stack.pulse
#stacks/esbuild/tooling

esbuild release notes, breaking changes, and upgrade notes.

An extremely fast bundler for the web StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.

releases
5
breaking
1
security
1
deprecated
0
migrations
0

Get source-linked upgrade notes and occasional sponsor recommendations. No GitHub login required.

what stackpulse tracks

esbuild releases from GitHub

StackPulse watches esbuild release notes and keeps the original source link close to every summary.

upgrade risk

Breaking changes and deprecations

Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.

migration notes

Source-backed next steps

Migration steps and recommended actions are only shown when the upstream release notes support them.

# latest_releases

source-backed
v0.28.1highfeaturesecurityJun 11, 2026

v0.28.1

This release addresses a security vulnerability in esbuild's local development server on Windows, adds integrity checks to the Deno API, and fixes several bugs related to module evaluation, the `new` operator, and variable renaming.

affected

Users of esbuild's local development server on Windows and those using the Deno API are directly affected by the security fixes.

action

Update to version 0.28.1 to benefit from security fixes and bug improvements.

release_signals
!Disallowed `\` in local development server HTTP requests to prevent directory traversal on Windows (GHSA-g7r4-m6w7-qqqr)
!Added integrity checks to esbuild's Deno API to ensure downloaded binaries match expected content (GHSA-gv7w-rqvm-qjhr)
+Added integrity checks to esbuild's Deno install script
+Fixed module evaluation when an error is thrown
+Fixed edge cases around the `new` operator
+Fixed renaming of nested `var` declarations
+Emit `var` instead of `const` for certain TypeScript-only constructs for ES5
view source on github->
v0.28.0mediumbreakingfeatureApr 2, 2026

v0.28.0

This release introduces support for the TC39 import text proposal, adds integrity checks to esbuild's fallback download path, and updates the Go compiler to version 1.26.1.

affected

Users relying on esbuild's fallback download path for installation may be affected by the new integrity checks.

action

Ensure that your installation process accommodates the new integrity checks for esbuild's binaries.

release_signals
-Integrity checks for downloaded binaries are now enforced, which could affect installations that rely on the fallback download path.
+Support for `with { type: 'text' }` imports, aligning with the TC39 import text proposal.
+Integrity checks added to the fallback download path for esbuild's platform-specific packages.
view source on github->
v0.27.7mediumfeatureApr 2, 2026

v0.27.7

This release fixes an issue with the lowering of `define` semantics for TypeScript parameter properties, ensuring class fields are correctly generated for environments that do not support them.

affected

Developers using TypeScript parameter properties with esbuild in environments that do not support class fields are affected.

action

Upgrade to version 0.27.7 to ensure correct lowering of TypeScript parameter properties.

view source on github->
v0.27.5mediumfeatureApr 2, 2026

v0.27.5

This release fixes a regression in the `metafile` feature, corrects an edge case in async generator transformation, and improves TypeScript parameter properties handling. It also adds support for the `es2025` target in `tsconfig.json`.

affected

Users relying on async generator transformations, `metafile` functionality, or TypeScript parameter properties may be affected.

action

Update to v0.27.5 to benefit from bug fixes and improvements.

release_signals
+Support for `es2025` as a target in `tsconfig.json`
+Improved TypeScript parameter properties handling with `useDefineForClassFields`
view source on github->
v0.27.4mediumfeatureMar 12, 2026

v0.27.4

This release fixes a regression with CSS media queries, addresses an edge case with the `inject` feature, and improves API handling of large metafiles.

affected

Users relying on CSS media queries or the `inject` feature may be affected by the fixes.

action

Update to version 0.27.4 to benefit from the fixes.

view source on github->