Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
2cd6668 to
150e42d
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "Codex (@codex) review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "Codex (@codex) address that feedback".
| cac: 6.7.14 | ||
| chokidar: 4.0.3 | ||
| consola: 3.4.0 | ||
| debug: 4.4.0 | ||
| esbuild: 0.25.1 | ||
| esbuild: 0.25.9 |
There was a problem hiding this comment.
Proxy build still pulls esbuild 0.25.9
pnpm-lock still pins tsup to esbuild: 0.25.9; since packages/proxy builds via tsup (build script), running the normal pnpm build path continues to invoke esbuild 0.25.x rather than the intended 0.27.0, so the CVE fix this commit targets never reaches the proxy build output. To apply the upgrade you need to bump tsup (or override its esbuild dependency) so the build actually uses 0.27.x.
Useful? React with 👍 / 👎.
3153db4 to
901e300
Compare
901e300 to
c572af2
Compare
c572af2 to
78df73e
Compare
78df73e to
b6b94df
Compare
Upgrade to esbuild version 0.27.0 to obtain CVE fixes.