Skip to content

build(deps-dev): bump zx from 8.6.1 to 8.7.1 #84

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 15, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2025

Bumps zx from 8.6.1 to 8.7.1.

Release notes

Sourced from zx's releases.

8.7.1 — Pipe Whisperer

Continues v8.7.0: handles new ps() corner case and improves $.kill mechanics on Windows #1266 #1267 #1269 webpod/ps#14

8.7.0 — Solder Savior

Important fixes for annoying flaky bugs

kill() 🐞

We've found an interesting case #1262

const p = $`sleep 1000`
const {pid} = p // 12345
await p.kill()

If we kill the process again, the result might be unexpected:

await ps({pid}) // {pid: 12345, ppid: 67890, command: 'another command', ...}
p.kill()

This happens because the pid may be reused by the system for another process, so we've added extra assertions to prevent indeterminacy:

p.kill()  // Error: Too late to kill the process.
p.abort() // Error: Too late to abort the process.

ps() 🐛

  • ps() uses wmic internally on Windows, it relies on fragile heuristics to parse the output. We have improved this logic to handle more format variants, but over time (in v9 maybe) we're planning to change the approach.

#1256 #1263 webpod/ps#12 webpod/ingrid#6

const [root] = await ps.lookup({ pid: process.pid })
assert.equal(root.pid, process.pid)

8.6.2 — Flow Unstoppable

Fixes $.prefix & $.postfix values settings via env variables #1261 #1260

Commits
  • afcb0eb feat: call taskkill for process killing on windows (#1269)
  • 3b9aaeb fix: update @​webpod/ps to v0.1.4 to handle eperm issues (#1267)
  • 978c0e1 chore: bump version to v8.7.0 (#1265)
  • 7e3df2b chore: bump version to v8.6.3 (#1264)
  • 609b05e fix: update @​webpod/ps to v0.1.3, add smoke test for ps API (#1256)
  • 5e5fb36 fix: check if ProcessPromise is settled on kill and abort (#1262)
  • 523ef8e fix: dont override $.prefix setting defined via envs, revert `env.S… (#1261)
  • b55c5f4 docs(examples): introduce weather fetch (#1257)
  • c7de989 docs: fix readme svg size (#1259)
  • 14cb956 docs: add fetch timeout example (#1258)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2025
@github-actions github-actions bot enabled auto-merge (squash) July 15, 2025 09:24
@joncinque
Copy link
Contributor

@dependabot recreate

Bumps [zx](https://github.com/google/zx) from 8.6.1 to 8.7.1.
- [Release notes](https://github.com/google/zx/releases)
- [Commits](google/zx@8.6.1...8.7.1)

---
updated-dependencies:
- dependency-name: zx
  dependency-version: 8.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/zx-8.7.1 branch from 1726172 to 98e2a9f Compare July 15, 2025 14:50
@github-actions github-actions bot merged commit 6243d43 into main Jul 15, 2025
9 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/zx-8.7.1 branch July 15, 2025 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant