Rollup Plugin Esbuild experienced an update from version 4.10.2 to 4.10.3, introducing subtle but potentially impactful changes for developers leveraging this tool for their bundling needs. Version 4.10.3, released on November 8, 2022, brings updates to its dependency tree; specifically, it depends on debug version ^4.3.3, joycon version ^3.0.1, jsonc-parser version ^3.0.0, es-module-lexer version 0.9.3 and @rollup/pluginutils version ^4.1.1.
Compared to version 4.10.2, released a day before, which used debug version ^4.3.4, joycon version ^3.1.1, jsonc-parser version ^3.2.0, es-module-lexer version 1.0.5 and @rollup/pluginutils version ^5.0.1. The dependency changes might reflect bug fixes, performance improvements, or security updates within the dependencies themselves. Developers should carefully check these dependency upgrades. The core functionality of the plugin remains consistent; it still serves as a bridge between Rollup and Esbuild, enabling faster builds. Both versions maintain the same peer dependencies, requiring Rollup (^1.20.0 || ^2.0.0 for 4.10.3 and ^1.20.0 || ^2.0.0 || ^3.0.0 for 4.10.2) and Esbuild (>=0.10.1). Both offer the same incentive of sponsoring the author to support his open source work.
The are not vulnerabilities for the version 4.10.3 of the package rollup-plugin-esbuild
