tjenkinson / redos-detector

A CLI and library which tests with certainty if a regex pattern is safe from ReDoS attacks. Supported in the browser, Node and Deno.
https://redosdetector.com
MIT License
43 stars 4 forks source link

Update dependency rollup to v4.27.2 #636

Closed renovate[bot] closed 1 day ago

renovate[bot] commented 1 day ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
rollup (source) 4.27.0 -> 4.27.2 age adoption passing confidence

Release Notes

rollup/rollup (rollup) ### [`v4.27.2`](https://redirect.github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4272) [Compare Source](https://redirect.github.com/rollup/rollup/compare/v4.27.1...v4.27.2) *2024-11-15* ##### Bug Fixes - Ensure unused variables in patterns are always deconflicted if rendered ([#​5728](https://redirect.github.com/rollup/rollup/issues/5728)) ##### Pull Requests - [#​5728](https://redirect.github.com/rollup/rollup/pull/5728): Fix more variable deconflicting issues ([@​lukastaegert](https://redirect.github.com/lukastaegert)) ### [`v4.27.1`](https://redirect.github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4271) [Compare Source](https://redirect.github.com/rollup/rollup/compare/v4.27.0...v4.27.1) *2024-11-15* ##### Bug Fixes - Fix some situations where parameter declarations could put Rollup into an infinite loop ([#​5727](https://redirect.github.com/rollup/rollup/issues/5727)) ##### Pull Requests - [#​5727](https://redirect.github.com/rollup/rollup/pull/5727): Debug out-of-memory issues with Rollup v4.27.0 ([@​lukastaegert](https://redirect.github.com/lukastaegert))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

socket-security[bot] commented 1 day ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/rollup@4.27.2 None +20 47.3 MB eventualbuddha, lukastaegert, rich_harris, ...2 more

🚮 Removed packages: npm/rollup@4.27.0

View full report↗︎