Skip to content

build(deps): bump @rollup/rollup-linux-x64-gnu from 4.60.3 to 4.60.4#201

Merged
erode-release[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.60.4
May 27, 2026
Merged

build(deps): bump @rollup/rollup-linux-x64-gnu from 4.60.3 to 4.60.4#201
erode-release[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.60.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Bumps @rollup/rollup-linux-x64-gnu from 4.60.3 to 4.60.4.

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 27, 2026 19:50
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
@erode-release erode-release Bot enabled auto-merge (squash) May 27, 2026 19:50
@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented May 27, 2026

Greptile Summary

Bumps @rollup/rollup-linux-x64-gnu from 4.60.3 to 4.60.4 in the packages/architecture workspace. The 4.60.4 release fixes chunk-hash stability across parallel file reads.

  • packages/architecture/package.json: range updated from ^4.60.3 to ^4.60.4 under optionalDependencies.
  • package-lock.json: resolved version updated to 4.60.4 with the new integrity hash; the lock file also gains a spurious dependencies block for this package (alongside the existing optionalDependencies entry), which is not present in package.json and suggests the lock file was not regenerated from a clean state.

Confidence Score: 4/5

The version bump itself is straightforward, but the lock file was not regenerated cleanly — it contains a stray dependencies block for this package that does not match package.json.

The package.json change is correct. However, the lock file now lists @rollup/rollup-linux-x64-gnu under both dependencies (exact 4.60.4) and optionalDependencies (^4.60.4) for the packages/architecture workspace, while package.json only declares it under optionalDependencies. This means the lock file cannot be faithfully reproduced by a clean npm install, indicating it was generated in a non-clean environment.

package-lock.json — the spurious dependencies block introduced for the bumped package should be resolved by regenerating the lock file from a clean state.

Important Files Changed

Filename Overview
packages/architecture/package.json Version bump of @rollup/rollup-linux-x64-gnu from ^4.60.3 to ^4.60.4 in optionalDependencies
package-lock.json Lock file updated to resolve 4.60.4; also introduces a spurious dependencies block for @rollup/rollup-linux-x64-gnu alongside the canonical optionalDependencies entry, which is inconsistent with package.json

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["packages/architecture/package.json\noptionalDependencies:\n@rollup/rollup-linux-x64-gnu ^4.60.4"] --> B["package-lock.json\nworkspace: packages/architecture"]
    B --> C["optionalDependencies\n@rollup/rollup-linux-x64-gnu ^4.60.4 ✅"]
    B --> D["dependencies (spurious)\n@rollup/rollup-linux-x64-gnu 4.60.4 ⚠️"]
    B --> E["node_modules/@rollup/rollup-linux-x64-gnu\nversion: 4.60.4\nresolved: registry.npmjs.org"]
Loading

Reviews (2): Last reviewed commit: "build(deps): bump @rollup/rollup-linux-x..." | Re-trigger Greptile

Comment thread package-lock.json
Bumps [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) from 4.60.3 to 4.60.4.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

---
updated-dependencies:
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.60.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.60.4 branch from e8cf1da to f403ddf Compare May 27, 2026 19:53
@erode-release erode-release Bot merged commit 7df40f4 into main May 27, 2026
3 checks passed
@erode-release erode-release Bot deleted the dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.60.4 branch May 27, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants