socket-security[bot]
commented
1 week ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/cross-spawn@7.0.5 | None | +2 |
21.5 kB | satazor |
| npm/elm-doc-preview@5.0.5 | filesystem Transitive: environment, network, shell | +32 |
3.94 MB | rlefevre |
| npm/fs-extra@9.1.0 | filesystem | 0 |
130 kB | ryanzim |
| npm/npm-run-all@4.1.5 | environment Transitive: filesystem | +31 |
700 kB | mysticatea |
🚮 Removed packages: npm/cross-spawn@7.0.3
Bumps cross-spawn from 7.0.3 to 7.0.5.
Changelog
Sourced from cross-spawn's changelog.
Commits
0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)9521e2dchore: fix tests in recent node js versions97ded39chore: convert package lockd52b6b9chore: remove unused argument (#156)5d84384chore: add travis jobs on ppc64le (#142)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show