4.59.0

lukastaegert · lukastaegert · commit ae846957f109 · 2026-02-22T08:13:01.000+01:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # rollup changelog
 
+## 4.59.0
+
+_2026-02-22_
+
+### Features
+
+- Throw when the generated bundle contains paths that would leave the output directory (#6276)
+
+### Pull Requests
+
+- [#6275](https://github.com/rollup/rollup/pull/6275): Validate bundle stays within output dir (@lukastaegert)
+
 ## 4.58.0
 
 _2026-02-20_
diff --git a/browser/package.json b/browser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rollup/browser",
-  "version": "4.58.0",
+  "version": "4.59.0",
   "description": "Next-generation ES module bundler browser build",
   "main": "dist/rollup.browser.js",
   "module": "dist/es/rollup.browser.js",
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "rollup",
-  "version": "4.58.0",
+  "version": "4.59.0",
   "description": "Next-generation ES module bundler",
   "main": "dist/rollup.js",
   "module": "dist/es/rollup.js",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@rollup/browser",`
`3`		`- "version": "4.58.0",`
	`3`	`+ "version": "4.59.0",`
`4`	`4`	`"description": "Next-generation ES module bundler browser build",`
`5`	`5`	`"main": "dist/rollup.browser.js",`
`6`	`6`	`"module": "dist/es/rollup.browser.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rollup",`
`3`		`- "version": "4.58.0",`
	`3`	`+ "version": "4.59.0",`
`4`	`4`	`"description": "Next-generation ES module bundler",`
`5`	`5`	`"main": "dist/rollup.js",`
`6`	`6`	`"module": "dist/es/rollup.js",`