[dependabot]

Bumps execa from 9.6.1 to 10.2.0.

Release notes

Sourced from execa's releases.

v10.2.0

Behavior changes

These are bug fixes, but they might affect code that relied on the previous incorrect behavior.

• Exceeding maxBuffer now terminates the subprocess with killSignal, instead of leaving it running and the promise pending f6de9be
• maxBuffer: 0 now limits the output of synchronous methods, like asynchronous methods 224dd20
• Options of $ set to undefined now use $'s defaults, such as inheriting stdin f61a6e9

Fixes

• Fix invalid file descriptor objects, such as closed file handles, crashing the current process instead of throwing d0a5968
• Fix synchronous transforms: errors being hidden, filtered output being returned on failure, mixed text and byte chunks being reordered, and final() being skipped without input 0ba2b6e ed80079 9c54833
• Fix result.all changing objects when only stdout or stderr is buffered 8629132
• Fix writing objects to a web WritableStream 5ea2900
• Fix an invalid subprocess.duplex() option making later stream conversions hang 5e4345b
• Fix execaNode() not running its file when the current process uses --print e747872

Types

• Fix result and subprocess types when the options are a union, including IPC f5772f3 355d917 cb8aaf6
• Fix result types when options bound with execa(options) are overridden or reset with undefined 708fed7
• Fix subprocess.stdin types with the input and inputFile options 236c831
• Fix chunk types of subprocess.iterable() with object-mode transforms a2912e5
• Fix fd-specific option types, and execaNode() types with node: undefined 80b01e9 523cf9b

---

sindresorhus/execa@v10.1.1...v10.2.0

v10.1.1

• Fix execaNode() and the node option missing IPC in their types 2633abb
• Fix escapedCommand and verbose quoting arguments when using the shell option b2c3a54
• Fix wrong-typed options and arguments being silently ignored or coerced b57d643
• Fix the verbose option printing colors when stderr is not a terminal a2eda67
• Fix stdin iterables and input transforms edge cases 6925cc3
• Fix IPC edge cases 5f80cde
• Fix .pipe() and stream conversion edge cases d3ec10d
• Fix template strings, parseCommandString() and execaNode() edge cases fb92da1
• Fix invalid timeout and forceKillAfterDelay values d9a5689
• Fix errors, early errors and result.all edge cases c4262ff

---

sindresorhus/execa@v10.1.0...v10.1.1

v10.1.0

Behavior changes

These are bug fixes, but they might affect code that relied on the previous incorrect behavior.

... (truncated)

Commits

• a605753 10.2.0
• b87aab7 Fix link check in type tests
• cb8aaf6 Fix IPC types for option unions
• 80b01e9 Fix fd-specific option types
• 355d917 Fix subprocess stream types for option unions
• 523cf9b Fix execaNode() result types when the node option is undefined
• 580b250 Add type tests for $'s stdin
• 236c831 Fix subprocess.stdin and options.stdin types when an input source is prov...
• f5772f3 Fix result types for fd-specific and union options
• 708fed7 Fix result types for options bound with execa(options)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: f3e2f36

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	execa@​9.6.1 ⏵ 10.2.0			+1	-1

View full report

[github-actions]

This PR is packaged and the instant preview is available (f3e2f36).

Install it locally:

• npm

npm i -D create-webpack-app@https://pkg.pr.new/create-webpack-app@f3e2f36 webpack-cli@https://pkg.pr.new/webpack-cli@f3e2f36

• yarn

yarn add -D create-webpack-app@https://pkg.pr.new/create-webpack-app@f3e2f36 webpack-cli@https://pkg.pr.new/webpack-cli@f3e2f36

• pnpm

pnpm add -D create-webpack-app@https://pkg.pr.new/create-webpack-app@f3e2f36 webpack-cli@https://pkg.pr.new/webpack-cli@f3e2f36

[evenstensberg]

breaks ci due because new version requires v26+, closing.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.