rollup 2.79.1 → 2.80.0

package/dist/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/shared/index.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/shared/loadConfigFile.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/shared/mergeOptions.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/shared/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 
@@ -27,7 +27,7 @@ function _interopNamespaceDefault(e) {
   return n;
 }
 
-var version$1 = "2.79.1";
+var version$1 = "2.80.0";
 
 function ensureArray$1(items) {
     if (Array.isArray(items)) {
@@ -229,6 +229,7 @@ var Errors;
     Errors["DEPRECATED_FEATURE"] = "DEPRECATED_FEATURE";
     Errors["EXTERNAL_SYNTHETIC_EXPORTS"] = "EXTERNAL_SYNTHETIC_EXPORTS";
     Errors["FILE_NAME_CONFLICT"] = "FILE_NAME_CONFLICT";
+    Errors["FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY"] = "FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY";
     Errors["FILE_NOT_FOUND"] = "FILE_NOT_FOUND";
     Errors["INPUT_HOOK_IN_OUTPUT_PLUGIN"] = "INPUT_HOOK_IN_OUTPUT_PLUGIN";
     Errors["INVALID_CHUNK"] = "INVALID_CHUNK";
@@ -335,6 +336,12 @@ function errFileNameConflict(fileName) {
         message: `The emitted file "${fileName}" overwrites a previously emitted file of the same name.`
     };
 }
+function errFileNameOutsideOutputDirectory(fileName) {
+    return {
+        code: Errors.FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY,
+        message: `The output file name "${fileName}" is not contained in the output directory. Make sure all file names are relative paths without ".." segments.`
+    };
+}
 function errInputHookInOutputPlugin(pluginName, hookName) {
     return {
         code: Errors.INPUT_HOOK_IN_OUTPUT_PLUGIN,
@@ -10837,7 +10844,7 @@ const accessedFileUrlGlobals = {
     umd: ['document', 'require', 'URL']
 };
 const getResolveUrl = (path, URL = 'URL') => `new ${URL}(${path}).href`;
-const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${relativePath}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.src || document.baseURI`);
+const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${relativePath}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || document.baseURI`);
 const getGenericImportMetaMechanism = (getUrl) => (prop, { chunkId }) => {
     const urlMechanism = getUrl(chunkId);
     return prop === null
@@ -10846,7 +10853,7 @@ const getGenericImportMetaMechanism = (getUrl) => (prop, { chunkId }) => {
             ? urlMechanism
             : 'undefined';
 };
-const getUrlFromDocument = (chunkId, umd = false) => `${umd ? `typeof document === 'undefined' ? location.href : ` : ''}(document.currentScript && document.currentScript.src || new URL('${chunkId}', document.baseURI).href)`;
+const getUrlFromDocument = (chunkId, umd = false) => `${umd ? `typeof document === 'undefined' ? location.href : ` : ''}(document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || new URL('${chunkId}', document.baseURI).href)`;
 const relativeUrlMechanisms = {
     amd: relativePath => {
         if (relativePath[0] !== '.')
@@ -15930,6 +15937,7 @@ class Bundle {
             isWrite
         ]);
         this.finaliseAssets(outputBundle);
+        validateOutputBundleFileNames(outputBundle);
         timeEnd('GENERATE', 1);
         return outputBundleBase;
     }
@@ -16092,6 +16100,28 @@ function addModuleToManualChunk(alias, module, manualChunkAliasByEntry) {
     }
     manualChunkAliasByEntry.set(module, alias);
 }
+function isFileNameOutsideOutputDirectory(fileName) {
+    // Use join() to normalize ".." segments, then replace backslashes so the
+    // string checks below work identically on Windows and POSIX.
+    const normalized = require$$0.join(fileName).replace(/\\/g, '/');
+    return (normalized === '..' ||
+        normalized.startsWith('../') ||
+        normalized === '.' ||
+        isAbsolute(normalized));
+}
+function validateOutputBundleFileNames(bundle) {
+    for (const [bundleKey, entry] of Object.entries(bundle)) {
+        if (isFileNameOutsideOutputDirectory(bundleKey)) {
+            return error(errFileNameOutsideOutputDirectory(bundleKey));
+        }
+        if (entry.type !== 'placeholder') {
+            const { fileName } = entry;
+            if (fileName !== bundleKey && isFileNameOutsideOutputDirectory(fileName)) {
+                return error(errFileNameOutsideOutputDirectory(fileName));
+            }
+        }
+    }
+}
 
 // This file was generated. Do not modify manually!
 var astralIdentifierCodes = [509, 0, 227, 0, 150, 4, 294, 9, 1368, 2, 2, 1, 6, 3, 41, 2, 5, 0, 166, 1, 574, 3, 9, 9, 370, 1, 154, 10, 50, 3, 123, 2, 54, 14, 32, 10, 3, 1, 11, 3, 46, 10, 8, 0, 46, 9, 7, 2, 37, 13, 2, 9, 6, 1, 45, 0, 13, 2, 49, 13, 9, 3, 2, 11, 83, 11, 7, 0, 161, 11, 6, 9, 7, 3, 56, 1, 2, 6, 3, 1, 3, 2, 10, 0, 11, 1, 3, 6, 4, 4, 193, 17, 10, 9, 5, 0, 82, 19, 13, 9, 214, 6, 3, 8, 28, 1, 83, 16, 16, 9, 82, 12, 9, 9, 84, 14, 5, 9, 243, 14, 166, 9, 71, 5, 2, 1, 3, 3, 2, 0, 2, 1, 13, 9, 120, 6, 3, 6, 4, 0, 29, 9, 41, 6, 2, 3, 9, 0, 10, 10, 47, 15, 406, 7, 2, 7, 17, 9, 57, 21, 2, 13, 123, 5, 4, 0, 2, 1, 2, 6, 2, 0, 9, 9, 49, 4, 2, 1, 2, 4, 9, 9, 330, 3, 19306, 9, 87, 9, 39, 4, 60, 6, 26, 9, 1014, 0, 2, 54, 8, 3, 82, 0, 12, 1, 19628, 1, 4706, 45, 3, 22, 543, 4, 4, 5, 9, 7, 3, 6, 31, 3, 149, 2, 1418, 49, 513, 54, 5, 49, 9, 0, 15, 0, 23, 4, 2, 14, 1361, 6, 2, 16, 3, 6, 2, 1, 2, 4, 262, 6, 10, 9, 357, 0, 62, 13, 1495, 6, 110, 6, 6, 9, 4759, 9, 787719, 239];

package/dist/shared/watch-cli.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/shared/watch.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.1
-	Thu, 22 Sep 2022 04:55:29 GMT - commit 69ff4181e701a0fe0026d0ba147f31bc86beffa8
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rollup",
-  "version": "2.79.1",
+  "version": "2.80.0",
   "description": "Next-generation ES module bundler",
   "main": "dist/rollup.js",
   "module": "dist/es/rollup.js",
@@ -24,7 +24,6 @@
     "perf:init": "node scripts/perf-init.js",
     "postpublish": "git push && git push --tags",
     "prepare": "husky install && npm run build",
-    "prepublishOnly": "git pull --ff-only && npm ci && npm run lint:nofix && npm run security && npm run build:bootstrap && npm run test:all",
     "security": "npm audit",
     "test": "npm run build && npm run test:all",
     "test:cjs": "npm run build:cjs && npm run test:only",