vite icon indicating copy to clipboard operation
vite copied to clipboard

chore(deps): update esbuild from 0.25.0 to 0.27.0

Open GameRoMan opened this issue 3 weeks ago • 4 comments

Update esbuild from 0.25.0 to 0.27.0

Update the iife tests to match esbuild behaviour

GameRoMan avatar Dec 01 '25 12:12 GameRoMan

I was going to raise an issue about this (still happy to if it's preferable to discuss there rather than in a PR).

For me, the main motivation to do this would be to address various golang stdlib vulnerabilities that were fixed in 0.27.0. See https://github.com/evanw/esbuild/issues/4311.

askoufis avatar Dec 01 '25 22:12 askoufis

we might want to specify ^0.25.0 || ^0.26.0 || ^0.27.0 or some such thing

otherwise projects that can't move off esbuild 0.25.0 yet will end up installing two copies

or we can just let them install 2 copies in the hope they notice and upgrade... 😅

43081j avatar Dec 02 '25 11:12 43081j

Also, should I make the same PR to vite v6 ?

GameRoMan avatar Dec 02 '25 12:12 GameRoMan

Deploy Preview for vite-docs-v7 ready!

Name Link
Latest commit 63c2209a63f31895a3625d16ade48e3d88d3c7a8
Latest deploy log https://app.netlify.com/projects/vite-docs-v7/deploys/69373835565e7e00073eb53b
Deploy Preview https://deploy-preview-21183--vite-docs-v7.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify[bot] avatar Dec 04 '25 09:12 netlify[bot]

We can just bump to 0.27.0 as we've done the same in the past. This'll likely be merged shortly after as a small v7 minor.

bluwy avatar Dec 04 '25 10:12 bluwy

Ok, thank you, if there is anything else I need to do or change just tell me

GameRoMan avatar Dec 04 '25 16:12 GameRoMan

we might want to specify ^0.25.0 || ^0.26.0 || ^0.27.0 or some such thing

No you can not do that anyways because minor v0 versions are considered incompatible to each other.

otherwise projects that can't move off esbuild 0.25.0 yet will end up installing two copies

And I'm in the opposite situation where another project (storybook) installs 0.27 but vite lags behind resulting in the duplicate.

silverwind avatar Dec 04 '25 20:12 silverwind

No you can not do that anyways because minor v0 versions are considered incompatible to each other.

Just to be clear, you can do that. Yes, a minor 0.x version is basically a major. But we know these three versions of esbuild are compatible, and that's what the OR is for.

Though I agree with Bjorn now, that we should just bump the version.

43081j avatar Dec 05 '25 10:12 43081j

Yeah I think ultimately esbuild it to blame that they are still on v0. They do release their changes as breaking but effectively, esbuild changes are rarely actually breaking. So I agree, just keep it at latest minor version.

silverwind avatar Dec 05 '25 10:12 silverwind