Merge branch 'master' of https://github.com/rollup/rollup into sync-c…

…e8f83c7

.github/workflows/build-and-tests.yml

@@ -48,7 +48,7 @@ jobs:
       - name: Lint
         run: npm run ci:lint
       - name: Vulnerabilities
-        run: npm audit
+        run: npm run check-audit
       - name: Optional Dependencies
         run: npm run test:package
       - name: Generated Code

audit-resolve.json

@@ -0,0 +1,10 @@
+{
+  "decisions": {
+    "1098122|requirejs": {
+      "decision": "ignore",
+      "madeAt": 1720680883374
+    }
+  },
+  "rules": {},
+  "version": 1
+}

package.json

@@ -74,6 +74,8 @@
     "prepublish:napi": "napi prepublish --skip-gh-release",
     "release": "node scripts/prepare-release.js",
     "release:docs": "git fetch --update-head-ok origin master:master && git branch --force documentation-published master && git push origin documentation-published",
+    "check-audit": "check-audit",
+    "resolve-audit": "resolve-audit",
     "test": "npm run build && npm run test:all",
     "test:update-snapshots": "node scripts/update-snapshots.js",
     "test:cjs": "npm run build:cjs && npm run test:only",
@@ -173,6 +175,7 @@
     "magic-string": "^0.30.10",
     "mocha": "^10.5.2",
     "nodemon": "^3.1.4",
+    "npm-audit-resolver": "^3.0.0-RC.0",
     "nyc": "^17.0.0",
     "pinia": "^2.1.7",
     "prettier": "^3.3.2",

scripts/prepare-release.js

@@ -199,7 +199,7 @@ function getDummyLogSection(headline, pr) {
 async function installDependenciesAndLint() {
 	await Promise.all([
 		runWithEcho('npm', ['ci', '--ignore-scripts']),
-		runWithEcho('npm', ['audit'])
+		runWithEcho('npm', ['run', 'check-audit'])
 	]);
 	await runWithEcho('npm', ['run', 'ci:lint']);
 }