chore(security): pin esbuild to 0.28.1

[cb-alish]

Security dependency bump

Requested by the security team.

Change

Package	Before	After
esbuild	0.28.0 (transitive, not pinned)	0.28.1 (explicit devDependency)

esbuild was previously only a transitive dependency locked at 0.28.0. Adding it as an explicit devDependency at 0.28.1 ensures the patched version is resolved regardless of what upstream packages request.

Made with Cursor

Summary by CodeRabbit

• Chores
  • Updated development tooling to support the latest build process.

_{⚠️ Note: Your high-level summary instructions were not applied because this feature is currently available only on Essentials plans or higher.}

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Free

Run ID: 101d892a-3453-42cf-b3dc-e8b1403a382e

📥 Commits

Reviewing files that changed from the base of the PR and between d5301ad and 126570f.

⛔ Files ignored due to path filters (1)

• pointer/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• pointer/package.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The pointer package adds esbuild version 0.28.1 to its development dependencies.

Changes

Pointer dependency update

Layer / File(s)	Summary
Add esbuild development dependency pointer/package.json	Adds esbuild version 0.28.1 to the development dependencies.

Estimated code review effort: 1 (Trivial) | ~2 minutes

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Essentials by visiting https://app.coderabbit.ai/settings/billing.

_{Comment @coderabbitai help to get the list of available commands.}

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues
✅	Secrets	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.