Fix security issues in dependent packages.

Update to recent version of rollup.
Update versions of rollup plugins.
Replace rollup-plugin-uglify with rollup-plugin-esbuild-minify,
which works with recent rollup versions.
Update serialize-javascript to 7.0.3.

https://github.com/commonmark/commonmark.js/security/dependabot/3
https://github.com/commonmark/commonmark.js/security/dependabot/6

Author: jgm

package.json

@@ -46,9 +46,11 @@
     "node": "*"
   },
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^11.0.1",
-    "@rollup/plugin-json": "^4.0.1",
-    "@rollup/plugin-node-resolve": "^7.0.0",
+    "rollup": "^2.80.0",
+    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-json": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "rollup-plugin-esbuild-minify": "^1.3.0",
     "acorn": ">=8.7.0",
     "benchmark": "^2.1.4",
     "bower": "^1.8.13",
@@ -59,9 +61,7 @@
     "markdown-it": ">= 12.3",
     "marked": ">=4.0.10",
     "mem": ">=4.0.0",
-    "rollup": "^1.29.0",
-    "rollup-plugin-uglify": "^6.0.4",
-    "serialize-javascript": "^6.0.0",
+    "serialize-javascript": "^7.0.3",
     "showdown": "^1.9.1",
     "uglify-js": "^3.14.5"
   }

rollup.config.js

@@ -2,7 +2,7 @@
 import nodeResolve from "@rollup/plugin-node-resolve";
 import commonjs from "@rollup/plugin-commonjs";
 import json from "@rollup/plugin-json";
-import { uglify } from "rollup-plugin-uglify";
+import { minify } from 'rollup-plugin-esbuild-minify'
 import { version } from './package.json';
 
 var banner = "/* commonmark " + version + " https://github.com/commonmark/commonmark.js @license BSD3 */";
@@ -21,7 +21,7 @@ export default {
         format: "umd",
         name: "commonmark",
         banner: banner,
-        plugins: [uglify()]
+        plugins: [minify()]
       }
     ],
     plugins: [nodeResolve(), commonjs(), json()]