sriram veeraghanta 498f857be4 fix: resolve esbuild advisory and bump turbo to 2.9.18 (#9236) ...

Resolves the sole open Dependabot alert (GHSA-gv7w-rqvm-qjhr, high):
esbuild <0.28.1 lacks binary-integrity verification in its Deno install
path, enabling RCE via NPM_CONFIG_REGISTRY. The pnpm `overrides` entry
pinned the entire tree to esbuild 0.25.0; bump it to 0.28.1, which fixes
all transitive paths (vite, vitest, tsx, vite-node, esbuild-register).

Also bump turbo 2.9.14 -> 2.9.18 in the workspace catalog and the four
pinned production Dockerfiles (web, live, admin, space).

Verified: `pnpm audit` clean, admin react-router/vite build succeeds,
@plane/codemods vitest suite 33/33 passing.

2026-06-15 13:15:40 +05:30

..

app

[GIT-238] refactor: migrate types from apps/web to @plane/types (#9203)

2026-06-09 18:06:08 +05:30

ce

[GIT-238] refactor: migrate types from apps/web to @plane/types (#9203)

2026-06-09 18:06:08 +05:30

core

[GIT-238] refactor: migrate types from apps/web to @plane/types (#9203)

2026-06-09 18:06:08 +05:30

helpers

[WEB-6794] fix: align profile cover update with correct unsplash and upload handling (#8830)

2026-03-31 15:54:12 +05:30

nginx

fix(nginx): correct real_ip_header typo X-Forward-For → X-Forwarded-For (#8935)

2026-05-05 13:51:12 +05:30

public

…

styles

[WEB-5675] chore: implement fontsource as the fonts library (#8398)

2025-12-19 16:21:04 +05:30

.dockerignore

…

.env.example

…

.gitignore

…

.prettierignore

…

Dockerfile.dev

…

Dockerfile.web

fix: resolve esbuild advisory and bump turbo to 2.9.18 (#9236)

2026-06-15 13:15:40 +05:30

google.d.ts

…

manifest.json

…

package.json

fix: declare @tailwindcss/postcss in admin/space/web for Docker builds (#9189)

2026-06-01 16:44:16 +05:30

postcss.config.js

[WEB-5602] feat: new design system (#8220)

2025-12-12 20:50:14 +05:30

react-router.config.ts

…

tsconfig.json

fix: remove ee folder from web (#8622)

2026-02-10 20:01:42 +05:30

use-font-face-observer.d.ts

…

vite.config.ts

chore(deps): replace dotenvx with dotenv and update overrides (#8832)

2026-03-31 16:55:17 +05:30