Skip to content

fix: update esbuild security patch#73

Merged
corwinm merged 1 commit into
mainfrom
chore/update-esbuild-security
Jun 14, 2026
Merged

fix: update esbuild security patch#73
corwinm merged 1 commit into
mainfrom
chore/update-esbuild-security

Conversation

@corwinm

@corwinm corwinm commented Jun 14, 2026

Copy link
Copy Markdown
Owner

Summary

  • Updates esbuild from 0.28.0 to 0.28.1.
  • Refreshes the pnpm lockfile so the patched platform packages resolve to 0.28.1.
  • Addresses Dependabot alerts for GHSA-gv7w-rqvm-qjhr and GHSA-g7r4-m6w7-qqqr, both fixed in esbuild >=0.28.1.

Verification

  • pnpm install --frozen-lockfile
  • pnpm audit --json (0 vulnerabilities)
  • pnpm run package
  • pnpm test (20 passing)

@corwinm
corwinm merged commit 60235f2 into main Jun 14, 2026
3 checks passed
@corwinm
corwinm deleted the chore/update-esbuild-security branch June 14, 2026 17:15
github-actions Bot pushed a commit that referenced this pull request Jun 23, 2026
## [0.2.0](v0.1.1...v0.2.0) (2026-06-23)

### Features

* add configurable metadata columns ([#77](#77)) ([48cf3ab](48cf3ab)), closes [#53](#53) [#54](#54)

### Bug Fixes

* update esbuild security patch ([#73](#73)) ([60235f2](60235f2))
* update shell-quote transitive dependency ([#72](#72)) ([412781b](412781b))
github-actions Bot pushed a commit that referenced this pull request Jun 23, 2026
## [0.2.0](v0.1.1...v0.2.0) (2026-06-23)

### Features

* add configurable metadata columns ([#77](#77)) ([48cf3ab](48cf3ab)), closes [#53](#53) [#54](#54)

### Bug Fixes

* align vscode typings with engine ([#79](#79)) ([53759d6](53759d6))
* update esbuild security patch ([#73](#73)) ([60235f2](60235f2))
* update shell-quote transitive dependency ([#72](#72)) ([412781b](412781b))
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 0.2.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant