search

travi / shell-scaffolder

opinionated scaffolder for shell projects
https://npm.im/@travi/shell-scaffolder
MIT License
1 stars 0 forks source link

chore(deps): update dependency rollup to v4.22.4 (master) #940

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 1 month ago

This PR contains the following updates:

Package Type Update Change OpenSSF
rollup (source) devDependencies patch 4.22.2 -> 4.22.4 OpenSSF Scorecard

Release Notes

rollup/rollup (rollup) ### [`v4.22.4`](https://redirect.github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4224) [Compare Source](https://redirect.github.com/rollup/rollup/compare/v4.22.3...v4.22.4) *2024-09-21* ##### Bug Fixes - Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context ([#​5671](https://redirect.github.com/rollup/rollup/issues/5671)) ##### Pull Requests - [#​5670](https://redirect.github.com/rollup/rollup/pull/5670): refactor: Use object.prototype to check for reserved properties ([@​YuHyeonWook](https://redirect.github.com/YuHyeonWook)) - [#​5671](https://redirect.github.com/rollup/rollup/pull/5671): Fix DOM Clobbering CVE ([@​lukastaegert](https://redirect.github.com/lukastaegert)) ### [`v4.22.3`](https://redirect.github.com/rollup/rollup/blob/HEAD/CHANGELOG.md#4223) [Compare Source](https://redirect.github.com/rollup/rollup/compare/v4.22.2...v4.22.3) *2024-09-21* ##### Bug Fixes - Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies ([#​5669](https://redirect.github.com/rollup/rollup/issues/5669)) ##### Pull Requests - [#​5669](https://redirect.github.com/rollup/rollup/pull/5669): Ensure impure dependencies of pure modules are added ([@​lukastaegert](https://redirect.github.com/lukastaegert))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 3 weeks ago

:tada: This PR is included in version 2.0.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket: