chore(deps): (deps): bump the production group across 1 directory with 17 updates by dependabot[bot] · Pull Request #963 · tidev/titanium-cli

dependabot · 2026-07-22T02:45:15Z

Bumps the production group with 3 updates in the / directory: execa, pretty-bytes and undici.

Updates execa from 9.6.1 to 10.0.0

Release notes

v10.0.0

Breaking

Require Node.js 22. (#1243) 04b4454

The subprocess is now a normal promise, instead of a ChildProcess instance augmented with promise methods. All the methods and properties documented by Execa are unchanged. Node.js-specific ChildProcess APIs (such as .on(), .send(), .ref() and .unref()) must now be accessed through the new subprocess.nodeChildProcess property. (#1255) ade74bf
const subprocess = execa('node', ['file.js']);
- subprocess.on('spawn', onSpawn);
+ subprocess.nodeChildProcess.on('spawn', onSpawn);
Removed execaCommand() and execaCommandSync(). Use the template string syntax instead, which splits on spaces. If the command is a dynamic string, split it with https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADChttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1244) 3ced394
- await execaCommand('npm run build');
+ await execa`npm run build`;

await execaCommand(commandString);


await execa${parseCommandString(commandString)};
Removed the old undocumented stdio: [..., 'ipc'] syntax. Use the ipc: true option instead. (#1245) dcf611c
- await execa('node', ['file.js'], {stdio: ['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('node', ['file.js'], {ipc: true});
When the input or inputFile option is combined with an inherited stdin (for example stdio: 'inherit'), the explicit input is now used, instead of being ignored. To combine multiple inputs, pass an array like stdin: ['inherit', {string: 'input'}]. (#1232) 3ed0544

Improvements

Terminate the subprocess' descendant processes by using the killDescendants option. This is useful when the subprocess spawns its own processes, such as when using the shell option. (#1256) 84fa0ec
await execa('npm', ['run', 'build'], {killDescendants: true, timeout: 5000});
Convert the subprocess to a web stream by using https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD, https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD or https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADxhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1254) 29d9cfc
await execa`npm run build`
	.readableStream()
	.pipeTo(writableWebStream);
The value returned by https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEAD-https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD-https://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD now exposes the destination subprocess' methods, so the piped output can be consumed directly: iterate over its output lines, convert it to a stream, or exchange IPC messages. (#1252) c31c94c

... (truncated)

Commits

e389369 10.0.0
3d9d820 Improve taskkill usage (#1258)
5944b2d Update dev dependencies (#1257)
84fa0ec Add killDescendants option to also terminate descendant processes (#1256)
ade74bf Add nodeChildProcess to subprocess promises and make the subprocess a norma...
29d9cfc Add .readableStream(), .writableStream() and .transformStream() methods...
522654a Fix flaky test
9a7a162 Use which-command instead of which (#1253)
c31c94c Expose the destination subprocess methods on .pipe() (#1252)
4cafc3f Move away from cross-spawn (#1251)
Additional commits viewable in compare view

Updates pretty-bytes from 7.1.0 to 7.1.1

Release notes

Sourced from pretty-bytes's releases.

v7.1.1

Fix numbers less than 1 having excessive precision af55eb9

sindresorhus/pretty-bytes@v7.1.0...v7.1.1

Commits

fd7eb38 7.1.1
af55eb9 Fix numbers less than 1 having excessive precision
See full diff in compare view

Updates undici from 8.5.0 to 8.8.0

Release notes

Sourced from undici's releases.

v8.8.0

What's Changed

fetch: use ReadableStreamTee for cloning streams by @KhafraDev in nodejs/undici#5517

fix(benchmarks): adjust got after v15 upgrade by @slagiewka in nodejs/undici#5526

feat(mock): support asynchronous reply options callbacks by @Develop-KIM in nodejs/undici#5534

docs: clarify proxy threat model by @mcollina in nodejs/undici#5530

docs: clarify MockAgent pool usage by @vibhor-aggr in nodejs/undici#5542

docs: clarify parser timeout precision by @vibhor-aggr in nodejs/undici#5543

fix: handle flat alternating header arrays in cache normalizeHeaders by @mcollina in nodejs/undici#5536

chore(benchmarks): require(esm) on ESM-only packages by @slagiewka in nodejs/undici#5527

fix: run idle socket validation off setImmediate instead of setTimeout by @carlotestor in nodejs/undici#5499

docs: add custom interceptor example by @vibhor-aggr in nodejs/undici#5548

fix(h1): ignore type of service errors by @mcollina in nodejs/undici#5547

fix(fetch): convert null init in Response.json by @Ram-blip in nodejs/undici#5540

fix(redirect): remove body headers after POST-to-GET by @Ram-blip in nodejs/undici#5551

build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @dependabot[bot] in nodejs/undici#5556

fix(h2): allow stream-bodied requests to multiplex on a busy session by @GiHoon1123 in nodejs/undici#5538

fix(h2): destroy aborted stream synchronously instead of via setImmediate by @staylor in nodejs/undici#5559

fix(decompress): skip HEAD responses by @Ram-blip in nodejs/undici#5564

ci: build undici with node.js v26 by @shivarm in nodejs/undici#5237

docs: clarify top-level request option url fields by @vibhor-aggr in nodejs/undici#5545

test: add unexpected disconnect guards to http2 tests by @Develop-KIM in nodejs/undici#5533

fix: track origins by client map key in Agent teardown by @emmayusufu in nodejs/undici#5537

fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @jeswr in nodejs/undici#5511

fix(retry): handle Retry-After zero delay by @Ram-blip in nodejs/undici#5519

fix: honor stale-if-error on connection errors during revalidation by @jeswr in nodejs/undici#5513

fix: store revalidation-only responses so etag revalidation can engage by @jeswr in nodejs/undici#5515

fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @mcollina in nodejs/undici#5546

fix(h2): complete request stream on 'end' instead of waiting for 'close' by @staylor in nodejs/undici#5560

fix: invalidate Location and Content-Location URIs on unsafe methods by @jeswr in nodejs/undici#5514

test: deflake invalid websocket close status test by @mcollina in nodejs/undici#5550

refactor: replace tspl with node:test t.plan in connect-timeout tests by @mcollina in nodejs/undici#5518

fix(h2): release completed requests from queue by @staylor in nodejs/undici#5569

New Contributors

@Develop-KIM made their first contribution in nodejs/undici#5534

@carlotestor made their first contribution in nodejs/undici#5499

@GiHoon1123 made their first contribution in nodejs/undici#5538

@emmayusufu made their first contribution in nodejs/undici#5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

v8.7.0

What's Changed

test: guard balanced-pool error port lookup by @mcollina in nodejs/undici#5463

perf: optimize http/2 request hot path by @mcollina in nodejs/undici#5483

fix: do not reject open-ended Range values in simpleRangeHeaderValue by @spokodev in nodejs/undici#5490

fix(eventsource): set use-URL-credentials flag by @Ram-blip in nodejs/undici#5489

test: deflake connect-timeout watchdog by @mcollina in nodejs/undici#5197

docs: correct npm script name and JSON syntax in examples by @lenoxfernando in nodejs/undici#5496

... (truncated)

Commits

1760faa Bumped v8.8.0 (#5575)
f87273e fix(h2): release completed requests from queue (#5569)
1383989 refactor: replace tspl with node:test t.plan in connect-timeout tests (#5518)
c6d37d2 test: deflake invalid websocket close status test (#5550)
1ca0912 fix: invalidate Location and Content-Location URIs on unsafe methods (#5514)
87270e4 fix(h2): complete request stream on 'end' instead of waiting for 'close' (#5560)
85b35e7 fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefine...
de01bab fix: store revalidation-only responses so etag revalidation can engage (#5515)
e1cc0d4 fix: honor stale-if-error on connection errors during revalidation (#5513)
dc7c044 fix(retry): handle Retry-After zero delay (#5519)
Additional commits viewable in compare view

Updates lightningcss-android-arm64 from 1.32.0 to 1.33.0

Release notes

Sourced from lightningcss-android-arm64's releases.

v1.33.0

Added

Add support for ::highlight by @lucasweng in parcel-bundler/lightningcss#970

Add support for @position-try at-rule by @mattcosta7 in parcel-bundler/lightningcss#1238 #851

Add support for ::search-text and :current::search-text (#1212) by @lucinadin in parcel-bundler/lightningcss#1213

Collapse light-dark(x, x) to x by @cscnk52 in parcel-bundler/lightningcss#1183

Supports :target-before/after/current pseudo-class by @yisibl in parcel-bundler/lightningcss#1185

Support for the alpha() relative color function by @yisibl in parcel-bundler/lightningcss#1266

Fixed

Print unknown at-rules in the same location by @RobinMalfait in parcel-bundler/lightningcss#1233

Fix #rrggbbaa support on older versions of android by @fkeiler in parcel-bundler/lightningcss#1198

Replace atty with std::io::IsTerminal by @fkeiler in parcel-bundler/lightningcss#1197

Bump dependencies (cssparser, const-str) by @noahbald in parcel-bundler/lightningcss#1200

Fix minification of negative scientific notation dimensions by @ssssota in parcel-bundler/lightningcss#1192

Change serde attribute to be conditional for ResolveResult enum File variant by @FlorianDevP in parcel-bundler/lightningcss#1251

Add external to return type of resolve by @sapphi-red in parcel-bundler/lightningcss#1261

Commits

c6a0c3c bump rust toolchain
1d680fa v1.33.0
eda315f update ast
e575845 update compat data
91bfa3f Support for the alpha() relative color function (#1266)
0f44690 perf: add conditional rule CodSpeed benchmark (#1271)
a55b05d ci(perf): Add CodSpeed benchmarks (#1243)
ee703ba fix(types): add external to return type of resolve (#1261)
ec16529 ci: add permissions: contents: read to test (#1253)
faf2ca8 Fix conditional serde attribute for ResolveResult enum File variant (#1251)
Additional commits viewable in compare view

Updates lightningcss-darwin-arm64 from 1.32.0 to 1.33.0

Release notes

Sourced from lightningcss-darwin-arm64's releases.

v1.33.0

Added

Add support for ::highlight by @lucasweng in

…h 17 updates Bumps the production group with 3 updates in the / directory: [execa](https://github.com/sindresorhus/execa), [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) and [undici](https://github.com/nodejs/undici). Updates `execa` from 9.6.1 to 10.0.0 - [Release notes](https://github.com/sindresorhus/execa/releases) - [Commits](sindresorhus/execa@v9.6.1...v10.0.0) Updates `pretty-bytes` from 7.1.0 to 7.1.1 - [Release notes](https://github.com/sindresorhus/pretty-bytes/releases) - [Commits](sindresorhus/pretty-bytes@v7.1.0...v7.1.1) Updates `undici` from 8.5.0 to 8.8.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.5.0...v8.8.0) Updates `lightningcss-android-arm64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-darwin-arm64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-darwin-x64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-freebsd-x64` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm-gnueabihf` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-arm64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-x64-gnu` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-linux-x64-musl` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-win32-arm64-msvc` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss-win32-x64-msvc` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `lightningcss` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `nanoid` from 3.3.15 to 3.3.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.15...3.3.16) Updates `postcss` from 8.5.16 to 8.5.21 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.16...8.5.21) --- updated-dependencies: - dependency-name: execa dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production - dependency-name: pretty-bytes dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: undici dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-android-arm64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-darwin-arm64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-darwin-x64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-freebsd-x64 dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm-gnueabihf dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm64-gnu dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-arm64-musl dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-x64-gnu dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-linux-x64-musl dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-win32-arm64-msvc dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss-win32-x64-msvc dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: lightningcss dependency-version: 1.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production - dependency-name: nanoid dependency-version: 3.3.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: postcss dependency-version: 8.5.21 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-22T02:45:45Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
undici@8.8.0
pretty-bytes@7.1.1
execa@9.6.1 ⏵ 10.0.0	⁺¹²	⁺¹

View full report

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): (deps): bump the production group across 1 directory with 17 updates#963

chore(deps): (deps): bump the production group across 1 directory with 17 updates#963
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-fe215788c9

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

socket-security Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

v10.0.0

Breaking

Improvements

v7.1.1

v8.8.0

What's Changed

New Contributors

v8.7.0

What's Changed

v1.33.0

Added

Fixed

v1.33.0

Added

Uh oh!

socket-security Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants