Security warning: esbuild
I'm getting a security warning from Dependabot via esbuild. Looks like Framework uses esbuild and there is a dependency in Framework that may be patched with a recent update.
> The latest possible version that can be installed is 0.20.2 because of the following conflicting dependencies:
>
> @observablehq/framework@1.13.2 requires esbuild@^0.20.1
> @observablehq/framework@1.13.2 requires esbuild@~0.23.0 via tsx@4.19.2
> No patched version available for esbuild
> The earliest fixed version is 0.25.0.
> Transitive dependency esbuild 0.20.2 is introduced via
> @observablehq/framework 1.13.2 esbuild 0.20.2
Could this be updated internally?
Thanks!
1 条评论