Skip to content
This repository was archived by the owner on Feb 2, 2026. It is now read-only.

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 25, 2025

Bumps cross-spawn to 7.0.6 and updates ancestor dependencies cross-spawn, tap and standard-version. These dependencies need to be updated together.

Updates cross-spawn from 4.0.2 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

7.0.3 (2020-05-25)

Bug Fixes

  • detect path key based on correct environment (#133) (159e7e9)

7.0.2 (2020-04-04)

Bug Fixes

  • fix worker threads in Node >=11.10.0 (#132) (6c5b4f0)

7.0.1 (2019-10-07)

Bug Fixes

7.0.0 (2019-09-03)

⚠ BREAKING CHANGES

  • drop support for Node.js < 8

  • drop support for versions below Node.js 8 (#125) (16feb53)

... (truncated)

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates tap from 9.0.3 to 21.1.1

Release notes

Sourced from tap's releases.

tap@21.1.0

No release notes provided.

tap@21.0.2

No release notes provided.

tap@21.0.1

No release notes provided.

tap@21.0.0

No release notes provided.

tap@20.0.3

No release notes provided.

tap@20.0.2

No release notes provided.

tap@20.0.1

No release notes provided.

tap@20.0.0

No release notes provided.

tap@19.2.5

No release notes provided.

tap@19.2.4

No release notes provided.

tap@19.2.3

No release notes provided.

tap@19.2.2

No release notes provided.

tap@19.2.1

No release notes provided.

tap@19.2.0

No release notes provided.

tap@19.1.1

No release notes provided.

tap@19.1.0

No release notes provided.

tap@19.0.2

No release notes provided.

... (truncated)

Commits
  • 3cc1af2 update versions
  • c930b37 ci: add node 24
  • 87ac89c fix repl tests for node 22/24 changes
  • 15c9f56 fix test breakage in node 22
  • e6b90a6 ci: update test action
  • 7460f4f update all deps, and corresponding types and formatting
  • 522a69a update typedoc workflow
  • 097b901 tap: properly export tap.Test for CJS
  • 33ff8ca run: formatting, and some repl bugfixes
  • 3ce5f7a typescript: do not rely on process.env
  • Additional commits viewable in compare view

Updates standard-version from 4.4.0 to 9.5.0

Release notes

Sourced from standard-version's releases.

v9.5.0

9.5.0 (2022-05-15)

Features

Bug Fixes

  • deps: update dependency conventional-changelog to v3.1.25 (#865) (4c938a2)
  • deps: update dependency conventional-changelog-conventionalcommits to v4.6.3 (#866) (6c75ed0)

v9.4.0

9.4.0 (2021-12-31)

Features

Bug Fixes

  • Ensures provided packageFiles arguments are merged with bumpFiles when no bumpFiles argument is specified (default). (#534) (2785023), closes #533

standard-version v9.3.2

Bug Fixes

  • deps: update dependency conventional-changelog-conventionalcommits to v4.6.1 (#752) (bb8869d)

standard-version v9.3.1

Bug Fixes

  • updater: npm7 package lock's inner version not being updated (#713) (a316dd0)

standard-version v9.3.0

Features

  • add --lerna-package flag used to extract tags in case of lerna repo (#503) (f579ff0)

standard-version v9.2.0

... (truncated)

Changelog

Sourced from standard-version's changelog.

9.5.0 (2022-05-15)

Features

Bug Fixes

  • deps: update dependency conventional-changelog to v3.1.25 (#865) (4c938a2)
  • deps: update dependency conventional-changelog-conventionalcommits to v4.6.3 (#866) (6c75ed0)

9.4.0 (2021-12-31)

Features

Bug Fixes

  • Ensures provided packageFiles arguments are merged with bumpFiles when no bumpFiles argument is specified (default). (#534) (2785023), closes #533

9.3.2 (2021-10-17)

Bug Fixes

  • deps: update dependency conventional-changelog-conventionalcommits to v4.6.1 (#752) (bb8869d)

9.3.1 (2021-07-14)

Bug Fixes

  • updater: npm7 package lock's inner version not being updated (#713) (a316dd0)

9.3.0 (2021-05-04)

Features

  • add --lerna-package flag used to extract tags in case of lerna repo (#503) (f579ff0)

9.2.0 (2021-04-06)

Features

... (truncated)

Commits
  • 017dcb6 chore(master): release 9.5.0 (#867)
  • 61b41fa feat(deprecated): add deprecation message (#907)
  • 6c75ed0 fix(deps): update dependency conventional-changelog-conventionalcommits to v4...
  • 4c938a2 fix(deps): update dependency conventional-changelog to v3.1.25 (#865)
  • fd05681 chore(master): release 9.4.0 (#864)
  • e510623 build: run tests on label
  • eceaedf feat: add .cjs config file (#717)
  • 366a498 build: update publish configuration
  • 095e1eb test: updates .gitignore test to check against a default package and bump fil...
  • fb3f3fa chore: Move to native fs.access, removes fs-access package. (#840)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for standard-version since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) to 7.0.6 and updates ancestor dependencies [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [tap](https://github.com/tapjs/tapjs) and [standard-version](https://github.com/conventional-changelog/standard-version). These dependencies need to be updated together.


Updates `cross-spawn` from 4.0.2 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@4.0.2...v7.0.6)

Updates `tap` from 9.0.3 to 21.1.1
- [Release notes](https://github.com/tapjs/tapjs/releases)
- [Commits](https://github.com/tapjs/tapjs/compare/v9.0.3...tap@21.1.1)

Updates `standard-version` from 4.4.0 to 9.5.0
- [Release notes](https://github.com/conventional-changelog/standard-version/releases)
- [Changelog](https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md)
- [Commits](conventional-changelog/standard-version@v4.4.0...v9.5.0)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-version: 7.0.6
  dependency-type: indirect
- dependency-name: tap
  dependency-version: 21.1.1
  dependency-type: direct:development
- dependency-name: standard-version
  dependency-version: 9.5.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 25, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants