Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update esbuild dependency in lingui/cli to ^0.25.0 #2181

Open
srenggli opened this issue Feb 13, 2025 · 1 comment · May be fixed by #2187
Open

Update esbuild dependency in lingui/cli to ^0.25.0 #2181

srenggli opened this issue Feb 13, 2025 · 1 comment · May be fixed by #2187

Comments

@srenggli
Copy link

Versions <= 0.24.2 of esbuild have a security vulnerability, that is fixed in version 0.25.0 and above:
GHSA-67mh-4wv8-2f99

Please update the dependency in packages/cli/package.json

@wkillerud wkillerud linked a pull request Feb 28, 2025 that will close this issue
8 tasks
@wkillerud
Copy link

wkillerud commented Feb 28, 2025

[email protected] has an open issue related to sourcemaps that breaks parts of the CLI's experimental extractor (lingui extract-experimental, see #2187).

For users who are here because of npm audit a workaround is to use "overrides" in your package.json. If you use lingui extract-experimental this will generate weird pathnames to files in your .po files.

If you use the regular lingui extract you should be unaffected.

{
  "overrides": {
    "esbuild": "0.25.0"
  }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants