fix(deps): update rollup bundled DOM Clobbering Gadget found scripts that leads to XSS

[sufatmawati]

Change Overview

We discovered a DOM Clobbering vulnerability in rollup when bundling scripts that use import.meta.url or with plugins that emit and reference asset files from code in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (an img tag with an unsanitized name attribute) are present.

• Bug fix
  • External Facing (resolves an issue customers are currently experiencing)
  • Security Impact (fixes a potential vulnerability)
• Feature
  • Visible Change (changes semver of API surface or other change that would impact user/dev experience)
  • High Usage (impacts a major part of the core workflow for users)
• Performance Improvement
• Refactoring
• Other: Describe here

Weakness CWE-79