Skip to content

chore(deps-dev): bump execa from 9.6.1 to 10.1.1 - #2481

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/execa-10.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/execa-10.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps execa from 9.6.1 to 10.1.1.

Release notes

Sourced from execa's releases.

v10.1.1

  • Fix execaNode() and the node option missing IPC in their types 2633abb
  • Fix escapedCommand and verbose quoting arguments when using the shell option b2c3a54
  • Fix wrong-typed options and arguments being silently ignored or coerced b57d643
  • Fix the verbose option printing colors when stderr is not a terminal a2eda67
  • Fix stdin iterables and input transforms edge cases 6925cc3
  • Fix IPC edge cases 5f80cde
  • Fix .pipe() and stream conversion edge cases d3ec10d
  • Fix template strings, parseCommandString() and execaNode() edge cases fb92da1
  • Fix invalid timeout and forceKillAfterDelay values d9a5689
  • Fix errors, early errors and result.all edge cases c4262ff

sindresorhus/execa@v10.1.0...v10.1.1

v10.1.0

Behavior changes

These are bug fixes, but they might affect code that relied on the previous incorrect behavior.

  • extendEnv: false without the env option no longer inherits process.env, per docs 67acf60
  • Windows: Arguments of .cmd and .bat files are now escaped like Rust does, which fixes batch files reading %~1 (#1261) 93bddc4
  • Invalid stdio values, such as negative file descriptors, now throw c6bd387
  • Using the same file as input and output now throws, even when the paths are written differently 587045a
  • Synchronous methods now enforce per-file-descriptor maxBuffer values 9547e51
  • Synchronous methods now throw on the signal option, like asynchronous methods 59de065
  • Synchronous methods now write the raw output bytes to files, like asynchronous methods af6264a

Fixes

  • Fix subprocess.kill() signaling the current process group when the subprocess failed to spawn 5464d43
  • Fix crashes when spawning fails with EMFILE/ENFILE (#1262), or when a file target cannot be opened 15c46cd 1cee524
  • Fix error.stdout and error.stderr being undefined when synchronous methods fail to spawn (#1263) bfe4633
  • Fix the subprocess promise hanging until an output stream is read 004f3b3
  • Fix subprocess.pipe() with the stdio option, and destination subprocesses left running 8d3f0a9 ecda56b
  • Fix result.all when only some file descriptors are buffered or split into lines 758768f
  • Fix the encoding option and line splitting in transforms 6adb3c3
  • Fix input and output transforms with synchronous methods 516a5e2 e0b5dbc
  • Fix template strings with emojis and line continuations b67f199
  • Fix killDescendants signaling unrelated processes on Windows 9c5c71c
  • Fix IPC with serialization: 'json', strict: true and the verbose option 9842f1a 698a1b8 b548d8b
  • Fix the subprocess error being hidden when the current directory was deleted 91d9ded
  • Fix shebang scripts on Windows when the file is small 7c1a631

sindresorhus/execa@v10.0.1...v10.1.0

v10.0.1

... (truncated)

Commits
  • cc7bcab 10.1.1
  • 5a8dd97 Fix tests failing on Windows
  • 2633abb Fix execaNode() and the node option missing IPC in their types
  • b2c3a54 Fix escapedCommand and verbose quoting arguments when using the shell o...
  • 2141147 Move type tests from tsd to nz
  • b57d643 Fix wrong-typed options and arguments being silently ignored or coerced
  • 74b854a Fix documentation and types mistakes
  • a2eda67 Fix the verbose option printing colors when stderr is not a terminal
  • 6925cc3 Fix stdin iterables and input transforms edge cases
  • 5f80cde Fix IPC edge cases
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 14, 2026
@changeset-bot

changeset-bot Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: cfca470

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedexeca@​9.6.1 ⏵ 10.1.198100100 +192100

View full report

Bumps [execa](https://github.com/sindresorhus/execa) from 9.6.1 to 10.1.1.
- [Release notes](https://github.com/sindresorhus/execa/releases)
- [Commits](sindresorhus/execa@v9.6.1...v10.1.1)

---
updated-dependencies:
- dependency-name: execa
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump execa from 9.6.1 to 10.1.0 chore(deps-dev): bump execa from 9.6.1 to 10.1.1 Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/execa-10.1.0 branch from a9d2d5e to cfca470 Compare October 16, 2026 11:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants