-
Notifications
You must be signed in to change notification settings - Fork 162
Open
Description
I'm getting a security warning from Dependabot via esbuild. Looks like Framework uses esbuild and there is a dependency in Framework that may be patched with a recent update.
The latest possible version that can be installed is 0.20.2 because of the following conflicting dependencies:
@observablehq/[email protected] requires esbuild@^0.20.1
@observablehq/[email protected] requires esbuild@~0.23.0 via [email protected]
No patched version available for esbuild
The earliest fixed version is 0.25.0.
Transitive dependency esbuild 0.20.2 is introduced via
@observablehq/framework 1.13.2 esbuild 0.20.2
Could this be updated internally?
Thanks!
Metadata
Metadata
Assignees
Labels
No labels