esbuild issue?

[dkrasne]

I've started getting this GitHub warning when I do a push of my Framework app:

Any advice on how to fix it would be much appreciated. (I tried just adding the specified text to my package.json, and then the next push failed, so that clearly wasn't the right approach.)

[dkrasne]

In case it's useful, here's the output from npm audit:

# npm audit report

esbuild  <=0.24.2
Severity: moderate
esbuild enables any website to send any requests to the development server and read the response - https://github.com/advisories/GHSA-67mh-4wv8-2f99
No fix available
node_modules/esbuild
  @observablehq/framework  *
  Depends on vulnerable versions of esbuild
  node_modules/@observablehq/framework

2 moderate severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

[Fil]

Yes we will probably have to release a new version (see #1953)

[dkrasne]

Thanks!