Skip to content

build(deps-dev): bump the rollup group across 1 directory with 4 updates - #212

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/core/rollup-daf8cdca2d
Closed

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/core/rollup-daf8cdca2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the rollup group with 4 updates in the /core directory: @rollup/plugin-commonjs, @rollup/plugin-typescript, rollup and rollup-plugin-istanbul.

Updates @rollup/plugin-commonjs from 25.0.8 to 28.0.9

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v28.0.9

2025-10-24

Bugfixes

  • fix: handle node: builtins with strictRequires: auto (#1930)

v28.0.8

2025-10-16

Bugfixes

  • fix: guard moduleSideEffects for wrapped externals (#1914)

v28.0.7

2025-10-14

Bugfixes

  • fix: avoid hoisting dynamically required node: builtins under strictRequires (#1909)

v28.0.6

2025-06-17

Bugfixes

  • fix: fix crash with invalidated proxy modules (#1876)

v28.0.5

2025-06-14

Bugfixes

  • fix: crawl dynamicRequireRoot outside cwd (#1859)

v28.0.4

2025-06-14

Bugfixes

  • fix: try/catch instanceof in getAugmentedNamespace (#1868)

v28.0.3

... (truncated)

Commits
  • b079b59 chore(release): commonjs v28.0.9
  • 0881496 fix(commonjs): handle node: builtins with strictRequires: auto (#1930)
  • 232dcf8 chore(release): commonjs v28.0.8
  • 5a6175b fix(commonjs): guard moduleSideEffects for wrapped externals (#1914)
  • 1935e9e chore(release): commonjs v28.0.7
  • e80d4b2 fix(commonjs): avoid hoisting dynamically required node: builtins under stric...
  • 0862902 chore(repo): update commonjs comment to clarify top-level this rewrite (#1888)
  • a433ac9 chore(release): commonjs v28.0.6
  • 7b9d40d fix(commonjs): fix crash with invalidated proxy modules (#1876)
  • cb1b08d chore(release): commonjs v28.0.5
  • Additional commits viewable in compare view

Updates @rollup/plugin-typescript from 11.1.6 to 12.2.0

Changelog

Sourced from @​rollup/plugin-typescript's changelog.

v12.2.0

2025-10-22

Features

  • feat: process .js when allowJs is enabled (#1920)

v12.1.4

2025-06-28

Bugfixes

v12.1.3

2025-06-17

Bugfixes

  • fix: fixes #1652 compile when source exists anywhere in the working directory (#1653)

v12.1.2

2024-12-15

Bugfixes

  • fix: path validation issue in validatePaths function (#1800)

v12.1.1

2024-10-16

Bugfixes

  • fix: allow for files to be nested in folders within outDir (#1783)

v12.1.0

2024-09-22

Features

  • feat: add transformers factory. (#1668)

v12.0.0

... (truncated)

Commits
  • a9cdbb5 chore(release): typescript v12.2.0
  • 89fa680 feat(typescript): process .js when allowJs is enabled (#1920)
  • ad58c8d chore(release): typescript v12.1.4
  • a569848 fix(typescript): revert #1653 (#1880)
  • a209058 chore(release): typescript v12.1.3
  • 40a38b1 fix(typescript): fixes #1652 compile when source exists anywhere in the worki...
  • 3952b73 chore(release): typescript v12.1.2
  • e58d29c fix(typescript): path validation issue in validatePaths function (#1800)
  • c358dae chore(release): typescript v12.1.1
  • cc55c44 fix(typescript): allow for files to be nested in folders within outDir (#1783)
  • Additional commits viewable in compare view

Updates rollup from 3.29.5 to 4.54.0

Release notes

Sourced from rollup's releases.

v4.54.0

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

v4.53.5

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

v4.53.4

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.


Updates rollup-plugin-istanbul from 4.0.0 to 5.0.0

Release notes

Sourced from rollup-plugin-istanbul's releases.

Version 5.0.0

Features

  • Added support to Rollup v4 (#54)

BREAKING CHANGES

  • Dropped support for Node.js 14
  • istanbul-lib-instrument version ^6.0.1 is now used
Changelog

Sourced from rollup-plugin-istanbul's changelog.

5.0.0 (2023-10-21)

Features

  • Added support to Rollup v4 (#54)

BREAKING CHANGES

  • Dropped support for Node.js 14
  • istanbul-lib-instrument version ^6.0.1 is now used
Commits
  • c8998fa chore: update dependencies and prepare v5.0.0
  • e71a575 feat: support rollup 4 (#54)
  • 4546aa3 chore: add rollup v3 support message to changelog
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@rollup/plugin-commonjs [>= 29.0.a, < 29.1]
@rollup/plugin-typescript [>= 12.3.a, < 12.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 3, 2026
@nev21

nev21 commented Jan 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps the rollup group with 4 updates in the /core directory: [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs), [@rollup/plugin-typescript](https://github.com/rollup/plugins/tree/HEAD/packages/typescript), [rollup](https://github.com/rollup/rollup) and [rollup-plugin-istanbul](https://github.com/artberri/rollup-plugin-istanbul).


Updates `@rollup/plugin-commonjs` from 25.0.8 to 28.0.9
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v28.0.9/packages/commonjs)

Updates `@rollup/plugin-typescript` from 11.1.6 to 12.2.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/typescript/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/typescript-v12.2.0/packages/typescript)

Updates `rollup` from 3.29.5 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v3.29.5...v4.54.0)

Updates `rollup-plugin-istanbul` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/artberri/rollup-plugin-istanbul/releases)
- [Changelog](https://github.com/artberri/rollup-plugin-istanbul/blob/main/CHANGELOG.md)
- [Commits](artberri/rollup-plugin-istanbul@v4.0.0...v5.0.0)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 28.0.9
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: rollup
- dependency-name: "@rollup/plugin-typescript"
  dependency-version: 12.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: rollup
- dependency-name: rollup
  dependency-version: 4.54.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: rollup
- dependency-name: rollup-plugin-istanbul
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: rollup
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/core/rollup-daf8cdca2d branch from 0659f09 to 23934b0 Compare January 3, 2026 03:07
@nev21

nev21 commented Jan 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot unignore @rollup/plugin-node-resolve

@dependabot @github

dependabot Bot commented on behalf of github Jan 3, 2026

Copy link
Copy Markdown
Contributor Author

OK, I will stop ignoring the @rollup/plugin-node-resolve dependency.

@nev21

nev21 commented Jan 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Jan 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/core/rollup-daf8cdca2d branch January 3, 2026 04:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants