[dependabot]

Bumps the dependencies-dev group with 3 updates: globals, rimraf and rollup.

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

• Update globals (2026-11-01) (#355) 7abfb5d

---

sindresorhus/globals@v17.13.0...v17.14.0

Commits

• 3080111 17.14.0
• c61cc23 Tweaks
• 7abfb5d Update globals (2026-11-01) (#355)
• See full diff in compare view

Updates rimraf from 6.1.3 to 6.1.4

Commits

• cbbc000 6.1.4
• 3c35eb4 glob 14
• 5fd6d20 make taprc yaml
• 051e6c7 bump tap for better module.register/registerHooks behavior
• dec62fd update tap
• 9fd58c1 project updates
• a51c7b0 remove rimraf test start/end char stuff
• f433d9f ci: update test workflow
• 78d68ef update deps
• 7263194 test: make opt-arg output a less ridiculous amount of logging
• Additional commits viewable in compare view

Updates rollup from 4.67.2 to 4.68.0

Release notes

Sourced from rollup's releases.

v4.68.0

4.68.0

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
• Support tree-shaking of namespace members through default exports (#6631)
• Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

• #6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

v4.67.5

4.67.5

2026-11-04

Bug Fixes

• Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
• Change chunk hash when debug IDs are enabled/disabled (#6625)
• Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

• #6623: Honor output.sourcemapFile when output.file is not set (@​simpleqt)
• #6625: Include debug ID comments in chunk hashes (@​clean99, @​lukastaegert)
• #6627: Do not publish the build-only @​napi-rs/lzma-linux-x64-gnu optional dependency (@​christophehurpeau, @​lukastaegert)

v4.67.4

4.67.4

2026-11-01

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.68.0

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
• Support tree-shaking of namespace members through default exports (#6631)
• Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

• #6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

4.67.5

2026-11-04

Bug Fixes

• Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
• Change chunk hash when debug IDs are enabled/disabled (#6625)
• Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

• #6623: Honor output.sourcemapFile when output.file is not set (@​simpleqt)
• #6625: Include debug ID comments in chunk hashes (@​clean99, @​lukastaegert)
• #6627: Do not publish the build-only @​napi-rs/lzma-linux-x64-gnu optional dependency (@​christophehurpeau, @​lukastaegert)

4.67.4

2026-11-01

Bug Fixes

• Make rollup work again on older Xeon processors (#6622)

... (truncated)

Commits

• b93d9a4 4.68.0
• bcbb005 Update swc monorepo (major) (#6634)
• 257006e Do not decode cached sourcemaps again when reusing cached modules (#6636)
• 6c3ecbc Bound apt installs and fail over from slow mirrors
• 82bef03 Tree-shake namespace members accessed through a default export (#6631)
• 2b375e4 Preserve import and export names starting with "*" (#6628)
• 85da28c Name dynamic chunks of index files after their directory (#6630)
• 6f957bd Update minor/patch updates (#6633)
• c006bd3 Record live dynamic import edges for chunk assignment (#6632)
• c707f9f Lock file maintenance (#6635)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coveralls]

coverage: 100.0%. remained the same — dependabot/npm_and_yarn/dependencies-dev-37409864b8 into master