ITADN

Security warning: esbuild

#2006Openzachbogart 创建于 2025-07-13
Z
zachbogartcommented
I'm getting a security warning from Dependabot via esbuild. Looks like Framework uses esbuild and there is a dependency in Framework that may be patched with a recent update. > The latest possible version that can be installed is 0.20.2 because of the following conflicting dependencies: > > @observablehq/framework@1.13.2 requires esbuild@^0.20.1 > @observablehq/framework@1.13.2 requires esbuild@~0.23.0 via tsx@4.19.2 > No patched version available for esbuild > The earliest fixed version is 0.25.0. > Transitive dependency esbuild 0.20.2 is introduced via > @observablehq/framework 1.13.2 esbuild 0.20.2 Could this be updated internally? Thanks!
1 条评论