
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
coldbox-elixir-rollup
Advanced tools
This extension brings Rollup.js support to your ColdBox Elixir builds.
First, ensure that you're using ColdBox Elixir v6 or newer. Next, install the extension like so:
npm install coldbox-elixir-rollup --save-dev
You're all set! Open your gulpfile.js, and add:
elixir( function( mix ) {
mix.rollup( "main.js" );
} );
This will, by default, compile resources/assets/js/main.js to includes/js/main.js. Should you require a non-standard base directory for your
source files, begin the path with ./. This instructs ColdBox Elixir to omit any default base directories.
elixir( function( mix ) {
mix.rollup( "./app/assets/js/main.js" );
} );
Similarly, if you require a different output directory, provide a file or directory path as the second argument to mix.rollup.
elixir( function( mix ) {
mix.rollup( "main.js", "public/build/bundle.js" );
} );
Now, you're specifying that you want to compile resources/assets/js/main.js to public/build/bundle.js.
If providing an array of source files, it might be useful to override the default base directory. If desired, specify a path as the third argument.
elixir( function( mix ) {
mix.rollup( [ "main.js", "other.js" ], null, "app/js" );
} );
With this adjustment, we'll compile app/js/main.js and app/js/other.js.
Lastly, should you need to override the default Rollup configuration, you may do so by either creating a rollup.config.js file in your project root,
or by passing a Rollup config object as the fourth argument to mix.rollup. You can learn more about Rollup config files here.
FAQs
ColdBox Elixir Rollup Extension.
We found that coldbox-elixir-rollup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.