deps: Bump fix-path to ^4.0.0 to avoid cross-env <6.0.6 (#14781)

cross-env 6.0.6 fixes CVE-2024-21538
(https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230).

Contributed by STMicroelectronics

Signed-off-by: Torbjörn SVENSSON <torbjorn.svensson@foss.st.com>

Author: Torbjorn-Svensson

package-lock.json

@@ -74,7 +74,7 @@ export class SomeClass {
   - `native-keymap` (from [`native-keymap@^2.2.1`](https://www.npmjs.com/package/native-keymap))
   - `electron` (from [`electron@30.1.2`](https://www.npmjs.com/package/electron/v/30.1.2))
   - `electron-store` (from [`electron-store@^8.0.0`](https://www.npmjs.com/package/electron-store))
-  - `fix-path` (from [`fix-path@^3.0.0`](https://www.npmjs.com/package/fix-path))
+  - `fix-path` (from [`fix-path@^4.0.0`](https://www.npmjs.com/package/fix-path))
 - `@theia/core/shared/...`
   - `@phosphor/algorithm` (from [`@phosphor/algorithm@1`](https://www.npmjs.com/package/@phosphor/algorithm))
   - `@phosphor/commands` (from [`@phosphor/commands@1`](https://www.npmjs.com/package/@phosphor/commands))

packages/core/README.md

@@ -20,7 +20,7 @@ The `@theia/electron` extension bundles all Electron-specific dependencies and c
   - `native-keymap` (from [`native-keymap@^2.2.1`](https://www.npmjs.com/package/native-keymap))
   - `electron` (from [`electron@30.1.2`](https://www.npmjs.com/package/electron/v/30.1.2))
   - `electron-store` (from [`electron-store@^8.0.0`](https://www.npmjs.com/package/electron-store))
-  - `fix-path` (from [`fix-path@^3.0.0`](https://www.npmjs.com/package/fix-path))
+  - `fix-path` (from [`fix-path@^4.0.0`](https://www.npmjs.com/package/fix-path))
 
 ## Additional Information
 

packages/electron/README.md

@@ -4,7 +4,7 @@
   "description": "Theia - Electron utility package",
   "dependencies": {
     "electron-store": "^8.0.0",
-    "fix-path": "^3.0.0",
+    "fix-path": "^4.0.0",
     "native-keymap": "^2.2.1"
   },
   "devDependencies": {