fix: bump modern.js to v2.68.0 to fix esbuild vulnerability (#3880)

Julien-Marcou · 2heal1 · web-flow · commit e0ceca6fe7ec · 2025-07-15T14:27:10.000+08:00
Co-authored-by: Hanric &lt;hanric.zhang@gmail.com&gt;
diff --git a/.changeset/slow-games-wink.md b/.changeset/slow-games-wink.md
@@ -0,0 +1,9 @@
+---
+'create-module-federation': patch
+'@module-federation/devtools': patch
+'@module-federation/modern-js': patch
+'@module-federation/modernjsapp': patch
+'@module-federation/cli': patch
+---
+
+bump modern.js to fix esbuild vulnerability
diff --git a/apps/modern-component-data-fetch/host/package.json b/apps/modern-component-data-fetch/host/package.json
@@ -27,17 +27,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.5",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.5",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.5",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modern-component-data-fetch/provider/package.json b/apps/modern-component-data-fetch/provider/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.5",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.5",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.5",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/dynamic-nested-remote/package.json b/apps/modernjs-ssr/dynamic-nested-remote/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/dynamic-remote-new-version/package.json b/apps/modernjs-ssr/dynamic-remote-new-version/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/host/package.json b/apps/modernjs-ssr/host/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/nested-remote/package.json b/apps/modernjs-ssr/nested-remote/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/remote-new-version/package.json b/apps/modernjs-ssr/remote-new-version/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs-ssr/remote/package.json b/apps/modernjs-ssr/remote/package.json
@@ -26,17 +26,17 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/modern-js": "workspace:*",
     "antd": "4.24.15",
     "react": "~18.3.1",
     "react-dom": "~18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~16.11.7",
     "@types/react": "~18.2.0",
diff --git a/apps/modernjs/package.json b/apps/modernjs/package.json
@@ -26,16 +26,16 @@
   ],
   "dependencies": {
     "@babel/runtime": "7.26.0",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/enhanced": "workspace:*",
     "react": "18.3.1",
     "react-dom": "18.3.1"
   },
   "devDependencies": {
     "@modern-js-app/eslint-config": "2.59.0",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/tsconfig": "2.68.0",
     "@types/jest": "~29.5.0",
     "@types/node": "~20.12.12",
     "@types/react": "~18.2.0",
diff --git a/packages/chrome-devtools/package.json b/packages/chrome-devtools/package.json
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "@arco-design/web-react": "^2.64.1",
-    "@modern-js/runtime": "2.67.6",
+    "@modern-js/runtime": "2.68.0",
     "@module-federation/sdk": "workspace:*",
     "ahooks": "^3.7.10",
     "dagre": "^0.8.5",
@@ -64,12 +64,12 @@
     "reactflow": "11.11.4"
   },
   "devDependencies": {
-    "@modern-js-app/eslint-config": "2.54.6",
-    "@modern-js/app-tools": "2.67.6",
+    "@modern-js-app/eslint-config": "2.59.0",
+    "@modern-js/app-tools": "2.68.0",
     "@modern-js/eslint-config": "2.59.0",
-    "@modern-js/module-tools": "2.67.6",
-    "@modern-js/storybook": "2.67.6",
-    "@modern-js/tsconfig": "2.67.6",
+    "@modern-js/module-tools": "2.68.0",
+    "@modern-js/storybook": "2.68.0",
+    "@modern-js/tsconfig": "2.68.0",
     "@module-federation/runtime": "workspace:*",
     "@playwright/test": "1.49.1",
     "@storybook/addon-essentials": "^8",
diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -26,7 +26,7 @@
     "@module-federation/dts-plugin": "workspace:*",
     "commander": "11.1.0",
     "chalk": "3.0.0",
-    "@modern-js/node-bundle-require": "2.67.6"
+    "@modern-js/node-bundle-require": "2.68.0"
   },
   "devDependencies": {
     "@types/node": "~16.11.7"
diff --git a/packages/create-module-federation/templates/modern-common/package.json.handlebars b/packages/create-module-federation/templates/modern-common/package.json.handlebars
@@ -24,13 +24,13 @@
     "pre-commit": "npx lint-staged"
   },
   "dependencies": {
-    "@modern-js/runtime": "^2.67.6",
+    "@modern-js/runtime": "^2.68.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   },
   "devDependencies": {
-    "@modern-js/app-tools": "^2.67.6",
-    "@modern-js/tsconfig": "^2.67.6",
+    "@modern-js/app-tools": "^2.68.0",
+    "@modern-js/tsconfig": "^2.68.0",
     "@biomejs/biome": "1.8.3",
     "typescript": "~5.0.4",
     "@types/jest": "~29.2.4",
diff --git a/packages/modernjs/package.json b/packages/modernjs/package.json
@@ -116,8 +116,8 @@
   "author": "hanric <hanric.zhang@gmail.com>",
   "license": "MIT",
   "dependencies": {
-    "@modern-js/utils": "2.67.5",
-    "@modern-js/node-bundle-require": "2.67.6",
+    "@modern-js/utils": "2.68.0",
+    "@modern-js/node-bundle-require": "2.68.0",
     "@module-federation/rsbuild-plugin": "workspace:*",
     "fs-extra": "11.3.0",
     "lru-cache": "10.4.3",
@@ -132,13 +132,13 @@
   },
   "devDependencies": {
     "@module-federation/manifest": "workspace:*",
-    "@modern-js/core": "2.67.5",
+    "@modern-js/core": "2.68.0",
     "@rsbuild/core": "1.3.21",
-    "@modern-js/app-tools": "2.67.6",
-    "@modern-js/server-runtime": "2.67.6",
-    "@modern-js/module-tools": "2.67.6",
-    "@modern-js/runtime": "2.67.6",
-    "@modern-js/tsconfig": "2.67.6"
+    "@modern-js/app-tools": "2.68.0",
+    "@modern-js/server-runtime": "2.68.0",
+    "@modern-js/module-tools": "2.68.0",
+    "@modern-js/runtime": "2.68.0",
+    "@modern-js/tsconfig": "2.68.0"
   },
   "peerDependencies": {
     "react": ">=17",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
