@rollup/wasm-node - npm Package Compare versions

Comparing version 4.48.1 to 4.49.0

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -499,3 +499,6 @@ https://github.com/rollup/rollup
     const inputOptions = {
-        external: (id) => (id[0] !== '.' && !path.isAbsolute(id)) || id.slice(-5) === '.json',
+        // Do *not* specify external callback here - instead, perform the externality check it via fallback-plugin just below this comment.
+        // This allows config plugin to first decide whether some import is external or not, and only then trigger the check in fallback-plugin.
+        // Since the check is ultra-simple during this stage of transforming the config file itself, it should be fallback instead of primary check.
+        // That way, e.g. importing workspace packages will work as expected - the workspace package will be bundled.
         input: fileName,
@@ -507,2 +510,11 @@ onwarn: warnings.add,
     await addPluginsFromCommandOption(configPlugin, inputOptions);
+    // Add plugin as *last* item after addPluginsFromCommandOption is complete.
+    // This plugin will trigger for imports not resolved by config plugin, and mark all non-relative imports as external.
+    inputOptions.plugins.push({
+        name: 'external-fallback',
+        resolveId: source => {
+            const looksLikeExternal = (source[0] !== '.' && !path.isAbsolute(source)) || source.slice(-5) === '.json';
+            return looksLikeExternal ? false : source;
+        }
+    });
     const bundle = await rollup.rollup(inputOptions);
@@ -509,0 +521,0 @@ const { output: [{ code }] } = await bundle.generate({

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.48.1
-	Mon, 25 Aug 2025 05:42:43 GMT - commit 8b6b06b16c2198f1e61749f17cbdbc25f2d3d214
+	Rollup.js v4.49.0
+	Wed, 27 Aug 2025 07:24:52 GMT - commit b12c061d27d63062b91c1830a698de53fd6c2067
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "@rollup/wasm-node",
-  "version": "4.48.1",
+  "version": "4.49.0",
   "description": "Next-generation ES module bundler with Node wasm",
@@ -5,0 +5,0 @@ "main": "dist/rollup.js",

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

3325319

0.03%

Lines of code

68673

0.02%

Worsened metrics

Number of low supply chain risk alerts

34

3.03%

No dependency changes