Update esbuild → 0.19.5 (unknown)

[depfu]

---

Welcome to Depfu 👋

This is one of the first three pull requests with dependency updates we've sent your way. We tried to start with a few easy patch-level updates. Hopefully your tests will pass and you can merge this pull request without too much risk. This should give you an idea how Depfu works in general.

After you merge your first pull request, we'll send you a few more. We'll never open more than seven PRs at the same time so you're not getting overwhelmed with updates.

Let us know if you have any questions. Thanks so much for giving Depfu a try!

---

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ esbuild (^0.18.12 → ^0.19.5) · Repo · Changelog

Release Notes

0.19.5

• Fix a regression in 0.19.0 regarding paths in tsconfig.json (#3354)

  The fix in esbuild version 0.19.0 to process tsconfig.json aliases before the --packages=external setting unintentionally broke an edge case in esbuild's handling of certain tsconfig.json aliases where there are multiple files with the same name in different directories. This release adjusts esbuild's behavior for this edge case so that it passes while still processing aliases before --packages=external. Please read the linked issue for more details.

• Fix a CSS font property minification bug (#3452)

  This release fixes a bug where esbuild's CSS minifier didn't insert a space between the font size and the font family in the font CSS shorthand property in the edge case where the original source code didn't already have a space and the leading string token was shortened to an identifier:

  /* Original code */
  .foo { font: 16px"Menlo"; }
  /* Old output (with --minify) */
  
  .foo{font:16pxMenlo}
  /* New output (with --minify) */
  
  .foo{font:16px Menlo}

• Fix bundling CSS with asset names containing spaces (#3410)

  Assets referenced via CSS url() tokens may cause esbuild to generate invalid output when bundling if the file name contains spaces (e.g. url(image 2.png)). With this release, esbuild will now quote all bundled asset references in url() tokens to avoid this problem. This only affects assets loaded using the file and copy loaders.

• Fix invalid CSS url() tokens in @import rules (#3426)

  In the future, CSS url() tokens may contain additional stuff after the URL. This is irrelevant today as no CSS specification does this. But esbuild previously had a bug where using these tokens in an @import rule resulted in malformed output. This bug has been fixed.

• Fix browser + false + type: module in package.json (#3367)

  The browser field in package.json allows you to map a file to false to have it be treated as an empty file when bundling for the browser. However, if package.json contains "type": "module" then all .js files will be considered ESM, not CommonJS. Importing a named import from an empty CommonJS file gives you undefined, but importing a named export from an empty ESM file is a build error. This release changes esbuild's interpretation of these files mapped to false in this situation from ESM to CommonJS to avoid generating build errors for named imports.

• Fix a bug in top-level await error reporting (#3400)

  Using require() on a file that contains top-level await is not allowed because require() must return synchronously and top-level await makes that impossible. You will get a build error if you try to bundle code that does this with esbuild. This release fixes a bug in esbuild's error reporting code for complex cases of this situation involving multiple levels of imports to get to the module containing the top-level await.

• Update to Unicode 15.1.0

  The character tables that determine which characters form valid JavaScript identifiers have been updated from Unicode version 15.0.0 to the newly-released Unicode version 15.1.0. I'm not putting an example in the release notes because all of the new characters will likely just show up as little squares since fonts haven't been updated yet. But you can read https://www.unicode.org/versions/Unicode15.1.0/#Summary for more information about the changes.

  This upgrade was contributed by @JLHwung.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 20 commits:

• publish 0.19.5 to npm
• fix #3367: ignore ESM flag for disabled modules
• fix #3354: `tsconfig.json` regression with `paths`
• resolver: move `IsExternal` into `PathPair`
• fix #3400: bug in top-level await error reporting
• fix #3426: improve invalid `url()` token parsing
• css: fix url token backtracking with leading space
• fix #3410: quote asset references in url tokens
• fix #3452: insert space in `font` when minifying
• update go 1.20.7 => 1.20.10
• update benchmark svgs
• parcel: minification fix for typescript benchmark
• parcel: correctness fix for typescript benchmark
• parcel: full minification requires a config file
• Upgrade to [email protected]
• Upgrade to [email protected]
• Upgrade to [email protected]
• update to Unicode 15.1 (#3424)
• link to faq entry in `go.mod`
• run `make update-compat-table`

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)