Update esbuild dependency for vulnerability scanners

[tzyl]

Description

Older esbuild versions use versions of Go which flag a number of CVEs on vulnerability scanners.

evanw/esbuild#3802
evanw/esbuild#3853

Vite currently has a dependency on esbuild ^0.21.3:

vite/packages/vite/package.json

Line 88 in 0ca53cf

"esbuild": "^0.21.3",

Suggested solution

Bump dependency on esbuild to latest (^0.23.1) which uses later versions of Go and addresses the CVEs described in the GitHub issues above.

Alternative

No response

Additional context

No response

Validations

• Follow our Code of Conduct
• Read the Contributing Guidelines.
• Read the docs.
• Check that there isn't already an issue that request the same feature to avoid creating a duplicate.

[bluwy]

We have received many reports of this but this is not a vulnerability in Vite. They only affect esbuild's server, which we don't use. Please update this in the scanner instead.