Pin esbuild to >=0.28.1 (GHSA-g7r4-m6w7-qqqr)

EMBEDDING.md

@@ -253,7 +253,9 @@ import { NodeUnixSocketTransport, loadBlitWasm } from "@blit-sh/core/node";
 // `@blit-sh/browser/node` build it is returned as-is.)
 const wasm = await loadBlitWasm();
 
-const transport = new NodeUnixSocketTransport(process.env.BLIT_SOCK ?? "/tmp/blit.sock");
+const transport = new NodeUnixSocketTransport(
+  process.env.BLIT_SOCK ?? "/tmp/blit.sock",
+);
 const workspace = new BlitWorkspace({
   wasm,
   logger: nullLogger, // no-op logger; omit to log lifecycle events to console

js/core/src/BlitConnection.ts

@@ -1262,11 +1262,10 @@ export class BlitConnection {
           // may omit the status; default to EXIT_STATUS_UNKNOWN.
           const exitStatus =
             bytes.length >= 7
-              ? new DataView(
-                  bytes.buffer,
-                  bytes.byteOffset + 3,
-                  4,
-                ).getInt32(0, true)
+              ? new DataView(bytes.buffer, bytes.byteOffset + 3, 4).getInt32(
+                  0,
+                  true,
+                )
               : EXIT_STATUS_UNKNOWN;
           this.updateSession(sessionId, { state: "exited", exitStatus });
         }

js/core/src/__tests__/BlitTerminalSurface.test.ts

@@ -285,7 +285,9 @@ describe("BlitTerminalSurface Android composition", () => {
     fireCompositionInput(input, "hel", "insertCompositionText");
     fireCompositionInput(input, "hell", "insertCompositionText");
     fireCompositionInput(input, "hello", "insertCompositionText");
-    input.dispatchEvent(new CompositionEvent("compositionend", { data: "hello" }));
+    input.dispatchEvent(
+      new CompositionEvent("compositionend", { data: "hello" }),
+    );
 
     const calls = sendInput.mock.calls.map((c) =>
       new TextDecoder().decode(c[1] as Uint8Array),
@@ -303,7 +305,9 @@ describe("BlitTerminalSurface Android composition", () => {
     fireCompositionInput(input, "hel", "insertCompositionText");
     fireCompositionInput(input, "helo", "insertCompositionText");
     fireCompositionInput(input, "hel", "insertCompositionText");
-    input.dispatchEvent(new CompositionEvent("compositionend", { data: "hel" }));
+    input.dispatchEvent(
+      new CompositionEvent("compositionend", { data: "hel" }),
+    );
 
     const calls = sendInput.mock.calls.map((c) =>
       Array.from(c[1] as Uint8Array),

js/core/src/node-wasm.ts

@@ -29,9 +29,10 @@ import type { BlitWasmModule } from "./TerminalStore";
  *   with `@blit-sh/browser`.
  */
 export async function loadBlitWasm(wasmPath?: string): Promise<BlitWasmModule> {
-  const mod = (await import("@blit-sh/browser")) as unknown as BlitWasmModule & {
-    default?: unknown;
-  };
+  const mod =
+    (await import("@blit-sh/browser")) as unknown as BlitWasmModule & {
+      default?: unknown;
+    };
 
   // A self-initializing build (`--target nodejs`/`bundler`) has already
   // instantiated the module on import and exposes no `init` default export.
@@ -41,8 +42,12 @@ export async function loadBlitWasm(wasmPath?: string): Promise<BlitWasmModule> {
 
   const location =
     wasmPath ?? import.meta.resolve("@blit-sh/browser/blit_browser_bg.wasm");
-  const path = location.startsWith("file:") ? fileURLToPath(location) : location;
+  const path = location.startsWith("file:")
+    ? fileURLToPath(location)
+    : location;
   const bytes = await readFile(path);
-  await init({ module_or_path: bytes as unknown as Parameters<typeof init>[0] });
+  await init({
+    module_or_path: bytes as unknown as Parameters<typeof init>[0],
+  });
   return mod;
 }