• ✅login: folortin / (67ba1ff)

Hi @folortin!, thanks for the Pull Request

The pull request title isn't properly formatted. We ask that you update the pull request title to match this format, as we use it to generate changelogs and automate releases.

• The commit message tag wasn't recognized. Did you mean "docs", "fix", or "feat"?
• There should be a space following the initial tag and colon, for example 'feat: Message'.

To Fix: You can fix this problem by clicking 'Edit' next to the pull request title at the top of this page.

Read more about contributing to ESLint here

✅ Deploy Preview for docs-eslint canceled.

Hi @folortin, thanks for the PR! Can you please fill out the PR template? Also, since this change is tagged as fix, can you provide more details on what problem it fixes?

Hello, @mdjermanovic,

I believe this PR addresses a security vulnerability caused by the cross-spawn package.

When I run npm audit, I see a 'Severity: high' warning, as shown in the screenshot below.

There is a security advisory for cross-spawn < 6.0.6, but that's a transitive dependency for ESLint, so not within our control. The version we are using, 7.0.5, does not have this vulnerability. So this is just a chore.

Per the CHANGELOG, it also doesn't seem that any bugs or security issues were fixed in v7.0.6, compared to v7.0.5.

Either way, seems fine to merge this as a chore.