Bump rollup from 4.63.2 to 4.63.4

[dependabot]

Bumps rollup from 4.63.2 to 4.63.4.

Release notes

Sourced from rollup's releases.

v4.63.4

4.63.4

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#6442)
• Do not create invalid code if import attribute values contain special characters (#6502)

Pull Requests

• #6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #6517: Improve agent instructions (@​lukastaegert)
• #6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #6519: Request Copilot code review via workflow (@​lukastaegert)

v4.63.3

4.63.3

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#6473)
• Always report and recover from failures on invalidation in watch mode (#6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#6514)

Pull Requests

• #6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #6515: chore(deps): lock file maintenance (@​renovate[bot])

Changelog

Sourced from rollup's changelog.

4.63.4

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#6442)
• Do not create invalid code if import attribute values contain special characters (#6502)

Pull Requests

• #6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #6517: Improve agent instructions (@​lukastaegert)
• #6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #6519: Request Copilot code review via workflow (@​lukastaegert)

4.63.3

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#6473)
• Always report and recover from failures on invalidation in watch mode (#6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#6514)

Pull Requests

• #6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #6515: chore(deps): lock file maintenance (@​renovate[bot])

Commits

• ba78d57 4.63.4
• 67c3379 Escape quotes and backslashes in import attribute values (#6502)
• 35f6053 fix: expose cached module meta during cache checks (#6442)
• b7ae5e2 Request Copilot code review via workflow (#6519)
• 504824c fix(deps): update minor/patch updates (#6518)
• 05980cf Improve agent instructions (#6517)
• 942a0a8 ci: collect Rust coverage from JS tests in dedicated job (#6429)
• e8c8dd6 docs: name the parameter runHook actually takes (#6496)
• 250deca 4.63.3
• 01ab3f8 fix(watch): await the rerun so listener failures surface as ERROR events (#6506)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)