Skip to content

chore(deps): address esbuild audit advisory / 修复 esbuild 审计告警#4478

Merged
SivanCola merged 1 commit into
esengine:main-v2from
SivanCola:chore/fix-esbuild-audit
Jun 16, 2026
Merged

chore(deps): address esbuild audit advisory / 修复 esbuild 审计告警#4478
SivanCola merged 1 commit into
esengine:main-v2from
SivanCola:chore/fix-esbuild-audit

Conversation

@SivanCola

Copy link
Copy Markdown
Collaborator

Summary

  • upgrade desktop frontend Vite to 8.0.16 so the build toolchain resolves esbuild 0.28.1
  • remove the stale esbuild ^0.25.0 overrides from npm/pnpm configuration
  • migrate Vite manual chunk config to Vite 8/Rolldown codeSplitting groups

Verification

  • pnpm --dir desktop/frontend install --frozen-lockfile
  • cd desktop && wails generate module
  • pnpm --dir frontend build
  • pnpm --dir frontend test
  • npm audit --audit-level=high
  • pnpm audit --audit-level high
  • npm ci --ignore-scripts

@SivanCola SivanCola requested a review from esengine as a code owner June 15, 2026 07:42
@github-actions github-actions Bot added v2 Go rewrite (1.x) — main-v2 branch, active development desktop Wails desktop app (desktop/**) labels Jun 15, 2026
@SivanCola SivanCola enabled auto-merge June 15, 2026 07:54
@SivanCola

Copy link
Copy Markdown
Collaborator Author

Supersession note: #3693 raised the automated Vite 8.0.16 dependency bump, and this PR is the human migration path for the same esbuild/Vite audit work, including the config and lockfile migration that the automated bump could not complete. Thank you @dependabot for opening the tracking update in #3693.

Authorship note: @SivanCola is the primary author of this PR. @dependabot contributed as repository automation by opening the original dependency bump that identified the update target, and that contribution is acknowledged as part of the shared repository cleanup.

@SivanCola SivanCola disabled auto-merge June 16, 2026 04:07
@SivanCola SivanCola merged commit 0706284 into esengine:main-v2 Jun 16, 2026
27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

desktop Wails desktop app (desktop/**) v2 Go rewrite (1.x) — main-v2 branch, active development

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant