Closed dependabot[bot] closed 1 month ago
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
:tada: This PR is included in version 4.0.1 :tada:
The release is available on:
Your semantic-release bot :package::rocket:
Bumps rollup from 4.17.2 to 4.22.4.
Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
79c0aba
4.22.4e2552c9
Fix DOM Clobbering CVE (#5671)10ab90e
refactor: Use object.prototype to check for reserved properties (#5670)e1cba8e
4.22.359cec3e
Ensure impure dependencies of pure modules are added (#5669)b86ffd7
4.22.2d5ff63d
Partially revert #5658 and re-apply #5644 (#5667)0a821d9
Create SECURITY.md76e962d
4.22.168c23da
Partially revert #5644Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show