Skip to content

Upgrade esbuild#344

Merged
Caitlin Pinn (cpinn) merged 2 commits intomainfrom
caitlin/upgrade-esbuild
Dec 4, 2025
Merged

Upgrade esbuild#344
Caitlin Pinn (cpinn) merged 2 commits intomainfrom
caitlin/upgrade-esbuild

Conversation

@cpinn
Copy link
Copy Markdown
Contributor

@cpinn Caitlin Pinn (cpinn) commented Nov 20, 2025

Upgrade to esbuild version 0.27.0 to obtain CVE fixes.

@vercel
Copy link
Copy Markdown

vercel bot commented Nov 20, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
ai-proxy Ready Ready Preview Comment Dec 4, 2025 10:41pm

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "Codex (@codex) review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "Codex (@codex) address that feedback".

Comment on lines 10208 to +10255
cac: 6.7.14
chokidar: 4.0.3
consola: 3.4.0
debug: 4.4.0
esbuild: 0.25.1
esbuild: 0.25.9
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Proxy build still pulls esbuild 0.25.9

pnpm-lock still pins tsup to esbuild: 0.25.9; since packages/proxy builds via tsup (build script), running the normal pnpm build path continues to invoke esbuild 0.25.x rather than the intended 0.27.0, so the CVE fix this commit targets never reaches the proxy build output. To apply the upgrade you need to bump tsup (or override its esbuild dependency) so the build actually uses 0.27.x.

Useful? React with 👍 / 👎.

@cpinn Caitlin Pinn (cpinn) merged commit a9ff9bb into main Dec 4, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants