what stackpulse tracks
esbuild releases from GitHub
StackPulse watches esbuild release notes and keeps the original source link close to every summary.
#stacks/esbuild/tooling
esbuild release notes, breaking changes, and upgrade notes.
An extremely fast bundler for the web StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
releases
5
breaking
1
security
1
deprecated
0
migrations
0
upgrade risk
Breaking changes and deprecations
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Source-backed next steps
Migration steps and recommended actions are only shown when the upstream release notes support them.
# latest_releases
source-backedv0.28.1highfeaturesecurityJun 11, 2026
v0.28.1
This release addresses a security vulnerability in esbuild's local development server on Windows, adds integrity checks to the Deno API, and fixes several bugs related to module evaluation, the `new` operator, and variable renaming.
affected
Users of esbuild's local development server on Windows and those using the Deno API are directly affected by the security fixes.
action
Update to version 0.28.1 to benefit from security fixes and bug improvements.
release_signals
!Disallowed `\` in local development server HTTP requests to prevent directory traversal on Windows (GHSA-g7r4-m6w7-qqqr)
!Added integrity checks to esbuild's Deno API to ensure downloaded binaries match expected content (GHSA-gv7w-rqvm-qjhr)
+Added integrity checks to esbuild's Deno install script
+Fixed module evaluation when an error is thrown
+Fixed edge cases around the `new` operator
+Fixed renaming of nested `var` declarations
+Emit `var` instead of `const` for certain TypeScript-only constructs for ES5