Rollup Plugin Node Globals, a tool designed to seamlessly inject Node.js globals into your browser-targeted Rollup bundles, saw a significant update from version 1.1.0 to 1.2.0. The primary focus for developers considering an upgrade lies in the dependency updates and potential performance improvements they bring. Core dependencies like acorn (JavaScript parser) leapt from ^4.0.1 to ^5.5.0, buffer-es6 evolved from ^4.9.1 to ^4.9.3, estree-walker from ^0.2.1 to ^0.5.1, magic-string (for source map manipulation) jumped from ^0.16.0 to ^0.22.4 and rollup-pluginutils went from ^1.5.2 to ^2.0.1.
These updates likely involved bug fixes, enhanced ECMAScript standard support, and potential optimizations, contributing to a more robust and efficient build process. Furthermore, updating the development dependencies shows the project is maintaining compatibility with newer versions of tools, such as rollup going from ^0.36.0 to ^0.56.3, rollup-plugin-babel jumping from ^2.4.0 to ^3.0.3, rollup-plugin-node-resolve climbing from ^2.0.0 to ^3.0.3 and browserify moving from ^13.0.0 to ^16.1.0, which is relevant when integrating and testing upgrades or fixes. The significant increase in unpacked size, from an unknown value in the 1.1.0 version to 27KB in 1.2.0, suggests more code or features may be introduced.
The are not vulnerabilities for the version 1.2.0 of the package rollup-plugin-node-globals