@rollup/plugin-commonjs 28.0.8 → 29.0.0

package/README.md

@@ -63,6 +63,34 @@ You can also provide a [picomatch pattern](https://github.com/micromatch/picomat
 
 `"debug"` works like `"auto"` but after bundling, it will display a warning containing a list of ids that have been wrapped which can be used as picomatch pattern for fine-tuning or to avoid the potential race conditions mentioned for `"auto"`.
 
+### `requireNodeBuiltins`
+
+Type: `boolean`<br>
+Default: `false`
+
+When enabled, external Node built-ins (e.g., `node:fs`, `node:path`) required from wrapped CommonJS modules will use `createRequire(import.meta.url)` instead of being hoisted as ESM imports. This prevents eager loading of Node built-ins at module initialization time and preserves the lazy execution semantics of `require()`.
+
+**Important:** Enabling this option adds a dependency on `node:module` in the output bundle, which may not be available in some environments like edge runtimes (Cloudflare Workers, Vercel Edge Runtime). Only enable this option if you are targeting Node.js environments and need the lazy loading behavior for Node built-ins.
+
+Example:
+
+```js
+commonjs({
+  strictRequires: true,
+  requireNodeBuiltins: true
+});
+```
+
+With `requireNodeBuiltins: true`, code like:
+
+```js
+if (condition) {
+  require('node:fs');
+}
+```
+
+will generate output using `createRequire` instead of hoisting the import to the top of the file.
+
 ### `dynamicRequireTargets`
 
 Type: `string | string[]`<br>

package/dist/cjs/index.js

@@ -11,7 +11,7 @@ var estreeWalker = require('estree-walker');
 var MagicString = require('magic-string');
 var isReference = require('is-reference');
 
-var version = "28.0.8";
+var version = "29.0.0";
 var peerDependencies = {
 	rollup: "^2.68.0||^3.0.0||^4.0.0"
 };
@@ -655,7 +655,12 @@ function getResolveId(extensions, isPossibleCjsId) {
   };
 }
 
-function getRequireResolver(extensions, detectCyclesAndConditional, currentlyResolving) {
+function getRequireResolver(
+  extensions,
+  detectCyclesAndConditional,
+  currentlyResolving,
+  requireNodeBuiltins
+) {
   const knownCjsModuleTypes = Object.create(null);
   const requiredIds = Object.create(null);
   const unconditionallyRequiredIds = Object.create(null);
@@ -840,16 +845,24 @@ function getRequireResolver(extensions, detectCyclesAndConditional, currentlyRes
             getTypeForFullyAnalyzedModule(dependencyId));
           // Special-case external Node built-ins to be handled via a lazy __require
           // helper instead of hoisted ESM imports when strict wrapping is used.
+          // Only apply this when requireNodeBuiltins option is enabled.
           const isExternalWrapped = isWrappedId(dependencyId, EXTERNAL_SUFFIX);
-          if (
-            parentMeta.initialCommonJSType === IS_WRAPPED_COMMONJS &&
-            !allowProxy &&
-            isExternalWrapped
-          ) {
-            const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
-            if (actualExternalId.startsWith('node:')) {
-              isCommonJS = IS_WRAPPED_COMMONJS;
-              parentMeta.isRequiredCommonJS[dependencyId] = isCommonJS;
+          let resolvedDependencyId = dependencyId;
+          if (requireNodeBuiltins === true) {
+            if (parentMeta.isCommonJS === IS_WRAPPED_COMMONJS && !allowProxy && isExternalWrapped) {
+              const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
+              if (actualExternalId.startsWith('node:')) {
+                isCommonJS = IS_WRAPPED_COMMONJS;
+                parentMeta.isRequiredCommonJS[dependencyId] = isCommonJS;
+              }
+            } else if (isExternalWrapped && !allowProxy) {
+              // If the parent is not wrapped but the dependency is a node: builtin external,
+              // unwrap the EXTERNAL_SUFFIX so it's treated as a normal external.
+              // This avoids trying to load the lazy __require proxy for non-wrapped contexts.
+              const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
+              if (actualExternalId.startsWith('node:')) {
+                resolvedDependencyId = actualExternalId;
+              }
             }
           }
           const isWrappedCommonJS = isCommonJS === IS_WRAPPED_COMMONJS;
@@ -871,8 +884,8 @@ function getRequireResolver(extensions, detectCyclesAndConditional, currentlyRes
             wrappedModuleSideEffects,
             source: sources[index].source,
             id: allowProxy
-              ? wrapId(dependencyId, isWrappedCommonJS ? WRAPPED_SUFFIX : PROXY_SUFFIX)
-              : dependencyId,
+              ? wrapId(resolvedDependencyId, isWrappedCommonJS ? WRAPPED_SUFFIX : PROXY_SUFFIX)
+              : resolvedDependencyId,
             isCommonJS
           };
         });
@@ -2085,7 +2098,8 @@ function commonjs(options = {}) {
     ignoreDynamicRequires,
     requireReturnsDefault: requireReturnsDefaultOption,
     defaultIsModuleExports: defaultIsModuleExportsOption,
-    esmExternals
+    esmExternals,
+    requireNodeBuiltins = false
   } = options;
   const extensions = options.extensions || ['.js'];
   const filter = pluginutils.createFilter(options.include, options.exclude);
@@ -2258,7 +2272,8 @@ function commonjs(options = {}) {
       requireResolver = getRequireResolver(
         extensions,
         detectCyclesAndConditional,
-        currentlyResolving
+        currentlyResolving,
+        requireNodeBuiltins
       );
     },
 
@@ -2306,7 +2321,7 @@ function commonjs(options = {}) {
 
       if (isWrappedId(id, EXTERNAL_SUFFIX)) {
         const actualId = unwrapId(id, EXTERNAL_SUFFIX);
-        if (actualId.startsWith('node:')) {
+        if (requireNodeBuiltins === true && actualId.startsWith('node:')) {
           return getExternalBuiltinRequireProxy(actualId);
         }
         return getUnknownRequireProxy(

package/dist/es/index.js

@@ -7,7 +7,7 @@ import { walk } from 'estree-walker';
 import MagicString from 'magic-string';
 import isReference from 'is-reference';
 
-var version = "28.0.8";
+var version = "29.0.0";
 var peerDependencies = {
 	rollup: "^2.68.0||^3.0.0||^4.0.0"
 };
@@ -651,7 +651,12 @@ function getResolveId(extensions, isPossibleCjsId) {
   };
 }
 
-function getRequireResolver(extensions, detectCyclesAndConditional, currentlyResolving) {
+function getRequireResolver(
+  extensions,
+  detectCyclesAndConditional,
+  currentlyResolving,
+  requireNodeBuiltins
+) {
   const knownCjsModuleTypes = Object.create(null);
   const requiredIds = Object.create(null);
   const unconditionallyRequiredIds = Object.create(null);
@@ -836,16 +841,24 @@ function getRequireResolver(extensions, detectCyclesAndConditional, currentlyRes
             getTypeForFullyAnalyzedModule(dependencyId));
           // Special-case external Node built-ins to be handled via a lazy __require
           // helper instead of hoisted ESM imports when strict wrapping is used.
+          // Only apply this when requireNodeBuiltins option is enabled.
           const isExternalWrapped = isWrappedId(dependencyId, EXTERNAL_SUFFIX);
-          if (
-            parentMeta.initialCommonJSType === IS_WRAPPED_COMMONJS &&
-            !allowProxy &&
-            isExternalWrapped
-          ) {
-            const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
-            if (actualExternalId.startsWith('node:')) {
-              isCommonJS = IS_WRAPPED_COMMONJS;
-              parentMeta.isRequiredCommonJS[dependencyId] = isCommonJS;
+          let resolvedDependencyId = dependencyId;
+          if (requireNodeBuiltins === true) {
+            if (parentMeta.isCommonJS === IS_WRAPPED_COMMONJS && !allowProxy && isExternalWrapped) {
+              const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
+              if (actualExternalId.startsWith('node:')) {
+                isCommonJS = IS_WRAPPED_COMMONJS;
+                parentMeta.isRequiredCommonJS[dependencyId] = isCommonJS;
+              }
+            } else if (isExternalWrapped && !allowProxy) {
+              // If the parent is not wrapped but the dependency is a node: builtin external,
+              // unwrap the EXTERNAL_SUFFIX so it's treated as a normal external.
+              // This avoids trying to load the lazy __require proxy for non-wrapped contexts.
+              const actualExternalId = unwrapId(dependencyId, EXTERNAL_SUFFIX);
+              if (actualExternalId.startsWith('node:')) {
+                resolvedDependencyId = actualExternalId;
+              }
             }
           }
           const isWrappedCommonJS = isCommonJS === IS_WRAPPED_COMMONJS;
@@ -867,8 +880,8 @@ function getRequireResolver(extensions, detectCyclesAndConditional, currentlyRes
             wrappedModuleSideEffects,
             source: sources[index].source,
             id: allowProxy
-              ? wrapId(dependencyId, isWrappedCommonJS ? WRAPPED_SUFFIX : PROXY_SUFFIX)
-              : dependencyId,
+              ? wrapId(resolvedDependencyId, isWrappedCommonJS ? WRAPPED_SUFFIX : PROXY_SUFFIX)
+              : resolvedDependencyId,
             isCommonJS
           };
         });
@@ -2081,7 +2094,8 @@ function commonjs(options = {}) {
     ignoreDynamicRequires,
     requireReturnsDefault: requireReturnsDefaultOption,
     defaultIsModuleExports: defaultIsModuleExportsOption,
-    esmExternals
+    esmExternals,
+    requireNodeBuiltins = false
   } = options;
   const extensions = options.extensions || ['.js'];
   const filter = createFilter(options.include, options.exclude);
@@ -2254,7 +2268,8 @@ function commonjs(options = {}) {
       requireResolver = getRequireResolver(
         extensions,
         detectCyclesAndConditional,
-        currentlyResolving
+        currentlyResolving,
+        requireNodeBuiltins
       );
     },
 
@@ -2302,7 +2317,7 @@ function commonjs(options = {}) {
 
       if (isWrappedId(id, EXTERNAL_SUFFIX)) {
         const actualId = unwrapId(id, EXTERNAL_SUFFIX);
-        if (actualId.startsWith('node:')) {
+        if (requireNodeBuiltins === true && actualId.startsWith('node:')) {
           return getExternalBuiltinRequireProxy(actualId);
         }
         return getUnknownRequireProxy(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rollup/plugin-commonjs",
-  "version": "28.0.8",
+  "version": "29.0.0",
   "publishConfig": {
     "access": "public"
   },

package/types/index.d.ts

@@ -225,6 +225,17 @@ interface RollupCommonJSOptions {
    * home directory name. By default, it uses the current working directory.
    */
   dynamicRequireRoot?: string;
+  /**
+   * When enabled, external Node built-ins (e.g., `node:fs`) required from wrapped CommonJS modules
+   * will use `createRequire(import.meta.url)` instead of being hoisted as ESM imports. This prevents
+   * eager loading of Node built-ins at module initialization time.
+   *
+   * Note: This option adds a dependency on `node:module` in the output, which may not be available
+   * in some environments like edge runtimes (Cloudflare Workers, Vercel Edge Runtime).
+   *
+   * @default false
+   */
+  requireNodeBuiltins?: boolean;
 }
 
 /**