9
3.29.44e92d60
Deoptimize all parameters when losing track of a function (#5158)801ffd1
3.29.3353e462
Fully deoptimize first level path when deoptimizing nested parameter paths (#...a1a89e7
chore(deps): update dependency@vue/eslint-config-typescript
to v12 (#5148)cc14f70
chore(deps): lock file maintenance minor/patch updates (#5149)1e8355b
docs: improve the docs repl appearance in the light mode (#5145)5950fc8
Adapt branches in REPL workflow- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.