Skip to content

chore(deps-dev): bump rollup from 4.55.1 to 4.59.0#235

Closed
dependabot[bot] wants to merge 1812 commits intotestfrom
dependabot/npm_and_yarn/rollup-4.59.0
Closed

chore(deps-dev): bump rollup from 4.55.1 to 4.59.0#235
dependabot[bot] wants to merge 1812 commits intotestfrom
dependabot/npm_and_yarn/rollup-4.59.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps rollup from 4.55.1 to 4.59.0.

Release notes

Sourced from rollup's releases.

v4.59.0

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

v4.58.0

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

v4.57.1

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

m1rl0k added 30 commits January 19, 2026 10:56
Updated usage of asyncio.get_event_loop() to asyncio.get_running_loop() in async_subprocess_manager.py, refrag_glm.py, and refrag_openai.py to avoid deprecation warnings and ensure compatibility with newer Python versions. Improved destructor logic in AsyncSubprocessManager to handle absence of a running event loop. Enhanced QdrantConnectionPool to close temporary clients in close_all().
Replaced silent exception handling with logging in multiple scripts to improve error visibility and debugging. Now, failures in Qdrant operations, embedding, upserts, and workspace state updates will emit warnings or debug logs with error details.
Replaces bare 'except Exception: pass' blocks with logging statements that record suppressed exceptions using logger.debug. This improves debuggability and traceability of silent failures throughout the codebase, while maintaining previous error-handling behavior.
Introduces a get_results helper in conftest.py to normalize extraction of results from API responses, handling both plain and TOON-encoded formats. Updates all relevant tests to use this helper for improved consistency and robustness in result handling.
Simplifies the TOON encoder by removing legacy helper functions and wrappers, consolidating encoding logic, and ensuring round-trip compatibility with the official python-toon library. Updates search/context result encoding to use direct TOON encoding for easier decoding. Enhances Neo4jGraphBackend auto-backfill logic with rate limiting and improved handling when Qdrant is empty, preventing premature marking of collections as checked. Updates tests for round-trip verification and removes reliance on internal encoding helpers.
Pseudo-tag and graph edge generation is now deferred to a post-indexing backfill step for faster initial indexing. Added a backfill routine to scripts/ingest/cli.py, updated reset.py to set the defer flag, and modified CLI logic to run backfill after indexing if deferred. Tests for dynamic field inclusion were updated to decode and assert on structured output rather than string matching.
Introduces an autouse pytest fixture that removes specific modules from sys.modules after each test. This prevents stale module references from affecting subsequent tests, especially those that monkeypatch sys.modules.
Introduces a timeout parameter to Neo4jKnowledgeGraph query methods and uses explicit transactions for better control. Improves backend driver cleanup by handling async driver pool shutdown at process exit. Also fixes edge deletion queries to correctly count deleted relationships.
Adds threading locks to caches in ranking and upload client scripts for safe concurrent access. Updates error logging to include exception info in several modules. Refactors Neo4j transaction usage for impact analysis and fixes Jaccard similarity calculation. Enhances test coverage for rerank subprocess path.
Improves error handling and logging throughout scripts by adding detailed debug logs for exception cases, especially in workspace_state.py and indexing_admin.py. Enforces stricter argument validation in scripts/ingest/qdrant.py by raising ValueError for missing required arguments instead of printing warnings, ensuring that invalid usage is caught early. Updates scripts/ctx.py to use shlex.split and shell=False for subprocess calls to improve security. These changes enhance maintainability, debuggability, and security of the codebase.
Enhanced exception handling by logging error details in various functions. This improves debuggability by providing more context when exceptions occur, especially during file operations, path resolution, and environment variable parsing.
Enhanced exception handling throughout workspace_state.py by adding logger.debug statements to provide more context when errors occur. This improves traceability and aids in debugging by capturing exception details in log output.
Logs a debug message when OrderedDict import fails and dict is used as a fallback, aiding in diagnosing import issues during testing.
Enhanced exception handling throughout hybrid_search.py by adding debug-level log messages that capture exception details. This improves traceability and aids in debugging by providing more context when errors occur, while maintaining existing fallback behaviors.
