pullrequests Search Results · repo:vercel/ncc language:JavaScript
Filter by
721 results (135 ms)
721 results
invercel/ncc (press backspace or delete to remove)Summary
Updates ts-loader to 9.5.7 so ncc s bundled TypeScript loader preserves configured rootDir during transpileModule
builds.
This fixes TypeScript 6 TS5011 failures like:
TS5011: The common source ...
When a directory contains both test.json and test.ts, an extensionless import like:
import { myFunction } from ./test ;
resolves to test.json instead of test.ts, causing all exported methods from the ...
Problem
The cache directory is a fixed, shared path (/tmp/ncc-cache). On multi-user systems this can be pre-created or
manipulated by another user (symlink/hardlink attacks), potentially causing cache ...
Description
JSON.parse(process.env.__NCC_OPTS || {} ) throws SyntaxError on invalid JSON; destructuring then throws TypeError if the
result is not an object (e.g. env var set to a string or number). This ...
Summary
- Bump vm2 from ^3.9.19 to ^3.10.2 to fix CVE-2026-22709
- Update yarn.lock to match
- Closes #1302 (adds the missing lockfile update).
https://nvd.nist.gov/vuln/detail/CVE-2026-22709 ...
Bump the canvas dependency to latest version
- Remove node@18 since its EOL https://vercel.com/changelog/node-js-18-is-being-deprecated
- Add node@22 to test matrix since its LTS
- Upgrade canvas to fix CI on node@22
Summary
- Port ncc s internal bundling pipeline from webpack to rspack while preserving CLI behavior.
- Keep resolver fallback, native asset relocation, and TypeScript loader behavior aligned with ...
Updates vm2 devDependency from 3.9.19 to 3.10.3.
- Closes https://github.com/vercel/ncc/pull/1302
Changes
- Ran yarn add --dev vm2@latest
- Updated transitive dependencies (acorn, acorn-walk) ...
https://nvd.nist.gov/vuln/detail/CVE-2026-22709