[openstreetmap/openstreetmap-website] Bump rollup from 4.53.2 to 4.59.0 (PR #6841)

Wed, 25 Feb 2026 16:13:13 -0800 

Bumps [rollup](https://github.com/rollup/rollup) from 4.53.2 to 4.59.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a 
href="https://github.com/rollup/rollup/releases">rollup's 
releases</a>.</em></p>
<blockquote>
<h2>v4.59.0</h2>
<h2>4.59.0</h2>
<p><em>2026-02-22</em></p>
<h3>Features</h3>
<ul>
<li>Throw when the generated bundle contains paths that would leave the 
output directory (<a 
href="https://redirect.github.com/rollup/rollup/issues/6276">#6276</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6275">#6275</a>:
 Validate bundle stays within output dir (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>v4.58.0</h2>
<h2>4.58.0</h2>
<p><em>2026-02-20</em></p>
<h3>Features</h3>
<ul>
<li>Also support <code>__NO_SIDE_EFFECTS__</code> annotation 
before variable declarations declaring function expressions (<a 
href="https://redirect.github.com/rollup/rollup/issues/6272">#6272</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6256">#6256</a>:
 docs: document PreRenderedChunk properties including isDynamicEntry and 
isImplicitEntry (<a 
href="https://github.com/njg7194"><code>@​njg7194</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6259">#6259</a>:
 docs: Correct typo and improve sentence structure in docs for 
<code>output.experimentalMinChunkSize</code> (<a 
href="https://github.com/millerick"><code>@​millerick</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6260">#6260</a>:
 fix(deps): update rust crate swc_compiler_base to v47 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6261">#6261</a>:
 fix(deps): lock file maintenance minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6262">#6262</a>:
 Avoid unnecessary cloning of the code string (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6263">#6263</a>:
 fix(deps): update minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6265">#6265</a>:
 chore(deps): lock file maintenance (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6267">#6267</a>:
 fix(deps): update minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6268">#6268</a>:
 chore(deps): update dependency eslint-plugin-unicorn to v63 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6269">#6269</a>:
 chore(deps): update dependency lru-cache to v11 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6270">#6270</a>:
 chore(deps): lock file maintenance (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6272">#6272</a>:
 forward NO_SIDE_EFFECTS annotations to function expressions in variable 
declarations (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>v4.57.1</h2>
<h2>4.57.1</h2>
<p><em>2026-01-30</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix heap corruption issue in Windows (<a 
href="https://redirect.github.com/rollup/rollup/issues/6251">#6251</a>)</li>
<li>Ensure exports of a dynamic import are fully included when called 
from a try...catch (<a 
href="https://redirect.github.com/rollup/rollup/issues/6254">#6254</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6251">#6251</a>:
 fix: Isolate and cache <code>process.report.getReport()</code> 
calls in a child process for robust environment detection (<a 
href="https://github.com/alan-agius4"><code>@​alan-agius4</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a 
href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md">rollup's
 changelog</a>.</em></p>
<blockquote>
<h2>4.59.0</h2>
<p><em>2026-02-22</em></p>
<h3>Features</h3>
<ul>
<li>Throw when the generated bundle contains paths that would leave the 
output directory (<a 
href="https://redirect.github.com/rollup/rollup/issues/6276">#6276</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6275">#6275</a>:
 Validate bundle stays within output dir (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>4.58.0</h2>
<p><em>2026-02-20</em></p>
<h3>Features</h3>
<ul>
<li>Also support <code>__NO_SIDE_EFFECTS__</code> annotation 
before variable declarations declaring function expressions (<a 
href="https://redirect.github.com/rollup/rollup/issues/6272">#6272</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6256">#6256</a>:
 docs: document PreRenderedChunk properties including isDynamicEntry and 
isImplicitEntry (<a 
href="https://github.com/njg7194"><code>@​njg7194</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6259">#6259</a>:
 docs: Correct typo and improve sentence structure in docs for 
<code>output.experimentalMinChunkSize</code> (<a 
href="https://github.com/millerick"><code>@​millerick</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6260">#6260</a>:
 fix(deps): update rust crate swc_compiler_base to v47 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6261">#6261</a>:
 fix(deps): lock file maintenance minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6262">#6262</a>:
 Avoid unnecessary cloning of the code string (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6263">#6263</a>:
 fix(deps): update minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6265">#6265</a>:
 chore(deps): lock file maintenance (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6267">#6267</a>:
 fix(deps): update minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6268">#6268</a>:
 chore(deps): update dependency eslint-plugin-unicorn to v63 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6269">#6269</a>:
 chore(deps): update dependency lru-cache to v11 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6270">#6270</a>:
 chore(deps): lock file maintenance (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6272">#6272</a>:
 forward NO_SIDE_EFFECTS annotations to function expressions in variable 
declarations (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>4.57.1</h2>
<p><em>2026-01-30</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix heap corruption issue in Windows (<a 
href="https://redirect.github.com/rollup/rollup/issues/6251">#6251</a>)</li>
<li>Ensure exports of a dynamic import are fully included when called 
from a try...catch (<a 
href="https://redirect.github.com/rollup/rollup/issues/6254">#6254</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6251">#6251</a>:
 fix: Isolate and cache <code>process.report.getReport()</code> 
calls in a child process for robust environment detection (<a 
href="https://github.com/alan-agius4"><code>@​alan-agius4</code></a>,
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6252">#6252</a>:
 chore(deps): update dependency lru-cache to v11 (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6253">#6253</a>:
 chore(deps): lock file maintenance minor/patch updates (<a 
href="https://github.com/renovate"><code>@​renovate</code></a>[bot],
 <a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a 
href="https://redirect.github.com/rollup/rollup/pull/6254">#6254</a>:
 Fully include dynamic imports in a try-catch (<a 
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a 
href="https://github.com/rollup/rollup/commit/ae846957f109690a866cc3e4c073613c338d3476"><code>ae84695</code></a>
 4.59.0</li>
<li><a 
href="https://github.com/rollup/rollup/commit/b39616e9175b3d9fc3977c99153174c490805a93"><code>b39616e</code></a>
 Update audit-resolve</li>
<li><a 
href="https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"><code>c60770d</code></a>
 Validate bundle stays within output dir (<a 
href="https://redirect.github.com/rollup/rollup/issues/6275">#6275</a>)</li>
<li><a 
href="https://github.com/rollup/rollup/commit/33f39c1f205ea2eadaf4b589e493453e2baa3662"><code>33f39c1</code></a>
 4.58.0</li>
<li><a 
href="https://github.com/rollup/rollup/commit/b61c40803b717854c1c28937e8098e5ad3c7b8ca"><code>b61c408</code></a>
 forward NO_SIDE_EFFECTS annotations to function expressions in variable 
decla...</li>
<li><a 
href="https://github.com/rollup/rollup/commit/7f00689ec90e2cafb11c26eefbcac62343c936f6"><code>7f00689</code></a>
 Extend agent instructions</li>
<li><a 
href="https://github.com/rollup/rollup/commit/e7b2b85af0901244ecc141b9d792c6db6b527ea4"><code>e7b2b85</code></a>
 chore(deps): lock file maintenance (<a 
href="https://redirect.github.com/rollup/rollup/issues/6270">#6270</a>)</li>
<li><a 
href="https://github.com/rollup/rollup/commit/2aa5da9baf82211b8207d268c8751630cb766970"><code>2aa5da9</code></a>
 fix(deps): update minor/patch updates (<a 
href="https://redirect.github.com/rollup/rollup/issues/6267">#6267</a>)</li>
<li><a 
href="https://github.com/rollup/rollup/commit/4319837c5448d0c10d89e9ded118888deec2eeec"><code>4319837</code></a>
 chore(deps): update dependency lru-cache to v11 (<a 
href="https://redirect.github.com/rollup/rollup/issues/6269">#6269</a>)</li>
<li><a 
href="https://github.com/rollup/rollup/commit/c3b6b4bdc4f2ed978fa233132a526957e6513233"><code>c3b6b4b</code></a>
 chore(deps): update dependency eslint-plugin-unicorn to v63 (<a 
href="https://redirect.github.com/rollup/rollup/issues/6268">#6268</a>)</li>
<li>Additional commits viewable in <a 
href="https://github.com/rollup/rollup/compare/v4.53.2...v4.59.0">compare
 view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that 
runs during installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rollup&package-manager=npm_and_yarn&previous-version=4.53.2&new-version=4.59.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have 
been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot 
creating any more for this dependency (unless you reopen the PR or upgrade to 
it yourself)
You can disable automated security fix PRs for this repo from the [Security 
Alerts 
page](https://github.com/openstreetmap/openstreetmap-website/network/alerts).

</details>
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/6841

-- Commit Summary --

  * Bump rollup from 4.53.2 to 4.59.0

-- File Changes --

    M yarn.lock (286)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/6841.patch
https://github.com/openstreetmap/openstreetmap-website/pull/6841.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6841
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/[email protected]>

_______________________________________________
rails-dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/rails-dev

Reply via email to