Skip to content

Bump rollup and @angular-devkit/build-angular#749

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/multi-f7eb36cc01
Open

Bump rollup and @angular-devkit/build-angular#749
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/multi-f7eb36cc01

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 4, 2025

Bumps rollup to 4.53.3 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates rollup from 2.1.0 to 4.53.3

Release notes

Sourced from rollup's releases.

v4.53.3

4.53.3

2025-11-19

Bug Fixes

  • Fix an error where too many modules where flagged for having an unused external import (#6182)
  • Fix an error where an assignment was wrongly tree-shaken when mutating it (#6183)

Pull Requests

v4.53.2

4.53.2

2025-11-10

Bug Fixes

  • Do not throw when using invalid escape sequences in template literals (#6177)

Pull Requests

v4.53.1

4.53.1

2025-11-07

Bug Fixes

  • Fix install script (#6172)

Pull Requests

  • #6172: fix: move patch-package from postinstall to prepare script (@​mshima)

v4.53.0

4.53.0

2025-11-07

Features

... (truncated)

Changelog

Sourced from rollup's changelog.

rollup changelog

2.79.1

2022-09-22

Bug Fixes

  • Avoid massive performance degradation when creating thousands of chunks (#4643)

Pull Requests

2.79.0

2022-08-31

Features

  • Add amd.forceJsExtensionForImports to enforce using .js extensions for relative AMD imports (#4607)

Pull Requests

2.78.1

2022-08-19

Bug Fixes

  • Avoid inferring "arguments" as name for a default export placeholder variable (#4613)

Pull Requests

2.78.0

2022-08-14

Features

  • Support writing plugin hooks as objects with a "handler" property (#4600)
  • Allow changing execution order per plugin hook (#4600)
  • Add flag to execute plugins in async parallel hooks sequentially (#4600)

... (truncated)

Commits
  • 998b595 4.53.3
  • ef834c2 Tracing the importers chain for exported variables in external module (#6182)
  • fb21d56 Check if left side is included when checking if assigning to an assignment ha...
  • 4b4581d Add test-install CI job to test packaging, installation and importing of roll...
  • 18ee41b fix(deps): lock file maintenance minor/patch updates (#6180)
  • f0a80d1 Re-enable TypeScript test (#6174)
  • d8b0150 4.53.2
  • 4f43f03 handle TemplateElement with null cooked value (#6177)
  • e3bdcdf 4.53.1
  • 96b5453 fix: move patch-package from postinstall to prepare script (#6172)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.


Updates @angular-devkit/build-angular from 0.901.15 to 21.0.2

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.0.2

@​angular/cli

Commit Description
fix - f1a7116cd update @modelcontextprotocol/sdk to v1.24.0

@​angular-devkit/schematics

Commit Description
fix - dc6d9469e remove lazy imports in node tasks

@​angular/build

Commit Description
fix - f8a1939fd add filename truncation to test discovery
fix - 86dd3297f allow overriding Vitest coverage reportsDirectory option

21.0.1

@​schematics/angular

Commit Description
fix - 2f58705cb add missing imports for lifecycle hooks in jasmine-vitest migration
fix - c973bb9ca add mock names to createSpyObj transformation
fix - 4534c9848 do not set esModuleInterop and moduleResolution when module is preserve
fix - 16d898e75 fix migration of jasmine.clock().mockDate()
fix - 21c3eac72 handle createSpyObj without base name on refactor-jasmine-vitest
fix - b8c99aa4c improve safety of done callback transformation
fix - 4a71e06fc silently skip when the build target already uses one of the new builders
fix - 2ffdae421 support testRunner option in library schematic
fix - 145de4a58 warn about loose matching in arrayWithExactContents

@​angular/cli

Commit Description
fix - 363496ae0 ensure dependencies are resolved correctly for node modules directory check

@​angular/build

Commit Description
fix - d097df2d7 correct Vitest coverage path resolution for JSDOM on Windows
fix - cdb607ada correctly configure per-browser headless mode in Vitest runner
fix - 244931ece correctly invoke isTTY as a function
fix - 54d542738 ensure correct URL joining for prerender routes
fix - a28b38bbe force dev-server to use HTTP/1.1 when using SSR with SSL
fix - 59ff867f0 normalize --include paths to posix

@​angular/ssr

Commit Description
fix - 03e231216 handle X-Forwarded-Prefix and APP_BASE_HREF in redirects
fix - 3cac01882 prevent redirect loop with encoded query parameters

21.0.0

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.0.2 (2025-12-03)

@​angular/cli

Commit Type Description
f1a7116cd fix update @modelcontextprotocol/sdk to v1.24.0

@​angular-devkit/schematics

Commit Type Description
dc6d9469e fix remove lazy imports in node tasks

@​angular/build

Commit Type Description
f8a1939fd fix add filename truncation to test discovery
86dd3297f fix allow overriding Vitest coverage reportsDirectory option

20.3.13 (2025-12-03)

@​angular/cli

Commit Type Description
cfbb61602 fix update @modelcontextprotocol/sdk to v1.24.0

21.1.0-next.0 (2025-11-26)

@​angular/cli

Commit Type Description
c3c9ac506 feat Add MCP tools for building and running devservers

@​schematics/angular

Commit Type Description
36cf3afb4 feat add browserMode option to jasmine-vitest schematic

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [rollup](https://github.com/rollup/rollup) to 4.53.3 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `rollup` from 2.1.0 to 4.53.3
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md)
- [Commits](rollup/rollup@v2.1.0...v4.53.3)

Updates `@angular-devkit/build-angular` from 0.901.15 to 21.0.2
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular-cli/commits/21.0.2)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.53.3
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 4, 2025
@marklise marklise removed their request for review February 4, 2026 04:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants