Update cross-spawn to patch vulnerability; transitive dependency repo is unmaintained

[sd234678]

↪️ Pull Request

Updates the vulnerable version of cross-spawn found in node-elm-compiler; there are PRs into node-elm-compiler which fix this but haven't had maintainer attention.

💻 Examples

n/a

🚨 Test instructions

n/a

✔️ PR Todo

Unchecked items are not relevant for this PR.

• Added/updated unit tests for this change
• Filled out test instructions (In case there aren't any unit tests)
• Included links to related issues/PRs
  • PR 10013 - dependabot tried to fix this

[devongovett]

I think resolutions only affect the Parcel repo itself, and they won't apply when parcel is installed in your app. You'd need to put the resolution in your own package.json as well.

[sd234678]

Oh, of course, thanks. Bizarre that I didn't think of that when going down this rabbit hole. Feel free to close if this change isn't wanted at this level.