Open dependabot[bot] opened 2 weeks ago
🧪 A prerelease is available for testing 🧪
You can install this latest build in your project with:
npm install --save https://prerelease-registry.devprod.cloudflare.dev/chanfana/runs/11005581118/npm-package-itty-router-openapi-175
Or you can immediately run this with npx
:
npx https://prerelease-registry.devprod.cloudflare.dev/chanfana/runs/11005581118/npm-package-itty-router-openapi-175
Bumps rollup from 4.18.0 to 4.22.4.
Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
79c0aba
4.22.4e2552c9
Fix DOM Clobbering CVE (#5671)10ab90e
refactor: Use object.prototype to check for reserved properties (#5670)e1cba8e
4.22.359cec3e
Ensure impure dependencies of pure modules are added (#5669)b86ffd7
4.22.2d5ff63d
Partially revert #5658 and re-apply #5644 (#5667)0a821d9
Create SECURITY.md76e962d
4.22.168c23da
Partially revert #5644Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show