fix(deps): update dependency cross-spawn to v7.0.5 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cross-spawn	7.0.3 -> 7.0.5

GitHub Vulnerability Alerts

CVE-2024-21538

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string.

---

Release Notes

moxystudio/node-cross-spawn (cross-spawn)

v7.0.5

Compare Source

v7.0.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Madrid, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Check SPDX headers

✅ 241 files have valid headers.

[github-actions]

Check License Compliance

✅ There are 1432 dependencies with allowed licenses.

⚠️ There are 5 dependencies with dangerous licenses:

• NPM:@cspell/dict-en-common-misspellings@2.0.10: CC-BY-SA-4.0
  • Transitive dependency of NPM:cspell@8.15.5. Defined in package.json
• NPM:format@0.2.2: unknown
  • Transitive dependency of NPM:remark-frontmatter@4.0.1. Defined in components/markdown-confluence-sync/package.json
• NPM:jsuri@1.3.1: unknown
  • Transitive dependency of NPM:confluence.js@1.7.4. Defined in components/confluence-sync/package.json, components/markdown-confluence-sync/package.json
• NPM:khroma@2.1.0: unknown
  • Transitive dependency of NPM:@mermaid-js/mermaid-cli@11.4.0. Defined in components/markdown-confluence-sync/package.json
• NPM:exit@0.1.2: unknown
  • Transitive dependency of NPM:jest@29.7.0. Defined in package.json

✅ Result: Valid licenses