fix(@angular/build): update esbuild to 0.28.0

This addresses some security vulnerabilities.

Author: dgp1130

package.json

@@ -125,8 +125,8 @@
     "copy-webpack-plugin": "12.0.2",
     "css-loader": "7.1.2",
     "debug": "^4.1.1",
-    "esbuild": "0.25.4",
-    "esbuild-wasm": "0.25.4",
+    "esbuild": "0.28.0",
+    "esbuild-wasm": "0.28.0",
     "eslint": "8.57.0",
     "eslint-config-prettier": "10.0.1",
     "eslint-plugin-header": "3.1.1",

packages/angular/build/package.json

@@ -28,7 +28,7 @@
     "@vitejs/plugin-basic-ssl": "1.2.0",
     "beasties": "0.3.2",
     "browserslist": "^4.23.0",
-    "esbuild": "0.25.4",
+    "esbuild": "0.28.0",
     "fast-glob": "3.3.3",
     "https-proxy-agent": "7.0.6",
     "istanbul-lib-instrument": "6.0.3",

packages/angular_devkit/build_angular/package.json

@@ -29,7 +29,7 @@
     "browserslist": "^4.21.5",
     "copy-webpack-plugin": "12.0.2",
     "css-loader": "7.1.2",
-    "esbuild-wasm": "0.25.4",
+    "esbuild-wasm": "0.28.0",
     "fast-glob": "3.3.3",
     "http-proxy-middleware": "3.0.5",
     "istanbul-lib-instrument": "6.0.3",
@@ -63,7 +63,7 @@
     "webpack-subresource-integrity": "5.1.0"
   },
   "optionalDependencies": {
-    "esbuild": "0.25.4"
+    "esbuild": "0.28.0"
   },
   "devDependencies": {
     "undici": "6.21.1",

packages/angular_devkit/build_angular/src/builders/browser/specs/web-worker_spec.ts

@@ -124,7 +124,7 @@ describe('Browser Builder Web Worker support', () => {
     );
     expect(workerContent).toContain('hello from worker');
     expect(workerContent).toContain('bar');
-    expect(workerContent).toContain('"hello"===e&&postMessage');
+    expect(workerContent).toContain('"hello"===o&&postMessage');
 
     // Main bundle should reference hashed worker bundle.
     const mainBundle = host.fileMatchExists(outputPath, /main\.[0-9a-f]{16}\.js/) as string;