deps: Bump fix-path to ^4.0.0 to avoid cross-env <6.0.6 (#14781)

cross-env 6.0.6 fixes CVE-2024-21538 (https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230). Contributed by STMicroelectronics Signed-off-by: Torbjörn SVENSSON <[email protected]>
eclipse-theia · Jan 29, 2025 · d59071a · d59071a
1 parent d011f3b
commit d59071a
Show file tree

Hide file tree

Showing 4 changed files with 117 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/core/README.md b/packages/core/README.md
@@ -74,7 +74,7 @@ export class SomeClass {
   - `native-keymap` (from [`native-keymap@^2.2.1`](https://www.npmjs.com/package/native-keymap))
   - `electron` (from [`[email protected]`](https://www.npmjs.com/package/electron/v/30.1.2))
   - `electron-store` (from [`electron-store@^8.0.0`](https://www.npmjs.com/package/electron-store))
-  - `fix-path` (from [`fix-path@^3.0.0`](https://www.npmjs.com/package/fix-path))
+  - `fix-path` (from [`fix-path@^4.0.0`](https://www.npmjs.com/package/fix-path))
 - `@theia/core/shared/...`
   - `@phosphor/algorithm` (from [`@phosphor/algorithm@1`](https://www.npmjs.com/package/@phosphor/algorithm))
   - `@phosphor/commands` (from [`@phosphor/commands@1`](https://www.npmjs.com/package/@phosphor/commands))

diff --git a/packages/electron/README.md b/packages/electron/README.md
@@ -20,7 +20,7 @@ The `@theia/electron` extension bundles all Electron-specific dependencies and c
   - `native-keymap` (from [`native-keymap@^2.2.1`](https://www.npmjs.com/package/native-keymap))
   - `electron` (from [`[email protected]`](https://www.npmjs.com/package/electron/v/30.1.2))
   - `electron-store` (from [`electron-store@^8.0.0`](https://www.npmjs.com/package/electron-store))
-  - `fix-path` (from [`fix-path@^3.0.0`](https://www.npmjs.com/package/fix-path))
+  - `fix-path` (from [`fix-path@^4.0.0`](https://www.npmjs.com/package/fix-path))
 
 ## Additional Information
 

diff --git a/packages/electron/package.json b/packages/electron/package.json
@@ -4,7 +4,7 @@
   "description": "Theia - Electron utility package",
   "dependencies": {
     "electron-store": "^8.0.0",
-    "fix-path": "^3.0.0",
+    "fix-path": "^4.0.0",
     "native-keymap": "^2.2.1"
   },
   "devDependencies": {