chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@actions/github (source)	6.0.0 -> 6.0.1
@commitlint/cli (source)	19.7.1 -> 19.8.1
@commitlint/config-conventional (source)	19.7.1 -> 19.8.1
@ls-lint/ls-lint	2.2.3 -> 2.3.0
@pnpm/workspace.find-packages (source)	1000.0.10 -> 1000.0.23
@pnpm/workspace.read-manifest (source)	1000.0.2 -> 1000.1.4
@types/node (source)	22.13.4 -> 22.15.17
@types/semver (source)	7.5.8 -> 7.7.0
@vitest/coverage-v8 (source)	3.0.6 -> 3.1.3
changelogen	0.5.7 -> 0.6.1
changelogithub	13.12.1 -> 13.13.0
execa	9.5.2 -> 9.5.3
knip (source)	5.44.4 -> 5.55.1
lefthook	1.10.10 -> 1.11.12
prettier (source)	3.5.1 -> 3.5.3
semver	7.7.1 -> 7.7.2
syncpack	13.0.2 -> 13.0.4
tsx (source)	4.19.3 -> 4.19.4
typescript (source)	5.7.3 -> 5.8.3

---

Release Notes

actions/toolkit (@​actions/github)

v6.0.1

• Dependency updates #​2043
• Add context.runAttempt #​1588

conventional-changelog/commitlint (@​commitlint/cli)

v19.8.1

Compare Source

Bug Fixes

• update dependency tinyexec to v1 (#​4332) (e49449f)

v19.8.0

Compare Source

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#​4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @​commitlint/cli

19.6.1 (2024-12-15)

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v19.8.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v19.8.0

Compare Source

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#​4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @​commitlint/config-conventional

loeffel-io/ls-lint (@​ls-lint/ls-lint)

v2.3.0

Compare Source

Please see the v2.3.0 announcement for more informations: https://ls-lint.org/blog/announcements/v2.3.0.html

What's Changed

• feat: allow specifying individual files and directories by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/215
• feat: add error-output-format option by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/216
• chore(deps): update gcr.io/bazel-public/bazel docker digest to 7430f06 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/214
• chore(deps): update dependency bazel to v7.1.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/213
• chore(deps): update dependency aspect_rules_js to v1.39.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/210
• chore(deps): update dependency com_github_cli_cli_linux_amd64 to v2.46.0 - autoclosed by @​renovate in https://github.com/loeffel-io/ls-lint/pull/212
• chore(deps): update dependency com_github_cli_cli_darwin_arm64 to v2.46.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/211
• feat: add wildcard extension support by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/217
• chore(deps): update dependency aspect_rules_js to v1.41.2 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/218
• fix(deps): update module golang.org/x/sync to v0.7.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/222
• chore(deps): update dependency com_github_cli_cli_linux_amd64 to v2.48.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/221
• chore(deps): update dependency com_github_cli_cli_darwin_arm64 to v2.48.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/220
• chore(deps): update dependency bazel_gazelle to v0.36.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/219
• feat: exists by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/223
• chore(deps): update dependency bazel_gazelle to v0.37.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/231
• chore(deps): update dependency bazel to v7.2.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/230
• chore(deps): update dependency rules_pkg to v1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/235
• chore(deps): update gcr.io/bazel-public/bazel docker digest to 65e2c7b by @​renovate in https://github.com/loeffel-io/ls-lint/pull/229
• chore(deps): update dependency aspect_rules_js to v1.42.3 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/228
• chore(deps): update dependency com_github_cli_cli_linux_amd64 to v2.52.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/227
• chore(deps): update dependency com_github_cli_cli_darwin_arm64 to v2.52.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/226
• chore(deps): update dependency io_bazel_rules_go to v0.48.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/224
• chore(deps): update dependency com_github_uutils_coreutils_linux_amd64 to v0.0.27 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/209
• chore(deps): update dependency com_github_uutils_coreutils_darwin_arm64 to v0.0.27 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/208
• Update README.md by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/236
• chore(deps): update dependency io_bazel_rules_go to v0.49.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/238
• feat: support ppc64le by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/239
• chore: bump action by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/240
• chore: remove pointcase rule by @​RobinIrmer in https://github.com/loeffel-io/ls-lint/pull/260
• Update README.md by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/265
• chore(deps): update dependency io_bazel_rules_go to v0.50.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/259
• chore(deps): update dependency bazel to v7.4.1 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/252
• chore(deps): update gcr.io/bazel-public/bazel docker digest to 35c1285 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/251
• chore(deps): update dependency bazel_gazelle to v0.40.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/247
• chore(deps): update dependency com_github_cli_cli_linux_amd64 to v2.62.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/242
• chore(deps): update dependency com_github_cli_cli_darwin_arm64 to v2.62.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/241
• chore(deps): update dependency com_github_uutils_coreutils_linux_amd64 to v0.0.28 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/267
• chore(deps): update dependency com_github_uutils_coreutils_darwin_arm64 to v0.0.28 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/266
• Bzlmod migration by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/268
• test: pr builds by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/270
• chore: add not_regex rule by @​RobinIrmer in https://github.com/loeffel-io/ls-lint/pull/269
• refactor: use increment instead of += 1 by @​alexandear in https://github.com/loeffel-io/ls-lint/pull/275
• chore(deps): update dependency rules_pkg to v1.1.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/285
• chore(deps): update dependency platforms to v0.0.11 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/280
• chore(deps): update dependency gazelle to v0.42.0 by @​renovate in https://github.com/loeffel-io/ls-lint/pull/279
• fix: do not delete unmatched patterns from the index by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/287
• feat: regex negate by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/288
• feat: regex substitutions by @​loeffel-io in https://github.com/loeffel-io/ls-lint/pull/289

New Contributors

• @​RobinIrmer made their first contribution in https://github.com/loeffel-io/ls-lint/pull/260
• @​alexandear made their first contribution in https://github.com/loeffel-io/ls-lint/pull/275

Full Changelog: loeffel-io/ls-lint@v2.2.3...v2.3.0

vitest-dev/vitest (@​vitest/coverage-v8)

v3.1.3

Compare Source

   🐞 Bug Fixes

• Correctly resolve vitest import if inline: true is set  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7856 (a83f3)
• Fix fixture parsing with lowered async with esbuild 0.25.3  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7921 (c5c85)
• Remove event-catcher code  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7898 (deb1b)
• Reset mocks on test retry/repeat  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7897 (2fa76)
• Ignore failures on writeToCache  -  by @​orgads in https://github.com/vitest-dev/vitest/issues/7893 (8c7f7)
• browser: Correctly inherit CLI options  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7858 (03660)
• deps: Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7867 (67ef7)
• reporters: --merge-reports to show each total run times  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7877 (d613b)

    View changes on GitHub

v3.1.2

Compare Source

   🚀 Features

• Draft implementation  -  by @​sheremet-va (86010)
• Draft implementation"  -  by @​sheremet-va (ce2a0)

   🐞 Bug Fixes

• Add global chai variable in vitest/globals (fix: #​7474)  -  by @​Jay-Karia in https://github.com/vitest-dev/vitest/issues/7771 and https://github.com/vitest-dev/vitest/issues/7474 (d9297)
• Prevent modifying test.exclude when same object passed in coverage.exclude  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7774 (c3751)
• Fix already hoisted mock  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7815 (773b1)
• Fix test.scoped inheritance  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7814 (db6c3)
• Remove pointer-events-none after resizing the left panel  -  by @​alexprudhomme in https://github.com/vitest-dev/vitest/issues/7811 (a7e77)
• Default to run mode when stdin is not a TTY  -  by @​kentonv, @​hi-ogawa and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7673 (6358f)
• Use happy-dom/jsdom types for envionmentOptions  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7795 (67430)
• browser:
  • Fix transform error before browser server initialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7783 (5f762)
  • Fix mocking from outside of root  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7789 (03f55)
  • Scale iframe for non ui case  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6512 (c3374)
• coverage:
  • await profiler calls  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7763 (795a6)
  • Expose profiling timers  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7820 (5652b)
• deps:
  • Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7765 (7c3df)
  • Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7831 (15701)
• runner:
  • Correctly call test hooks and teardown functions  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7775 (3c00c)
  • Show stacktrace on test timeout error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7799 (df33b)
• ui:
  • Load panel sizes from storage on initial load  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/7265 (6555d)
• vite-node:
  • Named export should overwrite export all  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7846 (5ba0d)
  • Add ERR_MODULE_NOT_FOUND code error if module cannot be loaded  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7776 (f9eac)

   🏎 Performance

• browser: Improve browser parallelisation  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7665 (816a5)

    View changes on GitHub

v3.1.1

Compare Source

   🐞 Bug Fixes

• reporter:
  • Report tests in correct order  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7752 (b166e)
  • Print test only once in the verbose mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7738 (69ca4)

    View changes on GitHub

v3.1.0

Compare Source

🚀 Features

• Introduce %$ option to add number of the test to its title - by @​kemuridama in https://github.com/vitest-dev/vitest/issues/7412 (df347)
• Add diff.maxDepth option and set non-Infinity value as a default to reduce crash - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7481 (eacab)
• Allow array element for test.each/for title formatting - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7522 (ea3d6)
• Add "configureVitest" plugin hook - by @​sheremet-va and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7349 (20a5d)
• Support --configLoader CLI option - by @​Carnageous and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7574 (2a852)
• Added vitest-browser-lit to vitest init browser and docs - by @​EskiMojo14 and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7705 (5659a)
• Use providers request interception for module mocking - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7576 (7883a)
• browser:
  • Introduce and, or and filter locators - by @​sheremet-va and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7463 (63949)
• reporter:
  • Always render test time - by @​AriPerkkio and @​spamshaker in https://github.com/vitest-dev/vitest/issues/7529 (5eba6)
  • --silent=passed-only to log failed tasks only - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7530 (f9e1c)
• runner:
  • Add test.scoped to override test.extend fixtures per-suite - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7233 (e5851)
• vitest:
  • Allow conditional context.skip(boolean) - by @​sheremet-va and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7659 (6adec)
  • Support rolldown-vite in NormalizeUrlPlugin - by @​sapphi-red and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7739 (1ef31)

🐞 Bug Fixes

• Update test stats regularly - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7700 (b7953)
• Fix vm tests flakiness - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7741 (2702c)
• Set diff.expand: false as default - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7697 (f3420)
• browser:
  • Correctly calculate timeout in hooks when actions are performed - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7747 (a5505)
• deps:
  • Update all non-major dependencies - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7600 (7fc5a)
• reporter:
  • --hideSkippedTests should hide suites too - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7695 (ba9b5)
  • Report tests in correct order - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7752 (b166e)
  • Print test only once in the verbose mode - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7738 (69ca4)
• snapshot:
  • Fix indent normalization - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7400 (82997)
  • This change can cause small amount of very old snapshots to be updated, but there will be no functional change to how they work.

🏎 Performance

• browser: Fork jest-dom instead of bundling it - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7605 (12762)

