chore(deps-dev): Bump esbuild from 0.19.2 to 0.19.4

[dependabot]

Bumps esbuild from 0.19.2 to 0.19.4.

Release notes

Sourced from esbuild's releases.

v0.19.4

• Fix printing of JavaScript decorators in tricky cases (#3396)

  This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:

  // Original code
  import { constant } from './constants.js'
  import { imported } from 'external'
  import { undef } from './empty.js'
  class Foo {
    @constant()
    @imported()
    @undef()
    foo
  }
  // Old output (with --bundle --format=cjs --packages=external --minify-syntax)
  var import_external = require("external");
  var Foo = class {
  @​123()
  @(0, import_external.imported)()
  @(void 0)()
  foo;
  };
  // New output (with --bundle --format=cjs --packages=external --minify-syntax)
  var import_external = require("external");
  var Foo = class {
  @(123())
  @((0, import_external.imported)())
  @((void 0)())
  foo;
  };

• Allow pre-release versions to be passed to target (#3388)

  People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.

v0.19.3

• Fix list-style-type with the local-css loader (#3325)

  The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:

  /* Original code */
  ul { list-style-type: none }
  /* Old output (with --loader=local-css) */

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.19.4

• Fix printing of JavaScript decorators in tricky cases (#3396)

  This release fixes some bugs where esbuild's pretty-printing of JavaScript decorators could incorrectly produced code with a syntax error. The problem happened because esbuild sometimes substitutes identifiers for other expressions in the pretty-printer itself, but the decision about whether to wrap the expression or not didn't account for this. Here are some examples:

  // Original code
  import { constant } from './constants.js'
  import { imported } from 'external'
  import { undef } from './empty.js'
  class Foo {
    @constant()
    @imported()
    @undef()
    foo
  }
  // Old output (with --bundle --format=cjs --packages=external --minify-syntax)
  var import_external = require("external");
  var Foo = class {
  @​123()
  @(0, import_external.imported)()
  @(void 0)()
  foo;
  };
  // New output (with --bundle --format=cjs --packages=external --minify-syntax)
  var import_external = require("external");
  var Foo = class {
  @(123())
  @((0, import_external.imported)())
  @((void 0)())
  foo;
  };

• Allow pre-release versions to be passed to target (#3388)

  People want to be able to pass version numbers for unreleased versions of node (which have extra stuff after the version numbers) to esbuild's target setting and have esbuild do something reasonable with them. These version strings are of course not present in esbuild's internal feature compatibility table because an unreleased version has not been released yet (by definition). With this release, esbuild will now attempt to accept these version strings passed to target and do something reasonable with them.

0.19.3

• Fix list-style-type with the local-css loader (#3325)

  The local-css loader incorrectly treated all identifiers provided to list-style-type as a custom local identifier. That included identifiers such as none which have special meaning in CSS, and which should not be treated as custom local identifiers. This release fixes this bug:

  /* Original code */
  ul { list-style-type: none }

... (truncated)

Commits

• a75b16e publish 0.19.4 to npm
• 65a4439 fix #3396: js decorator pretty-printing bugs
• 6ad177c add some js decorator printing tests
• 0e1696f ignore TP in data from caniuse-lite
• e7bf735 fix #3390: allow using disposable functions (#3391)
• 24bea0e update compat-table (note: regexp unicode 15.1)
• ea9c644 fix #3388: do something with pre-release versions
• 673ad10 publish 0.19.3 to npm
• 6402f11 basic support for parsing import attributes
• 7ece556 fix #3322: avoid temporaries before "use strict"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
esbuild	0.19.2...0.19.4	None	+22/-22	209 MB	evanw