[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
rollup (source)	^4.59.1 → ^4.64.6

---

Release Notes

rollup/rollup (rollup)

v4.64.6

Compare Source

2026-10-13

Bug Fixes

• Do not tree-shake side effects in class instance fields (#​6551)
• Extend top-level-await detection to handle asynchronous for...of loops and async disposal (#​6563)

Pull Requests

• #​6551: Retain instance field initializers with side effects when instantiating a class (@​SulimanAbdulrazzaq, @​lukastaegert)
• #​6563: Recognize top-level asynchronous loops and disposal (@​TrickyPi)
• #​6570: Lock file maintenance (@​renovate[bot])
• #​6571: Align lock file maintenance with other updates (@​lukastaegert)
• #​6573: Make addWatchFile watch test robust against watcher start-up timing (@​lukastaegert)

v4.64.5

Compare Source

2026-10-10

Bug Fixes

• Prevent cycles when using indirect top-level await for dynamic imports (#​6516)

Pull Requests

• #​6516: fix: prevent cycles for indirectly awaited dynamic imports (@​ryanchou1994, @​lukastaegert)

v4.64.4

Compare Source

2026-10-10

Bug Fixes

• Support the Rollup WASM build on big-endian hosts (#​6559)

Pull Requests

• #​6559: fix: read the AST buffer correctly on big-endian hosts (@​pkubaj, @​lukastaegert)
• #​6566: Update dtolnay/rust-toolchain digest to 89b1218 (@​renovate[bot], @​lukastaegert)
• #​6567: Update minor/patch updates (@​renovate[bot])
• #​6568: Update dependency eslint-plugin-unicorn to v77 (@​renovate[bot], @​lukastaegert)
• #​6569: Improve PR testing instructions comments (@​lukastaegert)

v4.64.3

Compare Source

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#​6565)

Pull Requests

• #​6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

v4.64.2

Compare Source

2026-10-07

Bug Fixes

• Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#​6562)
• Do not show errors from closeBundle if there were also build errors (#​6554)

Pull Requests

• #​6554: Preserve build errors when closeBundle fails (@​Jo2234, @​lukastaegert)
• #​6561: Rework REPL artefacts and performance report workflows (@​lukastaegert)
• #​6562: Do not resolve values of assigned variables returned on all paths (@​lukastaegert)

v4.64.1

Compare Source

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#​6587)
• Properly handle global or sticky regular expressions for file names (#​6588)

Pull Requests

• #​6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #​6588: Match stateful external regular expressions consistently (@​shuaiyafei)

v4.64.0

Compare Source

2026-10-02

Features

• Improve try-catch deoptimization to cover calling methods on objects (#​6541)

Bug Fixes

• Fix a situation where some feature-detections of core-js were not triggering properly (#​6541)

Pull Requests

• #​6541: Retain callbacks of helper methods called from try statements (@​lukastaegert)
• #​6542: Run additional tests as part of the coverage job (@​lukastaegert)
• #​6544: Update msys2/setup-msys2 digest to ec48f7c (@​renovate[bot], @​lukastaegert)
• #​6545: Update minor/patch updates (@​renovate[bot])
• #​6546: Update dependency @​mermaid-js/mermaid-cli to v12 (@​renovate[bot])
• #​6547: Update Rust crate swc_compiler_base to v65 (@​renovate[bot])

v4.63.6

Compare Source

2026-10-01

Bug Fixes

• Ensure external reexports are always imported when used in a reified dynamic namespace (#​6540)

Pull Requests

• #​6527: Update minor/patch updates (@​renovate[bot])
• #​6529: Update dependency eslint-plugin-unicorn to v76 (@​renovate[bot])
• #​6530: Lock file maintenance (@​renovate[bot])
• #​6535: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6540: Import external re-exports used by shared-chunk namespace objects (@​00200200)

v4.63.5

Compare Source

2026-09-24

Bug Fixes

• Fix an issue where watch mode would hang instead of terminating when closing via Ctrl+C (#​6521)
• Avoid starting overlapping watch mode runs when plugins invalidate files at the wrong time (#​6526)
• Fix many edge cases where watch mode events were not properly emitted to listeners, especially when errors occur (#​6526)

Pull Requests

• #​6520: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6521: Terminate watch mode via natural process exit when possible (@​lukastaegert)
• #​6523: Protect cc pin against renovate lock file maintenance (@​lukastaegert)
• #​6525: docs: fix typos 'interations' and 'coresponding' (@​haimingZZ)
• #​6526: fix(watch): prevent overlapping runs and other run lifecycle bugs (@​lukastaegert)

v4.63.4

Compare Source

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#​6442)
• Do not create invalid code if import attribute values contain special characters (#​6502)

Pull Requests

• #​6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #​6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #​6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #​6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #​6517: Improve agent instructions (@​lukastaegert)
• #​6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6519: Request Copilot code review via workflow (@​lukastaegert)

v4.63.3

Compare Source

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#​6473)
• Always report and recover from failures on invalidation in watch mode (#​6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#​6514)

Pull Requests

• #​6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #​6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #​6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #​6515: chore(deps): lock file maintenance (@​renovate[bot])

v4.63.2

Compare Source

2026-09-12

Bug Fixes

• Fix a bug when filtering logs for nested properties via the CLI (#​6511)

Pull Requests

• #​6498: chore(deps): lock file maintenance (@​renovate[bot])
• #​6503: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6504: chore(deps): update dependency eslint-plugin-unicorn to v74 (@​renovate[bot])
• #​6505: pin mocha to v11 (@​renovate[bot], @​lukastaegert)
• #​6508: docs: fix AGENTS.md 'Generated files' rule to reference real paths (@​Larslllllll, @​lukastaegert)
• #​6510: chore(deps): lock file maintenance (@​renovate[bot])
• #​6511: Fix nested log filters for primitive values (@​jakezwang, @​lukastaegert)
• #​6512: chore(deps): update dtolnay/rust-toolchain digest to 6bed076 (@​renovate[bot], @​lukastaegert)
• #​6513: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.63.1

Compare Source

2026-08-28

Bug Fixes

• Revert function return value tracking until the most recent issue is understood (#​6490)

Pull Requests

• #​6489: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6490: Revert improve function return value tracking (@​lukastaegert)

v4.63.0

Compare Source

2026-08-25

Features

• Allow to analyze function return values in many more cases (#​6065)

Pull Requests

• #​6065: feat: improve function return value tracking (@​cyyynthia, @​lukastaegert)
• #​6482: Remove unused rendered module sources map (@​yoominho91, @​irontaek, @​lukastaegert)
• #​6483: chore(deps): update minor/patch updates (@​renovate[bot])
• #​6484: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6485: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6486: chore(deps): lock file maintenance (@​renovate[bot])

v4.62.5

Compare Source

2026-08-20

Bug Fixes

• Resolve an issue where compact mode could result in invalid module concatenations (#​6468)

Pull Requests

• #​6468: Keep the semicolon added after a replaced default export (@​Jaybhade, @​lukastaegert)
• #​6469: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6470: fix(deps): update swc monorepo (major) (@​renovate[bot])
• #​6471: chore(deps): lock file maintenance (@​renovate[bot])
• #​6472: chore(deps): update dependency eslint-plugin-unicorn to v73 (@​renovate[bot])
• #​6476: chore(deps): update dtolnay/rust-toolchain digest to 4360b52 (@​renovate[bot])
• #​6477: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6478: chore(deps): lock file maintenance (@​renovate[bot])
• #​6479: chore(deps): lock file maintenance (@​renovate[bot])
• #​6480: chore(deps): lock file maintenance (@​renovate[bot])

v4.62.4

Compare Source

2026-08-01

Bug Fixes

• Resolve a regression when using Rollup on older Linux distributions (#​6467)

Pull Requests

• #​6463: docs: add llms.txt documentation index for LLMs and agents (@​abyworkings-coder, @​lukastaegert)
• #​6464: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6465: chore(deps): lock file maintenance (@​renovate[bot])
• #​6466: chore(deps): lock file maintenance (@​renovate[bot])
• #​6467: ci: fix linux-gnu glibc regression and enforce glibc ≤ 2.28 compatibility (@​lukastaegert)

v4.62.3

Compare Source

2026-07-26

Bug Fixes

• Sanitize illegal characters preserved modules input base (#​6439)

