{
  "GHSA-gv7w-rqvm-qjhr": {
    "reason": "esbuild integrity-check advisory; transitive dev-only via drizzle-kit/vitest/vite; not in the production runtime — esbuild never runs in the shipped image; patched in esbuild >=0.28.1, will resolve when drizzle-kit bumps the transitive pin",
    "reviewer": "luc",
    "expires": "2026-09-01"
  }
}