Skip to content

chore(deps): bump esbuild from 0.27.4 to 0.27.7#185

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/esbuild-0.27.7
Open

chore(deps): bump esbuild from 0.27.4 to 0.27.7#185
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/esbuild-0.27.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps esbuild from 0.27.4 to 0.27.7.

Release notes

Sourced from esbuild's releases.

v0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
    class Foo {
      constructor(public x = 1) {}
      y = 2
    }
    // Old output (with --loader=ts --target=es2021)
    class Foo {
    constructor(x = 1) {
    this.x = x;
    __publicField(this, "y", 2);
    }
    x;
    }
    // New output (with --loader=ts --target=es2021)
    class Foo {
    constructor(x = 1) {
    __publicField(this, "x", x);
    __publicField(this, "y", 2);
    }
    }

v0.27.5

  • Fix for an async generator edge case (#4401, #4417)

    Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

    async function* inner() { yield 1; yield 2 }
    async function* outer() { yield* inner() }
    let gen = outer()
    for await (let x of [gen.next(), gen.next()]) console.log(x)

    Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

    This fix was contributed by @​2767mr.

  • Fix a regression when metafile is enabled (#4420, #4418)

    This release fixes a regression introduced by the previous release. When metafile: true was enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
    class Foo {
      constructor(public x = 1) {}
      y = 2
    }
    // Old output (with --loader=ts --target=es2021)
    class Foo {
    constructor(x = 1) {
    this.x = x;
    __publicField(this, "y", 2);
    }
    x;
    }
    // New output (with --loader=ts --target=es2021)
    class Foo {
    constructor(x = 1) {
    __publicField(this, "x", x);
    __publicField(this, "y", 2);
    }
    }

0.27.5

  • Fix for an async generator edge case (#4401, #4417)

    Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

    async function* inner() { yield 1; yield 2 }
    async function* outer() { yield* inner() }
    let gen = outer()
    for await (let x of [gen.next(), gen.next()]) console.log(x)

    Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

    This fix was contributed by @​2767mr.

  • Fix a regression when metafile is enabled (#4420, #4418)

... (truncated)

Commits
  • 2025c9f publish 0.27.7 to npm
  • c6b586e fix typo in Makefile for @esbuild/win32-x64
  • 9785e14 publish 0.27.6 to npm
  • b169d8c Revert "update go 1.25.7 => 1.26.1"
  • 7ac8762 run make update-compat-table
  • 8b5ff53 remove an incorrect else
  • e955268 fix #4421: lower generated class fields if needed
  • a5a2500 ci: move make test-old-ts
  • b71e7ac omit go's buildvcs for more reproducible builds
  • 7406b09 organize make platform-all output in Makefile
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [esbuild](https://github.com/evanw/esbuild) from 0.27.4 to 0.27.7.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.4...v0.27.7)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.27.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 12, 2026
@dependabot dependabot Bot requested a review from garybrowndev as a code owner June 12, 2026 22:23
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 12, 2026
@github-actions github-actions Bot added the github GitHub configuration, actions, and repository settings label Jun 12, 2026
@github-actions

github-actions Bot commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

🤖 Automated PR Report for fbfbbf6

Bundle Size Report (ci-bundle-analysis.yml)

Metric Size
Total dist size 2.59 MB
Main JS bundle 305.37 KB
Main CSS bundle 43.77 KB
Total assets 7 files

Recommendations

  • 🎯 Keep main JS bundle under 200 KB for optimal performance
  • 🎨 Keep CSS bundle under 50 KB
  • 📁 Keep total dist size under 2 MB

Bundle analysis completed at 2026-06-12T22:25:03.744Z

View Workflow Run

Chromium Browser Test Results (ci-chromium-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 24.67s
Accessibility Tests ✅ PASS 7 7 0 8.36s

View Workflow Run

Code Coverage Results (ci-coverage-reporting.yml)

Category Lines Statements Functions Branches
Total 62.69% 63.34% 74.26% 60.75%

View Workflow Run

Code Quality Results (ci-code-quality.yml)

Check Status
ESLint ✅ Passed
Prettier ✅ Passed

📊 Code Statistics

Metric Count
Files 29
Lines 16248

View Workflow Run

CodeQL Security Analysis (security-codeql-security-analysis.yml)

Total Alerts: 0

Severity Breakdown

Severity Count
🔴 Error 0
⚠️ Warning 0
ℹ️ Note 0

✅ No security alerts found.

View Workflow Run

Dependency Review (security-dependency-review.yml)

✅ No vulnerabilities or denied packages found.

View Workflow Run

Firefox Browser Test Results (ci-firefox-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 27.57s
Accessibility Tests ✅ PASS 7 7 0 10.81s

View Workflow Run

Lighthouse Audit - Desktop (ci-lighthouse-desktop.yml)

📊 Desktop Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Mobile (ci-lighthouse-mobile.yml)

📊 Mobile Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 91%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Surge Desktop (cd-deploy-pr-preview.yml)

🖥️ Desktop Lighthouse Results

Tested URL: https://pinball-trainer-pr-185.surge.sh/

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

Lighthouse Audit - Surge Mobile (cd-deploy-pr-preview.yml)

📱 Mobile Lighthouse Results

Tested URL: https://pinball-trainer-pr-185.surge.sh/

Metric Score
Performance 90%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

npm Audit Results (security-npm-audit.yml)

⚠️ Found 24 vulnerabilities.

Severity Count
Moderate 6
High 6
Total 12

View Workflow Run

OWASP Dependency Check (security-owasp-dependency-check.yml)

Total Vulnerabilities: 0

Severity Breakdown

Severity Count
🔴 High/Critical 0
⚠️ Medium 0
ℹ️ Low 0

✅ No vulnerabilities found.

View Workflow Run

Preview Deployment (cd-deploy-pr-preview.yml)

Your preview deployment is ready!

🔗 Preview URL: https://pinball-trainer-pr-185.surge.sh

What's included:

  • ✅ Standalone HTML build (same as production)
  • ✅ All assets embedded inline
  • ✅ Fully offline-capable
  • ✅ Production optimizations

Testing checklist:

  • Test dark mode toggle
  • Test preset loading
  • Test practice mode
  • Test recall mode
  • Test PWA install prompt
  • Test offline functionality

Preview will be updated on each new commit to this PR.


Deployed at 2026-06-12T22:28:15.505Z

View Workflow Run

Pull Request Labeler (automation-label-pull-request.yml)

PR: chore(deps): bump esbuild from 0.27.4 to 0.27.7 (#185)

Current Labels

  • dependencies
  • github

View Workflow Run

Standalone Build Results (ci-standalone-build.yml)

File Size
pinball-trainer-standalone.html 0.80 MB

View Workflow Run

Trivy Security Scan (security-trivy-scan.yml)

Trivy scan completed. Results have been uploaded to the GitHub Security tab.

Scanned Categories

  • ✅ Vulnerabilities (CRITICAL, HIGH)
  • ✅ Secrets / Credentials
  • ✅ Infrastructure Configuration

View Workflow Run

Unit Test Results (ci-unit-tests.yml)

Suite Status Tests Failures Errors Time
Unit Tests ✅ PASS 253 0 0 113s
Accessibility Tests ✅ PASS 7 0 0 1s

View Workflow Run

Visual Regression Results (ci-visual-regression-tests.yml)

Suite Status Total Passed Failed Time
Visual Comparison ✅ PASS 24 24 0 54.01s

View Workflow Run

WebKit Browser Test Results (ci-webkit-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 66.89s
Accessibility Tests ✅ PASS 7 7 0 17.6s

View Workflow Run

@codecov

codecov Bot commented Jun 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github GitHub configuration, actions, and repository settings

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants