Bump deps (#4778)

* Bump minor and patch versions

* Fix generated license file

* Bump fs-extra (major)

* Bump fixturify (major)

* Bump eslint-plugin-unicorn (major)

* Bump rollup-plugin-license (major)

* Bump @rollup/plugin-json (major)

* Bump @rollup/plugin-typescript (major)

* Bump @rollup/plugin-commonjs (major)

* Bump core-js, es6-shim, transitive dependencies, fix tests

* Apply new unicorn linting rules

* Bump eslint

* Fix vulnerabilities

Co-authored-by: Lukas Taegert-Atkinson <lukas.taegert-atkinson@tngtech.com>

.eslintrc.js

@@ -9,8 +9,9 @@ module.exports = {
 		'plugin:@typescript-eslint/recommended',
 		'prettier',
 		'plugin:prettier/recommended',
-		'plugin:import/recommended',
-		'plugin:import/typescript',
+		// Disabled until security issues of eslint-plugin-import have been resolved
+		// 'plugin:import/recommended',
+		// 'plugin:import/typescript',
 		'plugin:unicorn/recommended'
 	],
 	ignorePatterns: [
@@ -80,14 +81,15 @@ module.exports = {
 		],
 		'arrow-body-style': ['error', 'as-needed'],
 		'dot-notation': 'error',
-		'import/no-unresolved': [
-			'error',
-			{
-				// 'fsevents' is ony available on macOS, and not installed on linux/windows
-				ignore: ['fsevents', 'help.md', 'is-reference', 'package.json', 'types']
-			}
-		],
-		'import/order': ['error', { alphabetize: { order: 'asc' } }],
+		// Disabled until security issues of eslint-plugin-import have been resolved
+		// 'import/no-unresolved': [
+		// 	'error',
+		// 	{
+		// 		// 'fsevents' is ony available on macOS, and not installed on linux/windows
+		// 		ignore: ['fsevents', 'help.md', 'is-reference', 'package.json', 'types']
+		// 	}
+		// ],
+		// 'import/order': ['error', { alphabetize: { order: 'asc' } }],
 		'no-constant-condition': ['error', { checkLoops: false }],
 		'no-prototype-builtins': 'off',
 		'object-shorthand': 'error',

LICENSE.md

@@ -16,6 +16,35 @@ The published Rollup artifact additionally contains code with the following lice
 MIT, ISC
 
 # Bundled dependencies:
+## @jridgewell/sourcemap-codec
+License: MIT
+By: Rich Harris
+Repository: git+https://github.com/jridgewell/sourcemap-codec.git
+
+> The MIT License
+> 
+> Copyright (c) 2015 Rich Harris
+> 
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+> 
+> The above copyright notice and this permission notice shall be included in
+> all copies or substantial portions of the Software.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> THE SOFTWARE.
+
+---------------------------------------
+
 ## @rollup/pluginutils
 License: MIT
 By: Rich Harris

browser/LICENSE.md

@@ -16,6 +16,35 @@ The published Rollup artifact additionally contains code with the following lice
 MIT, ISC
 
 # Bundled dependencies:
+## @jridgewell/sourcemap-codec
+License: MIT
+By: Rich Harris
+Repository: git+https://github.com/jridgewell/sourcemap-codec.git
+
+> The MIT License
+> 
+> Copyright (c) 2015 Rich Harris
+> 
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+> 
+> The above copyright notice and this permission notice shall be included in
+> all copies or substantial portions of the Software.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> THE SOFTWARE.
+
+---------------------------------------
+
 ## @rollup/pluginutils
 License: MIT
 By: Rich Harris

browser/src/performance.ts

@@ -1,5 +1,5 @@
 const global =
-	typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : {};
+	typeof globalThis === 'undefined' ? (typeof window === 'undefined' ? {} : window) : globalThis;
 
 export default 'performance' in global
 	? performance

cli/run/timings.ts

@@ -5,7 +5,7 @@ import { bold, underline } from '../../src/utils/colors';
 export function printTimings(timings: SerializedTimings): void {
 	for (const [label, [time, memory, total]] of Object.entries(timings)) {
 		const appliedColor =
-			label[0] === '#' ? (label[1] !== '#' ? underline : bold) : (text: string) => text;
+			label[0] === '#' ? (label[1] === '#' ? bold : underline) : (text: string) => text;
 		const row = `${label}: ${time.toFixed(0)}ms, ${prettyBytes(memory)} / ${prettyBytes(total)}`;
 		console.info(appliedColor(row));
 	}

docs/999-big-list-of-options.md

@@ -268,7 +268,7 @@ The following will add minification to one of the outputs:
 
 ```js
 // rollup.config.js
-import { terser } from 'rollup-plugin-terser';
+import terser from '@rollup/plugin-terser';
 
 export default {
   input: 'main.js',
@@ -301,7 +301,11 @@ const isProduction = process.env.NODE_ENV === 'production';
 
 export default (async () => ({
   input: 'main.js',
-  plugins: [resolve(), commonjs(), isProduction && (await import('rollup-plugin-terser')).terser()],
+  plugins: [
+    resolve(),
+    commonjs(),
+    isProduction && (await import('@rollup/plugin-terser')).default()
+  ],
   output: {
     file: 'bundle.js',
     format: 'cjs'