rollup 4.0.0-22 → 4.0.0-24

package/dist/bin/rollup

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
-
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -24,7 +23,6 @@ const node_path = require('node:path');
 const loadConfigFile_js = require('../shared/loadConfigFile.js');
 require('tty');
 require('node:perf_hooks');
-require('node:crypto');
 require('../native.js');
 require('node:url');
 require('../getLogFilter.js');

package/dist/es/getLogFilter.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/es/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -12,7 +12,6 @@ import 'node:path';
 import 'path';
 import 'node:process';
 import 'node:perf_hooks';
-import 'node:crypto';
 import '../native.js';
 import 'node:fs/promises';
 import 'tty';

package/dist/es/shared/node-entry.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -11,12 +11,11 @@ import { resolve, basename, extname, dirname, relative as relative$1 } from 'nod
 import require$$0$1, { win32, posix, isAbsolute as isAbsolute$1, resolve as resolve$1 } from 'path';
 import process$1, { env as env$1 } from 'node:process';
 import { performance } from 'node:perf_hooks';
-import { createHash as createHash$1 } from 'node:crypto';
-import native from '../../native.js';
+import { xxhashBase64Url, parse as parse$2 } from '../../native.js';
 import { lstat, realpath, readdir, readFile, mkdir, writeFile } from 'node:fs/promises';
 import * as tty from 'tty';
 
-var version = "4.0.0-22";
+var version = "4.0.0-24";
 
 const comma = ','.charCodeAt(0);
 const semicolon = ';'.charCodeAt(0);
@@ -2271,6 +2270,8 @@ const URL_OUTPUT_SOURCEMAPBASEURL = 'configuration-options/#output-sourcemapbase
 const URL_OUTPUT_SOURCEMAPFILE = 'configuration-options/#output-sourcemapfile';
 const URL_PRESERVEENTRYSIGNATURES = 'configuration-options/#preserveentrysignatures';
 const URL_TREESHAKE = 'configuration-options/#treeshake';
+const URL_TREESHAKE_PURE = 'configuration-options/#pure';
+const URL_TREESHAKE_NOSIDEEFFECTS = 'configuration-options/#no-side-effects';
 const URL_TREESHAKE_MODULESIDEEFFECTS = 'configuration-options/#treeshake-modulesideeffects';
 const URL_WATCH = 'configuration-options/#watch';
 
@@ -2302,7 +2303,7 @@ function augmentCodeLocation(properties, pos, source, id) {
 }
 // Error codes should be sorted alphabetically while errors should be sorted by
 // error code below
-const ADDON_ERROR = 'ADDON_ERROR', ALREADY_CLOSED = 'ALREADY_CLOSED', AMBIGUOUS_EXTERNAL_NAMESPACES = 'AMBIGUOUS_EXTERNAL_NAMESPACES', ANONYMOUS_PLUGIN_CACHE = 'ANONYMOUS_PLUGIN_CACHE', ASSET_NOT_FINALISED = 'ASSET_NOT_FINALISED', ASSET_NOT_FOUND = 'ASSET_NOT_FOUND', ASSET_SOURCE_ALREADY_SET = 'ASSET_SOURCE_ALREADY_SET', ASSET_SOURCE_MISSING = 'ASSET_SOURCE_MISSING', BAD_LOADER = 'BAD_LOADER', CANNOT_CALL_NAMESPACE = 'CANNOT_CALL_NAMESPACE', CANNOT_EMIT_FROM_OPTIONS_HOOK = 'CANNOT_EMIT_FROM_OPTIONS_HOOK', CHUNK_NOT_GENERATED = 'CHUNK_NOT_GENERATED', CHUNK_INVALID = 'CHUNK_INVALID', CIRCULAR_DEPENDENCY = 'CIRCULAR_DEPENDENCY', CIRCULAR_REEXPORT = 'CIRCULAR_REEXPORT', CYCLIC_CROSS_CHUNK_REEXPORT = 'CYCLIC_CROSS_CHUNK_REEXPORT', DEPRECATED_FEATURE = 'DEPRECATED_FEATURE', DUPLICATE_PLUGIN_NAME = 'DUPLICATE_PLUGIN_NAME', EMPTY_BUNDLE = 'EMPTY_BUNDLE', EVAL = 'EVAL', EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS = 'EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS', EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES = 'EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES', EXTERNAL_SYNTHETIC_EXPORTS = 'EXTERNAL_SYNTHETIC_EXPORTS', FILE_NAME_CONFLICT = 'FILE_NAME_CONFLICT', FILE_NOT_FOUND = 'FILE_NOT_FOUND', FIRST_SIDE_EFFECT = 'FIRST_SIDE_EFFECT', ILLEGAL_IDENTIFIER_AS_NAME = 'ILLEGAL_IDENTIFIER_AS_NAME', ILLEGAL_REASSIGNMENT = 'ILLEGAL_REASSIGNMENT', INCONSISTENT_IMPORT_ATTRIBUTES = 'INCONSISTENT_IMPORT_ATTRIBUTES', INPUT_HOOK_IN_OUTPUT_PLUGIN = 'INPUT_HOOK_IN_OUTPUT_PLUGIN', INVALID_CHUNK = 'INVALID_CHUNK', INVALID_EXPORT_OPTION = 'INVALID_EXPORT_OPTION', INVALID_EXTERNAL_ID = 'INVALID_EXTERNAL_ID', INVALID_IMPORT_ATTRIBUTE = 'INVALID_IMPORT_ATTRIBUTE', INVALID_LOG_POSITION = 'INVALID_LOG_POSITION', INVALID_OPTION = 'INVALID_OPTION', INVALID_PLUGIN_HOOK = 'INVALID_PLUGIN_HOOK', INVALID_ROLLUP_PHASE = 'INVALID_ROLLUP_PHASE', INVALID_SETASSETSOURCE = 'INVALID_SETASSETSOURCE', INVALID_TLA_FORMAT = 'INVALID_TLA_FORMAT', MISSING_EXPORT = 'MISSING_EXPORT', MISSING_GLOBAL_NAME = 'MISSING_GLOBAL_NAME', MISSING_IMPLICIT_DEPENDANT = 'MISSING_IMPLICIT_DEPENDANT', MISSING_NAME_OPTION_FOR_IIFE_EXPORT = 'MISSING_NAME_OPTION_FOR_IIFE_EXPORT', MISSING_NODE_BUILTINS = 'MISSING_NODE_BUILTINS', MISSING_OPTION = 'MISSING_OPTION', MIXED_EXPORTS = 'MIXED_EXPORTS', MODULE_LEVEL_DIRECTIVE = 'MODULE_LEVEL_DIRECTIVE', NAMESPACE_CONFLICT = 'NAMESPACE_CONFLICT', NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE = 'NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE', OPTIMIZE_CHUNK_STATUS = 'OPTIMIZE_CHUNK_STATUS', PARSE_ERROR = 'PARSE_ERROR', PLUGIN_ERROR = 'PLUGIN_ERROR', SHIMMED_EXPORT = 'SHIMMED_EXPORT', SOURCEMAP_BROKEN = 'SOURCEMAP_BROKEN', SOURCEMAP_ERROR = 'SOURCEMAP_ERROR', SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT = 'SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT', THIS_IS_UNDEFINED = 'THIS_IS_UNDEFINED', UNEXPECTED_NAMED_IMPORT = 'UNEXPECTED_NAMED_IMPORT', UNKNOWN_OPTION = 'UNKNOWN_OPTION', UNRESOLVED_ENTRY = 'UNRESOLVED_ENTRY', UNRESOLVED_IMPORT = 'UNRESOLVED_IMPORT', UNUSED_EXTERNAL_IMPORT = 'UNUSED_EXTERNAL_IMPORT', VALIDATION_ERROR = 'VALIDATION_ERROR';
+const ADDON_ERROR = 'ADDON_ERROR', ALREADY_CLOSED = 'ALREADY_CLOSED', AMBIGUOUS_EXTERNAL_NAMESPACES = 'AMBIGUOUS_EXTERNAL_NAMESPACES', ANONYMOUS_PLUGIN_CACHE = 'ANONYMOUS_PLUGIN_CACHE', ASSET_NOT_FINALISED = 'ASSET_NOT_FINALISED', ASSET_NOT_FOUND = 'ASSET_NOT_FOUND', ASSET_SOURCE_ALREADY_SET = 'ASSET_SOURCE_ALREADY_SET', ASSET_SOURCE_MISSING = 'ASSET_SOURCE_MISSING', BAD_LOADER = 'BAD_LOADER', CANNOT_CALL_NAMESPACE = 'CANNOT_CALL_NAMESPACE', CANNOT_EMIT_FROM_OPTIONS_HOOK = 'CANNOT_EMIT_FROM_OPTIONS_HOOK', CHUNK_NOT_GENERATED = 'CHUNK_NOT_GENERATED', CHUNK_INVALID = 'CHUNK_INVALID', CIRCULAR_DEPENDENCY = 'CIRCULAR_DEPENDENCY', CIRCULAR_REEXPORT = 'CIRCULAR_REEXPORT', CYCLIC_CROSS_CHUNK_REEXPORT = 'CYCLIC_CROSS_CHUNK_REEXPORT', DEPRECATED_FEATURE = 'DEPRECATED_FEATURE', DUPLICATE_PLUGIN_NAME = 'DUPLICATE_PLUGIN_NAME', EMPTY_BUNDLE = 'EMPTY_BUNDLE', EVAL = 'EVAL', EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS = 'EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS', EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES = 'EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES', EXTERNAL_SYNTHETIC_EXPORTS = 'EXTERNAL_SYNTHETIC_EXPORTS', FILE_NAME_CONFLICT = 'FILE_NAME_CONFLICT', FILE_NOT_FOUND = 'FILE_NOT_FOUND', FIRST_SIDE_EFFECT = 'FIRST_SIDE_EFFECT', ILLEGAL_IDENTIFIER_AS_NAME = 'ILLEGAL_IDENTIFIER_AS_NAME', ILLEGAL_REASSIGNMENT = 'ILLEGAL_REASSIGNMENT', INCONSISTENT_IMPORT_ATTRIBUTES = 'INCONSISTENT_IMPORT_ATTRIBUTES', INVALID_ANNOTATION = 'INVALID_ANNOTATION', INPUT_HOOK_IN_OUTPUT_PLUGIN = 'INPUT_HOOK_IN_OUTPUT_PLUGIN', INVALID_CHUNK = 'INVALID_CHUNK', INVALID_EXPORT_OPTION = 'INVALID_EXPORT_OPTION', INVALID_EXTERNAL_ID = 'INVALID_EXTERNAL_ID', INVALID_IMPORT_ATTRIBUTE = 'INVALID_IMPORT_ATTRIBUTE', INVALID_LOG_POSITION = 'INVALID_LOG_POSITION', INVALID_OPTION = 'INVALID_OPTION', INVALID_PLUGIN_HOOK = 'INVALID_PLUGIN_HOOK', INVALID_ROLLUP_PHASE = 'INVALID_ROLLUP_PHASE', INVALID_SETASSETSOURCE = 'INVALID_SETASSETSOURCE', INVALID_TLA_FORMAT = 'INVALID_TLA_FORMAT', MISSING_EXPORT = 'MISSING_EXPORT', MISSING_GLOBAL_NAME = 'MISSING_GLOBAL_NAME', MISSING_IMPLICIT_DEPENDANT = 'MISSING_IMPLICIT_DEPENDANT', MISSING_NAME_OPTION_FOR_IIFE_EXPORT = 'MISSING_NAME_OPTION_FOR_IIFE_EXPORT', MISSING_NODE_BUILTINS = 'MISSING_NODE_BUILTINS', MISSING_OPTION = 'MISSING_OPTION', MIXED_EXPORTS = 'MIXED_EXPORTS', MODULE_LEVEL_DIRECTIVE = 'MODULE_LEVEL_DIRECTIVE', NAMESPACE_CONFLICT = 'NAMESPACE_CONFLICT', NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE = 'NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE', OPTIMIZE_CHUNK_STATUS = 'OPTIMIZE_CHUNK_STATUS', PARSE_ERROR = 'PARSE_ERROR', PLUGIN_ERROR = 'PLUGIN_ERROR', SHIMMED_EXPORT = 'SHIMMED_EXPORT', SOURCEMAP_BROKEN = 'SOURCEMAP_BROKEN', SOURCEMAP_ERROR = 'SOURCEMAP_ERROR', SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT = 'SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT', THIS_IS_UNDEFINED = 'THIS_IS_UNDEFINED', UNEXPECTED_NAMED_IMPORT = 'UNEXPECTED_NAMED_IMPORT', UNKNOWN_OPTION = 'UNKNOWN_OPTION', UNRESOLVED_ENTRY = 'UNRESOLVED_ENTRY', UNRESOLVED_IMPORT = 'UNRESOLVED_IMPORT', UNUSED_EXTERNAL_IMPORT = 'UNUSED_EXTERNAL_IMPORT', VALIDATION_ERROR = 'VALIDATION_ERROR';
 function logAddonNotGenerated(message, hook, plugin) {
     return {
         code: ADDON_ERROR,
@@ -2489,6 +2490,14 @@ const formatAttributes = (attributes) => {
         return 'no';
     return entries.map(([key, value]) => `"${key}": "${value}"`).join(', ');
 };
+function logInvalidAnnotation(comment, id, type) {
+    return {
+        code: INVALID_ANNOTATION,
+        id,
+        message: `A comment\n\n"${comment}"\n\nin "${relativeId(id)}" contains an annotation that Rollup cannot interpret due to the position of the comment. The comment will be removed to avoid issues.`,
+        url: getRollupUrl(type === 'noSideEffects' ? URL_TREESHAKE_NOSIDEEFFECTS : URL_TREESHAKE_PURE)
+    };
+}
 function logInputHookInOutputPlugin(pluginName, hookName) {
     return {
         code: INPUT_HOOK_IN_OUTPUT_PLUGIN,
@@ -6736,8 +6745,12 @@ class NodeBase extends ExpressionEntity {
                     }
                 }
                 else if (key === INVALID_ANNOTATION_KEY) {
-                    for (const { start, end } of value)
+                    for (const { start, end, type } of value) {
                         this.context.magicString.remove(start, end);
+                        if (type === 'pure' || type === 'noSideEffects') {
+                            this.context.log(LOGLEVEL_WARN, logInvalidAnnotation(this.context.code.slice(start, end), this.context.module.id, type), start);
+                        }
+                    }
                 }
             }
             else if (typeof value !== 'object' || value === null) {
@@ -9588,8 +9601,13 @@ class FunctionBase extends NodeBase {
         this.getObjectEntity().deoptimizePath(path);
         if (path.length === 1 && path[0] === UnknownKey) {
             // A reassignment of UNKNOWN_PATH is considered equivalent to having lost track
-            // which means the return expression needs to be reassigned
+            // which means the return expression and parameters need to be reassigned
             this.scope.getReturnExpression().deoptimizePath(UNKNOWN_PATH);
+            for (const parameterList of this.scope.parameters) {
+                for (const parameter of parameterList) {
+                    parameter.deoptimizePath(UNKNOWN_PATH);
+                }
+            }
         }
     }
     getLiteralValueAtPath(path, recursionTracker, origin) {
@@ -13689,6 +13707,7 @@ class VariableDeclaration extends NodeBase {
         for (const { node, start, separator, contentEnd, end } of separatedNodes) {
             if (!node.included) {
                 code.remove(start, end);
+                node.removeAnnotations(code);
                 continue;
             }
             node.render(code, options);
@@ -14833,6 +14852,14 @@ class Module {
         return { source, usesTopLevelAwait };
     }
     setSource({ ast, code, customTransformCache, originalCode, originalSourcemap, resolvedIds, sourcemapChain, transformDependencies, transformFiles, ...moduleOptions }) {
+        if (code.startsWith('#!')) {
+            const shebangEndPosition = code.indexOf('\n');
+            this.shebang = code.slice(2, shebangEndPosition);
+        }
+        /* eslint-disable-next-line unicorn/number-literal-case */
+        if (code.charCodeAt(0) === 65279) {
+            code = code.slice(1);
+        }
         timeStart('generate ast', 3);
         this.info.code = code;
         this.originalCode = originalCode;
@@ -16359,8 +16386,8 @@ function addStaticDependencies(module, staticDependencies, handledModules, chunk
 const hashPlaceholderLeft = '!~{';
 const hashPlaceholderRight = '}~';
 const hashPlaceholderOverhead = hashPlaceholderLeft.length + hashPlaceholderRight.length;
-// This is the size of a sha256
-const maxHashSize = 64;
+// This is the size of a 128-bits xxhash with base64url encoding
+const maxHashSize = 22;
 const defaultHashSize = 8;
 const getHashPlaceholderGenerator = () => {
     let nextIndex = 0;
@@ -16869,6 +16896,10 @@ class Chunk {
         }, outputOptions);
         if (banner)
             magicString.prepend(banner);
+        if (format === 'es' || format === 'cjs') {
+            const shebang = facadeModule !== null && facadeModule.info.isEntry && facadeModule.shebang;
+            shebang && magicString.prepend(`#!${shebang}\n`);
+        }
         if (footer)
             magicString.append(footer);
         return {
@@ -18447,7 +18478,23 @@ function collapseSourcemap(id, originalCode, originalSourcemap, sourcemapChain,
     return decodedSourcemap({ version: 3, ...map });
 }
 
-const createHash = () => createHash$1('sha256');
+let textEncoder;
+function getXxhash(input) {
+    let buffer;
+    if (typeof input === 'string') {
+        if (typeof Buffer === 'undefined') {
+            textEncoder ??= new TextEncoder();
+            buffer = textEncoder.encode(input);
+        }
+        else {
+            buffer = Buffer.from(input);
+        }
+    }
+    else {
+        buffer = input;
+    }
+    return xxhashBase64Url(buffer);
+}
 
 // this looks ridiculous, but it prevents sourcemap tooling from mistaking
 // this for an actual sourceMappingURL
@@ -18564,7 +18611,7 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
             // To create a reproducible content-only hash, all placeholders are
             // replaced with the same value before hashing
             const { containedPlaceholders, transformedCode } = replacePlaceholdersWithDefaultAndGetContainedPlaceholders(code, placeholders);
-            const hash = createHash().update(transformedCode);
+            let contentToHash = transformedCode;
             const hashAugmentation = pluginDriver.hookReduceValueSync('augmentChunkHash', '', [chunk.getRenderedChunkInfo()], (augmentation, pluginHash) => {
                 if (pluginHash) {
                     augmentation += pluginHash;
@@ -18572,12 +18619,12 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
                 return augmentation;
             });
             if (hashAugmentation) {
-                hash.update(hashAugmentation);
+                contentToHash += hashAugmentation;
             }
             renderedChunksByPlaceholder.set(hashPlaceholder, transformedChunk);
             hashDependenciesByPlaceholder.set(hashPlaceholder, {
                 containedPlaceholders,
-                contentHash: hash.digest('hex')
+                contentHash: getXxhash(contentToHash)
             });
         }
         else {
@@ -18585,10 +18632,7 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
         }
         const sourcemapHashPlaceholder = preliminarySourcemapFileName?.hashPlaceholder;
         if (map && sourcemapHashPlaceholder) {
-            initialHashesByPlaceholder.set(preliminarySourcemapFileName.hashPlaceholder, createHash()
-                .update(map.toString())
-                .digest('hex')
-                .slice(0, preliminarySourcemapFileName.hashPlaceholder.length));
+            initialHashesByPlaceholder.set(preliminarySourcemapFileName.hashPlaceholder, getXxhash(map.toString()).slice(0, preliminarySourcemapFileName.hashPlaceholder.length));
         }
     }));
     return {
@@ -18601,11 +18645,11 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
 function generateFinalHashes(renderedChunksByPlaceholder, hashDependenciesByPlaceholder, initialHashesByPlaceholder, bundle) {
     const hashesByPlaceholder = new Map(initialHashesByPlaceholder);
     for (const [placeholder, { fileName }] of renderedChunksByPlaceholder) {
-        let hash = createHash();
+        let contentToHash = '';
         const hashDependencyPlaceholders = new Set([placeholder]);
         for (const dependencyPlaceholder of hashDependencyPlaceholders) {
             const { containedPlaceholders, contentHash } = hashDependenciesByPlaceholder.get(dependencyPlaceholder);
-            hash.update(contentHash);
+            contentToHash += contentHash;
             for (const containedPlaceholder of containedPlaceholders) {
                 // When looping over a map, setting an entry only causes a new iteration if the key is new
                 hashDependencyPlaceholders.add(containedPlaceholder);
@@ -18616,9 +18660,9 @@ function generateFinalHashes(renderedChunksByPlaceholder, hashDependenciesByPlac
         do {
             // In case of a hash collision, create a hash of the hash
             if (finalHash) {
-                hash = createHash().update(finalHash);
+                contentToHash = finalHash;
             }
-            finalHash = hash.digest('hex').slice(0, placeholder.length);
+            finalHash = getXxhash(contentToHash).slice(0, placeholder.length);
             finalFileName = replaceSinglePlaceholder(fileName, placeholder, finalHash);
         } while (bundle[lowercaseBundleKeys].has(finalFileName.toLowerCase()));
         bundle[finalFileName] = FILE_PLACEHOLDER;
@@ -19765,9 +19809,6 @@ class GlobalScope extends Scope {
     }
 }
 
-function getSourceHash(source) {
-    return createHash().update(source).digest('hex');
-}
 function generateAssetFileName(name, source, sourceHash, outputOptions, bundle) {
     const emittedName = outputOptions.sanitizeFileName(name || 'asset');
     return makeUnique(renderNamePattern(typeof outputOptions.assetFileNames === 'function'
@@ -19901,7 +19942,7 @@ class FileEmitter {
                         this.finalizeAdditionalAsset(consumedFile, consumedFile.source, output);
                     }
                     else {
-                        const sourceHash = getSourceHash(consumedFile.source);
+                        const sourceHash = getXxhash(consumedFile.source);
                         getOrCreate(consumedAssetsByHash, sourceHash, () => []).push(consumedFile);
                     }
                 }
@@ -19924,7 +19965,7 @@ class FileEmitter {
     assignReferenceId(file, idBase) {
         let referenceId = idBase;
         do {
-            referenceId = createHash().update(referenceId).digest('hex').slice(0, 8);
+            referenceId = getXxhash(referenceId).slice(0, 8).replaceAll('-', '$');
         } while (this.filesByReferenceId.has(referenceId) ||
             this.outputFileEmitters.some(({ filesByReferenceId }) => filesByReferenceId.has(referenceId)));
         file.referenceId = referenceId;
@@ -20039,7 +20080,7 @@ class FileEmitter {
         let { fileName, needsCodeReference, referenceId } = consumedFile;
         // Deduplicate assets if an explicit fileName is not provided
         if (!fileName) {
-            const sourceHash = getSourceHash(source);
+            const sourceHash = getXxhash(source);
             fileName = fileNamesBySource.get(sourceHash);
             if (!fileName) {
                 fileName = generateAssetFileName(consumedFile.name, source, sourceHash, outputOptions, bundle);
@@ -20545,7 +20586,7 @@ class Graph {
         this.phase = BuildPhase.GENERATE;
     }
     contextParse(code, { allowReturnOutsideFunction = false } = {}) {
-        const astBuffer = native.parse(code, allowReturnOutsideFunction);
+        const astBuffer = parse$2(code, allowReturnOutsideFunction);
         const readString = getReadStringFunction(astBuffer);
         return convertProgram(astBuffer.buffer, readString);
     }

package/dist/es/shared/watch.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -18,7 +18,6 @@ import require$$0$2 from 'path';
 import require$$2$1 from 'os';
 import require$$0$3 from 'events';
 import 'node:perf_hooks';
-import 'node:crypto';
 import '../../native.js';
 import 'node:fs/promises';
 import 'tty';

package/dist/getLogFilter.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/loadConfigFile.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -20,7 +20,6 @@ const loadConfigFile_js = require('./shared/loadConfigFile.js');
 require('tty');
 require('path');
 require('node:perf_hooks');
-require('node:crypto');
 require('./native.js');
 require('./getLogFilter.js');
 

package/dist/native.js

@@ -252,6 +252,7 @@ if (!nativeBinding) {
   throw new Error(`Failed to load native binding`)
 }
 
-const { parse } = nativeBinding
+const { parse, xxhashBase64Url } = nativeBinding
 
 module.exports.parse = parse
+module.exports.xxhashBase64Url = xxhashBase64Url

package/dist/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -18,7 +18,6 @@ require('tty');
 require('node:path');
 require('path');
 require('node:perf_hooks');
-require('node:crypto');
 require('./native.js');
 require('node:fs/promises');
 require('./shared/fsevents-importer.js');

package/dist/shared/fsevents-importer.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/shared/index.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/shared/loadConfigFile.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/shared/rollup.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -14,8 +14,7 @@ const tty = require('tty');
 const node_path = require('node:path');
 const require$$0$1 = require('path');
 const node_perf_hooks = require('node:perf_hooks');
-const node_crypto = require('node:crypto');
-const native = require('../native.js');
+const native_js = require('../native.js');
 const promises = require('node:fs/promises');
 
 function _interopNamespaceDefault(e) {
@@ -31,7 +30,7 @@ function _interopNamespaceDefault(e) {
 
 const tty__namespace = /*#__PURE__*/_interopNamespaceDefault(tty);
 
-var version = "4.0.0-22";
+var version = "4.0.0-24";
 
 function ensureArray$1(items) {
     if (Array.isArray(items)) {
@@ -50,7 +49,23 @@ var BuildPhase;
     BuildPhase[BuildPhase["GENERATE"] = 2] = "GENERATE";
 })(BuildPhase || (BuildPhase = {}));
 
-const createHash = () => node_crypto.createHash('sha256');
+let textEncoder;
+function getXxhash(input) {
+    let buffer;
+    if (typeof input === 'string') {
+        if (typeof Buffer === 'undefined') {
+            textEncoder ??= new TextEncoder();
+            buffer = textEncoder.encode(input);
+        }
+        else {
+            buffer = Buffer.from(input);
+        }
+    }
+    else {
+        buffer = input;
+    }
+    return native_js.xxhashBase64Url(buffer);
+}
 
 function getOrCreate(map, key, init) {
     const existing = map.get(key);
@@ -334,6 +349,8 @@ const URL_OUTPUT_SOURCEMAPBASEURL = 'configuration-options/#output-sourcemapbase
 const URL_OUTPUT_SOURCEMAPFILE = 'configuration-options/#output-sourcemapfile';
 const URL_PRESERVEENTRYSIGNATURES = 'configuration-options/#preserveentrysignatures';
 const URL_TREESHAKE = 'configuration-options/#treeshake';
+const URL_TREESHAKE_PURE = 'configuration-options/#pure';
+const URL_TREESHAKE_NOSIDEEFFECTS = 'configuration-options/#no-side-effects';
 const URL_TREESHAKE_MODULESIDEEFFECTS = 'configuration-options/#treeshake-modulesideeffects';
 const URL_WATCH = 'configuration-options/#watch';
 // command-line-interface
@@ -368,7 +385,7 @@ function augmentCodeLocation(properties, pos, source, id) {
 }
 // Error codes should be sorted alphabetically while errors should be sorted by
 // error code below
-const ADDON_ERROR = 'ADDON_ERROR', ALREADY_CLOSED = 'ALREADY_CLOSED', AMBIGUOUS_EXTERNAL_NAMESPACES = 'AMBIGUOUS_EXTERNAL_NAMESPACES', ANONYMOUS_PLUGIN_CACHE = 'ANONYMOUS_PLUGIN_CACHE', ASSET_NOT_FINALISED = 'ASSET_NOT_FINALISED', ASSET_NOT_FOUND = 'ASSET_NOT_FOUND', ASSET_SOURCE_ALREADY_SET = 'ASSET_SOURCE_ALREADY_SET', ASSET_SOURCE_MISSING = 'ASSET_SOURCE_MISSING', BAD_LOADER = 'BAD_LOADER', CANNOT_CALL_NAMESPACE = 'CANNOT_CALL_NAMESPACE', CANNOT_EMIT_FROM_OPTIONS_HOOK = 'CANNOT_EMIT_FROM_OPTIONS_HOOK', CHUNK_NOT_GENERATED = 'CHUNK_NOT_GENERATED', CHUNK_INVALID = 'CHUNK_INVALID', CIRCULAR_DEPENDENCY = 'CIRCULAR_DEPENDENCY', CIRCULAR_REEXPORT = 'CIRCULAR_REEXPORT', CYCLIC_CROSS_CHUNK_REEXPORT = 'CYCLIC_CROSS_CHUNK_REEXPORT', DEPRECATED_FEATURE = 'DEPRECATED_FEATURE', DUPLICATE_IMPORT_OPTIONS = 'DUPLICATE_IMPORT_OPTIONS', DUPLICATE_PLUGIN_NAME = 'DUPLICATE_PLUGIN_NAME', EMPTY_BUNDLE = 'EMPTY_BUNDLE', EVAL = 'EVAL', EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS = 'EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS', EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES = 'EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES', EXTERNAL_SYNTHETIC_EXPORTS = 'EXTERNAL_SYNTHETIC_EXPORTS', FAIL_AFTER_WARNINGS = 'FAIL_AFTER_WARNINGS', FILE_NAME_CONFLICT = 'FILE_NAME_CONFLICT', FILE_NOT_FOUND = 'FILE_NOT_FOUND', FIRST_SIDE_EFFECT = 'FIRST_SIDE_EFFECT', ILLEGAL_IDENTIFIER_AS_NAME = 'ILLEGAL_IDENTIFIER_AS_NAME', ILLEGAL_REASSIGNMENT = 'ILLEGAL_REASSIGNMENT', INCONSISTENT_IMPORT_ATTRIBUTES = 'INCONSISTENT_IMPORT_ATTRIBUTES', INPUT_HOOK_IN_OUTPUT_PLUGIN = 'INPUT_HOOK_IN_OUTPUT_PLUGIN', INVALID_CHUNK = 'INVALID_CHUNK', INVALID_CONFIG_MODULE_FORMAT = 'INVALID_CONFIG_MODULE_FORMAT', INVALID_EXPORT_OPTION = 'INVALID_EXPORT_OPTION', INVALID_EXTERNAL_ID = 'INVALID_EXTERNAL_ID', INVALID_IMPORT_ATTRIBUTE = 'INVALID_IMPORT_ATTRIBUTE', INVALID_LOG_POSITION = 'INVALID_LOG_POSITION', INVALID_OPTION = 'INVALID_OPTION', INVALID_PLUGIN_HOOK = 'INVALID_PLUGIN_HOOK', INVALID_ROLLUP_PHASE = 'INVALID_ROLLUP_PHASE', INVALID_SETASSETSOURCE = 'INVALID_SETASSETSOURCE', INVALID_TLA_FORMAT = 'INVALID_TLA_FORMAT', MISSING_CONFIG = 'MISSING_CONFIG', MISSING_EXPORT = 'MISSING_EXPORT', MISSING_EXTERNAL_CONFIG = 'MISSING_EXTERNAL_CONFIG', MISSING_GLOBAL_NAME = 'MISSING_GLOBAL_NAME', MISSING_IMPLICIT_DEPENDANT = 'MISSING_IMPLICIT_DEPENDANT', MISSING_NAME_OPTION_FOR_IIFE_EXPORT = 'MISSING_NAME_OPTION_FOR_IIFE_EXPORT', MISSING_NODE_BUILTINS = 'MISSING_NODE_BUILTINS', MISSING_OPTION = 'MISSING_OPTION', MIXED_EXPORTS = 'MIXED_EXPORTS', MODULE_LEVEL_DIRECTIVE = 'MODULE_LEVEL_DIRECTIVE', NAMESPACE_CONFLICT = 'NAMESPACE_CONFLICT', NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE = 'NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE', ONLY_INLINE_SOURCEMAPS = 'ONLY_INLINE_SOURCEMAPS', OPTIMIZE_CHUNK_STATUS = 'OPTIMIZE_CHUNK_STATUS', PARSE_ERROR = 'PARSE_ERROR', PLUGIN_ERROR = 'PLUGIN_ERROR', SHIMMED_EXPORT = 'SHIMMED_EXPORT', SOURCEMAP_BROKEN = 'SOURCEMAP_BROKEN', SOURCEMAP_ERROR = 'SOURCEMAP_ERROR', SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT = 'SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT', THIS_IS_UNDEFINED = 'THIS_IS_UNDEFINED', UNEXPECTED_NAMED_IMPORT = 'UNEXPECTED_NAMED_IMPORT', UNKNOWN_OPTION = 'UNKNOWN_OPTION', UNRESOLVED_ENTRY = 'UNRESOLVED_ENTRY', UNRESOLVED_IMPORT = 'UNRESOLVED_IMPORT', UNUSED_EXTERNAL_IMPORT = 'UNUSED_EXTERNAL_IMPORT', VALIDATION_ERROR = 'VALIDATION_ERROR';
+const ADDON_ERROR = 'ADDON_ERROR', ALREADY_CLOSED = 'ALREADY_CLOSED', AMBIGUOUS_EXTERNAL_NAMESPACES = 'AMBIGUOUS_EXTERNAL_NAMESPACES', ANONYMOUS_PLUGIN_CACHE = 'ANONYMOUS_PLUGIN_CACHE', ASSET_NOT_FINALISED = 'ASSET_NOT_FINALISED', ASSET_NOT_FOUND = 'ASSET_NOT_FOUND', ASSET_SOURCE_ALREADY_SET = 'ASSET_SOURCE_ALREADY_SET', ASSET_SOURCE_MISSING = 'ASSET_SOURCE_MISSING', BAD_LOADER = 'BAD_LOADER', CANNOT_CALL_NAMESPACE = 'CANNOT_CALL_NAMESPACE', CANNOT_EMIT_FROM_OPTIONS_HOOK = 'CANNOT_EMIT_FROM_OPTIONS_HOOK', CHUNK_NOT_GENERATED = 'CHUNK_NOT_GENERATED', CHUNK_INVALID = 'CHUNK_INVALID', CIRCULAR_DEPENDENCY = 'CIRCULAR_DEPENDENCY', CIRCULAR_REEXPORT = 'CIRCULAR_REEXPORT', CYCLIC_CROSS_CHUNK_REEXPORT = 'CYCLIC_CROSS_CHUNK_REEXPORT', DEPRECATED_FEATURE = 'DEPRECATED_FEATURE', DUPLICATE_IMPORT_OPTIONS = 'DUPLICATE_IMPORT_OPTIONS', DUPLICATE_PLUGIN_NAME = 'DUPLICATE_PLUGIN_NAME', EMPTY_BUNDLE = 'EMPTY_BUNDLE', EVAL = 'EVAL', EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS = 'EXTERNAL_MODULES_CANNOT_BE_INCLUDED_IN_MANUAL_CHUNKS', EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES = 'EXTERNAL_MODULES_CANNOT_BE_TRANSFORMED_TO_MODULES', EXTERNAL_SYNTHETIC_EXPORTS = 'EXTERNAL_SYNTHETIC_EXPORTS', FAIL_AFTER_WARNINGS = 'FAIL_AFTER_WARNINGS', FILE_NAME_CONFLICT = 'FILE_NAME_CONFLICT', FILE_NOT_FOUND = 'FILE_NOT_FOUND', FIRST_SIDE_EFFECT = 'FIRST_SIDE_EFFECT', ILLEGAL_IDENTIFIER_AS_NAME = 'ILLEGAL_IDENTIFIER_AS_NAME', ILLEGAL_REASSIGNMENT = 'ILLEGAL_REASSIGNMENT', INCONSISTENT_IMPORT_ATTRIBUTES = 'INCONSISTENT_IMPORT_ATTRIBUTES', INVALID_ANNOTATION = 'INVALID_ANNOTATION', INPUT_HOOK_IN_OUTPUT_PLUGIN = 'INPUT_HOOK_IN_OUTPUT_PLUGIN', INVALID_CHUNK = 'INVALID_CHUNK', INVALID_CONFIG_MODULE_FORMAT = 'INVALID_CONFIG_MODULE_FORMAT', INVALID_EXPORT_OPTION = 'INVALID_EXPORT_OPTION', INVALID_EXTERNAL_ID = 'INVALID_EXTERNAL_ID', INVALID_IMPORT_ATTRIBUTE = 'INVALID_IMPORT_ATTRIBUTE', INVALID_LOG_POSITION = 'INVALID_LOG_POSITION', INVALID_OPTION = 'INVALID_OPTION', INVALID_PLUGIN_HOOK = 'INVALID_PLUGIN_HOOK', INVALID_ROLLUP_PHASE = 'INVALID_ROLLUP_PHASE', INVALID_SETASSETSOURCE = 'INVALID_SETASSETSOURCE', INVALID_TLA_FORMAT = 'INVALID_TLA_FORMAT', MISSING_CONFIG = 'MISSING_CONFIG', MISSING_EXPORT = 'MISSING_EXPORT', MISSING_EXTERNAL_CONFIG = 'MISSING_EXTERNAL_CONFIG', MISSING_GLOBAL_NAME = 'MISSING_GLOBAL_NAME', MISSING_IMPLICIT_DEPENDANT = 'MISSING_IMPLICIT_DEPENDANT', MISSING_NAME_OPTION_FOR_IIFE_EXPORT = 'MISSING_NAME_OPTION_FOR_IIFE_EXPORT', MISSING_NODE_BUILTINS = 'MISSING_NODE_BUILTINS', MISSING_OPTION = 'MISSING_OPTION', MIXED_EXPORTS = 'MIXED_EXPORTS', MODULE_LEVEL_DIRECTIVE = 'MODULE_LEVEL_DIRECTIVE', NAMESPACE_CONFLICT = 'NAMESPACE_CONFLICT', NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE = 'NO_TRANSFORM_MAP_OR_AST_WITHOUT_CODE', ONLY_INLINE_SOURCEMAPS = 'ONLY_INLINE_SOURCEMAPS', OPTIMIZE_CHUNK_STATUS = 'OPTIMIZE_CHUNK_STATUS', PARSE_ERROR = 'PARSE_ERROR', PLUGIN_ERROR = 'PLUGIN_ERROR', SHIMMED_EXPORT = 'SHIMMED_EXPORT', SOURCEMAP_BROKEN = 'SOURCEMAP_BROKEN', SOURCEMAP_ERROR = 'SOURCEMAP_ERROR', SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT = 'SYNTHETIC_NAMED_EXPORTS_NEED_NAMESPACE_EXPORT', THIS_IS_UNDEFINED = 'THIS_IS_UNDEFINED', UNEXPECTED_NAMED_IMPORT = 'UNEXPECTED_NAMED_IMPORT', UNKNOWN_OPTION = 'UNKNOWN_OPTION', UNRESOLVED_ENTRY = 'UNRESOLVED_ENTRY', UNRESOLVED_IMPORT = 'UNRESOLVED_IMPORT', UNUSED_EXTERNAL_IMPORT = 'UNUSED_EXTERNAL_IMPORT', VALIDATION_ERROR = 'VALIDATION_ERROR';
 function logAddonNotGenerated(message, hook, plugin) {
     return {
         code: ADDON_ERROR,
@@ -567,6 +584,14 @@ const formatAttributes$1 = (attributes) => {
         return 'no';
     return entries.map(([key, value]) => `"${key}": "${value}"`).join(', ');
 };
+function logInvalidAnnotation(comment, id, type) {
+    return {
+        code: INVALID_ANNOTATION,
+        id,
+        message: `A comment\n\n"${comment}"\n\nin "${relativeId(id)}" contains an annotation that Rollup cannot interpret due to the position of the comment. The comment will be removed to avoid issues.`,
+        url: getRollupUrl(type === 'noSideEffects' ? URL_TREESHAKE_NOSIDEEFFECTS : URL_TREESHAKE_PURE)
+    };
+}
 function logInputHookInOutputPlugin(pluginName, hookName) {
     return {
         code: INPUT_HOOK_IN_OUTPUT_PLUGIN,
@@ -1004,8 +1029,8 @@ function warnDeprecationWithOptions(deprecation, urlSnippet, activeDeprecation,
 const hashPlaceholderLeft = '!~{';
 const hashPlaceholderRight = '}~';
 const hashPlaceholderOverhead = hashPlaceholderLeft.length + hashPlaceholderRight.length;
-// This is the size of a sha256
-const maxHashSize = 64;
+// This is the size of a 128-bits xxhash with base64url encoding
+const maxHashSize = 22;
 const defaultHashSize = 8;
 const getHashPlaceholderGenerator = () => {
     let nextIndex = 0;
@@ -1104,9 +1129,6 @@ function makeUnique(name, { [lowercaseBundleKeys]: reservedLowercaseBundleKeys }
     return uniqueName;
 }
 
-function getSourceHash(source) {
-    return createHash().update(source).digest('hex');
-}
 function generateAssetFileName(name, source, sourceHash, outputOptions, bundle) {
     const emittedName = outputOptions.sanitizeFileName(name || 'asset');
     return makeUnique(renderNamePattern(typeof outputOptions.assetFileNames === 'function'
@@ -1240,7 +1262,7 @@ class FileEmitter {
                         this.finalizeAdditionalAsset(consumedFile, consumedFile.source, output);
                     }
                     else {
-                        const sourceHash = getSourceHash(consumedFile.source);
+                        const sourceHash = getXxhash(consumedFile.source);
                         getOrCreate(consumedAssetsByHash, sourceHash, () => []).push(consumedFile);
                     }
                 }
@@ -1263,7 +1285,7 @@ class FileEmitter {
     assignReferenceId(file, idBase) {
         let referenceId = idBase;
         do {
-            referenceId = createHash().update(referenceId).digest('hex').slice(0, 8);
+            referenceId = getXxhash(referenceId).slice(0, 8).replaceAll('-', '$');
         } while (this.filesByReferenceId.has(referenceId) ||
             this.outputFileEmitters.some(({ filesByReferenceId }) => filesByReferenceId.has(referenceId)));
         file.referenceId = referenceId;
@@ -1378,7 +1400,7 @@ class FileEmitter {
         let { fileName, needsCodeReference, referenceId } = consumedFile;
         // Deduplicate assets if an explicit fileName is not provided
         if (!fileName) {
-            const sourceHash = getSourceHash(source);
+            const sourceHash = getXxhash(source);
             fileName = fileNamesBySource.get(sourceHash);
             if (!fileName) {
                 fileName = generateAssetFileName(consumedFile.name, source, sourceHash, outputOptions, bundle);
@@ -8232,8 +8254,12 @@ class NodeBase extends ExpressionEntity {
                     }
                 }
                 else if (key === INVALID_ANNOTATION_KEY) {
-                    for (const { start, end } of value)
+                    for (const { start, end, type } of value) {
                         this.context.magicString.remove(start, end);
+                        if (type === 'pure' || type === 'noSideEffects') {
+                            this.context.log(LOGLEVEL_WARN, logInvalidAnnotation(this.context.code.slice(start, end), this.context.module.id, type), start);
+                        }
+                    }
                 }
             }
             else if (typeof value !== 'object' || value === null) {
@@ -11070,8 +11096,13 @@ class FunctionBase extends NodeBase {
         this.getObjectEntity().deoptimizePath(path);
         if (path.length === 1 && path[0] === UnknownKey) {
             // A reassignment of UNKNOWN_PATH is considered equivalent to having lost track
-            // which means the return expression needs to be reassigned
+            // which means the return expression and parameters need to be reassigned
             this.scope.getReturnExpression().deoptimizePath(UNKNOWN_PATH);
+            for (const parameterList of this.scope.parameters) {
+                for (const parameter of parameterList) {
+                    parameter.deoptimizePath(UNKNOWN_PATH);
+                }
+            }
         }
     }
     getLiteralValueAtPath(path, recursionTracker, origin) {
@@ -15171,6 +15202,7 @@ class VariableDeclaration extends NodeBase {
         for (const { node, start, separator, contentEnd, end } of separatedNodes) {
             if (!node.included) {
                 code.remove(start, end);
+                node.removeAnnotations(code);
                 continue;
             }
             node.render(code, options);
@@ -16308,6 +16340,14 @@ class Module {
         return { source, usesTopLevelAwait };
     }
     setSource({ ast, code, customTransformCache, originalCode, originalSourcemap, resolvedIds, sourcemapChain, transformDependencies, transformFiles, ...moduleOptions }) {
+        if (code.startsWith('#!')) {
+            const shebangEndPosition = code.indexOf('\n');
+            this.shebang = code.slice(2, shebangEndPosition);
+        }
+        /* eslint-disable-next-line unicorn/number-literal-case */
+        if (code.charCodeAt(0) === 65279) {
+            code = code.slice(1);
+        }
         timeStart('generate ast', 3);
         this.info.code = code;
         this.originalCode = originalCode;
@@ -18239,6 +18279,10 @@ class Chunk {
         }, outputOptions);
         if (banner)
             magicString.prepend(banner);
+        if (format === 'es' || format === 'cjs') {
+            const shebang = facadeModule !== null && facadeModule.info.isEntry && facadeModule.shebang;
+            shebang && magicString.prepend(`#!${shebang}\n`);
+        }
         if (footer)
             magicString.append(footer);
         return {
@@ -19932,7 +19976,7 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
             // To create a reproducible content-only hash, all placeholders are
             // replaced with the same value before hashing
             const { containedPlaceholders, transformedCode } = replacePlaceholdersWithDefaultAndGetContainedPlaceholders(code, placeholders);
-            const hash = createHash().update(transformedCode);
+            let contentToHash = transformedCode;
             const hashAugmentation = pluginDriver.hookReduceValueSync('augmentChunkHash', '', [chunk.getRenderedChunkInfo()], (augmentation, pluginHash) => {
                 if (pluginHash) {
                     augmentation += pluginHash;
@@ -19940,12 +19984,12 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
                 return augmentation;
             });
             if (hashAugmentation) {
-                hash.update(hashAugmentation);
+                contentToHash += hashAugmentation;
             }
             renderedChunksByPlaceholder.set(hashPlaceholder, transformedChunk);
             hashDependenciesByPlaceholder.set(hashPlaceholder, {
                 containedPlaceholders,
-                contentHash: hash.digest('hex')
+                contentHash: getXxhash(contentToHash)
             });
         }
         else {
@@ -19953,10 +19997,7 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
         }
         const sourcemapHashPlaceholder = preliminarySourcemapFileName?.hashPlaceholder;
         if (map && sourcemapHashPlaceholder) {
-            initialHashesByPlaceholder.set(preliminarySourcemapFileName.hashPlaceholder, createHash()
-                .update(map.toString())
-                .digest('hex')
-                .slice(0, preliminarySourcemapFileName.hashPlaceholder.length));
+            initialHashesByPlaceholder.set(preliminarySourcemapFileName.hashPlaceholder, getXxhash(map.toString()).slice(0, preliminarySourcemapFileName.hashPlaceholder.length));
         }
     }));
     return {
@@ -19969,11 +20010,11 @@ async function transformChunksAndGenerateContentHashes(renderedChunks, chunkGrap
 function generateFinalHashes(renderedChunksByPlaceholder, hashDependenciesByPlaceholder, initialHashesByPlaceholder, bundle) {
     const hashesByPlaceholder = new Map(initialHashesByPlaceholder);
     for (const [placeholder, { fileName }] of renderedChunksByPlaceholder) {
-        let hash = createHash();
+        let contentToHash = '';
         const hashDependencyPlaceholders = new Set([placeholder]);
         for (const dependencyPlaceholder of hashDependencyPlaceholders) {
             const { containedPlaceholders, contentHash } = hashDependenciesByPlaceholder.get(dependencyPlaceholder);
-            hash.update(contentHash);
+            contentToHash += contentHash;
             for (const containedPlaceholder of containedPlaceholders) {
                 // When looping over a map, setting an entry only causes a new iteration if the key is new
                 hashDependencyPlaceholders.add(containedPlaceholder);
@@ -19984,9 +20025,9 @@ function generateFinalHashes(renderedChunksByPlaceholder, hashDependenciesByPlac
         do {
             // In case of a hash collision, create a hash of the hash
             if (finalHash) {
-                hash = createHash().update(finalHash);
+                contentToHash = finalHash;
             }
-            finalHash = hash.digest('hex').slice(0, placeholder.length);
+            finalHash = getXxhash(contentToHash).slice(0, placeholder.length);
             finalFileName = replaceSinglePlaceholder(fileName, placeholder, finalHash);
         } while (bundle[lowercaseBundleKeys].has(finalFileName.toLowerCase()));
         bundle[finalFileName] = FILE_PLACEHOLDER;
@@ -21027,7 +21068,7 @@ class Graph {
         this.phase = BuildPhase.GENERATE;
     }
     contextParse(code, { allowReturnOutsideFunction = false } = {}) {
-        const astBuffer = native.parse(code, allowReturnOutsideFunction);
+        const astBuffer = native_js.parse(code, allowReturnOutsideFunction);
         const readString = getReadStringFunction(astBuffer);
         return convertProgram(astBuffer.buffer, readString);
     }

package/dist/shared/watch-cli.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -29,7 +29,6 @@ require('events');
 require('node:path');
 require('tty');
 require('node:perf_hooks');
-require('node:crypto');
 require('../native.js');
 require('node:url');
 require('../getLogFilter.js');

package/dist/shared/watch-proxy.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 

package/dist/shared/watch.js

@@ -1,7 +1,7 @@
 /*
   @license
-	Rollup.js v4.0.0-22
-	Tue, 26 Sep 2023 16:16:00 GMT - commit 38be49cf19099321f935c1ad5968e76fb30e0957
+	Rollup.js v4.0.0-24
+	Tue, 03 Oct 2023 05:11:52 GMT - commit ced077f2920c473c4c2ca31a8d72b259bec91f67
 
 	https://github.com/rollup/rollup
 
@@ -19,7 +19,6 @@ const index = require('./index.js');
 require('tty');
 require('path');
 require('node:perf_hooks');
-require('node:crypto');
 require('../native.js');
 require('node:fs/promises');
 require('fs');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rollup",
-  "version": "4.0.0-22",
+  "version": "4.0.0-24",
   "description": "Next-generation ES module bundler",
   "main": "dist/rollup.js",
   "module": "dist/es/rollup.js",
@@ -98,17 +98,17 @@
   "homepage": "https://rollupjs.org/",
   "optionalDependencies": {
     "fsevents": "~2.3.2",
-    "@rollup/rollup-darwin-arm64": "4.0.0-22",
-    "@rollup/rollup-android-arm64": "4.0.0-22",
-    "@rollup/rollup-win32-arm64-msvc": "4.0.0-22",
-    "@rollup/rollup-linux-arm64-gnu": "4.0.0-22",
-    "@rollup/rollup-android-arm-eabi": "4.0.0-22",
-    "@rollup/rollup-linux-arm-gnueabihf": "4.0.0-22",
-    "@rollup/rollup-win32-ia32-msvc": "4.0.0-22",
-    "@rollup/rollup-darwin-x64": "4.0.0-22",
-    "@rollup/rollup-win32-x64-msvc": "4.0.0-22",
-    "@rollup/rollup-linux-x64-gnu": "4.0.0-22",
-    "@rollup/rollup-linux-x64-musl": "4.0.0-22"
+    "@rollup/rollup-darwin-arm64": "4.0.0-24",
+    "@rollup/rollup-android-arm64": "4.0.0-24",
+    "@rollup/rollup-win32-arm64-msvc": "4.0.0-24",
+    "@rollup/rollup-linux-arm64-gnu": "4.0.0-24",
+    "@rollup/rollup-android-arm-eabi": "4.0.0-24",
+    "@rollup/rollup-linux-arm-gnueabihf": "4.0.0-24",
+    "@rollup/rollup-win32-ia32-msvc": "4.0.0-24",
+    "@rollup/rollup-darwin-x64": "4.0.0-24",
+    "@rollup/rollup-win32-x64-msvc": "4.0.0-24",
+    "@rollup/rollup-linux-x64-gnu": "4.0.0-24",
+    "@rollup/rollup-linux-x64-musl": "4.0.0-24"
   },
   "devDependenciesComments": {
     "@rollup/plugin-typescript": "It appears that 11.1.3 breaks sourcemaps"
@@ -116,10 +116,10 @@
   "devDependencies": {
     "@codemirror/commands": "^6.2.5",
     "@codemirror/lang-javascript": "^6.2.1",
-    "@codemirror/language": "^6.9.0",
-    "@codemirror/search": "^6.5.3",
+    "@codemirror/language": "^6.9.1",
+    "@codemirror/search": "^6.5.4",
     "@codemirror/state": "^6.2.1",
-    "@codemirror/view": "^6.19.0",
+    "@codemirror/view": "^6.20.2",
     "@jridgewell/sourcemap-codec": "^1.4.15",
     "@mermaid-js/mermaid-cli": "^10.4.0",
     "@napi-rs/cli": "^2.16.2",
@@ -132,12 +132,12 @@
     "@rollup/plugin-terser": "^0.4.3",
     "@rollup/plugin-typescript": "11.1.2",
     "@rollup/pluginutils": "^5.0.4",
-    "@types/estree": "1.0.1",
+    "@types/estree": "1.0.2",
     "@types/mocha": "^10.0.1",
     "@types/node": "18.0.0",
-    "@types/yargs-parser": "^21.0.0",
-    "@typescript-eslint/eslint-plugin": "^6.7.2",
-    "@typescript-eslint/parser": "^6.7.2",
+    "@types/yargs-parser": "^21.0.1",
+    "@typescript-eslint/eslint-plugin": "^6.7.3",
+    "@typescript-eslint/parser": "^6.7.3",
     "@vue/eslint-config-prettier": "^8.0.0",
     "@vue/eslint-config-typescript": "^12.0.0",
     "acorn": "^8.10.0",
@@ -151,7 +151,7 @@
     "date-time": "^4.0.0",
     "es5-shim": "^4.6.7",
     "es6-shim": "^0.35.8",
-    "eslint": "^8.49.0",
+    "eslint": "^8.50.0",
     "eslint-config-prettier": "^9.0.0",
     "eslint-plugin-import": "^2.28.1",
     "eslint-plugin-prettier": "^5.0.0",
@@ -175,7 +175,7 @@
     "pretty-bytes": "^6.1.1",
     "pretty-ms": "^8.0.0",
     "requirejs": "^2.3.6",
-    "rollup": "^3.29.2",
+    "rollup": "^3.29.3",
     "rollup-plugin-license": "^3.1.0",
     "rollup-plugin-string": "^3.0.0",
     "rollup-plugin-thatworks": "^1.0.4",
@@ -185,11 +185,11 @@
     "source-map": "^0.7.4",
     "source-map-support": "^0.5.21",
     "systemjs": "^6.14.2",
-    "terser": "^5.19.4",
+    "terser": "^5.20.0",
     "tslib": "^2.6.2",
     "typescript": "^5.2.2",
     "vite": "^4.4.9",
-    "vitepress": "^1.0.0-rc.14",
+    "vitepress": "^1.0.0-rc.20",
     "vue": "^3.3.4",
     "wasm-pack": "^0.12.1",
     "weak-napi": "^2.0.2",