View changes on GitHub

v3.0.9

Compare Source

   🐞 Bug Fixes

• Typings of ctx.skip() as never  -  by @​sirlancelot in https://github.com/vitest-dev/vitest/issues/7608 (09f35)
• Cleanup vitest in public resolveConfig API  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7623 (db14a)
• Fix toHaveBeenCalledWith(asymmetricMatcher) with undefined arguments  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7624 (0fb21)
• Race condition in RPC filesystem cache.  -  by @​dts in https://github.com/vitest-dev/vitest/issues/7531 (b7f55)
• Fix getState().testPath during collection with no isolation  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7640 (3fb3f)
• Support custom toString method in %s format  -  by @​pengooseDev in https://github.com/vitest-dev/vitest/issues/7637 (46d93)
• browser:
  • Fail playwright timeouts earlier than a test timeout  -  by @​sheremet-va and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7565 (5eb4c)
  • Remove @​testing-library/dom from dependencies #​7555)"  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7628 and https://github.com/vitest-dev/vitest/issues/7555 (94b27)
• coverage:
  • Browser mode + coverage.all  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7597 (422ba)
• runner:
  • Show stacktrace on hook timeout error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7502 (268a1)
• vite-node:
  • Fix source map of inlined node_modules  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7557 (34aa3)
  • Fix missing buildStart  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7652 (29f5a)
• web-worker:
  • Ensure removeEventListener is bound to worker  -  by @​joelgallant in https://github.com/vitest-dev/vitest/issues/7631 (ff42b)

    View changes on GitHub

v3.0.8

Compare Source

   🐞 Bug Fixes

• Fix fetch cache multiple writes  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7546 (1a8b4)
• Use browser.isolate instead of config.isolate  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7560 (4b5ed)
• Remove vestigial spy stub, import directly from @vitest/spy  -  by @​mrginglymus in https://github.com/vitest-dev/vitest/issues/7575 (7f7ff)
• Correctly split the argv string  -  by @​btea in https://github.com/vitest-dev/vitest/issues/7533 (4325a)
• browser:
  • Remove @​testing-library/dom from dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7555 (5387a)
  • Improve source map handling for bundled files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7534 (e2c57)
  • Print related test file and potential test in unhandled errors  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7564 (fee90)
• runner:
  • Fix beforeEach/All cleanup callback timeout  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7500 (0c292)
  • Fix and simplify Task.suite initialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7414 (ca9ff)
• snapshot:
  • Allow inline snapshot calls on same location with same snapshot  -  by @​jycouet and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7464 (d5cb8)
• vite-node:
  • Fix buildStart on Vite 6  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7480 [(c0f47)](https://redirect.github.com/vitest-dev/vites

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​pnpm/​workspace.find-packages@​1000.0.10 ⏵ 1000.0.23	+1			+2
	@​pnpm/​workspace.read-manifest@​1000.0.2 ⏵ 1000.1.4			+1
	@​vitest/​coverage-v8@​3.0.6 ⏵ 3.1.3				+1
	@​commitlint/​cli@​19.7.1 ⏵ 19.8.1	+1		+1	-1
	@​types/​semver@​7.5.8 ⏵ 7.7.0
	changelogen@​0.6.1
	@​types/​node@​22.13.4 ⏵ 22.15.17	+1		+1	+1
	tsx@​4.19.3 ⏵ 4.19.4
	changelogithub@​13.12.1 ⏵ 13.13.0	-1		+1	-6
	@​ls-lint/​ls-lint@​2.2.3 ⏵ 2.3.0	+1		+1	+4
	knip@​5.44.4 ⏵ 5.55.1	+1		+1	+1
	@​actions/​github@​6.0.0 ⏵ 6.0.1			+1
	execa@​9.5.2 ⏵ 9.5.3			+1
	typescript@​5.7.3 ⏵ 5.8.3	+1		+1
	@​commitlint/​config-conventional@​19.7.1 ⏵ 19.8.1				-1
	semver@​7.7.1 ⏵ 7.7.2	+1		+1
	prettier@​3.5.1 ⏵ 3.5.3
	syncpack@​13.0.2 ⏵ 13.0.4	+1
	lefthook@​1.10.10 ⏵ 1.11.12	+1			-1

View full report

[socket-security]

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click for details)
Block		cross-spawn@7.0.3 has a High CVE. CVE: GHSA-3xgq-45jj-v275 Regular Expression Denial of Service (ReDoS) in cross-spawn (HIGH) Affected versions: >= 7.0.0, < 7.0.5 Patched version: 7.0.5 From: pnpm-lock.yaml → npm/@pnpm/workspace.find-packages@1000.0.23 → npm/cross-spawn@7.0.3 ℹ Read more on: This package | This alert | What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/cross-spawn@7.0.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report