From e55d650316a303eab73d677af59bcd90dcfdf307 Mon Sep 17 00:00:00 2001
From: Fabien DUVAL <fabien.duval@legrand.com>
Date: Mon, 17 Nov 2025 20:25:14 +0100
Subject: [PATCH] fix: update cross-spawn minimal requirement to 7.0.6 to avoid
 CVE-2024-21538

---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 52d91f0..fa2644d 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
   "license": "ISC",
   "dependencies": {
     "archy": "^1.0.0",
-    "cross-spawn": "^7.0.3",
+    "cross-spawn": "^7.0.6",
     "istanbul-lib-coverage": "^3.2.0",
     "p-map": "^3.0.0",
     "rimraf": "^3.0.0",
@@ -39,4 +39,4 @@
   "nyc": {
     "include": "index.js"
   }
-}
+}
\ No newline at end of file