[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
rollup (source)	devDependencies	minor	4.64.6 → 4.65.0	4.67.3 (+3)

---

Release Notes

rollup/rollup (rollup)

v4.65.0

Compare Source

2026-10-22

Features

• Support synthetic named exports in namespaces when preserving modules (#​6589)

Bug Fixes

• Fix a situation where unaligned sourcemaps resulted in a wrong segment (#​6591)
• Forward startup errors on native module load when starting rollup (#​6592)

Pull Requests

• #​6589: Merge synthetic named exports into static namespaces when preserving modules (@​b84330808, @​lukastaegert)
• #​6590: Stabilize flaky watch test "treats filenames literally, not as globs" (@​lukastaegert)
• #​6591: Use the last sourcemap segment for log locations after its start (@​Dev-next-gen)
• #​6592: Preserve native module load errors (@​shuaiyafei, @​lukastaegert)
• #​6593: Close bundles in the Gulp examples (@​shuaiyafei, @​lukastaegert)
• #​6594: Improve review instructions and resolve audit (@​lukastaegert)

v4.64.12

Compare Source

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#​6587)
• Properly handle global or sticky regular expressions for file names (#​6588)

Pull Requests

• #​6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #​6588: Match stateful external regular expressions consistently (@​shuaiyafei)

v4.64.10

Compare Source

2026-10-18

Bug Fixes

• Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#​6583)
• Ensure HTML entities in JSX are properly decoded in the output (#​6584)

Pull Requests

• #​6583: Track manual chunk dependencies when merging small chunks (@​ybai08, @​lukastaegert)
• #​6584: Use decoded values for JSX string attributes (@​luantaraschi)

v4.64.9

Compare Source

2026-10-17

Bug Fixes

• Ensure export live-bindings are properly maintained for aliased exports (#​6576)
• Retain typed array constructor calls if the argument has iteration side effects (#​6582)

Pull Requests

• #​6576: Fix live bindings for aliased reassigned exports (@​oxura, @​lukastaegert)
• #​6582: Retain typed array constructors that iterate their argument (@​joshuablac, @​lukastaegert)

v4.64.8

Compare Source

2026-10-17

Bug Fixes

• Ensure chunk hashes change when sourcemap comments change (#​6509)
• Resolve some relative import resolution edge cases (#​6522)

Pull Requests

• #​6509: fix: include sourcemap comments in chunk hashes (@​snoopuppy582, @​wangxpych, @​lukastaegert)
• #​6522: fix(browser): match node's join and relative for "." and ".." segments (@​luantaraschi, @​lukastaegert)
• #​6577: Update dtolnay/rust-toolchain digest to 686976e (@​renovate[bot])
• #​6578: Update minor/patch updates (@​renovate[bot])
• #​6579: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6580: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6581: Update dependency eslint-plugin-unicorn to v78 (@​renovate[bot])

v4.64.7

Compare Source

2026-10-15

Bug Fixes

• Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#​6575)

Pull Requests

• #​6575: Report creation of missing watch files sharing a directory on Linux (@​lukastaegert)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.