chore(deps): update dependency rollup to v4.63.5 (beta)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
rollup (source)	devDependencies	patch	4.63.1 → 4.63.5	4.64.0 (+1)

---

Release Notes

rollup/rollup (rollup)

v4.63.5

Compare Source

2026-09-24

Bug Fixes

• Fix an issue where watch mode would hang instead of terminating when closing via Ctrl+C (#​6521)
• Avoid starting overlapping watch mode runs when plugins invalidate files at the wrong time (#​6526)
• Fix many edge cases where watch mode events were not properly emitted to listeners, especially when errors occur (#​6526)

Pull Requests

• #​6520: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6521: Terminate watch mode via natural process exit when possible (@​lukastaegert)
• #​6523: Protect cc pin against renovate lock file maintenance (@​lukastaegert)
• #​6525: docs: fix typos 'interations' and 'coresponding' (@​haimingZZ)
• #​6526: fix(watch): prevent overlapping runs and other run lifecycle bugs (@​lukastaegert)

v4.63.4

Compare Source

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#​6442)
• Do not create invalid code if import attribute values contain special characters (#​6502)

Pull Requests

• #​6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #​6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #​6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #​6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #​6517: Improve agent instructions (@​lukastaegert)
• #​6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6519: Request Copilot code review via workflow (@​lukastaegert)

v4.63.3

Compare Source

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#​6473)
• Always report and recover from failures on invalidation in watch mode (#​6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#​6514)

Pull Requests

• #​6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #​6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #​6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #​6515: chore(deps): lock file maintenance (@​renovate[bot])

v4.63.2

Compare Source

2026-09-12

Bug Fixes

• Fix a bug when filtering logs for nested properties via the CLI (#​6511)

Pull Requests

• #​6498: chore(deps): lock file maintenance (@​renovate[bot])
• #​6503: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6504: chore(deps): update dependency eslint-plugin-unicorn to v74 (@​renovate[bot])
• #​6505: pin mocha to v11 (@​renovate[bot], @​lukastaegert)
• #​6508: docs: fix AGENTS.md 'Generated files' rule to reference real paths (@​Larslllllll, @​lukastaegert)
• #​6510: chore(deps): lock file maintenance (@​renovate[bot])
• #​6511: Fix nested log filters for primitive values (@​jakezwang, @​lukastaegert)
• #​6512: chore(deps): update dtolnay/rust-toolchain digest to 6bed076 (@​renovate[bot], @​lukastaegert)
• #​6513: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	rollup@​4.63.1 ⏵ 4.63.5	+1

View full report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (beta@04162f9). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff            @@
##             beta     #1582   +/-   ##
========================================
  Coverage        ?   100.00%           
========================================
  Files           ?       108           
  Lines           ?       365           
  Branches        ?         0           
========================================
  Hits            ?       365           
  Misses          ?         0           
  Partials        ?         0           

Flag	Coverage Δ
unit	100.00% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.