Merge branch 'master' of https://github.com/rollup/rollup into sync-d37675f2

Author: docschina-bot

.github/workflows/build-and-tests.yml

@@ -252,7 +252,7 @@ jobs:
         with:
           version: 0.14.1
       - name: Install cargo-zigbuild
-        uses: taiki-e/install-action@542cebaaed782771e619bd5609d97659d109c492 # v2.66.7
+        uses: taiki-e/install-action@710817a1645ef40daad5bcde7431ceccf6cc3528 # v2.67.13
         if: ${{ matrix.settings.cross == 'zig' }}
         env:
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/repl-artefacts.yml

@@ -121,7 +121,7 @@ jobs:
             or load it into the REPL:
             https://rollupjs.org/repl/?pr=${{ github.event.number }}
       - name: Find Vercel preview URL
-        uses: patrickedqvist/wait-for-vercel-preview@06c79330064b0e6ef7a2574603b62d3c98789125 # v1.3.2
+        uses: patrickedqvist/wait-for-vercel-preview@d7982701e6fcd3ae073bff929e408e004404d38d # v1.3.3
         id: waitForVercel
         with:
           token: ${{ secrets.GITHUB_TOKEN }}

CHANGELOG.md

@@ -1,5 +1,22 @@
 # rollup changelog
 
+## 4.57.1
+
+_2026-01-30_
+
+### Bug Fixes
+
+- Fix heap corruption issue in Windows (#6251)
+- Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)
+
+### Pull Requests
+
+- [#6251](https://github.com/rollup/rollup/pull/6251): fix: Isolate and cache `process.report.getReport()` calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)
+- [#6252](https://github.com/rollup/rollup/pull/6252): chore(deps): update dependency lru-cache to v11 (@renovate[bot])
+- [#6253](https://github.com/rollup/rollup/pull/6253): chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
+- [#6254](https://github.com/rollup/rollup/pull/6254): Fully include dynamic imports in a try-catch (@lukastaegert)
+- [#6255](https://github.com/rollup/rollup/pull/6255): chore(deps): lock file maintenance (@renovate[bot])
+
 ## 4.57.0
 
 _2026-01-27_

audit-resolve.json

@@ -1,46 +1,41 @@
 {
   "decisions": {
-    "1112255|wasm-pack>binary-install>tar": {
-      "decision": "ignore",
-      "madeAt": 1768632226326,
-      "expiresAt": 1771224205911
-    },
-    "1112329|wasm-pack>binary-install>tar": {
-      "decision": "ignore",
-      "madeAt": 1768971958748,
-      "expiresAt": 1771563932286
-    },
     "1112453|@chevrotain/cst-dts-gen>@chevrotain/gast>lodash-es": {
       "decision": "ignore",
-      "madeAt": 1769058929105,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750174830,
+      "expiresAt": 1772342161715
     },
     "1112453|@chevrotain/gast>lodash-es": {
       "decision": "ignore",
-      "madeAt": 1769058929105,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750174830,
+      "expiresAt": 1772342161715
     },
     "1112453|@mermaid-js/mermaid-cli>mermaid>@mermaid-js/parser>langium>chevrotain>@chevrotain/cst-dts-gen>@chevrotain/gast>lodash-es": {
       "decision": "ignore",
-      "madeAt": 1769058929105,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750174830,
+      "expiresAt": 1772342161715
     },
-    "1112453|chevrotain-allstar>chevrotain>@chevrotain/cst-dts-gen>@chevrotain/gast>lodash-es": {
+    "1112491|mocha>diff": {
       "decision": "ignore",
-      "madeAt": 1769058929105,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750179445,
+      "expiresAt": 1772342161715
     },
-    "1112455|lodash": {
+    "1112255|wasm-pack>binary-install>tar": {
       "decision": "ignore",
-      "madeAt": 1769058974064,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750182528,
+      "expiresAt": 1772342161715
     },
-    "1112491|mocha>diff": {
+    "1112329|wasm-pack>binary-install>tar": {
+      "decision": "ignore",
+      "madeAt": 1769750185212,
+      "expiresAt": 1772342161715
+    },
+    "1112659|wasm-pack>binary-install>tar": {
       "decision": "ignore",
-      "madeAt": 1769058983758,
-      "expiresAt": 1771650881209
+      "madeAt": 1769750187962,
+      "expiresAt": 1772342161715
     }
   },
   "rules": {},
   "version": 1
-}
+}

browser/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rollup/browser",
-  "version": "4.57.0",
+  "version": "4.57.1",
   "description": "Next-generation ES module bundler browser build",
   "main": "dist/rollup.browser.js",
   "module": "dist/es/rollup.browser.js",

native.js

@@ -1,21 +1,50 @@
 const { existsSync } = require('node:fs');
 const path = require('node:path');
 const { platform, arch, report } = require('node:process');
+const { spawnSync } = require('node:child_process');
 
-const isMusl = () => {
+const getReportHeader = () => {
 	try {
-		return !report.getReport().header.glibcVersionRuntime;
+		if (platform !== 'win32') {
+			return report.getReport().header;
+		}
+
+		// This is needed because report.getReport() crashes the process on Windows sometimes.
+		const script =
+			"console.log(JSON.stringify(require('node:process').report.getReport().header));";
+		const child = spawnSync(process.execPath, ['-p', script], {
+			encoding: 'utf8',
+			timeout: 3000,
+			windowsHide: true
+		});
+
+		if (child.status !== 0) {
+			return null;
+		}
+
+		// The output from node -p might include a trailing 'undefined' and newline
+		const stdout = child.stdout?.replace(/undefined\r?\n?$/, '').trim();
+		if (!stdout) {
+			return null;
+		}
+
+		return JSON.parse(stdout);
 	} catch {
-		return false;
+		return null;
 	}
 };
 
+let reportHeader;
 const isMingw32 = () => {
-	try {
-		return report.getReport().header.osName.startsWith('MINGW32_NT');
-	} catch {
-		return false;
-	}
+	reportHeader ??= getReportHeader();
+
+	return reportHeader?.osName?.startsWith('MINGW32_NT') ?? false;
+};
+
+const isMusl = () => {
+	reportHeader ??= getReportHeader();
+
+	return reportHeader ? !reportHeader.glibcVersionRuntime : false;
 };
 
 const bindingsByPlatformAndArch = {