Bump rollup from 2.75.7 to 4.58.0 in /src/microsoft-trydotnet#83
Merged
BenjaminMichaelis merged 2 commits intomainfrom Feb 21, 2026
Merged
Conversation
dependabot
bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
d66ab17 to
40f5661
Compare
Member
|
@dependabot recreate |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
40f5661 to
728de94
Compare
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
728de94 to
604da7c
Compare
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
604da7c to
fd0c40e
Compare
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
fd0c40e to
e16f339
Compare
Member
|
@dependabot recreate |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
e16f339 to
690962e
Compare
Member
|
@dependabot recreate |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
690962e to
ddee9ff
Compare
Bumps [rollup](https://github.com/rollup/rollup) from 2.75.7 to 4.58.0. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md) - [Commits](rollup/rollup@v2.75.7...v4.58.0) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.58.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
BenjaminMichaelis
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
ddee9ff to
1ff5ff7
Compare
BenjaminMichaelis
had a problem deploying
to
BuildAndUploadImage
GitHub Actions
Failure
BenjaminMichaelis
had a problem deploying
to
BuildAndUploadImage
GitHub Actions
Failure
- microsoft-trydotnet: Add 'type: module' to package.json to eliminate
the MODULE_TYPELESS_PACKAGE_JSON rollup warning (rollup.config.js
already used ES module syntax)
- microsoft-trydotnet-styles: Remove unused 'fstream' devDependency
which pulled in rimraf@2 -> glob@7 -> minimatch@3 vulnerability chain.
Resolves all 4 high-severity vulnerabilities (0 vulns remaining).
- microsoft-trydotnet-editor: Run npm audit fix (non-breaking) to fix
ajv, brace-expansion, cross-spawn, and diff (via ts-node) vulns.
Remove eslint-plugin-deprecation (superseded; was pulling in old
@typescript-eslint/* with stale minimatch chain). Upgrade
@typescript-eslint/{eslint-plugin,parser} from ^5.62.0 to ^8.56.0
and eslint from 8.18.0 to ^8.57.0 (peer dep requirement).
Update .eslintrc.json: replace deprecation/deprecation with
@typescript-eslint/no-deprecated, remove @typescript-eslint/semi
(removed in v6+), replace with base semi rule.
Reduces vulnerabilities from 19 to 14 (remaining 14 are mocha and
eslint@8 transitive chains - accepted, all devDeps, no prod impact).
Not addressed (accepted/skip):
- uuid@3.4.0, whatwg-encoding: transitive from @microsoft/polyglot-notebooks
- Circular dep / critical webpack warnings: from @microsoft/polyglot-notebooks
- Mocha minimatch/diff chain: mocha upstream issue, needs mocha update
- eslint@8 -> @eslint/eslintrc -> minimatch@3 chain: needs eslint@10 migration
- Asset size warnings: out of scope
Fix CI: rename rollup.config.js to .mjs instead of type:module
Adding 'type: module' to package.json made mocha's ts-node/register
(a CJS hook) unable to require() the .ts test files - they were treated
as ESM modules, causing ERR_REQUIRE_ESM in CI.
The correct fix is to rename rollup.config.js -> rollup.config.mjs,
which explicitly marks the config file as ESM by extension. Rollup 4.x
finds rollup.config.mjs automatically and doesn't emit the
[MODULE_TYPELESS_PACKAGE_JSON] warning for .mjs files.
This leaves the package CJS-by-default so mocha + ts-node/register
continue to work correctly.
BenjaminMichaelis
force-pushed
the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
from
5da4195 to
7b23886
Compare
BenjaminMichaelis
temporarily deployed
to
BuildAndUploadImage
GitHub Actions
Inactive
BenjaminMichaelis
deleted the
dependabot/npm_and_yarn/src/microsoft-trydotnet/rollup-4.58.0
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps rollup from 2.75.7 to 4.58.0.
Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
33f39c14.58.0b61c408forward NO_SIDE_EFFECTS annotations to function expressions in variable decla...7f00689Extend agent instructionse7b2b85chore(deps): lock file maintenance (#6270)2aa5da9fix(deps): update minor/patch updates (#6267)4319837chore(deps): update dependency lru-cache to v11 (#6269)c3b6b4bchore(deps): update dependency eslint-plugin-unicorn to v63 (#6268)8653dd7fix(deps): update minor/patch updates (#6263)c49fba1chore(deps): lock file maintenance (#6265)74559c0Avoid unnecessary cloning of the code string (#6262)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)