chore(deps): (deps): bump the production group across 1 directory with 21 updates by dependabot[bot] · Pull Request #965 · tidev/titanium-cli

dependabot · 2026-07-29T02:44:56Z

Bumps the production group with 5 updates in the / directory:

Package	From	To
chalk	`5.6.2`	`6.0.0`
execa	`9.6.1`	`10.0.0`
fs-extra	`11.3.6`	`11.4.0`
pretty-bytes	`7.1.0`	`7.1.1`
undici	`8.5.0`	`8.9.0`

Updates chalk from 5.6.2 to 6.0.0

Release notes

Sourced from chalk's releases.

v6.0.0

Breaking

Require Node.js 22 8a94e0e

Improvements

Add underline styles and underline colors (#689) 4c304dd

Improve performance 5729845 fa5cff2

Fixes

Treat a numeric FORCE_COLOR as an exact level (#688) e912931

Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687) ff549c5

chalk/chalk@v5.6.2...v6.0.0

Commits

661317e 6.0.0
5729845 Improve performance
4c304dd Add extended underline styles and underline colors (#689)
e912931 Fix: Treat a numeric FORCE_COLOR as an exact level (#688)
8a94e0e Require Node.js 22
fa5cff2 Optimize 2-argument calls (#670)
ff549c5 Fix: Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687)
678e550 Tweaks
aa06bb5 Fix typos (#664)
See full diff in compare view

Updates execa from 9.6.1 to 10.0.0

Release notes

Sourced from execa's releases.

v10.0.0

Breaking

Require Node.js 22. (#1243) 04b4454

The subprocess is now a normal promise, instead of a ChildProcess instance augmented with promise methods. All the methods and properties documented by Execa are unchanged. Node.js-specific ChildProcess APIs (such as .on(), .send(), .ref() and .unref()) must now be accessed through the new subprocess.nodeChildProcess property. (#1255) ade74bf
const subprocess = execa('node', ['file.js']);
- subprocess.on('spawn', onSpawn);
+ subprocess.nodeChildProcess.on('spawn', onSpawn);
Removed execaCommand() and execaCommandSync(). Use the template string syntax instead, which splits on spaces. If the command is a dynamic string, split it with https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADChttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1244) 3ced394
- await execaCommand('npm run build');
+ await execa`npm run build`;

await execaCommand(commandString);


await execa${parseCommandString(commandString)};
Removed the old undocumented stdio: [..., 'ipc'] syntax. Use the ipc: true option instead. (#1245) dcf611c
- await execa('node', ['file.js'], {stdio: ['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('node', ['file.js'], {ipc: true});
When the input or inputFile option is combined with an inherited stdin (for example stdio: 'inherit'), the explicit input is now used, instead of being ignored. To combine multiple inputs, pass an array like stdin: ['inherit', {string: 'input'}]. (#1232) 3ed0544

Improvements

Terminate the subprocess' descendant processes by using the killDescendants option. This is useful when the subprocess spawns its own processes, such as when using the shell option. (#1256) 84fa0ec
await execa('npm', ['run', 'build'], {killDescendants: true, timeout: 5000});
Convert the subprocess to a web stream by using https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD, https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD or https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADxhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1254) 29d9cfc
await execa`npm run build`
	.readableStream()
	.pipeTo(writableWebStream);
The value returned by https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEAD-https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD-https://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD now exposes the destination subprocess' methods, so the piped output can be consumed directly: iterate over its output lines, convert it to a stream, or exchange IPC messages. (#1252) c31c94c

... (truncated)

Commits

e389369 10.0.0
3d9d820 Improve taskkill usage (#1258)
5944b2d Update dev dependencies (#1257)
84fa0ec Add killDescendants option to also terminate descendant processes (#1256)
ade74bf Add nodeChildProcess to subprocess promises and make the subprocess a norma...
29d9cfc Add .readableStream(), .writableStream() and .transformStream() methods...
522654a Fix flaky test
9a7a162 Use which-command instead of which (#1253)
c31c94c Expose the destination subprocess methods on .pipe() (#1252)
4cafc3f Move away from cross-spawn (#1251)
Additional commits viewable in compare view

Updates fs-extra from 11.3.6 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)

Commits

53a8d1a 11.4.0
9c2d3c9 Throw EEXIST when ensureSymlink dest is a broken symlink (#1076)
See full diff in compare view

Updates pretty-bytes from 7.1.0 to 7.1.1

Release notes

Sourced from pretty-bytes's releases.

v7.1.1

Fix numbers less than 1 having excessive precision af55eb9

sindresorhus/pretty-bytes@v7.1.0...v7.1.1

Commits

fd7eb38 7.1.1
af55eb9 Fix numbers less than 1 having excessive precision
See full diff in compare view

Updates undici from 8.5.0 to 8.9.0

Release notes

Sourced from undici's releases.

v8.9.0

What's Changed

fix(decompress): preserve response trailers by @Ram-blip in nodejs/undici#5572

build(deps-dev): bump ws from 8.21.0 to 8.21.1 by @dependabot[bot] in nodejs/undici#5576

fix: validate coerced header values for CRLF by @mcollina in nodejs/undici#5579

fix: handle frozen globalThis in setGlobalDispatcher by @mhayk in nodejs/undici#5574

Ignore auto-generated .npmrc on Windows by @tsctx in nodejs/undici#5583

New Contributors

@mhayk made their first contribution in nodejs/undici#5574

Full Changelog: nodejs/undici@v8.8.0...v8.9.0

v8.8.0

What's Changed

fetch: use ReadableStreamTee for cloning streams by @KhafraDev in nodejs/undici#5517

fix(benchmarks): adjust got after v15 upgrade by @slagiewka in nodejs/undici#5526

feat(mock): support asynchronous reply options callbacks by @Develop-KIM in nodejs/undici#5534

docs: clarify proxy threat model by @mcollina in nodejs/undici#5530

docs: clarify MockAgent pool usage by @vibhor-aggr in nodejs/undici#5542

docs: clarify parser timeout precision by @vibhor-aggr in nodejs/undici#5543

fix: handle flat alternating header arrays in cache normalizeHeaders by @mcollina in nodejs/undici#5536

chore(benchmarks): require(esm) on ESM-only packages by @slagiewka in nodejs/undici#5527

fix: run idle socket validation off setImmediate instead of setTimeout by @carlotestor in nodejs/undici#5499

docs: add custom interceptor example by @vibhor-aggr in nodejs/undici#5548

fix(h1): ignore type of service errors by @mcollina in nodejs/undici#5547

fix(fetch): convert null init in Response.json by @Ram-blip in nodejs/undici#5540

fix(redirect): remove body headers after POST-to-GET by @Ram-blip in nodejs/undici#5551

build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @dependabot[bot] in nodejs/undici#5556

fix(h2): allow stream-bodied requests to multiplex on a busy session by @GiHoon1123 in nodejs/undici#5538

fix(h2): destroy aborted stream synchronously instead of via setImmediate by @staylor in nodejs/undici#5559

fix(decompress): skip HEAD responses by @Ram-blip in nodejs/undici#5564

ci: build undici with node.js v26 by @shivarm in nodejs/undici#5237

docs: clarify top-level request option url fields by @vibhor-aggr in nodejs/undici#5545

test: add unexpected disconnect guards to http2 tests by @Develop-KIM in nodejs/undici#5533

fix: track origins by client map key in Agent teardown by @emmayusufu in nodejs/undici#5537

fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @jeswr in nodejs/undici#5511

fix(retry): handle Retry-After zero delay by @Ram-blip in nodejs/undici#5519

fix: honor stale-if-error on connection errors during revalidation by @jeswr in nodejs/undici#5513

fix: store revalidation-only responses so etag revalidation can engage by @jeswr in nodejs/undici#5515

fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @mcollina in nodejs/undici#5546

fix(h2): complete request stream on 'end' instead of waiting for 'close' by @staylor in nodejs/undici#5560

fix: invalidate Location and Content-Location URIs on unsafe methods by @jeswr in nodejs/undici#5514

test: deflake invalid websocket close status test by @mcollina in nodejs/undici#5550

refactor: replace tspl with node:test t.plan in connect-timeout tests by @mcollina in nodejs/undici#5518

fix(h2): release completed requests from queue by @staylor in nodejs/undici#5569

New Contributors

@Develop-KIM made their first contribution in nodejs/undici#5534

@carlotestor made their first contribution in nodejs/undici#5499

... (truncated)

Commits

21a8e1e Bumped v8.9.0 (#5589)
7d3cf92 fix: validate blob body content type
c601fff fix(cache): harden cache directive parsing
2b3f749 test(retry): correct broken content-range fixtures in retry-handler.js
e11a68e fix(retry): reject partial content length mismatch
9f09b49 test: cover crash on mixed unqualified and qualified private cache directives
4fe5bc5 fix: handle empty qualified private cache directive
10d93fc fix: harden cookie domain, path, and unparsed attribute validation
a17e301 Ignore auto-generated .npmrc on Windows (#5583)
a0922b0 fix: handle frozen globalThis in setGlobalDispatcher (#5574)
Additional commits viewable in compare view

Updates @napi-rs/wasm-runtime from 1.1.6 to 1.2.0

Changelog

Sourced from @napi-rs/wasm-runtime's changelog.

1.2.0 (2026-07-28)

Features

cli: support non-threaded WASI targets (#3353) (b5ecfa3), closes #3352 #3400 #3405

Commits

fb91bcd chore(release): publish
c646a46 chore: upgrade memfs
b5ecfa3 feat(cli): support non-threaded WASI targets (#3353)
See full diff in compare view

Updates lightningcss-android-arm64 from 1.32.0 to 1.33.0

Release notes

Sourced from lightningcss-android-arm64's releases.

v1.33.0

Added

Add support for ::highlight by @lucasweng in parcel-bundler/lightningcss#970

Add support for @position-try at-rule by @mattcosta7 in parcel-bundler/lightningcss#1238 #851

Add support for ::search-text and :current::search-text (#1212) by @lucinadin in parcel-bundler/lightningcss#1213

Collapse light-dark(x, x) to x by @cscnk52 in parcel-bundler/lightningcss#1183

Supports :target-before/after/current pseudo-class by <...
Description has been truncated

…h 21 updates Bumps the production group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.0` | | [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.0` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` | | [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.0` | `7.1.1` | | [undici](https://github.com/nodejs/undici) | `8.5.0` | `8.9.0` | Updates `chalk` from 5.6.2 to 6.0.0 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v5.6.2...v6.0.0) Updates `execa` from 9.6.1 to 10.0.0 - [Release notes](https://github.com/sindresorhus/execa/releases) - [Commits](sindresorhus/execa@v9.6.1...v10.0.0) Updates `fs-extra` from 11.3.6 to 11.4.0 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.6...11.4.0) Updates `pretty-bytes` from 7.1.0 to 7.1.1 - [Release notes](https://github.com/sindresorhus/pretty-bytes/releases) - [Commits](sindresorhus/pretty-bytes@v7.1.0...v7.1.1) Updates `undici` from 8.5.0 to 8.9.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.5.0...v8.9.0) Updates `@napi-rs/wasm-runtime` from 1.1.6 to 1.2.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Changelog](https://github.com/napi-rs/napi-rs/blob/main/wasm-runtime/CHANGELOG.md) - [Commits](https://github.com/napi-rs/napi-rs/commits/@napi-rs/wasm-runtime@1.2.0/wasm-runtime) Updates `lightningcss-android-arm64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-darwin-arm64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-darwin-x64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-freebsd-x64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm-gnueabihf` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-x64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-x64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-win32-arm64-msvc` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-win32-x64-msvc` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `nanoid` from 3.3.15 to 3.3.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.15...3.3.16) Updates `postcss` from 8.5.16 to 8.5.24 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.16...8.5.24) Updates `yoctocolors` from 2.1.2 to 2.2.0 - [Release notes](https://github.com/sindresorhus/yoctocolors/releases) - [Commits](sindresorhus/yoctocolors@v2.1.2...v2.2.0) --- updated-dependencies: - dependency-name: chalk dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production - dependency-name: execa dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production - dependency-name: fs-extra dependency-version: 11.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: pretty-bytes dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: undici dependency-version: 8.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@napi-rs/wasm-runtime" dependency-version: 1.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-android-arm64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-darwin-arm64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-darwin-x64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-freebsd-x64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm-gnueabihf dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm64-gnu dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm64-musl dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-x64-gnu dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-x64-musl dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-win32-arm64-msvc dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-win32-x64-msvc dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: nanoid dependency-version: 3.3.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: postcss dependency-version: 8.5.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: yoctocolors dependency-version: 2.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-29T02:45:20Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
undici@8.9.0
pretty-bytes@7.1.1
chalk@5.6.2 ⏵ 6.0.0		⁺¹
execa@9.6.1 ⏵ 10.0.0	⁺¹²	⁺¹	⁺²
fs-extra@11.4.0

View full report

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): (deps): bump the production group across 1 directory with 21 updates - #965

chore(deps): (deps): bump the production group across 1 directory with 21 updates#965
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-ddac4859f9

dependabot Bot commented on behalf of github Jul 29, 2026

Uh oh!

socket-security Bot commented Jul 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 29, 2026

v6.0.0

Breaking

Improvements

Fixes

v10.0.0

Breaking

Improvements

11.4.0 / 2026-07-23

v7.1.1

v8.9.0

What's Changed

New Contributors

v8.8.0

What's Changed

New Contributors

1.2.0 (2026-07-28)

Features

v1.33.0

Added

Uh oh!

socket-security Bot commented Jul 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants