Packages

shell-quote

1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed

Upgrading shell-quote From 1.4.0 to 1.12.0

22 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 1.4.0Clears its 3 advisories1.9.0
  1. 1.4.0yours
  2. 11 releases
  3. 1.7.3security
  4. 6 releases
  5. 1.9.0security
  6. 2 releases
  7. 1.12.0target
0
changes to make
3
advisories fixed
15
new
20
fixes

Security

Fixes 3 advisories affecting 1.4.0

  • parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    1.9.0

  • Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)

    1.7.3

Release by release

  1. 1.12.0

    2 Oct 20261 fix
    • fixed

      parse: support here-documents (<<) #31

  2. 1.11.0

    29 Sep 20261 new · 2 fixes
    • new

      Add permissions 3429b0d

    • fixed

      quote: drop a replace that can never match in the single-quote branch #15

    • fixed

      parse: support bash ANSI-C quoting ($'...') #32

  3. 1.10.0

    10 Jul 20262 fixes
    • fixed

      Fix stale example outputs 2de86f5

    • fixed

      Fix an error TS v6 ignores but v7 fails on 59bbf8b

  4. 1.9.0

    Security fix25 Jun 20261 new
    • security

      parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    • new

      Add types dca6e21

  5. 1.8.4nothing new or fixed in the note

  6. 1.8.3

    2 Jun 20251 fix
    • fixed

      Remove unnecessary backslash escaping in single quotes #15

  7. 1.8.2

    27 Nov 20242 new · 3 fixes
    • new

      Add missing engines.node 843820e

    • new

      Add missing peer dep 4c3b88d

    • fixed

      quote: preserve empty strings #18

    • fixed

      Fix changelog tags 0fb9fd8

    • fixed

      Prevent node 14 on ARM mac from failing 9eecafc

  8. 1.8.1

    7 Apr 20232 fixes
    • fixed

      parse: preserve whitespace in comments #6

    • fixed

      Properly support the escape option #5

72 other lines we could not sort, mostly version bumps

  • parse: support tab-stripping here-documents (<<-) dbfac37

    1.12.0

  • parse: support output process substitution (>() 2053315

    1.12.0

  • parse: support the case test-next terminator (;;&) 7d688b9

    1.12.0

  • parse: support the case fall-through terminator (;&) f27010e

    1.12.0

  • parse: support redirecting output despite noclobber (>|) b78d19c

    1.12.0

  • parse: support opening a file for reading and writing (<>) 21cc333

    1.12.0

  • parse: support redirecting stdout and stderr (&>) 6ad6cd2

    1.12.0

  • parse: support appending stdout and stderr (&>>) 90cde9c

    1.12.0

  • Update @ljharb/eslint-config 3a7b4ae

    1.12.0

  • quote: reject line terminators in tokens after a comment 6002b2e

    1.11.0

10 internal lines (docs, tests, tooling) left out.