Pull Requests

• #​6421: docs: update x_google_ignoreList link to canonical URL (@​DucMinhNe, @​lukastaegert)
• #​6422: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6423: chore(deps): update actions/checkout action to v7 (@​renovate[bot])
• #​6424: chore(deps): update dependency eslint-plugin-unicorn to v68 (@​renovate[bot], @​lukastaegert)
• #​6425: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6426: chore(deps): lock file maintenance (@​renovate[bot])
• #​6432: fix: make isLegal idempotent by not using a global-flag regex (@​spokodev, @​lukastaegert)
• #​6433: docs: clarify sideEffects and moduleSideEffects (@​ishaanlabs-gg, @​lukastaegert)
• #​6434: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (@​renovate[bot], @​lukastaegert)
• #​6435: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6436: chore(deps): update actions/cache action to v6 (@​renovate[bot])
• #​6438: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6439: Sanitize input base before computing preserved module chunk names (@​MahinAnowar, @​lukastaegert)
• #​6443: chore(deps): update dependency eslint-plugin-unicorn to v71 (@​renovate[bot], @​lukastaegert)
• #​6444: fix(deps): update rust crate swc_compiler_base to v60 (@​renovate[bot])
• #​6446: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (@​renovate[bot])
• #​6447: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6448: chore(deps): update actions/setup-node action to v7 (@​renovate[bot])
• #​6449: chore(deps): update dependency eslint-plugin-unicorn to v72 (@​renovate[bot])
• #​6450: chore(deps): update dependency pinia to v4 (@​renovate[bot], @​lukastaegert)
• #​6451: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6455: docs: fix broken commonjs namedExports link in troubleshooting (@​Hashim1999164, @​lukastaegert)
• #​6456: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6457: chore(deps): update dependency magic-string to v1 (@​renovate[bot], @​lukastaegert)
• #​6458: fix(deps): update swc monorepo (major) (@​renovate[bot])
• #​6459: chore(deps): lock file maintenance (@​renovate[bot])
• #​6460: Fix build:docs after rollup update (@​lukastaegert)

v4.62.2

Compare Source

2026-06-19

Bug Fixes

• Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#​6411)

Pull Requests

• #​6411: Skip side-effect-free external imports when hoisting is disabled (@​morgan-coded, @​lukastaegert)
• #​6416: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (@​fabianbernhart, @​lukastaegert)

v4.62.1

Compare Source

2026-06-19

Bug Fixes

• Preserve multipart file extensions when deconflicting output chunks (#​6408)
• Fix an issue where getLogFilter would match additional logs (#​6415)

Pull Requests

• #​6393: Use import attributes for importing JSON (@​selfisekai, @​lukastaegert)
• #​6408: fix: insert conflict numbers before first extension in multi-extension filenames (@​LeSingh1, @​lukastaegert)
• #​6415: fix: advance value past wildcard prefix before suffix check in getLogFilter (@​JSap0914, @​lukastaegert)
• #​6417: chore(deps): update msys2/setup-msys2 digest to 66cd2cc (@​renovate[bot])
• #​6418: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6419: chore(deps): update dependency eslint-plugin-unicorn to v66 (@​renovate[bot])
• #​6420: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.62.0

Compare Source

2026-06-13

Features

• Ensure that shared dependencies between manual chunks and entry points receive a serparate chunk (#​6374)

Pull Requests

• #​6374: Extract the static dependencies imported by manual chunks into separate chunks (@​TrickyPi, @​lukastaegert)
• #​6405: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6406: chore(deps): pin dependency concurrently to v9 (@​renovate[bot], @​lukastaegert)
• #​6407: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6409: chore(deps): update minor/patch updates to v6.2.0 (@​renovate[bot])
• #​6410: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6412: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6413: chore(deps): update dependency eslint-plugin-unicorn to v65 (@​renovate[bot])
• #​6414: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.61.1

Compare Source

2026-06-04

Bug Fixes

• Avoid extraneous newlines when adding headers via plugins (#​6403)
• Fix a rare issue where starting Rollup would hang on Windows (#​6404)

Pull Requests

• #​6402: Improve documentation for manualPureFunctions (@​lukastaegert)
• #​6403: Does not add an extra leading line feed for addons (@​TrickyPi)
• #​6404: fix: set report.excludeNetwork=true before getReport() to avoid blocking PTR lookups (@​jdz321, @​lukastaegert)

v4.61.0

Compare Source

2026-06-01

Features

• Sort entry modules to make chunk hashes deterministic (#​6391)

Pull Requests

• #​6376: Eliminate AWS credential exposure on fork PRs in REPL artefact workflow (@​lukastaegert)
• #​6378: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6379: chore(deps): update dependency lint-staged to v17 (@​renovate[bot], @​lukastaegert)
• #​6380: chore(deps): update dependency lru-cache to v11 (@​renovate[bot], @​lukastaegert)
• #​6381: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6382: chore(deps): update dependency @​types/node to ^20.19.41 (@​renovate[bot])
• #​6386: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6387: chore(deps): update aws-actions/configure-aws-credentials action to v6 (@​renovate[bot])
• #​6388: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6389: chore(deps): lock file maintenance (@​renovate[bot])
• #​6391: Sort entry modules to make chunk hash names deterministic (@​TrickyPi)
• #​6394: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6395: chore(deps): update react monorepo to v19 (@​renovate[bot], @​lukastaegert)
• #​6396: fix(deps): update rust crate swc_compiler_base to v57 (@​renovate[bot], @​lukastaegert)
• #​6397: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6400: docs: fix broken links (@​jiyujie2006)

v4.60.4

Compare Source

2026-05-14

Bug Fixes

• Improve stability of chunk hashes (#​6362)

Pull Requests

• #​6362: fix: stabilize chunk assignment across parallel file reads (@​sonukapoor, @​Sonu Kapoor, @​TrickyPi, @​lukastaegert)
• #​6370: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6371: chore(deps): update dependency lru-cache to v11 (@​renovate[bot], @​lukastaegert)
• #​6372: chore(deps): update react monorepo to v19 (major) (@​renovate[bot])
• #​6373: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6375: Resolve vulnerabilities (@​lukastaegert)

v4.60.3

Compare Source

2026-05-04

Bug Fixes

• Ensure nested "exports" variables are not renamed (#​6360)

Pull Requests

• #​6360: fix: do not rename nested "exports" bindings that do not conflict (@​tariqrafique, @​lukastaegert)
• #​6364: chore(deps): update msys2/setup-msys2 digest to e989830 (@​renovate[bot])
• #​6365: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6366: fix(deps): update swc monorepo (major) (@​renovate[bot])
• #​6367: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6368: docs: add missing backticks in plugin-development (@​lumirlumir, @​lukastaegert)

v4.60.2

Compare Source

2026-04-18

Bug Fixes

• Resolve a variable rendering bug when generating different formats from the same build (#​6350)

Pull Requests

• #​6327: docs: fix various typos in source and documentation (@​Abhi3975, @​lukastaegert)
• #​6331: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6332: chore(deps): update codecov/codecov-action action to v6 (@​renovate[bot])
• #​6333: chore(deps): update dependency eslint-plugin-unicorn to v64 (@​renovate[bot])
• #​6334: fix(deps): update rust crate swc_compiler_base to v51 (@​renovate[bot])
• #​6335: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6346: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6347: chore(deps): update dependency lru-cache to v11 (@​renovate[bot])
• #​6348: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6349: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6350: fix: reset variable render names between outputs in the same generate (@​barry3406, @​lukastaegert)
• #​6351: chore(deps): update minor/patch updates (@​renovate[bot])
• #​6352: chore(deps): update cross-platform-actions/action action to v1 (@​renovate[bot])
• #​6353: chore(deps): update dependency lru-cache to v11 (@​renovate[bot], @​lukastaegert)
• #​6354: chore(deps): lock file maintenance (@​renovate[bot])
• #​6355: chore(deps): lock file maintenance (@​renovate[bot])
• #​6356: chore(deps): lock file maintenance (@​renovate[bot])
• #​6358: chore: remove cross-env from devDeps (@​K-tecchan)

v4.60.1

Compare Source

2026-03-30

Bug Fixes

• Resolve a situation where side effect imports could be dropped due to a caching issue (#​6286)

Pull Requests

• #​6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#​6274) (@​littlegrayss, @​TrickyPi)
• #​6317: chore(deps): pin dependencies (@​renovate[bot], @​lukastaegert)
• #​6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@​renovate[bot], @​lukastaegert)
• #​6319: chore(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6320: chore(deps): pin dependency typescript to v5 (@​renovate[bot], @​lukastaegert)
• #​6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@​renovate[bot], @​lukastaegert)
• #​6322: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6323: chore(deps): lock file maintenance (@​renovate[bot])
• #​6324: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)

v4.60.0

Compare Source

2026-03-22

Features

• Support source phase imports as long as they are external (#​6279)

Pull Requests

• #​6279: feat: external only Source Phase imports support (@​guybedford, @​lukastaegert)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.