[Snyk] Upgrade execa from 0.6.3 to 0.11.0

[weinrich15]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade execa from 0.6.3 to 0.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2018-08-20.

Release notes

Package name: execa

• 0.11.0 - 2018-08-20
  

  0.11.0

• 0.10.0 - 2018-03-15
  

  0.10.0

• 0.9.0 - 2018-01-11
  

  0.9.0

• 0.8.0 - 2017-08-05
  

  0.8.0

• 0.7.0 - 2017-06-09
  

  0.7.0

• 0.6.3 - 2017-03-21
  

  0.6.3

from execa GitHub release notes

Commit messages

Package name: execa

• 20ab0a1 0.11.0
• 8bea281 Remove deprecated `.spawn()` method
• ff2f4b8 Update `get-stream` dependency
• 50384aa Add `buffer` option to be able to disable buffering (Add sound to COSMOS alerts BallAerospace/COSMOS#133)
• d1f20ec Bump nyc to 13.x (TlmExtractor Share individual columns BallAerospace/COSMOS#148)
• 49518e1 Require Node.js 6
• 7488ce9 Fix XO linting (Checkin improved windows installer bat file BallAerospace/COSMOS#141)
• 7e4d44c Fix typo in test description (Improve Server meesage log performance BallAerospace/COSMOS#137)
• 845de7d Add Patreon badge
• 658f220 0.10.0
• 0defad4 Remove exit handler on exit (Script Runner doesn't syntax highlight module namespacing BallAerospace/COSMOS#129)
• f4e2d56 Fix linting
• 24151c2 Simplify appveyor.yml
• fcb4f6a Upgrade cross-spawn (TestRunner cmd line option to start test BallAerospace/COSMOS#124)
• 51a45df Avoid relying on Node’s internals (Fix COSMOS issues for qtbindings 4.8.6.2 BallAerospace/COSMOS#125)
• b019895 0.9.0
• 8fb8b6d Increase delay of detached child process (Add Hide ignored option to HandbookCreator re#23 BallAerospace/COSMOS#120)
• ff76235 Turn off echo on Windows - fixes Refactor script BallAerospace/COSMOS#116 (Allow PacketViewer to hide ignored items BallAerospace/COSMOS#118)
• 5f890ab Detached child process should not kill child - fixes closes #101 Support Ruby 22 and x64 on Windows BallAerospace/COSMOS#115 (#102 Create INSTALL_COSMOS.bat file BallAerospace/COSMOS#117)
• 79a496a Document windowsVerbatimArguments option (Refactor Cosmos::Script module BallAerospace/COSMOS#114)
• d31cc91 Enhance error object in sync methods - fixes Add variable for max stdout in scriptrunner BallAerospace/COSMOS#98 (Remove truthy and falsey from specs BallAerospace/COSMOS#107)
• dc7e21b 0.8.0
• 5bab08b Do not buffer when streams are used - fixes closes #81 Make target_names not include UNKNOWN BallAerospace/COSMOS#84 (Json drb retry BallAerospace/COSMOS#95)
• afa9700 Fix extending from process.env when no env option is provided - fixes Support Ruby 2.2 and 64-bit Ruby on Windows BallAerospace/COSMOS#101 (Create Installation Scripts BallAerospace/COSMOS#102)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[weinrich15]

Checkmarx One – Scan Summary & Details – 871a1c9c-6c09-4353-a399-26ef8bf2289e

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2016-10707	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2017-12964	Ruby-sassc-2.4.0	Vulnerable Package
	CVE-2018-20834	Npm-tar-2.2.1	Vulnerable Package
	CVE-2019-13173	Npm-fstream-1.0.11	Vulnerable Package
	CVE-2019-20149	Npm-kind-of-6.0.2	Vulnerable Package
	CVE-2020-28469	Npm-glob-parent-3.1.0	Vulnerable Package
	CVE-2020-28469	Npm-glob-parent-2.0.0	Vulnerable Package
	CVE-2020-8164	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2020-8165	Ruby-activesupport-5.1.7	Vulnerable Package
	CVE-2021-22880	Ruby-activerecord-5.1.7	Vulnerable Package
	CVE-2021-22885	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2021-22904	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2021-29509	Ruby-puma-3.12.6	Vulnerable Package
	CVE-2021-32803	Npm-tar-2.2.1	Vulnerable Package
	CVE-2021-32804	Npm-tar-2.2.1	Vulnerable Package
	CVE-2021-37701	Npm-tar-2.2.1	Vulnerable Package
	CVE-2021-37712	Npm-tar-2.2.1	Vulnerable Package
	CVE-2021-37713	Npm-tar-2.2.1	Vulnerable Package
	CVE-2021-3918	Npm-json-schema-0.2.3	Vulnerable Package
	CVE-2021-43138	Npm-async-1.0.0	Vulnerable Package
	CVE-2021-44906	Npm-minimist-0.0.8	Vulnerable Package
	CVE-2022-0686	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2022-24790	Ruby-puma-3.12.6	Vulnerable Package
	CVE-2022-24999	Npm-qs-6.5.2	Vulnerable Package
	CVE-2022-25883	Npm-semver-5.6.0	Vulnerable Package
	CVE-2022-30122	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2022-32224	Ruby-activerecord-5.1.7	Vulnerable Package
	CVE-2022-3517	Npm-minimatch-3.0.4	Vulnerable Package
	CVE-2022-43357	Ruby-sassc-2.4.0	Vulnerable Package
	CVE-2022-44566	Ruby-activerecord-5.1.7	Vulnerable Package
	CVE-2022-44570	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2022-44571	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2022-44572	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2023-22792	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2023-22795	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2023-22796	Ruby-activesupport-5.1.7	Vulnerable Package
	CVE-2023-26136	Npm-tough-cookie-2.4.3	Vulnerable Package
	CVE-2023-27530	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2023-40175	Ruby-puma-3.12.6	Vulnerable Package
	Cx2d55b83a-7aa0	Npm-braces-1.8.5	Vulnerable Package
	Cx89601373-08db	Npm-debug-3.1.0	Vulnerable Package
	Cx8bc4df28-fcf5	Npm-debug-3.1.0	Vulnerable Package
	Cxb3ca64d2-9cd1	Npm-mocha-4.1.0	Vulnerable Package
	Cxdca8e59f-8bfe	Npm-inflight-1.0.6	Vulnerable Package
	Cxf6e7f2c1-dc59	Npm-yauzl-2.10.0	Vulnerable Package
	Missing User Instruction	/Dockerfile: 4	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 6	When installing a package, its pin version should be defined
	CVE-2007-2379	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2014-6071	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2015-9251	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2018-1109	Npm-braces-1.8.5	Vulnerable Package
	CVE-2019-11358	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2020-11022	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2020-11023	Npm-jquery-1.10.2	Vulnerable Package
	CVE-2020-15169	Ruby-actionview-5.1.7	Vulnerable Package
	CVE-2020-15366	Npm-ajv-6.5.5	Vulnerable Package
	CVE-2020-5267	Ruby-actionview-5.1.7	Vulnerable Package
	CVE-2020-7598	Npm-minimist-0.0.8	Vulnerable Package
	CVE-2020-8124	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2021-27515	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2021-3664	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2022-0512	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2022-0639	Npm-url-parse-1.4.4	Vulnerable Package
	CVE-2022-23633	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2022-23634	Ruby-puma-3.12.6	Vulnerable Package
	CVE-2022-27777	Ruby-actionview-5.1.7	Vulnerable Package
	CVE-2022-3704	Ruby-actionpack-5.1.7	Vulnerable Package
	CVE-2023-23913	Ruby-actionview-5.1.7	Vulnerable Package
	CVE-2023-27539	Ruby-rack-2.2.3.1	Vulnerable Package
	CVE-2023-28120	Ruby-activesupport-5.1.7	Vulnerable Package
	CVE-2023-28155	Npm-request-2.88.0	Vulnerable Package
	CVE-2023-28362	Ruby-actionpack-5.1.7	Vulnerable Package
	Cx435a6fda-ca38	Npm-commander-2.11.0	Vulnerable Package
	Cxf0b588a3-5c6f	Npm-jquery-1.10.2	Vulnerable Package
	Gem Install Without Version	/Dockerfile: 35	Instead of 'gem install ' we should use 'gem install :'
	Gem Install Without Version	/Dockerfile: 55	Instead of 'gem install ' we should use 'gem install :'
	Not Using JSON In CMD And ENTRYPOINT Arguments	/Dockerfile: 69	Ensure that we are using JSON in the CMD and ENTRYPOINT Arguments
	CVE-2021-41136	Ruby-puma-3.12.6	Vulnerable Package
	Healthcheck Instruction Missing	/Dockerfile: 4	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 55	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.