chore(deps): bump rollup, @angular-devkit/build-angular and ng-packagr by dependabot[bot] · Pull Request #25 · flowup/ngx-hackable-markdown

dependabot · 2026-03-20T14:46:55Z

Bumps rollup to 4.59.0 and updates ancestor dependencies rollup, @angular-devkit/build-angular and ng-packagr. These dependencies need to be updated together.

Updates rollup from 2.7.5 to 4.59.0

Release notes

Sourced from rollup's releases.

v4.59.0

4.59.0

2026-02-22

Features

Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

#6275: Validate bundle stays within output dir (@lukastaegert)

v4.58.0

4.58.0

2026-02-20

Features

Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

#6256: docs: document PreRenderedChunk properties including isDynamicEntry and isImplicitEntry (@njg7194, @lukastaegert)

#6259: docs: Correct typo and improve sentence structure in docs for output.experimentalMinChunkSize (@millerick, @lukastaegert)

#6260: fix(deps): update rust crate swc_compiler_base to v47 (@renovate[bot], @lukastaegert)

#6261: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6262: Avoid unnecessary cloning of the code string (@lukastaegert)

#6263: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6265: chore(deps): lock file maintenance (@renovate[bot])

#6267: fix(deps): update minor/patch updates (@renovate[bot])

#6268: chore(deps): update dependency eslint-plugin-unicorn to v63 (@renovate[bot], @lukastaegert)

#6269: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6270: chore(deps): lock file maintenance (@renovate[bot])

#6272: forward NO_SIDE_EFFECTS annotations to function expressions in variable declarations (@lukastaegert)

v4.57.1

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

... (truncated)

Changelog

Sourced from rollup's changelog.

rollup changelog

2.79.1

2022-09-22

Bug Fixes

Avoid massive performance degradation when creating thousands of chunks (#4643)

Pull Requests

#4639: fix: typo docs and contributors link in CONTRIBUTING.md ( @takurinton)

#4641: Update type definition of resolveId (@ivanjonas)

#4643: Improve performance of chunk naming collision check ( @lukastaegert)

2.79.0

2022-08-31

Features

Add amd.forceJsExtensionForImports to enforce using .js extensions for relative AMD imports (#4607)

Pull Requests

#4607: add option to keep extensions for amd (@wh1tevs)

2.78.1

2022-08-19

Bug Fixes

Avoid inferring "arguments" as name for a default export placeholder variable (#4613)

Pull Requests

#4613: Prevent using arguments for generated variable names ( @lukastaegert)

2.78.0

2022-08-14

Features

Support writing plugin hooks as objects with a "handler" property (#4600)

Allow changing execution order per plugin hook (#4600)

Add flag to execute plugins in async parallel hooks sequentially (#4600)

... (truncated)

Commits

ae84695 4.59.0
b39616e Update audit-resolve
c60770d Validate bundle stays within output dir (#6275)
33f39c1 4.58.0
b61c408 forward NO_SIDE_EFFECTS annotations to function expressions in variable decla...
7f00689 Extend agent instructions
e7b2b85 chore(deps): lock file maintenance (#6270)
2aa5da9 fix(deps): update minor/patch updates (#6267)
4319837 chore(deps): update dependency lru-cache to v11 (#6269)
c3b6b4b chore(deps): update dependency eslint-plugin-unicorn to v63 (#6268)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @angular-devkit/build-angular from 0.901.6 to 21.2.3

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.3

@angular/cli

Commit Description

use parsed package name for migrate-only updates

@angular/build

Commit Description

alias createRequire banner import to avoid duplicate binding

only use external packages for polyfills when no local files are present

@angular/ssr

Commit Description

disallow x-forwarded-prefix starting with a backslash

ensure unique values in redirect response Vary header

support custom headers in redirect responses

21.2.2

@angular/cli

Commit Description

conditionally quote package names when adding dependencies based on host requirements

preserve exact version in ng add when requested

avoid redundant package version resolution in ng add

@angular/build

Commit Description

allow any CHROME_BIN for vitest playwright provider

normalize line endings for CSP hash generation

pass process environment variables to prerender workers

resolve assets correctly during i18n prerendering

21.2.1

@schematics/angular

Commit Description

prevent adding test dependencies when minimal option is enabled

@angular/cli

Commit Description

correct dev dependency detection logic in ng add

disable npm update notifier in package manager host

ensure group members are updated to targeted version

ignore unknown files when formatting schematic changes

@angular-devkit/build-angular

Commit Description

update copy-webpack-plugin to v14.0.0

@angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.3 (2026-03-18)

@angular/cli

Commit Type Description

1505164bb fix use parsed package name for migrate-only updates

@angular/build

Commit Type Description

75fa94cad fix alias createRequire banner import to avoid duplicate binding

d009aa1ec fix only use external packages for polyfills when no local files are present

@angular/ssr

Commit Type Description

f3e0e82c2 fix disallow x-forwarded-prefix starting with a backslash

b8bcd59b4 fix ensure unique values in redirect response Vary header

84385411d fix support custom headers in redirect responses

22.0.0-next.1 (2026-03-11)

Breaking Changes

@angular/build

The @angular/build:dev-server (ng serve) now assigns the highest priority to the PORT environment variable. This value will override any port configurations specified in angular.json or via the --port command-line flag. This includes the default port 4200.

@schematics/angular

Commit Type Description

b3d838dfd fix replace deprecated ChangeDetectionStrategy.Default with Eager

@angular/cli

Commit Type Description

598a690a0 fix conditionally quote package names when adding dependencies based on host requirements

b5fb457e1 fix preserve exact version in ng add when requested

93c3eb8fb fix update zoneless migration tool to handle ChangeDetectionStrategy.Eager

ad0fd5f41 perf avoid redundant package version resolution in ng add

a39a33128 perf cache root manifest and resolve restricted package exports in ng add

... (truncated)

Commits

See full diff in compare view

Updates ng-packagr from 9.1.3 to 21.2.1

Release notes

Sourced from ng-packagr's releases.

21.2.1

Bug Fixes

ensure dts sourcemaps point to original ts files (c324321)

21.2.0

No public facing changes.

21.2.0-next.0

No release notes provided.

21.1.0

Features

add importAttributesKey: 'with' to Rollup output options (ba4f690), closes #3212

Bug Fixes

correctly identify external modules (7c24c84)

21.1.0-rc.0

Features

add importAttributesKey: 'with' to Rollup output options (ba4f690), closes #3212

21.0.1

Bug Fixes

correctly identify external modules (e0f7b22)

21.0.0

⚠ BREAKING CHANGES

TypeScript versions older than 5.9 are no longer supported.

The javascriptEnabled option for Less is no longer supported. Projects relying on inline JavaScript within Less files will need to refactor their stylesheets to remove this dependency.

Bug Fixes

drop support for TypeScript 5.8 (7b48224)

remove deprecated javascriptEnabled option for Less (d57278d)

Features

write the types in types directory (7a5e8fb)

add support for Angular version 21 (ed70e23)

... (truncated)

Changelog

Sourced from ng-packagr's changelog.

21.2.1 (2026-03-19)

Bug Fixes

ensure dts sourcemaps point to original ts files (c324321)

21.2.0 (2026-02-25)

21.2.0-next.0 (2026-01-14)

21.1.0 (2026-01-14)

Features

add importAttributesKey: 'with' to Rollup output options (ba4f690), closes #3212

Bug Fixes

correctly identify external modules (7c24c84)

21.0.1 (2025-12-15)

Bug Fixes

correctly identify external modules (e0f7b22)

21.1.0-next.0 (2025-11-19)

21.1.0-next.0 (2025-11-19)

21.0.0 (2025-11-19)

⚠ BREAKING CHANGES

TypeScript versions older than 5.9 are no longer supported.

The javascriptEnabled option for Less is no longer supported. Projects relying on inline JavaScript within Less files will need to refactor their stylesheets to remove this dependency.

Bug Fixes

drop support for TypeScript 5.8 (7b48224)

remove deprecated javascriptEnabled option for Less (d57278d)

Features

write the types in types directory (7a5e8fb)

add support for Angular version 21 (ed70e23)

... (truncated)

Commits

89ae36c release: cut 21.2.1
c324321 fix: ensure dts sourcemaps point to original ts files
4d7fa2d release: cut 21.2.0
30e7b0e build: broaden @angular/compiler-cli peer dependency
37e545f build: update all non-major dependencies to v8.55.0
0d3d910 build: lock file maintenance
7235db9 build: update actions/checkout action to v6.0.2
2c4c682 build: lock file maintenance
1528834 build: update pnpm to v10.28.2
3fb021c build: update all non-major dependencies to v8.54.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for ng-packagr since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [rollup](https://github.com/rollup/rollup) to 4.59.0 and updates ancestor dependencies [rollup](https://github.com/rollup/rollup), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [ng-packagr](https://github.com/ng-packagr/ng-packagr). These dependencies need to be updated together. Updates `rollup` from 2.7.5 to 4.59.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md) - [Commits](rollup/rollup@v2.7.5...v4.59.0) Updates `@angular-devkit/build-angular` from 0.901.6 to 21.2.3 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/v21.2.3) Updates `ng-packagr` from 9.1.3 to 21.2.1 - [Release notes](https://github.com/ng-packagr/ng-packagr/releases) - [Changelog](https://github.com/ng-packagr/ng-packagr/blob/21.2.1/CHANGELOG.md) - [Commits](ng-packagr/ng-packagr@v9.1.3...21.2.1) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.59.0 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.3 dependency-type: direct:development - dependency-name: ng-packagr dependency-version: 21.2.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026

dependabot bot mentioned this pull request Mar 20, 2026

chore(deps-dev): bump ng-packagr from 9.1.3 to 10.1.1 #15

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump rollup, @angular-devkit/build-angular and ng-packagr#25

chore(deps): bump rollup, @angular-devkit/build-angular and ng-packagr#25
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-c0695f567b

dependabot bot commented on behalf of github Mar 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	alias createRequire banner import to avoid duplicate binding
	only use external packages for polyfills when no local files are present

Commit	Description
	disallow x-forwarded-prefix starting with a backslash
	ensure unique values in redirect response Vary header
	support custom headers in redirect responses

Commit	Description
	conditionally quote package names when adding dependencies based on host requirements
	preserve exact version in ng add when requested
	avoid redundant package version resolution in ng add

Commit	Description
	allow any `CHROME_BIN` for vitest playwright provider
	normalize line endings for CSP hash generation
	pass process environment variables to prerender workers
	resolve assets correctly during i18n prerendering

Commit	Description
	correct dev dependency detection logic in `ng add`
	disable npm update notifier in package manager host
	ensure group members are updated to targeted version
	ignore unknown files when formatting schematic changes

Commit	Type	Description
75fa94cad	fix	alias createRequire banner import to avoid duplicate binding
d009aa1ec	fix	only use external packages for polyfills when no local files are present

Commit	Type	Description
f3e0e82c2	fix	disallow x-forwarded-prefix starting with a backslash
b8bcd59b4	fix	ensure unique values in redirect response Vary header
84385411d	fix	support custom headers in redirect responses

Commit	Type	Description
598a690a0	fix	conditionally quote package names when adding dependencies based on host requirements
b5fb457e1	fix	preserve exact version in ng add when requested
93c3eb8fb	fix	update zoneless migration tool to handle `ChangeDetectionStrategy.Eager`
ad0fd5f41	perf	avoid redundant package version resolution in ng add
a39a33128	perf	cache root manifest and resolve restricted package exports in ng add

Conversation

dependabot bot commented on behalf of github Mar 20, 2026

v4.59.0

4.59.0

Features

Pull Requests

v4.58.0

4.58.0

Features

Pull Requests

v4.57.1

4.57.1

Bug Fixes

Pull Requests

rollup changelog

2.79.1

Bug Fixes

Pull Requests

2.79.0

Features

Pull Requests

2.78.1

Bug Fixes

Pull Requests

2.78.0

Features

21.2.3

@​angular/cli

@​angular/build

@​angular/ssr

21.2.2

@​angular/cli

@​angular/build

21.2.1

@​schematics/angular

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

21.2.3 (2026-03-18)

@​angular/cli

@​angular/build

@​angular/ssr

22.0.0-next.1 (2026-03-11)

Breaking Changes

@​angular/build

@​schematics/angular

@​angular/cli

21.2.1

Bug Fixes

21.2.0

21.2.0-next.0

21.1.0

Features

Bug Fixes

21.1.0-rc.0

Features

21.0.1

Bug Fixes

21.0.0

⚠ BREAKING CHANGES

Bug Fixes

Features

21.2.1 (2026-03-19)

Bug Fixes

21.2.0 (2026-02-25)

21.2.0-next.0 (2026-01-14)

21.1.0 (2026-01-14)

Features

Bug Fixes

21.0.1 (2025-12-15)

Bug Fixes

21.1.0-next.0 (2025-11-19)

21.1.0-next.0 (2025-11-19)

21.0.0 (2025-11-19)

⚠ BREAKING CHANGES

Bug Fixes

Features

Uh oh!

Reviewers

Assignees

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@schematics/angular`

`@angular/cli`