[dependabot]

Bumps rollup from 4.67.5 to 4.68.0.

Release notes

Sourced from rollup's releases.

v4.68.0

4.68.0

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
• Support tree-shaking of namespace members through default exports (#6631)
• Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

• #6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

Changelog

Sourced from rollup's changelog.

4.68.0

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
• Support tree-shaking of namespace members through default exports (#6631)
• Use cached sourcemaps if available when reading cached files (#6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#6632)

Pull Requests

• #6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

Commits

• b93d9a4 4.68.0
• bcbb005 Update swc monorepo (major) (#6634)
• 257006e Do not decode cached sourcemaps again when reusing cached modules (#6636)
• 6c3ecbc Bound apt installs and fail over from slow mirrors
• 82bef03 Tree-shake namespace members accessed through a default export (#6631)
• 2b375e4 Preserve import and export names starting with "*" (#6628)
• 85da28c Name dynamic chunks of index files after their directory (#6630)
• 6f957bd Update minor/patch updates (#6633)
• c006bd3 Record live dynamic import edges for chunk assignment (#6632)
• c707f9f Lock file maintenance (#6635)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)