[SPARK-50501] Update cross-spawn JS module to surpress a warning in lint

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 4.0.0
• Fix Version/s: 4.0.0
• Component/s: Build
• Labels: pull-request-available
• Assignee: Kousuke Saruta
• Reporter: Kousuke Saruta
• Created: 05/Dec/24 17:38
• Updated: 05/Dec/24 18:45
• Resolved: 05/Dec/24 18:45

Description

Recently, ./dev/lint-js shows a warning like as follows.

1 high severity vulnerability

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

To inspect more, I executed npm audit and the result is:

cross-spawn  7.0.0 - 7.0.4
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
fix available via `npm audit fix`
node_modules/cross-spawn

1 high severity vulnerability

Issue Links

• links to: GitHub Pull Request #49077