[Snyk] Upgrade rollup from 2.32.1 to 2.53.3

[snyk-bot]

Snyk has created this PR to upgrade rollup from 2.32.1 to 2.53.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 69 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2021-07-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: rollup

• 2.53.3 - 2021-07-21
  

  2021-07-21

  Bug Fixes

  • Solve an issue that could lead to severe memory issues and crashes when there are a lot of hoisted variables (#4183)

  Pull Requests

  • #4183: Avoid memory issues with hoisted variables (@ lukastaegert)
• 2.53.2 - 2021-07-15
  

  2021-07-15

  Bug Fixes

  • Identify additional TDZ situations in functions that are run more than once (#4177)
  • Fix a scoping issue when a variable inside a catch scope matches the scope parameter's name (#4178)

  Pull Requests

  • #4177: Fix additional let/var init bugs (@ kzc)
  • #4178: Correctly create outside variable when shadowed by catch parameter (@ lukastaegert)
• 2.53.1 - 2021-07-11
  

  2021-07-11

  Bug Fixes

  • Do not omit namespace reexports when treeshake is false (#4175)

  Pull Requests

  • #4175: Generate namespace objects when not tree-shaking (@ lukastaegert)
• 2.53.0 - 2021-07-09
  

  2021-07-09

  Features

  • Add maxParallelFileReads option to limit read operations with a default of 20 (#4170)

  Pull Requests

  • #4170: Limit parallel file reads to prevent "EMFILE: too many open files" error (@ schummar)
• 2.52.8 - 2021-07-07
  

  2021-07-07

  Bug Fixes

  • Automatically handle many use var before declaration and TDZ access scenarios correctly without the need for treeshake.correctVarValueBeforeDeclaration (#4148)

  Pull Requests

  • #4148: Fix var/const/let variable use before declaration (@ kzc and @ lukastaegert)
• 2.52.7 - 2021-07-02
  

  2021-07-02

  Bug Fixes

  • Fix an issue where reassignments where not tracked through async function returns (#4163)

  Pull Requests

  • #4163: Deoptimize return values of async functions (@ lukastaegert)
• 2.52.6 - 2021-07-01
  

  2021-07-01

  Bug Fixes

  • Fix an issue where reassignments where not tracked through an await expression (#4162)

  Pull Requests

  • #4162: eoptimize awaited expressions (@ lukastaegert)
• 2.52.5 - 2021-07-01
  

  2021-07-01

  Bug Fixes

  • Properly display parser errors not tied to a code location (#4160)

  Pull Requests

  • #4160: fix: max stack call error is caught on locate (@ semoal)
• 2.52.4 - 2021-06-30
  

  2021-06-30

  Bug Fixes

  • Fix an error when external namespaces are reexported across several files (#4159)

  Pull Requests

  • #4159: Properly handle double reexports from external namespaces (@ lukastaegert)
• 2.52.3 - 2021-06-25
  

  2021-06-25

  Bug Fixes

  • Fix an issue where code was wrongly removed when using vars in nested scopes (#4149)

  Pull Requests

  • #4149: Make sure the initializer of hoisted variables is deoptimized (@ lukastaegert)
• 2.52.2 - 2021-06-21
• 2.52.1 - 2021-06-17
• 2.52.0 - 2021-06-16
• 2.51.2 - 2021-06-11
• 2.51.1 - 2021-06-08
• 2.51.0 - 2021-06-06
• 2.50.6 - 2021-06-03
• 2.50.5 - 2021-05-30
• 2.50.4 - 2021-05-29
• 2.50.3 - 2021-05-28
• 2.50.2 - 2021-05-27
• 2.50.1 - 2021-05-26
• 2.50.0 - 2021-05-25
• 2.49.0 - 2021-05-23
• 2.49.0-1 - 2021-05-20
• 2.49.0-0 - 2021-05-18
• 2.48.0 - 2021-05-15
• 2.47.0 - 2021-05-04
• 2.46.0 - 2021-04-29
• 2.45.2 - 2021-04-13
• 2.45.1 - 2021-04-10
• 2.45.0 - 2021-04-09
• 2.44.0 - 2021-03-29
• 2.43.1 - 2021-03-28
• 2.43.0 - 2021-03-27
• 2.42.4 - 2021-03-24
• 2.42.3 - 2021-03-22
• 2.42.2 - 2021-03-22
• 2.42.1 - 2021-03-20
• 2.42.0 - 2021-03-19
• 2.41.5 - 2021-03-18
• 2.41.4 - 2021-03-16
• 2.41.3 - 2021-03-16
• 2.41.2 - 2021-03-12
• 2.41.1 - 2021-03-11
• 2.41.0 - 2021-03-09
• 2.40.0 - 2021-02-26
• 2.39.1 - 2021-02-23
• 2.39.0 - 2021-02-12
• 2.38.5 - 2021-02-05
• 2.38.4 - 2021-02-02
• 2.38.3 - 2021-02-01
• 2.38.2 - 2021-01-31
• 2.38.1 - 2021-01-28
• 2.38.0 - 2021-01-22
• 2.37.1 - 2021-01-20
• 2.37.0 - 2021-01-19
• 2.36.2 - 2021-01-16
• 2.36.1 - 2021-01-06
• 2.36.0 - 2021-01-05
• 2.35.1 - 2020-12-14
• 2.35.0 - 2020-12-14
• 2.34.2 - 2020-12-06
• 2.34.1 - 2020-12-03
• 2.34.0 - 2020-11-29
• 2.33.3 - 2020-11-18
• 2.33.2 - 2020-11-14
• 2.33.1 - 2020-11-02
• 2.33.0 - 2020-11-01
• 2.32.1 - 2020-10-21

from rollup GitHub release notes

Commit messages

Package name: rollup

• ae8f57f 2.53.3
• c950858 Update changelog
• 8d1cdad Avoid memory issues with hoisted variables (doc: update AUTHORS list nodejs/node#4183)
• ea96ab0 2.53.2
• 4a88b1b Update changelog
• 7c014fb Fix additional let/var init bugs (doc: change references from node to Node.js nodejs/node#4177)
• ccdf124 Correctly create outside variable when shadowed by catch parameter (fs.lstat not recognizing symbolic link nodejs/node#4178)
• 89b9370 2.53.1
• f25f4fb Update changelog
• 076b608 Generates namespace objects when not tree-shaking (Node uses an hardcoded list of certificate authorities nodejs/node#4175)
• 7435d31 2.53.0
• 12778ea Update changelog
• ce95197 Limit parallel file reads to prevent "EMFILE: too many open files" error (repl: display error message when loading directory nodejs/node#4170)
• b3d5f7d 2.52.8
• 7ee5d44 Update changelog
• 752d4fe Fix var/const/let variable use before declaration (why not upgrade npm version in 5.1.1 stable release? nodejs/node#4148)
• b2218cc 2.52.7
• a940ebe Update changelog
• 076df11 Deoptimize return values of async functions (src: use GetCurrentProcessId() for process.pid nodejs/node#4163)
• 9cb15d6 2.52.6
• f3fa633 Update changelog
• b9d9e6f Deoptimize awaited expressions (test: mark test-cluster-shared-leak flaky nodejs/node#4162)
• 5b55f99 2.52.5
• 91430ce Update changelog

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs