Upgrading rollup 3 to 4

The RollupWarning type has been removed in favor of the RollupLog type.

Acorn plugins are no longer supported and the acornInjectPlugins option has been removed.

The acorn option has been removed.

inlineDynamicImports, manualChunks and preserveModules have been removed on input option level; use the corresponding output options.

Removes the output options output.experimentalDeepDynamicChunkOptimization, output.dynamicImportFunction, output.namespaceToStringTag and output.preferConst.

For this.resolve, the default of the skipSelf option is now true.

If a module id import is handled by a plugin's load hook, rollup.watch no longer watches the actual file; plugins must call this.addWatchFile for dependencies.

Normalized input options from buildStart and other hooks no longer contain an onwarn handler; plugins should use onLog instead.

Removes this.moduleIds from the plugin context; use this.getModuleIds() instead.

Removes the hasModuleSideEffects flag from ModuleInfo; use moduleSideEffects on ModuleInfo instead.

The browser build now relies on a WASM artifact that needs to be provided as well.

The NodeJS build now relies on an optional native binary; unsupported platforms can use the @rollup/wasm-node package with the same interface.

The "with" syntax for import attributes is not yet supported, awaiting support in SWC.

The INVALID_IMPORT_ASSERTION error code has been replaced with INVALID_IMPORT_ATTRIBUTE.

File hashes now use url-safe base64 encoded hashes.

The maximum hash length has been reduced to 22 characters.

this.parse now only supports the allowReturnOutsideFunction option for now.

Import assertions now use the new import attribute AST structure.

"assertions" have been replaced with "attributes" in various places of the plugin interface.

Eliminates AWS credential exposure on fork PRs in the REPL artefact workflow.

Resolves vulnerabilities.

Rollup 4 has Arbitrary File Write via Path Traversal

Updates the vite dependency to v7.1.11 for a security fix.

Updates eslint-plugin-unicorn to resolve a vulnerability.

Fixes a DOM Clobbering CVE in generated bundles.

DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

Updates the vite dependency to v5.0.12 for a security fix.

The minimal required Node version is now 18.0.0.

Deprecates returning import attributes from load or transform hooks, which will not be supported in rollup 5.

output.externalImportAssertions is deprecated in favor of output.externalImportAttributes.