[BUG] Use of `shell: true` in `child_process.spawn` is causing a deprecation warning in Node 24.

[iclanton]

⚠️ Important Notice

Please differentiate the bug

This repository is not responsible for the actual code generation. If you have problems with the code generation, please open the bug at OpenAPITools/openapi-generator.

Please also check if the bug is already known before you open a new bug.

---

🐛 Bug Report:

Describe the bug

Use of shell: true in child_process.spawn is causing a deprecation warning in Node 24.

Steps to Reproduce

Run the tool under Node 24. The following warning is printed:

(node:34628) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)

Usage of child_process.spawn(<bin name>, [ <args array> ], { shell: true }) is deprecated in Node 24 because it internally just joins the arguments together.

Expected behavior

No deprecation warning.

Screenshots

N/A

Operation System (please complete the following information):

Any

Package System (please complete the following information):

Node 24.

Additional context

Add any other context about the problem here.

[github-actions]

🎉 This issue has been resolved in version 2.28.3 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀

[wing328]

thanks for the PR by @kaigritun to address the issue

@iclanton can you please give it a try with the latest release?