[Snyk-dev] Security upgrade rollup-plugin-typescript2 from 0.20.1 to 0.33.0

[anthogez]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • lts/deps/v8/tools/turbolizer/package.json
  • lts/deps/v8/tools/turbolizer/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Validation Bypass SNYK-JS-KINDOF-537849	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: rollup-plugin-typescript2

The new version differs by 229 commits.

• bba2f19 - build for 0.33.0
• 3fc8caf test(cache): ignore coverage for corrupted cache check (#401)
• 697e839 clean: remove redundant `generateRound === 0` check (#400)
• 4e5ab74 test: 100% coverage for `tslib.ts` (error case) (#399)
• 576558e refactor(test): use more specific checks in `check-tsconfig` spec (#398)
• d286015 test: add `parse-tsconfig` spec (#397)
• c1f3a35 refactor: combine two context files into one (#396)
• fd6f195 test: add initial watch mode test suite (#386)
• bc01134 revert: back to using `vue.d.ts` instead of `.d.ts` for Vue declarations (#410)
• c37dbf6 refactor(diagnostics): simplify some conditionals (#402)
• bbed47e refactor(cache): further condense `walkTree` (#393)
• ad29112 refactor: split out an `addDeclaration` func (#392)
• ed0fbd9 refactor: move `snapshot` check into `typecheckFile` (#391)
• 3dda648 refactor: move `generateRound = 0` to `buildEnd` (#390)
• 70c6e25 optim(cache): don't check imports for syntactic diagnostics (#389)
• e75d97a optim(watch): don't reset DocumentRegistry b/t watch cycles (#388)
• 4d20f5c dx: be more explicit with `emitSkipped` error (#395)
• d17864d dx(cache): improve `clean` edge-case errors with quotes (#394)
• e5e3ccd docs: clarify `clean: true` and default `include` (#387)
• c2b3db2 fix: don't duplicate type-only check on Windows (#385)
• eab48a3 fix: type-check `include`d files missed by `transform` (type-only files) (#345)
• af271af feat: capture watch mode when called via the Rollup API (#384)
• 0628482 feat: add rpt2 prefix to remaining errors (#382)
• 76109fc fix: missing tsconfig error shouldn't say `undefined` (#383)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Validation Bypass
🦉 Regular Expression Denial of Service (ReDoS)