Fixed version of rollup causes package duplication

[theKashey]

Is there an existing issue for this?

• I have checked for existing issues https://github.com/getsentry/sentry-javascript/issues
• I have reviewed the documentation https://docs.sentry.io/
• I am using the latest SDK release https://github.com/getsentry/sentry-javascript/releases

How do you use Sentry?

Sentry Saas (sentry.io)

Which SDK are you using?

@sentry/nextjs

SDK Version

9.34.0

Framework Version

No response

Link to Sentry event

No response

Reproduction Example/SDK Setup

No response

Steps to Reproduce

This is neither a bug, nor an issue.

Just a little problem caused by a particular version of rollup being pinned in the package dependencies

To reproduce a problem one just need to install @sentry/nextjs to an environment (repo or more likely monorepo) already using rollup. Quite likely it will cause package duplication, as latest version is always different. As long as rollup comes with a whole ecosystem, there will be many package duplicated.

Expected Result

@sentry/nextjs to use a "range" - for example "rollup": "^4.35.0", so it can "sync" and dedupe with potentially existing other version.

Actual Result

Both "rollup": "4.35.0"(sentry) and "rollup": "4.45.0"(current) will be pulled into a repo.

[Lms24]

Hey @theKashey thanks for writing in! To clarify: Is this causing any problem for you or is the primary concern node_modules size increase (which is valid of course! just trying to assess priority)?

I think we can change it to ^4.35.0, though this doesn't guarantee deduplication for everyone either (i.e. if anyone is using a more narrowly pinned version or a different major version).

[Lms24]

Opened #17010 -- we'll go with your suggestion for now. Thanks for raising!