Skip to content

chore(deps): bump rollup from 4.62.3 to 4.63.1 - #15

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/rollup-4.63.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/rollup-4.63.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps rollup from 4.62.3 to 4.63.1.

Release notes

Sourced from rollup's releases.

v4.63.1

4.63.1

2026-08-28

Bug Fixes

  • Revert function return value tracking until the most recent issue is understood (#6490)

Pull Requests

v4.63.0

4.63.0

2026-08-25

Features

  • Allow to analyze function return values in many more cases (#6065)

Pull Requests

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.63.1

2026-08-28

Bug Fixes

  • Revert function return value tracking until the most recent issue is understood (#6490)

Pull Requests

4.63.0

2026-08-25

Features

  • Allow to analyze function return values in many more cases (#6065)

Pull Requests

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rollup](https://github.com/rollup/rollup) from 4.62.3 to 4.63.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.3...v4.63.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.63.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

@freshjuice-bot freshjuice-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Locally verified on Node v24.20.0 (LTS): npm ci clean, npm run build passes (exit 0). Lint fails with 'ESLint couldn't find an eslint.config.* file', but this reproduces identically on main and is unrelated to this bump. OSV querybatch: no known CVEs for rollup 4.62.3 or 4.63.1.

Commented by the automated FreshJuice repo scan, run by Juicy (FreshJuice Bot app).

@freshjuice-bot

freshjuice-bot Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

@reatlat Verified this dependabot PR locally on Node v24.20.0 (LTS):

  • npm ci: clean install, no audit issues
  • npm run build: passes (exit 0), dist output generated
  • npm run lint: fails with 'ESLint couldn't find an eslint.config.* file'. This also fails identically on main, so it is a pre-existing repo issue unrelated to this bump. Tracked in issue npm run lint fails: ESLint cannot find an eslint.config.* file #16.
  • OSV CVE check: no known vulnerabilities for rollup 4.62.3 or 4.63.1.

Approved.

Commented by the automated FreshJuice repo scan, run by Juicy (FreshJuice Bot app).

@freshjuice-bot
freshjuice-bot Bot requested a review from reatlat September 4, 2026 10:18
@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like rollup is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/rollup-4.63.1 branch September 8, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant