[Snyk] Upgrade rollup-plugin-typescript2 from 0.20.1 to 0.32.1

[NOUIY]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade rollup-plugin-typescript2 from 0.20.1 to 0.32.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 25 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-06-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	375/1000 Why? CVSS 7.5	No Known Exploit
	Validation Bypass SNYK-JS-KINDOF-537849	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: rollup-plugin-typescript2

• 0.32.1 - 2022-06-06
  

  Bugfixes

  • deps: upgrade @ rollup/plugin-commonjs to v22 to fix try/catch requires by @ agilgur5 in #340
    • This fixes a regression in 0.32.0 that caused users with certain environments to experience ReferenceError: window is not defined when importing rpt2. See #339

  Full Changelog: 0.32.0...0.32.1

• 0.32.0 - 2022-06-01
  

  Features

  • add rpt2: prefix on more errors by @ ezolenko in ff88951

  Bugfixes

  • fix: normalize paths in get-options-overrides by @ agilgur5 in #331
  • fix: add realpath to host to properly resolve monorepos / symlinks by @ agilgur5 in #332
  • fix: use .d.ts instead of .vue.d.ts for Vue declarations by @ agilgur5 in #336
  • fix: don't attempt to change declarationMap sources when no output by @ agilgur5 in #334
  • fix: force noEmitOnError: false by @ agilgur5 in #338

  Dependencies

  • updating dependencies by @ ezolenko in f84afe9, 0df5362, 5a3e58b, and 08d2f5b
    • EDIT: 08d2f5b caused a regression in certain environments per #339. If you're experiencing ReferenceError: window is not defined, please upgrade to 0.32.1, which should fix this issue.
  • deps: remove unneeded @ types/colors package by @ agilgur5 in #319
  • deps: use normalizePath from @ rollup/pluginutils by @ agilgur5 in #320
  • deps: upgrade tslib to ^2.4.0, remove @ yarn-tool/resolve-package by @ agilgur5 in #326

  Docs

  • fix(docs): _.merge doesn't concat arrays by @ agilgur5 in #314

  • docs: clarify the TS option's defaults by @ agilgur5 in #316

  • docs: split off a CONTRIBUTING.md and improve formatting, grammar, links by @ agilgur5 in #313

  • More Docs ...

    • cleaning up badges by @ ezolenko in 4e9f8ff
    • docs: add link to NPM in monthly downloads badge by @ agilgur5 in #318
    • docs: standardize how issues are referenced by @ agilgur5 in #317
    • docs: update Compatibility section with new names and links by @ agilgur5 in #315

  GitHub

  • fix(github): improve formatting of issue template spoilers by @ agilgur5 in #311

  Internal

  • test: add initial unit test suite by @ agilgur5 in #321

  • test: 100% coverage in get-options-overrides (createFilter) by @ agilgur5 in #329

  • More Internal ...

    • clean: remove partial.ts as this is built into TS by @ agilgur5 in #322
    • optim(ci): use npm ci for install and cache npm by @ agilgur5 in #323
    • ci: add a lint check to ensure all PRs pass lint too by @ agilgur5 in #327
    • refactor: prefer native methods to lodash where possible by @ agilgur5 in #328
    • refactor: invert some conditionals for better readability by @ agilgur5 in #335
    • refactor: sort all top-level imports by @ agilgur5 in #337

  Full Changelog: 0.31.2...0.32.0

• 0.31.2 - 2022-02-01
  

  What's Changed

  • chore: should not lock deps version by @ bluelovers in #293
  • Add trace method to the LanguageServiceHost to enable usage with traceResolution by @ Andarist in #296

  Full Changelog: 0.31.1...0.31.2

• 0.31.1 - 2021-11-23
  

  Fix for #291

  Full Changelog: 0.31.0...0.31.1

• 0.31.0 - 2021-11-17
  Read more
• 0.30.0 - 2021-02-18
  Read more
• 0.29.0 - 2020-10-30
  Read more
• 0.28.0 - 2020-10-16
  Read more
• 0.27.3 - 2020-09-25
  Read more
• 0.27.2 - 2020-08-07
  Read more
• 0.27.1 - 2020-05-12
• 0.27.0 - 2020-03-27
• 0.26.0 - 2020-02-12
• 0.25.3 - 2019-12-03
• 0.25.2 - 2019-11-05
• 0.24.3 - 2019-09-26
• 0.24.2 - 2019-09-12
• 0.24.1 - 2019-09-09
• 0.24.0 - 2019-08-28
• 0.23.0 - 2019-08-23
• 0.22.1 - 2019-07-26
• 0.22.0 - 2019-07-11
• 0.21.2 - 2019-06-17
• 0.21.1 - 2019-05-17
• 0.21.0 - 2019-04-23
• 0.20.1 - 2019-03-13

from rollup-plugin-typescript2 GitHub release notes

Commit messages

Package name: rollup-plugin-typescript2

• d7cab2d deps: upgrade @ rollup/plugin-commonjs to v22 to fix try/catch requires ([Snyk] Upgrade: @babel/types, @babel/generator, @babel/parser, @babel/template, @babel/traverse #340)
• 4411604 - package version
• 4d5deba - build
• b44b069 fix: force `noEmitOnError: false` ([Snyk] Upgrade: @babel/types, @babel/generator, @babel/parser, @babel/template, @babel/traverse #338)
• b08f272 refactor: sort all top-level imports ([Snyk] Fix for 1 vulnerabilities #337)
• ccd6815 fix: don't attempt to change declarationMap sources when no output ([Snyk] Fix for 1 vulnerabilities #334)
• 4310873 - fix for wrong this
• 01272d3 refactor: invert some conditionals for better readability ([Snyk] Fix for 1 vulnerabilities #335)
• e145d0b fix: use `.d.ts` instead of `.vue.d.ts` for Vue declarations ([Snyk] Fix for 1 vulnerabilities #336)
• 8e58037 fix: add `realpath` to host to properly resolve monorepos ([Snyk] Upgrade: @babel/types, @babel/generator, @babel/parser, @babel/template, @babel/traverse #332)
• d318e9a fix: normalize paths in get-options-overrides ([Snyk] Fix for 1 vulnerabilities #331)
• e8240ae test: 100% coverage in `get-options-overrides` (`createFilter`) ([Snyk] Upgrade: @babel/types, @babel/generator, @babel/parser, @babel/template, @babel/traverse #329)
• 197061b refactor: prefer native methods to lodash where possible ([Snyk] Fix for 1 vulnerabilities #328)
• 529c853 - fix for linter
• bbb4f4f ci: add a lint check to ensure all PRs pass lint too ([Snyk] Fix for 1 vulnerabilities #327)
• 60f3489 deps: upgrade tslib to 2.4.0, remove @ yarn-tool/resolve-package ([Snyk] Fix for 1 vulnerabilities #326)
• 327574e optim(ci): use `npm ci` for install and cache `npm` ([Snyk] Fix for 1 vulnerabilities #323)
• 7af216b clean: remove partial.ts as this is built into TS ([Snyk] Upgrade rollup-plugin-typescript2 from 0.20.1 to 0.34.1 #322)
• 56716de test: add initial unit test suite ([Snyk] Fix for 1 vulnerabilities #321)
• e28d2f0 docs: split off a CONTRIBUTING.md and improve formatting, grammar, links ([Snyk] Fix for 1 vulnerabilities #313)
• 895431d deps: use normalizePath from @ rollup/pluginutils ([Snyk] Fix for 1 vulnerabilities #320)
• 462442d docs: clarify the TS option's defaults ([Snyk] Upgrade clang-format from 1.2.3 to 1.8.0 #316)
• 971c816 docs: update Compatibility section with new names and links ([Snyk] Upgrade: @babel/types, @babel/generator, @babel/parser, @babel/template, @babel/traverse #315)
• e5b276b deps: remove unneeded @ types/colors package ([Snyk] Fix for 1 vulnerabilities #319)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Vulnerable Libraries (1)

Severity	Details
High	[email protected] (t) upgrade to: >6.0.2

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.