Skip to content

build(deps): update rollup to v4.60.1#1141

Closed
andrejak wants to merge 1 commit intomainfrom
cursor/TSP-1310-public-sdk-security-fixes-ae9c
Closed

build(deps): update rollup to v4.60.1#1141
andrejak wants to merge 1 commit intomainfrom
cursor/TSP-1310-public-sdk-security-fixes-ae9c

Conversation

@andrejak
Copy link
Copy Markdown
Contributor

@andrejak andrejak commented Apr 2, 2026

Summary

  • update the root rollup devDependency from 3 to 4.60.1
  • refresh yarn.lock so the repo no longer installs the older Rollup 3.x line
  • keep the existing build configuration unchanged after verifying compatibility with Rollup 4

Why

  • this repo previously merged a Rollup security upgrade, but the current manifest had drifted back to rollup@3.30.0
  • upgrading back to the current 4.x line addresses that regression and aligns the branch with the secure dependency path

Verification

  • corepack yarn test
  • corepack yarn build:test
  • corepack yarn lint (warnings only, no errors)
  • corepack yarn npm audit --all (still reports eslint@8.57.1 as a moderate deprecation/support-policy issue, not a Rollup issue)

Linear Issue: TSP-1310

Open in Web Open in Cursor 

Co-authored-by: Andreja Kogovsek <andrejak@users.noreply.github.com>
@andrejak andrejak closed this Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants