Bump rolldown from 1.2.0 to 1.2.1 in the rolldown group by dependabot[bot] · Pull Request #488 · samchon/backend

dependabot · 2026-07-30T09:46:37Z

Bumps the rolldown group with 1 update: rolldown.

Updates rolldown from 1.2.0 to 1.2.1

Release notes

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.1] - 2026-07-29

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a

dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda

plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY

import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red

dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a

code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev

support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red

implement resolveFileUrl plugin hook (#10291) by @sapphi-red

magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY

dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510

code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev

error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY

plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY

code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev

common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY

code-splitting: never name an internal chunk export then (#10480) by @hyfdev

code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev

code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev

code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev

code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev

binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven

dev: keep the export name of export * as ns from (#10476) by @tbvjaos510

code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev

code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev

runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY

import-glob: escape generated string literals (#10438) by @shantanuraj

preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev

filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY

code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev

code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev

dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi

treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY

treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv

code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev

resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY

code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev

rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY

dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510

plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv

guarantee tokio runtime release when close rejects (#10381) by @shulaoda

code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev

pair tokio runtime acquire and release on wasm to prevent premature shutdown (#10363) by @shulaoda

... (truncated)

Commits

93c535d release: v1.2.1 (#10524)
5be6328 chore(deps): update napi (#10506)
8ff3e2e refactor(dev): make it easier to customize the runtime (#10338)
dfb19fb fix(dev): resolve re-exports from externals through a real import (#10489)
f5a5320 docs: clarify slash normalization for id hook filter (#10511)
109d6d4 fix(error): align filename-pattern diagnostics with Rollup's wording (#10501)
47552db test(plugin): cover chunk fileName, absolute chunk name, and Windows drive na...
da7e0ff fix(plugin): validate emitted prebuilt-chunk file names (#10399)
ddf4bcc fix(code-splitting): point a two-argument dynamic import at the chunk that ho...
0ce3ec7 fix(common): align is_path_fragment with Rollup's isPathFragment (#10398)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rolldown group with 1 update: [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown). Updates `rolldown` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.1/packages/rolldown) --- updated-dependencies: - dependency-name: rolldown dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rolldown ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-30T09:47:14Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	rolldown@1.2.1

View full report

dependabot · 2026-07-31T09:42:54Z

Looks like rolldown is no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

dependabot Bot closed this Jul 31, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/rolldown-35e0c3ee0f branch July 31, 2026 09:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump rolldown from 1.2.0 to 1.2.1 in the rolldown group - #488

Bump rolldown from 1.2.0 to 1.2.1 in the rolldown group#488
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/rolldown-35e0c3ee0f

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.1

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

[1.2.1] - 2026-07-29

🚀 Features

🐛 Bug Fixes

Uh oh!

socket-security Bot commented Jul 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading