@vscode/vsce 2.21.0 → 2.21.1

package/out/package.js

@@ -229,15 +229,15 @@ async function versionBump(options) {
                 return Promise.reject(`Invalid version ${options.version}`);
             }
     }
-    let command = `npm version ${options.version}`; // CodeQL [SM03609] options.version is checked above.
+    // call `npm version` to do our dirty work
+    const args = ['version', options.version];
     if (options.commitMessage) {
-        command = `${command} -m "${options.commitMessage}"`;
+        args.push('-m', options.commitMessage);
     }
     if (!(options.gitTagVersion ?? true)) {
-        command = `${command} --no-git-tag-version`;
+        args.push('--no-git-tag-version');
     }
-    // call `npm version` to do our dirty work
-    const { stdout, stderr } = await (0, util_1.promisify)(cp.exec)(command, { cwd });
+    const { stdout, stderr } = await (0, util_1.promisify)(cp.execFile)(process.platform === 'win32' ? 'npm.cmd' : 'npm', args, { cwd });
     if (!process.env['VSCE_TESTS']) {
         process.stdout.write(stdout);
         process.stderr.write(stderr);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vscode/vsce",
-	"version": "2.21.0",
+	"version": "2.21.1",
 	"description": "VS Code Extensions Manager",
 	"repository": {
 		"type": "git",