chore(deps): bump the esbuild group with 2 updates

[dependabot]

Bumps the esbuild group with 2 updates: @nx/esbuild and esbuild.

Updates @nx/esbuild from 20.0.11 to 20.8.2

Release notes

Sourced from @​nx/esbuild's releases.

20.8.2 (2025-05-16)

🚀 Features

• angular: update angular-rspack to 20.7 (#30737)
• linter: add support for package based secondary entry points (#30809)
• rspack: use custom WriteIndexHtmlPlugin to handle variable interpolation (#30805)

🩹 Fixes

• core: error when restoring http cache with no outputs (#30961)
• module-federation: remove disabling runtimeChunk (#30637)
• release: ensure generatorOptions and rootVersionActionsOptions are passed to updateLockfile function (#30796)
• release: ensure versionData is always populated even when no bumps (#30866)

❤️ Thank You

• Colum Ferry @​Coly010
• Craigory Coppola @​AgentEnder
• James Henry @​JamesHenry
• Miroslav Jonaš @​meeroslav
• Nicholas Cunningham @​ndcunningham
• Thomas Dekiere @​thdk

20.8.1 (2025-04-25)

🚀 Features

• nx-dev: add React landing page (#30612)
• nx-dev: add course preview component (83b235e9dd)

🩹 Fixes

• angular: remove deprecated standaloneConfig from generators (#30578)
• angular: handle ssr with convert-to-rspack (#30752)
• angular: convert-to-rspack correctly migrating existing custom webpack configs (#30778)
• core: improve flaky ci test (#30738)
• core: allow disabling output streaming with NX_STREAM_OUTPUT (#30834)
• js: remove check that ts plugin is used for ts sync generator (#30743)
• linter: remove empty entry in typescript eslint flat config (#30727)
• nx-dev: refer to the youtube video instead of storing the videos… (#30739)
• nx-dev: toc should only include headings from the article body (56e18a0d24)
• testing: fix cypress and playwright atomized targetDefaults so they match correctly (#30717)

❤️ Thank You

• Altan Stalker
• Colum Ferry @​Coly010
• Jack Hsu @​jaysoo
• Jason Jean @​FrozenPandaz

... (truncated)

Commits

• 176c792 feat(misc): set a development conditional export for buildable libraries wh...
• e0cae53 fix(js): update tinyglobby to speed up shallow file matching (#30415)
• ada8be4 fix(misc): fix misc issues in project generators for the ts solution setup (#...
• 7da48d6 fix(bundling): fix esbuild to work with ts project references (#30230)
• 9cbd476 fix(esbuild): update peerDep range (#30167)
• c6e9565 cleanup(core): move esbuild to use tinyglobby (#29453)
• 0334dad fix(js): ensure js libraries' build produce esm output in ts solution setup (...
• 22cec78 docs(bundling): correct esbuild options nesting (#28748)
• 89ab887 fix(core): Update bundlers to not typecheck if using new TS solution setup (#...
• f357b4e feat(js): update the setup-build generator to support the new ts setup (#28446)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jameshenry, a new releaser for @​nx/esbuild since your current version.

Updates esbuild from 0.25.0 to 0.25.10

Release notes

Sourced from esbuild's releases.

v0.25.10

• Fix a panic in a minification edge case (#4287)

  This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

  function identity(x) { return x }
  identity({ y: identity(123) })

• Fix @supports nested inside pseudo-element (#4265)

  When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

  The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

  However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

  /* Original code */
  ::placeholder {
    color: red;
    body & { color: green }
    @supports (color: blue) { color: blue }
  }
  /* Old output (with --supported:nesting=false) */
  ::placeholder {
  color: red;
  }
  body :is() {
  color: green;
  }
  @​supports (color: blue) {
  {
  color: blue;
  }
  }
  /* New output (with --supported:nesting=false) */
  ::placeholder {
  color: red;
  }
  body :is() {
  color: green;
  }
  @​supports (color: blue) {
  ::placeholder {
  color: blue;
  }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.10

• Fix a panic in a minification edge case (#4287)

  This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

  function identity(x) { return x }
  identity({ y: identity(123) })

• Fix @supports nested inside pseudo-element (#4265)

  When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

  The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

  However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

  /* Original code */
  ::placeholder {
    color: red;
    body & { color: green }
    @supports (color: blue) { color: blue }
  }
  /* Old output (with --supported:nesting=false) */
  ::placeholder {
  color: red;
  }
  body :is() {
  color: green;
  }
  @​supports (color: blue) {
  {
  color: blue;
  }
  }
  /* New output (with --supported:nesting=false) */
  ::placeholder {
  color: red;
  }
  body :is() {
  color: green;
  }
  @​supports (color: blue) {
  ::placeholder {
  color: blue;

... (truncated)

Commits

• d6b668f publish 0.25.10 to npm
• 5088c19 refactor: use strings.Builder (#4290)
• 755da31 run make update-compat-table
• a1d9c86 fix #4287: marked the wrong issue as fixed
• 73a0b2a fix #4286: minifier panic due to identity function
• 134dadf fix #4265: @supports nested inside ::pseudo
• 195e05c publish 0.25.9 to npm
• 3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
• 0f2c5c8 mock fs now supports multiple volumes on windows
• 100a51e split out yarnpnp snapshot tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

✅ Changeset detected - Thanks for adding release notes!

[github-actions]

⚠️ No Changeset Detected

This pull request modifies code that affects the following packages (detected by Nx):

Affected Packages:

• @aligent/cdk-esbuild

If this PR should trigger a release:

yarn changeset

Follow the prompts to select the affected packages and describe your changes.

If this PR should NOT trigger a release:

• Documentation-only changes
• Internal refactoring with no API changes
• Test updates
• Build/CI configuration changes
• Changes only to root files (package.json, workflows, etc.)

In this case, no action is needed - this comment is just a reminder for reviewers.

This check uses Nx to accurately detect which packages are affected by your changes. If you're unsure whether a changeset is needed, please ask a maintainer!

🔧 Commands & Tips

# Add a changeset for your changes
yarn changeset

# Check which packages Nx thinks are affected
npx nx show projects --affected

# Check current changeset status
yarn changeset:status

# Add an empty changeset if no release needed
yarn changeset --empty

Pro tip: When running yarn changeset, select only the packages listed above that you actually changed the public API of.