cross-spawn
7.0.6 · 18 Nov 2024MIT345.6M / weekRepositorynpmAtom feed
Upgrading cross-spawn From 5.1.0 to 6.0.0
1 release in betweenevery note read
Reading releases, release notes and advisories…
- 1
- change to make
- 0
- advisories fixed
- 2
- new
- 4
- fixes
Before you upgrade
Tick each one off as you go- breaking6.0.0
Security
1 advisory still affects 6.0.0
- Regular Expression Denial of Service (ReDoS) in cross-spawnhigh · GHSA-3xgq-45jj-v275
Upgrading to 6.0.6 clears it.
Release by release
- breaking
Remove support for older nodejs versions, only
node >= 4is supported - new
Improve compliance with node's ENOENT errors
- new
Improve detection of node's shell option support
- fixed
- fixed
Fix commands as posix relatixe paths not working correctly, e.g.:
./my-command - fixed
Fix
optionsargument being mutated - fixed
Fix commands resolution when PATH was actually Path
- breaking
2 internal lines (docs, tests, tooling) left out.