chore(deps): bump launch-editor from 2.6.0 to 2.14.1 in /starters/create-builder/create-react-app

[dependabot]

Bumps launch-editor from 2.6.0 to 2.14.1.

Commits

• 3f97c64 v2.14.1
• 0cc9550 fix: reject UNC paths (#138)
• afd1ab9 ci: run tests on mac and windows (#136)
• 0bfa328 test: add some tests for launch-editor package (#135)
• 1b006ae chore: add README (#134)
• 383ef26 v2.14.0
• 6277209 ci: harden publish settings
• 520b2f7 fix(deps): update all non-major dependencies (#129)
• 475ac66 chore(deps): update dependency lint-staged to v17 (#130)
• 247bf1d chore(deps): update dependency yorkie to v2 (#131)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for launch-editor since your current version.

---

Note

Low Risk
Lockfile-only transitive dev dependency update with no application code changes; impact is limited to webpack-dev-server’s editor-launch behavior in development.

Overview
Updates transitive dev dependencies in starters/create-builder/create-react-app by refreshing package-lock.json and yarn.lock only—no package.json or app source changes.

launch-editor is resolved from 2.6.0 to 2.14.1 (still pulled in via webpack-dev-server’s ^2.6.0 range). That bump also moves picocolors to 1.1.1 and shell-quote to 1.8.4, which launch-editor depends on.

Upstream changes in this range include hardening such as rejecting UNC paths when opening an editor from the dev overlay—relevant only to local dev tooling, not production runtime.

^{Reviewed by Cursor Bugbot for commit dd9806e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: dd9806e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

_{To disable these notifications, a workspace admin can disable them in workspace settings.}

---

View your CI Pipeline Execution ↗ for commit dd9806e

Command	Status	Duration	Result
nx test @snippet/angular-17	❌ Failed	47s	View ↗
nx test @e2e/nuxt	✅ Succeeded	5m 49s	View ↗
nx test @e2e/gen1-react	✅ Succeeded	4m 30s	View ↗
nx test @e2e/nextjs-sdk-next-app	✅ Succeeded	7m 5s	View ↗
nx test @e2e/react	✅ Succeeded	4m 21s	View ↗
nx test @e2e/hydrogen	✅ Succeeded	4m 53s	View ↗
nx test @e2e/angular-17-ssr	✅ Succeeded	5m 19s	View ↗
nx test @snippet/nuxt	✅ Succeeded	1m 24s	View ↗
Additional runs (38)	✅ Succeeded	...	View ↗

💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗.

---

☁️ Nx Cloud last updated this comment at 2026-06-14 19:46:16 UTC

[sanyamkamat]

@dependabot rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.