karma/portfolio
Watch
1
0
Fork
You've already forked portfolio
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security: update esbuild to 0.28.1 #1

Merged
karma merged 1 commit from fix/security-SNYK-JS-ESBUILD-17750822 into main 2026-07-23 12:37:22 +02:00
Conversation 0 Commits 1 Files changed 1 +107 -107
karma commented 2026-07-23 12:34:41 +02:00
Owner
Copy link

Vulnerability

  • SNYK-JS-ESBUILD-17750822 — Critical — Resources Downloaded over Insecure Protocol
  • SNYK-JS-ESBUILD-17750815 — Low — Directory Traversal

Changes

  • Relock transitive esbuild dependency from 0.28.0 to 0.28.1
  • Update platform-specific esbuild packages in package-lock.json

Validation

  • Snyk SCA re-scan confirms both esbuild findings resolved
  • Full test suite passes
  • TypeScript typecheck passes
  • No new Snyk vulnerabilities introduced
## Vulnerability - SNYK-JS-ESBUILD-17750822 — Critical — Resources Downloaded over Insecure Protocol - SNYK-JS-ESBUILD-17750815 — Low — Directory Traversal ## Changes - Relock transitive `esbuild` dependency from 0.28.0 to 0.28.1 - Update platform-specific esbuild packages in `package-lock.json` ## Validation - [x] Snyk SCA re-scan confirms both esbuild findings resolved - [x] Full test suite passes - [x] TypeScript typecheck passes - [x] No new Snyk vulnerabilities introduced
fix(security): update esbuild to 0.28.1
All checks were successful
CI / test (pull_request) Successful in 2m7s
Details
CI / docker-verify (pull_request) Successful in 2m6s
Details
CI / docker-publish (pull_request) Has been skipped
Details
CI / deploy (pull_request) Has been skipped
Details
CI / test (push) Successful in 2m3s
Details
CI / docker-verify (push) Successful in 8s
Details
CI / docker-publish (push) Successful in 14s
Details
CI / deploy (push) Successful in 21s
Details
bc4a33eb33 
Resolves: SNYK-JS-ESBUILD-17750822, SNYK-JS-ESBUILD-17750815
Severity: Critical/Low
karma merged commit bc4a33eb33 into main 2026-07-23 12:37:22 +02:00
karma deleted branch fix/security-SNYK-JS-ESBUILD-17750822 2026-07-23 12:37:22 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
karma/portfolio!1
No description provided.