Version Details and Security Vulnerabilities

📦

rollup

4.33.0

Comparision Betweeen 4.33.0 and 4.32.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

2.49 MB

Version 4.33.0 Details

Rollup version 4.33.0 introduces notable updates and improvements compared to its predecessor, version 4.32.1, impacting the development workflow for JavaScript module bundling. A key highlight is the update of several development dependencies, including @eslint/js (from 9.18.0 to 9.19.0) and eslint (from 9.18.0 to 9.19.0), which signifies improvements in code linting and quality assurance processes. typescript-eslint sees an upgrade from version 8.21.0 to 8.22.0, potentially enhancing TypeScript support and integration within Rollup projects. Vite also jumps from version 6.0.10 to 6.0.11. Lint-staged jumps from v15.4.1 to v15.4.3

Furthermore, @shikijs/vitepress-twoslash advances from version 2.0.3 to 2.1.0, indicating potential enhancements in Vitepress integration for documentation and code examples. The core development dependency, rollup, sees an increment from 4.31.0 to 4.32.0 in the new version's devDependencies, possibly indicating bug fixes or new features tested within the Rollup development environment itself. Crucially, version 4.33.0 incorporates updated optional dependencies tailored to various operating systems and architectures, each bumped from 4.32.1 to 4.33.0. These updates to platform-specific Rollup binaries ensure optimized performance and compatibility across diverse deployment environments. While the core functionality and usage patterns of Rollup remain consistent, developers are encouraged to assess these dependency updates for potential impact on their projects, particularly regarding linting rules, TypeScript support, Vitepress integration, and platform-specific performance characteristics. These iterative improvements contribute to a more robust and efficient module bundling experience.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.