chore(deps): update dependency esbuild to v0.17.18

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
esbuild	0.17.15 -> 0.17.18

---

Release Notes

evanw/esbuild

v0.17.18

Compare Source

• Fix non-default JSON import error with export {} from (#​3070)

  This release fixes a bug where esbuild incorrectly identified statements of the form export { default as x } from "y" assert { type: "json" } as a non-default import. The bug did not affect code of the form import { default as x } from ... (only code that used the export keyword).

• Fix a crash with an invalid subpath import (#​3067)

  Previously esbuild could crash when attempting to generate a friendly error message for an invalid subpath import (i.e. an import starting with #). This happened because esbuild originally only supported the exports field and the code for that error message was not updated when esbuild later added support for the imports field. This crash has been fixed.

v0.17.17

Compare Source

• Fix CSS nesting transform for top-level & (#​3052)

  Previously esbuild could crash with a stack overflow when lowering CSS nesting rules with a top-level &, such as in the code below. This happened because esbuild's CSS nesting transform didn't handle top-level &, causing esbuild to inline the top-level selector into itself. This release handles top-level & by replacing it with the :scope pseudo-class:

  /* Original code */
  &,
  a {
    .b {
      color: red;
    }
  }
  
  /* New output (with --target=chrome90) */
  :is(:scope, a) .b {
    color: red;
  }

• Support exports in package.json for extends in tsconfig.json (#​3058)

  TypeScript 5.0 added the ability to use extends in tsconfig.json to reference a path in a package whose package.json file contains an exports map that points to the correct location. This doesn't automatically work in esbuild because tsconfig.json affects esbuild's path resolution, so esbuild's normal path resolution logic doesn't apply.

  This release adds support for doing this by adding some additional code that attempts to resolve the extends path using the exports field. The behavior should be similar enough to esbuild's main path resolution logic to work as expected.

  Note that esbuild always treats this extends import as a require() import since that's what TypeScript appears to do. Specifically the require condition will be active and the import condition will be inactive.

• Fix watch mode with NODE_PATH (#​3062)

  Node has a rarely-used feature where you can extend the set of directories that node searches for packages using the NODE_PATH environment variable. While esbuild supports this too, previously a bug prevented esbuild's watch mode from picking up changes to imported files that were contained directly in a NODE_PATH directory. You're supposed to use NODE_PATH for packages, but some people abuse this feature by putting files in that directory instead (e.g. node_modules/some-file.js instead of node_modules/some-pkg/some-file.js). The watch mode bug happens when you do this because esbuild first tries to read some-file.js as a directory and then as a file. Watch mode was incorrectly waiting for some-file.js to become a valid directory. This release fixes this edge case bug by changing watch mode to watch some-file.js as a file when this happens.

v0.17.16

Compare Source

• Fix CSS nesting transform for triple-nested rules that start with a combinator (#​3046)

  This release fixes a bug with esbuild where triple-nested CSS rules that start with a combinator were not transformed correctly for older browsers. Here's an example of such a case before and after this bug fix:

  /* Original input */
  .a {
    color: red;
    > .b {
      color: green;
      > .c {
        color: blue;
      }
    }
  }
  
  /* Old output (with --target=chrome90) */
  .a {
    color: red;
  }
  .a > .b {
    color: green;
  }
  .a .b > .c {
    color: blue;
  }
  
  /* New output (with --target=chrome90) */
  .a {
    color: red;
  }
  .a > .b {
    color: green;
  }
  .a > .b > .c {
    color: blue;
  }

• Support --inject with a file loaded using the copy loader (#​3041)

  This release now allows you to use --inject with a file that is loaded using the copy loader. The copy loader copies the imported file to the output directory verbatim and rewrites the path in the import statement to point to the copied output file. When used with --inject, this means the injected file will be copied to the output directory as-is and a bare import statement for that file will be inserted in any non-copy output files that esbuild generates.

  Note that since esbuild doesn't parse the contents of copied files, esbuild will not expose any of the export names as usable imports when you do this (in the way that esbuild's --inject feature is typically used). However, any side-effects that the injected file has will still occur.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[replay-io]

16 replays were recorded for 5bd237d.

0 Failed

16 Passed

requireAuth graphql checks

    ```
    locator.waitFor: Target closed
    =========================== logs ===========================
    waiting for locator('.rw-form-error-title').locator('text=You don\'t have permission to do that') to be visible
    ============================================================
    ```
  </ol>
</details>
<li><a href=https://app.replay.io/recording/b7d6778d-adf2-4425-8eb5-24d1e7817c6e>useAuth hook, auth redirects checks</a></li>
<li><a href=https://app.replay.io/recording/a1ae8228-dbdf-4aaf-b385-65f4bca55521>Check that a specific blog post is prerendered</a></li>
<li><a href=https://app.replay.io/recording/3dfc937c-c4e7-4234-928f-bfe6ba754b1a>Check that about is prerendered</a></li>
<li><a href=https://app.replay.io/recording/d3fd4f74-3d62-47da-ac03-af3124006c0b>Check that homepage is prerendered</a></li>
<li><a href=https://app.replay.io/recording/035ee295-3fa8-4b4d-9426-762f69a662ad>Check that meta-tags are rendering the correct dynamic data</a></li>
<li><a href=https://app.replay.io/recording/cf5b5096-dbcc-47e6-adab-e3bbe5e4927e>Check that you can navigate from home page to specific blog post</a></li>
<li><a href=https://app.replay.io/recording/b89d2898-780b-4db2-9c47-c81ecfccc798>Waterfall prerendering (nested cells)</a></li>
<li><a href=https://app.replay.io/recording/0e279859-0f92-4593-9306-f276a3ef1c7a>RBAC: Admin user should be able to delete contacts</a></li>
<li><a href=https://app.replay.io/recording/e399ab21-ce44-4f5b-9594-acce0ed9a4e6>RBAC: Should not be able to delete contact as non-admin user</a></li>
<li><a href=https://app.replay.io/recording/efe85863-f5fb-4575-9ff6-443af8966d8c>Smoke test with dev server</a></li>
<li><a href=https://app.replay.io/recording/d449e6e8-9e5a-4e9e-897c-b27dc5c27e45>Smoke test with rw serve</a></li>
<li><a href=https://app.replay.io/recording/1b1a4088-da5f-47a8-be8a-72a55d55bad3>Loads Cell mocks when Cell is nested in another story</a></li>
<li><a href=https://app.replay.io/recording/50dc5b76-f80e-4fee-b6a7-c0f92705e022>Loads Cell Stories</a></li>
<li><a href=https://app.replay.io/recording/9cfd73f4-0b61-4166-8381-26849a528995>Loads MDX Stories</a></li>
<li><a href=https://app.replay.io/recording/63e81cc6-aa19-45e9-b8e7-8975312dae91>Mocks current user, and updates UI while dev server is running</a></li>

View test run on Replay ↗︎