Skip to content

chore(deps-dev): bump rollup from 4.67.2 to 4.68.0 - #319

Merged
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rollup-4.68.0
Nov 11, 2026
Merged

chore(deps-dev): bump rollup from 4.67.2 to 4.68.0#319
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rollup-4.68.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps rollup from 4.67.2 to 4.68.0.

Release notes

Sourced from rollup's releases.

v4.68.0

4.68.0

2026-11-06

Features

  • Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
  • Support tree-shaking of namespace members through default exports (#6631)
  • Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

  • No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
  • Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

v4.67.5

4.67.5

2026-11-04

Bug Fixes

  • Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
  • Change chunk hash when debug IDs are enabled/disabled (#6625)
  • Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

v4.67.4

4.67.4

2026-11-01

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.68.0

2026-11-06

Features

  • Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
  • Support tree-shaking of namespace members through default exports (#6631)
  • Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

  • No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
  • Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

4.67.5

2026-11-04

Bug Fixes

  • Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
  • Change chunk hash when debug IDs are enabled/disabled (#6625)
  • Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

4.67.4

2026-11-01

Bug Fixes

  • Make rollup work again on older Xeon processors (#6622)

... (truncated)

Commits
  • b93d9a4 4.68.0
  • bcbb005 Update swc monorepo (major) (#6634)
  • 257006e Do not decode cached sourcemaps again when reusing cached modules (#6636)
  • 6c3ecbc Bound apt installs and fail over from slow mirrors
  • 82bef03 Tree-shake namespace members accessed through a default export (#6631)
  • 2b375e4 Preserve import and export names starting with "*" (#6628)
  • 85da28c Name dynamic chunks of index files after their directory (#6630)
  • 6f957bd Update minor/patch updates (#6633)
  • c006bd3 Record live dynamic import edges for chunk assignment (#6632)
  • c707f9f Lock file maintenance (#6635)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps-dev): bump rollup from 4.67.2 to 4.68.0
cf0f36a 
Bumps [rollup](https://github.com/rollup/rollup) from 4.67.2 to 4.68.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.67.2...v4.68.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 10, 2026
dhensby
dhensby approved these changes Nov 11, 2026
View reviewed changes

@dhensby dhensby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review of head cf0f36a

Check Result
PR provenance Author dependabot[bot]. 1 commit(s), each signed by GitHub.
Diff scope package-lock.json, package.json
Integrity The lockfile hash of each new version matches the npm registry.
Install scripts No new preinstall, install or postinstall script.
CI 18 of 18 checks passed.
Package Change Dependency Publisher Provenance or source
@rollup/rollup-android-arm-eabi 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-android-arm64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-android-x64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-darwin-arm64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-darwin-x64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-freebsd-arm64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-freebsd-x64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-arm-gnueabihf 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-arm-musleabihf 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-arm64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-arm64-musl 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-loong64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-loong64-musl 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-ppc64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-ppc64-musl 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-riscv64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-riscv64-musl 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-s390x-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-x64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-linux-x64-musl 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-openbsd-x64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-openharmony-arm64 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-win32-arm64-msvc 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-win32-ia32-msvc 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-win32-x64-gnu 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
@rollup/rollup-win32-x64-msvc 4.67.2 → 4.68.0 (minor) dev, transitive GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build
rollup 4.67.2 → 4.68.0 (minor) dev, direct GitHub Actions (trusted publishing), same as 4.67.2 SLSA verified: rollup/rollup@b93d9a4 (refs/tags/v4.68.0), build

Compatibility evidence: CI.

@dhensby
dhensby merged commit 94a7bc8 into master Nov 11, 2026
18 checks passed
@dhensby
dhensby deleted the dependabot/npm_and_yarn/rollup-4.68.0 branch November 11, 2026 08:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dhensby dhensby dhensby approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dhensby