Merge branch 'master' of https://github.com/rollup/rollup into sync-55a8fd5a

Author: docschina-bot

.github/workflows/build-and-tests.yml

@@ -33,9 +33,9 @@ jobs:
       - name: Checkout Commit
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
       - name: Install and Cache Node Dependencies
         uses: ./.github/actions/install-and-cache-node-deps
       - name: Lint
@@ -219,10 +219,10 @@ jobs:
       - name: Checkout Commit
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         if: ${{ !matrix.settings.docker && matrix.settings.target != 'x86_64-pc-windows-gnu' }}
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
       - uses: msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2 # v2
         if: ${{ matrix.settings.target == 'x86_64-pc-windows-gnu' }}
         with:
@@ -263,7 +263,7 @@ jobs:
         with:
           version: 0.14.1
       - name: Install cargo-zigbuild
-        uses: taiki-e/install-action@eba4035583f0f9b001a27be2cce0a136d05d05e3 # v2.62.23
+        uses: taiki-e/install-action@5b5de1b4da26ad411330c0454bdd72929bfcbeb2 # v2.62.29
         if: ${{ matrix.settings.cross == 'zig' }}
         env:
           GITHUB_TOKEN: ${{ github.token }}
@@ -457,7 +457,7 @@ jobs:
       - name: Checkout Commit
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: ${{ matrix.node }}
           check-latest: true
@@ -506,9 +506,9 @@ jobs:
           # Necessary to find the commits included in the release
           fetch-depth: 0
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
           registry-url: 'https://registry.npmjs.org'
       - name: Update npm for publishing
         run: npm install -g npm@latest

.github/workflows/performance-report.yml

@@ -51,9 +51,9 @@ jobs:
           key: x86_64-unknown-linux-gnu-cargo-ubuntu-latest-${{ hashFiles('rust/Cargo.lock') }}
           restore-keys: x86_64-unknown-linux-gnu-cargo-ubuntu-latest
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
       - name: Install and Cache Node Dependencies
         uses: ./.github/actions/install-and-cache-node-deps
       - name: Build artefacts 123
@@ -93,9 +93,9 @@ jobs:
           key: x86_64-unknown-linux-gnu-cargo-ubuntu-latest-${{ hashFiles('rust/Cargo.lock') }}
           restore-keys: x86_64-unknown-linux-gnu-cargo-ubuntu-latest
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
       - name: Install and Cache Node Dependencies
         uses: ./.github/actions/install-and-cache-node-deps
       - name: Download all artifacts

.github/workflows/repl-artefacts.yml

@@ -51,9 +51,9 @@ jobs:
           key: wasm-cargo-ubuntu-latest-${{ hashFiles('rust/Cargo.lock') }}
           restore-keys: wasm-cargo-ubuntu-latest
       - name: Setup Node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 24.9.0
+          node-version: 24.10.0
       - name: Install and Cache Node Dependencies
         uses: ./.github/actions/install-and-cache-node-deps
       - name: Build artefacts

CHANGELOG.md

@@ -1,5 +1,24 @@
 # rollup changelog
 
+## 4.52.5
+
+_2025-10-18_
+
+### Bug Fixes
+
+- Always produce valid UUIDs as debugIds in sourcemaps (#6144)
+
+### Pull Requests
+
+- [#6135](https://github.com/rollup/rollup/pull/6135): chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
+- [#6140](https://github.com/rollup/rollup/pull/6140): chore(deps): update peter-evans/create-or-update-comment action to v5 (@renovate[bot])
+- [#6141](https://github.com/rollup/rollup/pull/6141): chore(deps): update peter-evans/find-comment action to v4 (@renovate[bot])
+- [#6142](https://github.com/rollup/rollup/pull/6142): fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
+- [#6143](https://github.com/rollup/rollup/pull/6143): chore: eslint enable concurrency option (@btea)
+- [#6144](https://github.com/rollup/rollup/pull/6144): fix: generation of debugIDs with invalid length (@pablomatiasgomez, @lukastaegert)
+- [#6146](https://github.com/rollup/rollup/pull/6146): chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
+- [#6147](https://github.com/rollup/rollup/pull/6147): chore(deps): update actions/setup-node action to v6 (@renovate[bot])
+
 ## 4.52.4
 
 _2025-10-03_

browser/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rollup/browser",
-  "version": "4.52.4",
+  "version": "4.52.5",
   "description": "Next-generation ES module bundler browser build",
   "main": "dist/rollup.browser.js",
   "module": "dist/es/rollup.browser.js",