search

GoogleChromeLabs / web-vitals-report

Measure and report on your Web Vitals data in Google Analytics
https://web-vitals-report.web.app
Apache License 2.0
504 stars 48 forks source link

Bump rollup, @rollup/plugin-node-resolve and @rollup/plugin-replace #60

Open dependabot[bot] opened 1 month ago

dependabot[bot] commented 1 month ago

Bumps rollup, @rollup/plugin-node-resolve and @rollup/plugin-replace. These dependencies needed to be updated together. Updates rollup from 2.50.5 to 4.22.4

Release notes

Sourced from rollup's releases.

v4.22.4

4.22.4

2024-09-21

Bug Fixes

  • Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

v4.22.3

4.22.3

2024-09-21

Bug Fixes

  • Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)

Pull Requests

v4.22.2

4.22.2

2024-09-20

Bug Fixes

  • Revert fix for side effect free modules until other issues are investigated (#5667)

Pull Requests

v4.22.1

4.22.1

2024-09-20

Bug Fixes

  • Revert #5644 "stable chunk hashes" while issues are being investigated

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.22.4

2024-09-21

Bug Fixes

  • Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

4.22.3

2024-09-21

Bug Fixes

  • Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)

Pull Requests

4.22.2

2024-09-20

Bug Fixes

  • Revert fix for side effect free modules until other issues are investigated (#5667)

Pull Requests

4.22.1

2024-09-20

Bug Fixes

  • Revert #5644 "stable chunk hashes" while issues are being investigated

Pull Requests

... (truncated)

Commits


Updates @rollup/plugin-node-resolve from 13.0.0 to 15.3.0

Changelog

Sourced from @​rollup/plugin-node-resolve's changelog.

v15.3.0

2024-09-23

Features

  • feat: allow preferBuiltins to be a function (#1694)

v15.2.4

2024-09-22

Updates

  • chore: remove is-builtin-module (#1735)

v15.2.3

2023-10-08

Bugfixes

  • fix: modulePaths default is not set #1534

v15.2.2

2023-10-05

Bugfixes

  • fix: ensure rollup 4 compatibility #1595

v15.2.1

2023-08-22

Bugfixes

  • fix: Implement package exports / imports resolution algorithm according to Node documentation #1549

v15.2.0

2023-08-17

Features

  • feat: pass original importee to secondary resolve #1557

v15.1.0

... (truncated)

Commits
  • a8e326d chore(release): node-resolve v15.3.0
  • 032055b feat(node-resolve): allow preferBuiltins to be a function (#1694)
  • 6d4bb6b chore(release): node-resolve v15.2.4
  • 190aa21 chore(node-resolve): remove is-builtin-module (#1735)
  • dcd8da5 chore(repo): use @dot/versioner for releases (#1612)
  • 1caee89 chore(release): node-resolve v15.2.3
  • ab3f45d fix(node-resolve): modulePaths default is not set (#1534)
  • cdf9113 chore(repo): manually update changelog and package versions after bad release...
  • 841a039 fix(alias,auto-install,babel,beep,buble,commonjs,data-uri,dsv,dynamic-import-...
  • 9bfc5d9 chore(release): node-resolve v15.2.1
  • Additional commits viewable in compare view


Updates @rollup/plugin-replace from 2.4.2 to 6.0.1

Changelog

Sourced from @​rollup/plugin-replace's changelog.

v6.0.1

2024-09-23

Bugfixes

  • fix: The preventAssignment option is treated as a value to replace (#1768)

v6.0.0

2024-09-23

Breaking Changes

  • fix!: objectGuards doesn't take effects (#1764)

v5.0.7

2024-06-05

Bugfixes

  • fix: add missing sourceMap documentation (#1698)

v5.0.6

2024-06-05

Bugfixes

  • fix: ternary operator replacement (#1712)

v5.0.5

2023-10-29

Bugfixes

  • fix: prevent variable before colons from being replaced when preventAssigment is true (#1609)

v5.0.4

2023-10-15

Bugfixes

  • fix: bump magic-string version #1596

v5.0.3

... (truncated)

Commits
  • cdf9113 chore(repo): manually update changelog and package versions after bad release...
  • 841a039 fix(alias,auto-install,babel,beep,buble,commonjs,data-uri,dsv,dynamic-import-...
  • ec974f2 chore(release): replace v5.0.2
  • f5aa3c3 fix(commonjs,dynamic-import-vars,inject,replace,strip): update magic-string (...
  • a2e582a chore(repo): enable consistent-type-imports for typescript files (#1325)
  • 8791470 chore(release): replace v5.0.1
  • 3038271 chore(commonjs,yaml,wasm,virtual,url,typescript,sucrase,strip,run,replace,plu...
  • bdc099e chore(release): replace v5.0.0
  • cba9788 fix(replace): prepare for Rollup 3 (#1286)
  • 69146cd chore(repo): central changes for Rollup 3 updates (#1277)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/GoogleChromeLabs/web-vitals-report/network/alerts).