build(bundle-source): pin to a fixed rollup tarball
MODIFY
packages/bundle-source/package.json
packages/bundle-source/package.json
"@rollup/plugin-commonjs": "^19.0.0",
"@rollup/plugin-node-resolve": "^13.0.0",
"acorn": "^8.2.4",
- "rollup": "^2.47.0",
+ "rollup": "file:rollup-2.70.1-endo.1.tgz",
"source-map": "^0.7.3"
},
"devDependencies": {
"files": [
"LICENSE*",
"SECURITY*",
+ "rollup-*.tgz",
"src",
"*.js",
"*.ts"

ADD
packages/bundle-source/rollup-2.70.1-endo.1.diff
+diff -ur rollup-2.70.1/dist/es/shared/rollup.js rollup-2.70.1-endo.1/dist/es/shared/rollup.js
+--- rollup-2.70.1/dist/es/shared/rollup.js 1985-10-26 02:15:00.000000000 -0600
++++ rollup-2.70.1-endo.1/dist/es/shared/rollup.js 2022-04-13 11:12:09.000000000 -0600
+@@ -501,7 +501,7 @@
+ filename: { writable: true, value: options.filename },
+ indentExclusionRanges: { writable: true, value: options.indentExclusionRanges },
+ sourcemapLocations: { writable: true, value: new BitSet() },
+- storedNames: { writable: true, value: {} },
++ storedNames: { writable: true, value: Object.create(null) },
+ indentStr: { writable: true, value: guessIndent(string) }
+ });
+
+diff -ur rollup-2.70.1/dist/shared/rollup.js rollup-2.70.1-endo.1/dist/shared/rollup.js
+--- rollup-2.70.1/dist/shared/rollup.js 1985-10-26 02:15:00.000000000 -0600
++++ rollup-2.70.1-endo.1/dist/shared/rollup.js 2022-04-13 11:13:13.000000000 -0600
+@@ -1148,7 +1148,7 @@
+ filename: { writable: true, value: options.filename },
+ indentExclusionRanges: { writable: true, value: options.indentExclusionRanges },
+ sourcemapLocations: { writable: true, value: new BitSet() },
+- storedNames: { writable: true, value: {} },
++ storedNames: { writable: true, value: Object.create(null) },
+ indentStr: { writable: true, value: guessIndent(string) }
+ });
+
+diff -ur rollup-2.70.1/package.json rollup-2.70.1-endo.1/package.json
+--- rollup-2.70.1/package.json 1985-10-26 02:15:00.000000000 -0600
++++ rollup-2.70.1-endo.1/package.json 2022-04-13 11:14:16.000000000 -0600
+@@ -1,6 +1,6 @@
+ {
+ "name": "rollup",
+- "version": "2.70.1",
++ "version": "2.70.1-endo.1",
+ "description": "Next-generation ES module bundler",
+ "main": "dist/rollup.js",
+ "module": "dist/es/rollup.js",

ADD
packages/bundle-source/rollup-2.70.1-endo.1.tgz
packages/bundle-source/rollup-2.70.1-endo.1.tgz
Binary files /dev/null and b/packages/bundle-source/rollup-2.70.1-endo.1.tgz differ

MODIFY
yarn.lock
yarn.lock
@@ -11033,10 +11033,9 @@ rollup@1.31.0:
"@types/node" "*"
acorn "^7.1.0"
-rollup@^2.47.0:
- version "2.64.0"
- resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.64.0.tgz#f0f59774e21fbb56de438a37d06a2189632b207a"
- integrity sha512-+c+lbw1lexBKSMb1yxGDVfJ+vchJH3qLbmavR+awDinTDA2C5Ug9u7lkOzj62SCu0PKUExsW36tpgW7Fmpn3yQ==
+"rollup@file:packages/bundle-source/rollup-2.70.1-endo.1.tgz":
+ version "2.70.1-endo.1"
+ resolved "file:packages/bundle-source/rollup-2.70.1-endo.1.tgz#1a701379177af0caadcaae0ecfd15b7aeb9ac8e6"
optionalDependencies:
fsevents "~2.3.2"

build(bundle-source): pin to a fixed rollup tarball