fix(deps): bump rollup from 4.63.2 to 4.63.4 in the rollup group across 1 directory

[dependabot]

Bumps the rollup group with 1 update in the / directory: rollup.

Updates rollup from 4.63.2 to 4.63.4

Release notes

Sourced from rollup's releases.

v4.63.4

4.63.4

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#6442)
• Do not create invalid code if import attribute values contain special characters (#6502)

Pull Requests

• #6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #6517: Improve agent instructions (@​lukastaegert)
• #6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #6519: Request Copilot code review via workflow (@​lukastaegert)

v4.63.3

4.63.3

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#6473)
• Always report and recover from failures on invalidation in watch mode (#6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#6514)

Pull Requests

• #6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #6515: chore(deps): lock file maintenance (@​renovate[bot])

Changelog

Sourced from rollup's changelog.

4.63.4

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#6442)
• Do not create invalid code if import attribute values contain special characters (#6502)

Pull Requests

• #6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #6517: Improve agent instructions (@​lukastaegert)
• #6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #6519: Request Copilot code review via workflow (@​lukastaegert)

4.63.3

2026-09-14

Bug Fixes

• Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#6473)
• Always report and recover from failures on invalidation in watch mode (#6506)
• Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#6514)

Pull Requests

• #6473: fix(browser): match node's basename and extname (@​luantaraschi, @​lukastaegert)
• #6506: fix(watch): await the rerun so listener failures surface as ERROR events (@​yoominho91, @​irontaek, @​lukastaegert)
• #6514: Remove the whole CRLF pair when suppressing ASI (@​NgoQuocViet2001)
• #6515: chore(deps): lock file maintenance (@​renovate[bot])

Commits

• ba78d57 4.63.4
• 67c3379 Escape quotes and backslashes in import attribute values (#6502)
• 35f6053 fix: expose cached module meta during cache checks (#6442)
• b7ae5e2 Request Copilot code review via workflow (#6519)
• 504824c fix(deps): update minor/patch updates (#6518)
• 05980cf Improve agent instructions (#6517)
• 942a0a8 ci: collect Rust coverage from JS tests in dedicated job (#6429)
• e8c8dd6 docs: name the parameter runHook actually takes (#6496)
• 250deca 4.63.3
• 01ab3f8 fix(watch): await the rerun so listener failures surface as ERROR events (#6506)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions