Version Details and Security Vulnerabilities

📦

rollup

4.24.4

Comparision Betweeen 4.24.4 and 4.24.3

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.47 MB

Version 4.24.4 Details

Rollup 4.24.4 represents a minor update to the popular ES module bundler, building upon the solid foundation of version 4.24.3. While the core functionality remains consistent, several dependency updates and refinements contribute to an improved development experience.

Key changes lie within the devDependencies. Notably, vite is updated from version 5.4.9 to 5.4.10, and acorn from 8.13.0 to 8.14.0. Also, the version of rollup used as devDependency updates too, from 4.24.0 to 4.24.3. Pinia, the intuitive store system for Vue, sees an upgrade from 2.2.4 to 2.2.5. TypeScript receives a minor bump of 5 intermediate versions, while @types/node also experiences an advancement, ensuring compatibility with the latest Node.js features and APIs. Furthermore, @vue/language-server upgrades from 2.1.6 to 2.1.10, and @shikijs/vitepress-twoslash goes from 1.22.0 to 1.22.2. eslint-plugin-vue gets an update from 9.29.1 to 9.30.0 and typescript-eslint from version 8.11.0 to 8.12.2.

These updates typically bring bug fixes, performance optimizations, and enhanced support for evolving JavaScript and TypeScript standards. For developers using Rollup, this means potentially smoother build processes, better integration with modern tooling, and improved type checking in their projects. The optional dependencies, which allow Rollup to provide prebuilt binaries for different architectures, are also upgraded to version 4.24.4, improving the speed and reliability of installations on those platforms. The distribution size also increases, from 2592167 to 2594758.

Users are encouraged to update to version 4.24.4 to leverage these improvements and ensure their projects benefit from the latest enhancements in the Rollup ecosystem.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.