shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
Upgrading shell-quote From 1.10.0 to 1.12.0
2 releases in betweenevery note read
Reading releases, release notes and advisories…
- 0
- changes to make
- 1
- advisory fixed
- 1
- new
- 3
- fixes
Security
Fixes 1 advisory affecting 1.10.0
- shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` tokencritical · GHSA-pqg4-j6r4-53mv
Release by release
20 other lines we could not sort, mostly version bumps
- 1.12.0
parse: support tab-stripping here-documents (<<-)dbfac37 - 1.12.0
parse: support output process substitution (>()2053315 - 1.12.0
parse: support thecasetest-next terminator (;;&)7d688b9 - 1.12.0
parse: support thecasefall-through terminator (;&)f27010e - 1.12.0
parse: support redirecting output despitenoclobber(>|)b78d19c - 1.12.0
parse: support opening a file for reading and writing (<>)21cc333 - 1.12.0
parse: support redirecting stdout and stderr (&>)6ad6cd2 - 1.12.0
parse: support appending stdout and stderr (&>>)90cde9c - 1.12.0
Update
@ljharb/eslint-config3a7b4ae - 1.11.0
quote: reject line terminators in tokens after acomment6002b2e