fix(esbuild): update peerDep range (#30402)

## Current Behavior
`esbuild` has a [security
advisory](https://github.com/advisories/GHSA-67mh-4wv8-2f99) for
versions older than 0.25.0. `@nx/esbuild` does not allow versions
greater than 0.19.2 due to the range specified in peer dependencies.

A fix for this was attempted in #30167, but it still does not allow any
versions greater than 0.19.x due to the way [0.x.x releases are
handled](https://github.com/npm/node-semver#caret-ranges-123-025-004).

## Expected Behavior
`@nx/esbuild` allows any version from the current 0.19.2 onwards, not
including a future 1.x.x version. This will allow non-vulnerable
versions of `esbuild` to be used.

## Related Issue(s)
Fixes #30009 
Fixes #30370
This commit is contained in:
Tyler Hendrickson 2025-05-14 10:00:34 -06:00 committed by GitHub
parent cc22a07601
commit 21bdb35a07
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -39,7 +39,7 @@
"tslib": "^2.3.0" "tslib": "^2.3.0"
}, },
"peerDependencies": { "peerDependencies": {
"esbuild": "^0.19.2" "esbuild": ">=0.19.2 <1.0.0"
}, },
"peerDependenciesMeta": { "peerDependenciesMeta": {
"esbuild": { "esbuild": {