rollup 2.79.2 → 2.80.0

package/dist/es/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.2
-	Thu, 26 Sep 2024 18:44:14 GMT - commit 48aef33cf2f2a6dfb175afb3bcd6a977c81f1d5c
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/es/shared/rollup.js

@@ -1,20 +1,20 @@
 /*
   @license
-	Rollup.js v2.79.2
-	Thu, 26 Sep 2024 18:44:14 GMT - commit 48aef33cf2f2a6dfb175afb3bcd6a977c81f1d5c
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 
 	Released under the MIT License.
 */
-import require$$0, { resolve, basename, extname, dirname, relative as relative$1, win32, posix, isAbsolute as isAbsolute$1 } from 'path';
+import require$$0, { resolve, basename, extname, dirname, relative as relative$1, win32, posix, isAbsolute as isAbsolute$1, join } from 'path';
 import process$1 from 'process';
 import { performance } from 'perf_hooks';
 import { createHash as createHash$1 } from 'crypto';
 import { promises } from 'fs';
 import { EventEmitter } from 'events';
 
-var version$1 = "2.79.2";
+var version$1 = "2.80.0";
 
 var charToInteger = {};
 var chars$1 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
@@ -1889,6 +1889,7 @@ var Errors;
     Errors["DEPRECATED_FEATURE"] = "DEPRECATED_FEATURE";
     Errors["EXTERNAL_SYNTHETIC_EXPORTS"] = "EXTERNAL_SYNTHETIC_EXPORTS";
     Errors["FILE_NAME_CONFLICT"] = "FILE_NAME_CONFLICT";
+    Errors["FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY"] = "FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY";
     Errors["FILE_NOT_FOUND"] = "FILE_NOT_FOUND";
     Errors["INPUT_HOOK_IN_OUTPUT_PLUGIN"] = "INPUT_HOOK_IN_OUTPUT_PLUGIN";
     Errors["INVALID_CHUNK"] = "INVALID_CHUNK";
@@ -1995,6 +1996,12 @@ function errFileNameConflict(fileName) {
         message: `The emitted file "${fileName}" overwrites a previously emitted file of the same name.`
     };
 }
+function errFileNameOutsideOutputDirectory(fileName) {
+    return {
+        code: Errors.FILE_NAME_OUTSIDE_OUTPUT_DIRECTORY,
+        message: `The output file name "${fileName}" is not contained in the output directory. Make sure all file names are relative paths without ".." segments.`
+    };
+}
 function errInputHookInOutputPlugin(pluginName, hookName) {
     return {
         code: Errors.INPUT_HOOK_IN_OUTPUT_PLUGIN,
@@ -15799,6 +15806,7 @@ class Bundle {
             isWrite
         ]);
         this.finaliseAssets(outputBundle);
+        validateOutputBundleFileNames(outputBundle);
         timeEnd('GENERATE', 1);
         return outputBundleBase;
     }
@@ -15961,6 +15969,28 @@ function addModuleToManualChunk(alias, module, manualChunkAliasByEntry) {
     }
     manualChunkAliasByEntry.set(module, alias);
 }
+function isFileNameOutsideOutputDirectory(fileName) {
+    // Use join() to normalize ".." segments, then replace backslashes so the
+    // string checks below work identically on Windows and POSIX.
+    const normalized = join(fileName).replace(/\\/g, '/');
+    return (normalized === '..' ||
+        normalized.startsWith('../') ||
+        normalized === '.' ||
+        isAbsolute(normalized));
+}
+function validateOutputBundleFileNames(bundle) {
+    for (const [bundleKey, entry] of Object.entries(bundle)) {
+        if (isFileNameOutsideOutputDirectory(bundleKey)) {
+            return error(errFileNameOutsideOutputDirectory(bundleKey));
+        }
+        if (entry.type !== 'placeholder') {
+            const { fileName } = entry;
+            if (fileName !== bundleKey && isFileNameOutsideOutputDirectory(fileName)) {
+                return error(errFileNameOutsideOutputDirectory(fileName));
+            }
+        }
+    }
+}
 
 // This file was generated. Do not modify manually!
 var astralIdentifierCodes = [509, 0, 227, 0, 150, 4, 294, 9, 1368, 2, 2, 1, 6, 3, 41, 2, 5, 0, 166, 1, 574, 3, 9, 9, 370, 1, 154, 10, 50, 3, 123, 2, 54, 14, 32, 10, 3, 1, 11, 3, 46, 10, 8, 0, 46, 9, 7, 2, 37, 13, 2, 9, 6, 1, 45, 0, 13, 2, 49, 13, 9, 3, 2, 11, 83, 11, 7, 0, 161, 11, 6, 9, 7, 3, 56, 1, 2, 6, 3, 1, 3, 2, 10, 0, 11, 1, 3, 6, 4, 4, 193, 17, 10, 9, 5, 0, 82, 19, 13, 9, 214, 6, 3, 8, 28, 1, 83, 16, 16, 9, 82, 12, 9, 9, 84, 14, 5, 9, 243, 14, 166, 9, 71, 5, 2, 1, 3, 3, 2, 0, 2, 1, 13, 9, 120, 6, 3, 6, 4, 0, 29, 9, 41, 6, 2, 3, 9, 0, 10, 10, 47, 15, 406, 7, 2, 7, 17, 9, 57, 21, 2, 13, 123, 5, 4, 0, 2, 1, 2, 6, 2, 0, 9, 9, 49, 4, 2, 1, 2, 4, 9, 9, 330, 3, 19306, 9, 87, 9, 39, 4, 60, 6, 26, 9, 1014, 0, 2, 54, 8, 3, 82, 0, 12, 1, 19628, 1, 4706, 45, 3, 22, 543, 4, 4, 5, 9, 7, 3, 6, 31, 3, 149, 2, 1418, 49, 513, 54, 5, 49, 9, 0, 15, 0, 23, 4, 2, 14, 1361, 6, 2, 16, 3, 6, 2, 1, 2, 4, 262, 6, 10, 9, 357, 0, 62, 13, 1495, 6, 110, 6, 6, 9, 4759, 9, 787719, 239];

package/dist/es/shared/watch.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.2
-	Thu, 26 Sep 2024 18:44:14 GMT - commit 48aef33cf2f2a6dfb175afb3bcd6a977c81f1d5c
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup
 

package/dist/loadConfigFile.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v2.79.2
-	Thu, 26 Sep 2024 18:44:14 GMT - commit 48aef33cf2f2a6dfb175afb3bcd6a977c81f1d5c
+	Rollup.js v2.80.0
+	Sun, 22 Feb 2026 06:16:40 GMT - commit d17ae15336a45c3c59b2a4aacac2b14186035d28
 
 	https://github.com/rollup/rollup