houseassassin/twenty
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deps): esbuild ^0.28.1 floors + vite 7→8 (rolldown) upgrade (#21517)

Browse Source 
## What this does

Resolves the remaining esbuild security alerts on packages we own, and
upgrades the repo to **Vite 8** (which drops esbuild entirely in favour
of rolldown/oxc).

### 1. esbuild → `^0.28.1` (security)
- Raised the declared `esbuild` floor in `twenty-sdk` and the
logic-function common-layer (both were `^0.25.0`, which can only resolve
to a vulnerable version). These are our packages, so this is just
declaring the patched version — clears Dependabot **#1467** and
**#1468**.

### 2. Vite 7 → 8
- Bumped `vite` to `^8` in the 5 packages that declare it, and
`@vitejs/plugin-react-swc` to `^4.3.1` (the only plugin that needed a
bump for Vite 8; everything else already supports it).
- `twenty-front` keeps esbuild minification, so esbuild is now an
explicit (patched) devDependency there — Vite 8 no longer ships it.

### Two Vite-8 fallout fixes (bundler internals changed)
- **Storybook tests:** added React to `optimizeDeps.include` so Vite's
dep optimizer doesn't re-bundle React mid-run and break in-flight
imports in browser-mode tests.
- **`hex-rgb`:** it's ESM-only and broke rolldown's CJS interop (a
default import resolved to the wrong thing under jest). Replaced its one
use with a tiny inline hex→rgb parse and dropped the dependency.

## Verified
Vite resolves to a single `8.0.16` with no esbuild in its tree. Builds
pass on Vite 8/rolldown: `twenty-front` production build, the SDKs, and
Storybook; the previously-failing front and storybook test jobs now
pass; `yarn install --immutable` is clean.

## Note
This doesn't close root alert **#1469** — esbuild is still pulled by
other third-party tools (storybook, tsx, lingui, zapier, etc.) that
haven't shipped a patched release. The vulnerable code path (esbuild's
dev server) isn't used here, so that one is best dismissed as
not-affected.
This commit is contained in:
Charles Bochet
2026-06-13 12:44:22 +02:00
committed by GitHub
parent 4899f00bc7
commit 869680a5a1
21 changed files with 236 additions and 218 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/twenty-server/src/engine/core-modules/logic-function/logic-function-drivers/constants/common-layer-dependencies/package.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"dependencies": {
"archiver": "^7.0.1",
"esbuild": "^0.25.0"
"esbuild": "^0.28.1"
}
}
packages/twenty-server/src/engine/core-modules/logic-function/logic-function-drivers/constants/common-layer-dependencies/yarn.lock
+109 -109
View File
@@ -5,184 +5,184 @@ __metadata:
version: 8
cacheKey: 10c0
"@esbuild/aix-ppc64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/aix-ppc64@npm:0.25.12"
"@esbuild/aix-ppc64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/aix-ppc64@npm:0.28.1"
conditions: os=aix & cpu=ppc64
languageName: node
linkType: hard
"@esbuild/android-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/android-arm64@npm:0.25.12"
"@esbuild/android-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/android-arm64@npm:0.28.1"
conditions: os=android & cpu=arm64
languageName: node
linkType: hard
"@esbuild/android-arm@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/android-arm@npm:0.25.12"
"@esbuild/android-arm@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/android-arm@npm:0.28.1"
conditions: os=android & cpu=arm
languageName: node
linkType: hard
"@esbuild/android-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/android-x64@npm:0.25.12"
"@esbuild/android-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/android-x64@npm:0.28.1"
conditions: os=android & cpu=x64
languageName: node
linkType: hard
"@esbuild/darwin-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/darwin-arm64@npm:0.25.12"
"@esbuild/darwin-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/darwin-arm64@npm:0.28.1"
conditions: os=darwin & cpu=arm64
languageName: node
linkType: hard
"@esbuild/darwin-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/darwin-x64@npm:0.25.12"
"@esbuild/darwin-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/darwin-x64@npm:0.28.1"
conditions: os=darwin & cpu=x64
languageName: node
linkType: hard
"@esbuild/freebsd-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/freebsd-arm64@npm:0.25.12"
"@esbuild/freebsd-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/freebsd-arm64@npm:0.28.1"
conditions: os=freebsd & cpu=arm64
languageName: node
linkType: hard
"@esbuild/freebsd-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/freebsd-x64@npm:0.25.12"
"@esbuild/freebsd-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/freebsd-x64@npm:0.28.1"
conditions: os=freebsd & cpu=x64
languageName: node
linkType: hard
"@esbuild/linux-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-arm64@npm:0.25.12"
"@esbuild/linux-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-arm64@npm:0.28.1"
conditions: os=linux & cpu=arm64
languageName: node
linkType: hard
"@esbuild/linux-arm@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-arm@npm:0.25.12"
"@esbuild/linux-arm@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-arm@npm:0.28.1"
conditions: os=linux & cpu=arm
languageName: node
linkType: hard
"@esbuild/linux-ia32@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-ia32@npm:0.25.12"
"@esbuild/linux-ia32@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-ia32@npm:0.28.1"
conditions: os=linux & cpu=ia32
languageName: node
linkType: hard
"@esbuild/linux-loong64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-loong64@npm:0.25.12"
"@esbuild/linux-loong64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-loong64@npm:0.28.1"
conditions: os=linux & cpu=loong64
languageName: node
linkType: hard
"@esbuild/linux-mips64el@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-mips64el@npm:0.25.12"
"@esbuild/linux-mips64el@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-mips64el@npm:0.28.1"
conditions: os=linux & cpu=mips64el
languageName: node
linkType: hard
"@esbuild/linux-ppc64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-ppc64@npm:0.25.12"
"@esbuild/linux-ppc64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-ppc64@npm:0.28.1"
conditions: os=linux & cpu=ppc64
languageName: node
linkType: hard
"@esbuild/linux-riscv64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-riscv64@npm:0.25.12"
"@esbuild/linux-riscv64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-riscv64@npm:0.28.1"
conditions: os=linux & cpu=riscv64
languageName: node
linkType: hard
"@esbuild/linux-s390x@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-s390x@npm:0.25.12"
"@esbuild/linux-s390x@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-s390x@npm:0.28.1"
conditions: os=linux & cpu=s390x
languageName: node
linkType: hard
"@esbuild/linux-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/linux-x64@npm:0.25.12"
"@esbuild/linux-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/linux-x64@npm:0.28.1"
conditions: os=linux & cpu=x64
languageName: node
linkType: hard
"@esbuild/netbsd-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/netbsd-arm64@npm:0.25.12"
"@esbuild/netbsd-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/netbsd-arm64@npm:0.28.1"
conditions: os=netbsd & cpu=arm64
languageName: node
linkType: hard
"@esbuild/netbsd-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/netbsd-x64@npm:0.25.12"
"@esbuild/netbsd-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/netbsd-x64@npm:0.28.1"
conditions: os=netbsd & cpu=x64
languageName: node
linkType: hard
"@esbuild/openbsd-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/openbsd-arm64@npm:0.25.12"
"@esbuild/openbsd-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/openbsd-arm64@npm:0.28.1"
conditions: os=openbsd & cpu=arm64
languageName: node
linkType: hard
"@esbuild/openbsd-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/openbsd-x64@npm:0.25.12"
"@esbuild/openbsd-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/openbsd-x64@npm:0.28.1"
conditions: os=openbsd & cpu=x64
languageName: node
linkType: hard
"@esbuild/openharmony-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/openharmony-arm64@npm:0.25.12"
"@esbuild/openharmony-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/openharmony-arm64@npm:0.28.1"
conditions: os=openharmony & cpu=arm64
languageName: node
linkType: hard
"@esbuild/sunos-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/sunos-x64@npm:0.25.12"
"@esbuild/sunos-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/sunos-x64@npm:0.28.1"
conditions: os=sunos & cpu=x64
languageName: node
linkType: hard
"@esbuild/win32-arm64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/win32-arm64@npm:0.25.12"
"@esbuild/win32-arm64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/win32-arm64@npm:0.28.1"
conditions: os=win32 & cpu=arm64
languageName: node
linkType: hard
"@esbuild/win32-ia32@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/win32-ia32@npm:0.25.12"
"@esbuild/win32-ia32@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/win32-ia32@npm:0.28.1"
conditions: os=win32 & cpu=ia32
languageName: node
linkType: hard
"@esbuild/win32-x64@npm:0.25.12":
version: 0.25.12
resolution: "@esbuild/win32-x64@npm:0.25.12"
"@esbuild/win32-x64@npm:0.28.1":
version: 0.28.1
resolution: "@esbuild/win32-x64@npm:0.28.1"
conditions: os=win32 & cpu=x64
languageName: node
linkType: hard
@@ -496,36 +496,36 @@ __metadata:
languageName: node
linkType: hard
"esbuild@npm:^0.25.0":
version: 0.25.12
resolution: "esbuild@npm:0.25.12"
"esbuild@npm:^0.28.1":
version: 0.28.1
resolution: "esbuild@npm:0.28.1"
dependencies:
"@esbuild/aix-ppc64": "npm:0.25.12"
"@esbuild/android-arm": "npm:0.25.12"
"@esbuild/android-arm64": "npm:0.25.12"
"@esbuild/android-x64": "npm:0.25.12"
"@esbuild/darwin-arm64": "npm:0.25.12"
"@esbuild/darwin-x64": "npm:0.25.12"
"@esbuild/freebsd-arm64": "npm:0.25.12"
"@esbuild/freebsd-x64": "npm:0.25.12"
"@esbuild/linux-arm": "npm:0.25.12"
"@esbuild/linux-arm64": "npm:0.25.12"
"@esbuild/linux-ia32": "npm:0.25.12"
"@esbuild/linux-loong64": "npm:0.25.12"
"@esbuild/linux-mips64el": "npm:0.25.12"
"@esbuild/linux-ppc64": "npm:0.25.12"
"@esbuild/linux-riscv64": "npm:0.25.12"
"@esbuild/linux-s390x": "npm:0.25.12"
"@esbuild/linux-x64": "npm:0.25.12"
"@esbuild/netbsd-arm64": "npm:0.25.12"
"@esbuild/netbsd-x64": "npm:0.25.12"
"@esbuild/openbsd-arm64": "npm:0.25.12"
"@esbuild/openbsd-x64": "npm:0.25.12"
"@esbuild/openharmony-arm64": "npm:0.25.12"
"@esbuild/sunos-x64": "npm:0.25.12"
"@esbuild/win32-arm64": "npm:0.25.12"
"@esbuild/win32-ia32": "npm:0.25.12"
"@esbuild/win32-x64": "npm:0.25.12"
"@esbuild/aix-ppc64": "npm:0.28.1"
"@esbuild/android-arm": "npm:0.28.1"
"@esbuild/android-arm64": "npm:0.28.1"
"@esbuild/android-x64": "npm:0.28.1"
"@esbuild/darwin-arm64": "npm:0.28.1"
"@esbuild/darwin-x64": "npm:0.28.1"
"@esbuild/freebsd-arm64": "npm:0.28.1"
"@esbuild/freebsd-x64": "npm:0.28.1"
"@esbuild/linux-arm": "npm:0.28.1"
"@esbuild/linux-arm64": "npm:0.28.1"
"@esbuild/linux-ia32": "npm:0.28.1"
"@esbuild/linux-loong64": "npm:0.28.1"
"@esbuild/linux-mips64el": "npm:0.28.1"
"@esbuild/linux-ppc64": "npm:0.28.1"
"@esbuild/linux-riscv64": "npm:0.28.1"
"@esbuild/linux-s390x": "npm:0.28.1"
"@esbuild/linux-x64": "npm:0.28.1"
"@esbuild/netbsd-arm64": "npm:0.28.1"
"@esbuild/netbsd-x64": "npm:0.28.1"
"@esbuild/openbsd-arm64": "npm:0.28.1"
"@esbuild/openbsd-x64": "npm:0.28.1"
"@esbuild/openharmony-arm64": "npm:0.28.1"
"@esbuild/sunos-x64": "npm:0.28.1"
"@esbuild/win32-arm64": "npm:0.28.1"
"@esbuild/win32-ia32": "npm:0.28.1"
"@esbuild/win32-x64": "npm:0.28.1"
dependenciesMeta:
"@esbuild/aix-ppc64":
optional: true
@@ -581,7 +581,7 @@ __metadata:
optional: true
bin:
esbuild: bin/esbuild
checksum: 10c0/c205357531423220a9de8e1e6c6514242bc9b1666e762cd67ccdf8fdfdc3f1d0bd76f8d9383958b97ad4c953efdb7b6e8c1f9ca5951cd2b7c5235e8755b34a6b
checksum: 10c0/29cd456a79ce35ac2c7e05fe871330416b2c395c045d849653f843e51378d6e0d6e774d6dcd01b35f4e83238a29bf8decd04fcd34b3780c589a250b21e5f92bb
languageName: node
linkType: hard
@@ -838,7 +838,7 @@ __metadata:
resolution: "root-workspace-0b6124@workspace:."
dependencies:
archiver: "npm:^7.0.1"
esbuild: "npm:^0.25.0"
esbuild: "npm:^0.28.1"
languageName: unknown
linkType: soft