rollup - npm Package Compare versions

Comparing version 4.57.1 to 4.58.0

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -396,3 +396,3 @@ https://github.com/rollup/rollup
             catch (error) {
-                throw new Error(`Cannot load plugin "${pluginText}": ${error.message}.`);
+                throw new Error(`Cannot load plugin "${pluginText}": ${error.message}.`, { cause: error });
             }
@@ -399,0 +399,0 @@ }

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.57.1
-	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
+	Rollup.js v4.58.0
+	Fri, 20 Feb 2026 12:44:20 GMT - commit 33f39c1f205ea2eadaf4b589e493453e2baa3662
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "rollup",
-  "version": "4.57.1",
+  "version": "4.58.0",
   "description": "Next-generation ES module bundler",
@@ -117,27 +117,27 @@ "main": "dist/rollup.js",
     "fsevents": "~2.3.2",
-    "@rollup/rollup-darwin-arm64": "4.57.1",
-    "@rollup/rollup-android-arm64": "4.57.1",
-    "@rollup/rollup-win32-arm64-msvc": "4.57.1",
-    "@rollup/rollup-freebsd-arm64": "4.57.1",
-    "@rollup/rollup-linux-arm64-gnu": "4.57.1",
-    "@rollup/rollup-linux-arm64-musl": "4.57.1",
-    "@rollup/rollup-android-arm-eabi": "4.57.1",
-    "@rollup/rollup-linux-arm-gnueabihf": "4.57.1",
-    "@rollup/rollup-linux-arm-musleabihf": "4.57.1",
-    "@rollup/rollup-win32-ia32-msvc": "4.57.1",
-    "@rollup/rollup-linux-loong64-gnu": "4.57.1",
-    "@rollup/rollup-linux-loong64-musl": "4.57.1",
-    "@rollup/rollup-linux-riscv64-gnu": "4.57.1",
-    "@rollup/rollup-linux-riscv64-musl": "4.57.1",
-    "@rollup/rollup-linux-ppc64-gnu": "4.57.1",
-    "@rollup/rollup-linux-ppc64-musl": "4.57.1",
-    "@rollup/rollup-linux-s390x-gnu": "4.57.1",
-    "@rollup/rollup-darwin-x64": "4.57.1",
-    "@rollup/rollup-win32-x64-gnu": "4.57.1",
-    "@rollup/rollup-win32-x64-msvc": "4.57.1",
-    "@rollup/rollup-freebsd-x64": "4.57.1",
-    "@rollup/rollup-linux-x64-gnu": "4.57.1",
-    "@rollup/rollup-linux-x64-musl": "4.57.1",
-    "@rollup/rollup-openbsd-x64": "4.57.1",
-    "@rollup/rollup-openharmony-arm64": "4.57.1"
+    "@rollup/rollup-darwin-arm64": "4.58.0",
+    "@rollup/rollup-android-arm64": "4.58.0",
+    "@rollup/rollup-win32-arm64-msvc": "4.58.0",
+    "@rollup/rollup-freebsd-arm64": "4.58.0",
+    "@rollup/rollup-linux-arm64-gnu": "4.58.0",
+    "@rollup/rollup-linux-arm64-musl": "4.58.0",
+    "@rollup/rollup-android-arm-eabi": "4.58.0",
+    "@rollup/rollup-linux-arm-gnueabihf": "4.58.0",
+    "@rollup/rollup-linux-arm-musleabihf": "4.58.0",
+    "@rollup/rollup-win32-ia32-msvc": "4.58.0",
+    "@rollup/rollup-linux-loong64-gnu": "4.58.0",
+    "@rollup/rollup-linux-loong64-musl": "4.58.0",
+    "@rollup/rollup-linux-riscv64-gnu": "4.58.0",
+    "@rollup/rollup-linux-riscv64-musl": "4.58.0",
+    "@rollup/rollup-linux-ppc64-gnu": "4.58.0",
+    "@rollup/rollup-linux-ppc64-musl": "4.58.0",
+    "@rollup/rollup-linux-s390x-gnu": "4.58.0",
+    "@rollup/rollup-darwin-x64": "4.58.0",
+    "@rollup/rollup-win32-x64-gnu": "4.58.0",
+    "@rollup/rollup-win32-x64-msvc": "4.58.0",
+    "@rollup/rollup-freebsd-x64": "4.58.0",
+    "@rollup/rollup-linux-x64-gnu": "4.58.0",
+    "@rollup/rollup-linux-x64-musl": "4.58.0",
+    "@rollup/rollup-openbsd-x64": "4.58.0",
+    "@rollup/rollup-openharmony-arm64": "4.58.0"
   },
@@ -151,3 +151,3 @@ "dependencies": {
   "devDependencies": {
-    "@codemirror/commands": "^6.10.1",
+    "@codemirror/commands": "^6.10.2",
     "@codemirror/lang-javascript": "^6.2.4",
@@ -157,4 +157,4 @@ "@codemirror/language": "^6.12.1",
     "@codemirror/state": "^6.5.4",
-    "@codemirror/view": "^6.39.11",
-    "@eslint/js": "^9.39.2",
+    "@codemirror/view": "^6.39.14",
+    "@eslint/js": "^10.0.1",
     "@inquirer/prompts": "^7.10.1",
@@ -173,5 +173,5 @@ "@jridgewell/sourcemap-codec": "^1.5.5",
     "@rollup/pluginutils": "^5.3.0",
-    "@shikijs/vitepress-twoslash": "^3.21.0",
+    "@shikijs/vitepress-twoslash": "^3.22.0",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^20.19.30",
+    "@types/node": "^20.19.33",
     "@types/picomatch": "^4.0.2",
@@ -193,7 +193,7 @@ "@types/semver": "^7.7.1",
     "es6-shim": "^0.35.8",
-    "eslint": "^9.39.2",
+    "eslint": "^10.0.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
-    "eslint-plugin-unicorn": "^62.0.0",
-    "eslint-plugin-vue": "^10.7.0",
+    "eslint-plugin-unicorn": "^63.0.0",
+    "eslint-plugin-vue": "^10.8.0",
     "fixturify": "^3.0.0",
@@ -203,3 +203,3 @@ "flru": "^1.0.2",
     "github-api": "^3.4.0",
-    "globals": "^17.1.0",
+    "globals": "^17.3.0",
     "husky": "^9.1.7",
@@ -211,3 +211,3 @@ "is-reference": "^3.0.3",
     "memfs": "^4.56.10",
-    "mocha": "^11.7.5",
+    "mocha": "11.3.0",
     "nodemon": "^3.1.11",
@@ -225,5 +225,5 @@ "npm-audit-resolver": "^3.0.0-RC.0",
     "requirejs": "^2.3.8",
-    "rollup": "^4.56.0",
-    "rollup-plugin-license": "^3.6.0",
-    "semver": "^7.7.3",
+    "rollup": "^4.57.1",
+    "rollup-plugin-license": "^3.7.0",
+    "semver": "^7.7.4",
     "shx": "^0.4.0",
@@ -237,7 +237,7 @@ "signal-exit": "^4.1.0",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.54.0",
+    "typescript-eslint": "^8.56.0",
     "vite": "^7.3.1",
     "vitepress": "^1.6.4",
-    "vue": "^3.5.27",
-    "vue-eslint-parser": "^10.2.0",
+    "vue": "^3.5.28",
+    "vue-eslint-parser": "^10.4.0",
     "vue-tsc": "^3.2.4",
@@ -248,10 +248,12 @@ "wasm-pack": "^0.14.0",
   "overrides": {
-    "axios": "^1.13.3",
+    "axios": "^1.13.5",
     "esbuild": ">0.24.2",
+    "lodash-es": ">4.17.22",
+    "path-scurry": {
+      "lru-cache": "^11.2.6"
+    },
     "readable-stream": "npm:@built-in/readable-stream@1",
-    "semver": "^7.7.3",
-    "vite": "$vite",
-    "path-scurry": {
-      "lru-cache": "^11.2.5"
-    }
+    "semver": "^7.7.4",
+    "tar": ">7.5.6",
+    "vite": "$vite"
   },
@@ -258,0 +260,0 @@ "comments": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

2778126

0

No dependency changes