[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
rollup (source)	4.63.2 → 4.68.0

---

Release Notes

rollup/rollup (rollup)

v4.68.0

Compare Source

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#​6630)
• Support tree-shaking of namespace members through default exports (#​6631)
• Use cached sourcemaps if available when reading cached files (#​6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#​6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#​6632)

Pull Requests

• #​6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #​6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #​6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #​6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #​6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

v4.67.5

Compare Source

2026-11-04

Bug Fixes

• Do not ignore output.sourcemapFile when the output.file option is not used (#​6623)
• Change chunk hash when debug IDs are enabled/disabled (#​6625)
• Avoid an unnecessary optional dependency on Linux system (#​6627)

Pull Requests

• #​6623: Honor output.sourcemapFile when output.file is not set (@​simpleqt)
• #​6625: Include debug ID comments in chunk hashes (@​clean99, @​lukastaegert)
• #​6627: Do not publish the build-only @​napi-rs/lzma-linux-x64-gnu optional dependency (@​christophehurpeau, @​lukastaegert)

v4.67.4

Compare Source

2026-11-01

Bug Fixes

• Make rollup work again on older Xeon processors (#​6622)

Pull Requests

• #​6622: Build linux-x64-gnu C code for baseline x86-64 CPUs (@​TrickyPi)

v4.67.3

Compare Source

2026-10-31

Bug Fixes

• Ensure line breaks in module ids are handled correctly in imports (#​6620)

Pull Requests

• #​6620: Preserve line terminators in module ids (@​clean99, @​lukastaegert)

v4.67.2

Compare Source

2026-10-30

Features

• Support X64 Android (#​6603)

Pull Requests

• #​6603: Add android-x64 native build (@​x-labb, @​lukastaegert)
• #​6605: Install libatomic1 for Node 26 in smoke test containers (@​lukastaegert)
• #​6606: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6608: Update dependency eslint-plugin-unicorn to v79 (@​renovate[bot])
• #​6610: Lock file maintenance (@​renovate[bot])
• #​6611: Lock file maintenance (@​renovate[bot])
• #​6612: Lock file maintenance (@​renovate[bot])
• #​6615: Lock file maintenance (@​renovate[bot])
• #​6616: Update estree dependency (@​lukastaegert)

v4.66.0

Compare Source

2026-10-28

Features

• Support null sources in plugin-generated sourcemaps (#​6600)
• Support plugin-generated "index" sourcemaps (#​6601)

Bug Fixes

• Preserve rendering errors when the rendereError hook fails (#​6602)

Pull Requests

• #​6600: Treat null sources in plugin sourcemaps as unmapped (@​wleeaf, @​lukastaegert)
• #​6601: Flatten index sourcemaps returned by plugins (@​wleeaf, @​lukastaegert)
• #​6602: Preserve rendering errors when renderError fails (@​shuaiyafei)

v4.65.1

Compare Source

2026-10-26

Bug Fixes

• Ensure tree-shaking also respect Symbol.dispose for async disposal (#​6556)

Pull Requests

• #​6556: Fix tree-shaking of disposable resources (@​TrickyPi, @​lukastaegert)
• #​6595: Update dtolnay/rust-toolchain digest to b725eda (@​renovate[bot])
• #​6596: Update minor/patch updates (@​renovate[bot])
• #​6598: Lock file maintenance (@​renovate[bot], @​lukastaegert)

v4.65.0

Compare Source

2026-10-22

Features

• Support synthetic named exports in namespaces when preserving modules (#​6589)

Bug Fixes

• Fix a situation where unaligned sourcemaps resulted in a wrong segment (#​6591)
• Forward startup errors on native module load when starting rollup (#​6592)

Pull Requests

• #​6589: Merge synthetic named exports into static namespaces when preserving modules (@​b84330808, @​lukastaegert)
• #​6590: Stabilize flaky watch test "treats filenames literally, not as globs" (@​lukastaegert)
• #​6591: Use the last sourcemap segment for log locations after its start (@​Dev-next-gen)
• #​6592: Preserve native module load errors (@​shuaiyafei, @​lukastaegert)
• #​6593: Close bundles in the Gulp examples (@​shuaiyafei, @​lukastaegert)
• #​6594: Improve review instructions and resolve audit (@​lukastaegert)

v4.64.12

Compare Source

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#​6587)
• Properly handle global or sticky regular expressions for file names (#​6588)

Pull Requests

• #​6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #​6588: Match stateful external regular expressions consistently (@​shuaiyafei)

v4.64.10

Compare Source

2026-10-18

Bug Fixes

• Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#​6583)
• Ensure HTML entities in JSX are properly decoded in the output (#​6584)

Pull Requests

• #​6583: Track manual chunk dependencies when merging small chunks (@​ybai08, @​lukastaegert)
• #​6584: Use decoded values for JSX string attributes (@​luantaraschi)

v4.64.9

Compare Source

2026-10-17

Bug Fixes

• Ensure export live-bindings are properly maintained for aliased exports (#​6576)
• Retain typed array constructor calls if the argument has iteration side effects (#​6582)

Pull Requests

• #​6576: Fix live bindings for aliased reassigned exports (@​oxura, @​lukastaegert)
• #​6582: Retain typed array constructors that iterate their argument (@​joshuablac, @​lukastaegert)

v4.64.8

Compare Source

2026-10-17

Bug Fixes

• Ensure chunk hashes change when sourcemap comments change (#​6509)
• Resolve some relative import resolution edge cases (#​6522)

Pull Requests

• #​6509: fix: include sourcemap comments in chunk hashes (@​snoopuppy582, @​wangxpych, @​lukastaegert)
• #​6522: fix(browser): match node's join and relative for "." and ".." segments (@​luantaraschi, @​lukastaegert)
• #​6577: Update dtolnay/rust-toolchain digest to 686976e (@​renovate[bot])
• #​6578: Update minor/patch updates (@​renovate[bot])
• #​6579: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6580: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6581: Update dependency eslint-plugin-unicorn to v78 (@​renovate[bot])

v4.64.7

Compare Source

2026-10-15

Bug Fixes

• Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#​6575)

Pull Requests

• #​6575: Report creation of missing watch files sharing a directory on Linux (@​lukastaegert)

v4.64.6

Compare Source

2026-10-13

Bug Fixes

• Do not tree-shake side effects in class instance fields (#​6551)
• Extend top-level-await detection to handle asynchronous for...of loops and async disposal (#​6563)

Pull Requests

• #​6551: Retain instance field initializers with side effects when instantiating a class (@​SulimanAbdulrazzaq, @​lukastaegert)
• #​6563: Recognize top-level asynchronous loops and disposal (@​TrickyPi)
• #​6570: Lock file maintenance (@​renovate[bot])
• #​6571: Align lock file maintenance with other updates (@​lukastaegert)
• #​6573: Make addWatchFile watch test robust against watcher start-up timing (@​lukastaegert)

v4.64.5

Compare Source

2026-10-10

Bug Fixes

• Prevent cycles when using indirect top-level await for dynamic imports (#​6516)

Pull Requests

• #​6516: fix: prevent cycles for indirectly awaited dynamic imports (@​ryanchou1994, @​lukastaegert)

v4.64.4

Compare Source

2026-10-10

Bug Fixes

• Support the Rollup WASM build on big-endian hosts (#​6559)

Pull Requests

• #​6559: fix: read the AST buffer correctly on big-endian hosts (@​pkubaj, @​lukastaegert)
• #​6566: Update dtolnay/rust-toolchain digest to 89b1218 (@​renovate[bot], @​lukastaegert)
• #​6567: Update minor/patch updates (@​renovate[bot])
• #​6568: Update dependency eslint-plugin-unicorn to v77 (@​renovate[bot], @​lukastaegert)
• #​6569: Improve PR testing instructions comments (@​lukastaegert)

v4.64.3

Compare Source

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#​6565)

Pull Requests

• #​6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

v4.64.2

Compare Source

2026-10-07

Bug Fixes

• Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#​6562)
• Do not show errors from closeBundle if there were also build errors (#​6554)

Pull Requests

• #​6554: Preserve build errors when closeBundle fails (@​Jo2234, @​lukastaegert)
• #​6561: Rework REPL artefacts and performance report workflows (@​lukastaegert)
• #​6562: Do not resolve values of assigned variables returned on all paths (@​lukastaegert)

v4.64.1

Compare Source

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#​6587)
• Properly handle global or sticky regular expressions for file names (#​6588)

Pull Requests

• #​6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #​6588: Match stateful external regular expressions consistently (@​shuaiyafei)

v4.64.0

Compare Source

2026-10-02

Features

• Improve try-catch deoptimization to cover calling methods on objects (#​6541)

Bug Fixes

• Fix a situation where some feature-detections of core-js were not triggering properly (#​6541)

Pull Requests

• #​6541: Retain callbacks of helper methods called from try statements (@​lukastaegert)
• #​6542: Run additional tests as part of the coverage job (@​lukastaegert)
• #​6544: Update msys2/setup-msys2 digest to ec48f7c (@​renovate[bot], @​lukastaegert)
• #​6545: Update minor/patch updates (@​renovate[bot])
• #​6546: Update dependency @​mermaid-js/mermaid-cli to v12 (@​renovate[bot])
• #​6547: Update Rust crate swc_compiler_base to v65 (@​renovate[bot])

v4.63.6

Compare Source

2026-10-01

Bug Fixes

• Ensure external reexports are always imported when used in a reified dynamic namespace (#​6540)

Pull Requests

• #​6527: Update minor/patch updates (@​renovate[bot])
• #​6529: Update dependency eslint-plugin-unicorn to v76 (@​renovate[bot])
• #​6530: Lock file maintenance (@​renovate[bot])
• #​6535: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6540: Import external re-exports used by shared-chunk namespace objects (@​00200200)

v4.63.5

Compare Source

2026-09-24

Bug Fixes

• Fix an issue where watch mode would hang instead of terminating when closing via Ctrl+C (#​6521)
• Avoid starting overlapping watch mode runs when plugins invalidate files at the wrong time (#​6526)
• Fix many edge cases where watch mode events were not properly emitted to listeners, especially when errors occur (#​6526)

Pull Requests

• #​6520: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6521: Terminate watch mode via natural process exit when possible (@​lukastaegert)
• #​6523: Protect cc pin against renovate lock file maintenance (@​lukastaegert)
• #​6525: docs: fix typos 'interations' and 'coresponding' (@​haimingZZ)
• #​6526: fix(watch): prevent overlapping runs and other run lifecycle bugs (@​lukastaegert)

v4.63.4

Compare Source

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#​6442)
• Do not create invalid code if import attribute values contain special characters (#​6502)

Pull Requests

• #​6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #​6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #​6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #​6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #​6517: Improve agent instructions (@​lukastaegert)
• #​6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6519: Request Copilot code review via workflow (@​lukastaegert)

v4.63.3

Compare Source

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#​6473)
• Always report and recover from failures on invalidation in watch mode (#​6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#​6514)

Pull Requests

• #​6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #​6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #​6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #​6515: chore(deps): lock file maintenance (@​renovate[bot])

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • Between 12:00 AM and 11:59 AM, only on Monday (* 0-11 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.