Enhanced exception handling throughout multiple MCP implementation scripts and Neo4j plugins by adding logger.debug calls with contextual messages for suppressed exceptions. This improves traceability and debugging without altering core logic or error handling flows. Also, minor adjustments were made to ensure symbol 'id' properties are consistently set in Neo4j graph operations.
Enhanced exception logging throughout admin_tools.py, context_answer.py, and memory.py to provide more context and include suppressed exception details. Added a new utility function _extract_kwargs_payload in utils.py for extracting kwargs from various input formats. Also removed redundant exception handling in _validate_answer_output.
Enhanced debug logging in context_answer.py and search_history.py to provide more detailed information when exceptions are suppressed, aiding in troubleshooting and maintenance.
In context_search.py, force output_format="json" for internal repo_search to ensure consistent result parsing. In neo4j_graph.py, enhance all symbol-matching queries to also support suffix matching for symbols stored with full module paths, improving accuracy for class and method lookups.
Improve symbol matching in graph queries and enforce JSON output
Implemented storage and cache size limits, periodic cleanup, and expiry for tokens, codes, and clients in the MCP bridge OAuth handler. Added request body size limit and graceful shutdown to the HTTP MCP server. Improved resource cleanup and cache pruning in the VSCode extension, including limiting skipped auth combos, clearing timers on deactivate, and disposing terminals properly.
Add resource limits and cleanup to bridge and extension
Add NODE_AUTH_TOKEN environment variable for npm publish
Cleaned up the publish-cli GitHub Actions workflow by removing a redundant NODE_AUTH_TOKEN environment variable declaration.
Deleted the _cleanup_answer and _answer_style_guidance functions from context_answer.py, consolidating answer cleanup and style guidance logic elsewhere or removing unused code.
omonien and others added 22 commits February 18, 2026 01:54
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add glowing Login/Sign Up link in desktop header (top-right)
- Add highlighted Login/Sign Up link in mobile menu
- Links to https://dev.context-engine.ai/login
- Pulsing glow animation for high visibility
- Light theme support
Use darker green (#00896b) in light theme for proper contrast
instead of neon #00ffcc which is hard to read on light backgrounds.
Avoids silently routing to dev environment if VITE_CTX_LOGIN_URL
is not set in staging/prod deploys.
Use ${base}/login so the fallback works correctly on GitHub Pages
and other deployments with a non-empty base path.
feat: add prominent Login/Sign Up button to navigation bar
feat: Add Delphi/Pascal support (PascalMapping, DfmMapping & full test suite)
Add documentation and examples for batch_search, batch_symbol_graph, and batch_graph_query (max 10 queries per batch, ~75% token savings) and expand symbol_graph to include subclasses/base_classes. Clarify graph_query availability (Memgraph-backed, available to SaaS users) and its query types (impact, transitive callers/callees, cycles, dependencies, etc.) and add include_paths/depth options and examples. Update index management to state SaaS indexing is automatic (qdrant_index*, qdrant_prune not available in SaaS), add qdrant_list and embedding_pipeline_stats, and mark qdrant_index/root/prune as self-hosted only. Update best-practice guidance and MCP tool-selection to recommend search as the default, document batch usage and parallel call patterns, and adjust various examples and reference tables accordingly.
- Replace favicon.svg with new brand favicon.png (32x32)
- Add apple-touch-icon.png (180x180) for iOS
- Add logo SVG/PNG variants (color + white) to static/
- Update hero section with large brand logo and NVIDIA badge
- Header uses favicon icon + text for compact nav branding
- NVIDIA Inception badge centered under logo, links to nvidia.com
- Full responsive support (desktop/tablet/mobile/small phone)
- Theme-aware: white logo on dark, color logo on light
feat: new logo, favicon, and NVIDIA Inception badge
…ero form

- Remove 'Get Early Access' demo section at bottom of page
- Remove 'Request Demo' buttons from desktop header and mobile menu
- Remove all related form state, handlers, and CSS for demo section
- Re-add hero email form with 'Join Open Beta' button text
- Add spacing between form and action buttons
- Clean up unused CSS (.demo-section, .demo-form)
…d-open-beta

feat: remove Request Demo/Early Access sections, add Join Open Beta h…
Bumps [rollup](https://github.com/rollup/rollup) from 4.55.1 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.1...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 1, 2026
@m1rl0k m1rl0k closed this Mar 1, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 1, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/rollup-4.59.0 branch March 1, 2026 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants