-
Notifications
You must be signed in to change notification settings - Fork 107
Closed
Description
Describe the bug
Using the plugin with a node version >= 24 results in the following deprecation warning:
(node:100588) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
at normalizeSpawnArguments (node:child_process:617:15)
at spawn (node:child_process:756:13)
at file:///.../node_modules/vite-plugin-checker/dist/main.js:188:18
at new Promise (<anonymous>)
at spawnChecker (file:///.../node_modules/vite-plugin-checker/dist/main.js:185:10)
at file:///.../node_modules/vite-plugin-checker/dist/main.js:128:23
at Array.map (<anonymous>)
at Object.buildStart (file:///.../node_modules/vite-plugin-checker/dist/main.js:127:40)
at Object.handler (file:///.../node_modules/vite/dist/node/chunks/dep-Bsx9IwL8.js:34305:13)
at file:///.../node_modules/rollup/dist/es/shared/node-entry.js:22269:40
β 383 modules transformed.
Reproduction
Use a node version >= 24.0.0.
Run vite build
using the eslint integration for eg.
Expected behavior
No deprecation message.
System Info
System:
OS: Linux 6.12 Manjaro Linux
CPU: (12) x64 13th Gen Intel(R) Core(TM) i7-1365U
Memory: 16.75 GB / 31.01 GB
Container: Yes
Shell: 5.2.37 - /bin/bash
Binaries:
Node: 24.2.0 - /tmp/xfs-0f1df73f/node
Yarn: 4.9.1 - /tmp/xfs-0f1df73f/yarn
npm: 11.4.2 - /usr/bin/npm
npmPackages:
vite-plugin-checker: ^0.9.3 => 0.9.3
Additional context
No response
Validations
- Read the docs.
- Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
Metadata
Metadata
Assignees
Labels
No labels