Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Nov 1, 2025

This PR contains the following updates:

Package Change Age Confidence
shell-quote 1.7.2 -> 1.8.3 age confidence

Release Notes

ljharb/shell-quote (shell-quote)

v1.8.3

Compare Source

Fixed
  • [Fix] remove unnecessary backslash escaping in single quotes #15

v1.8.2

Compare Source

Fixed
  • [Fix] quote: preserve empty strings #18
Commits
  • [meta] fix changelog tags 0fb9fd8
  • [actions] split out node 10-20, and 20+ 819bd84
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, npmignore, tape fc56408
  • [actions] update npm for windows tests fdeb0fd
  • [Dev Deps] update @ljharb/eslint-config, aud, tape b8a4a3b
  • [actions] prevent node 14 on ARM mac from failing 9eecafc
  • [meta] exclude more files from the package 4044e7f
  • [Tests] replace aud with npm audit 8cfdbd8
  • [meta] add missing engines.node 843820e
  • [Dev Deps] add missing peer dep 4c3b88d
  • [Dev Deps] pin jackspeak since 2.1.2+ depends on npm aliases, which kill the install process in npm < 6 80322ed

v1.8.1

Compare Source

Fixed
  • [Fix] parse: preserve whitespace in comments #6
  • [Fix] properly support the escape option #5
Commits
  • [Refactor] parse: hoist getVar to module level b42ac73
  • [Refactor] hoist some vars to module level 8f0c5c3
  • [Refactor] parse: use slice over substr, cache some values fcb2e1a
  • [Refactor] parse: a bit of cleanup 6780ec5
  • [Refactor] parse: tweak the regex to not match nothing 227d474
  • [Tests] increase coverage a66de94
  • [Refactor] parse: avoid shadowing a function arg 1d58679

v1.8.0

Compare Source

Commits
  • [New] extract parse and quote to their own deep imports 553fdfc
  • [Tests] add nyc coverage fd7ddcd
  • [New] Add support for here strings (&lt;&lt;&lt;) 9802fb3
  • [New] parse: Add syntax support for duplicating input file descriptors 216b198
  • [Dev Deps] update @ljharb/eslint-config, aud, tape 85f8e31
  • [Tests] add evalmd c5549fc
  • [actions] update checkout action 62e9b49

v1.7.4

Compare Source

Merged
  • Add node_modules to .gitignore #48
Commits
  • [eslint] fix indentation and whitespace aaa9d1f
  • [eslint] additional cleanup 397cb62
  • [meta] add auto-changelog 497fca5
  • [actions] add reusable workflows 4763c36
  • [eslint] add eslint 6ee1437
  • [readme] rename, add badges 7eb5134
  • [meta] update URLs 67381b6
  • [meta] create FUNDING.yml; add funding in package.json 8641572
  • [meta] use npmignore to autogenerate an npmignore file 2e2007a
  • Only apps should have lockfiles f97411e
  • [Dev Deps] update tape 051f608
  • [meta] add safe-publish-latest 18cadf9
  • [Tests] add aud in posttest dc1cc12

v1.7.3

Compare Source

  • Fix a security issue where the regex for windows drive letters allowed some shell meta-characters
    to escape the quoting rules. (CVE-2021-42740)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team November 1, 2025 03:49
@github-actions github-actions bot added PR: awaiting review PRs that need to be reviewed Size: XS labels Nov 1, 2025
@github-actions
Copy link

github-actions bot commented Nov 1, 2025

Trivy Scan Report:

13 vulnerabilities(HIGH/CRITICAL) found!
View report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR: awaiting review PRs that need to be reviewed Size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant