Packages

shell-quote

1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed

Upgrading shell-quote From 1.6.2 to 1.11.0

14 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 1.6.2Newest 1.x, Latest1.12.0Clears its 2 advisories1.9.0
  1. 1.6.2yours
  2. 4 releases
  3. 1.7.3security
  4. 6 releases
  5. 1.9.0security
  6. 1 release
  7. 1.11.0target
0
changes to make
2
advisories fixed
12
new
14
fixes

Security

Fixes 2 advisories affecting 1.6.2

  • parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    1.9.0

  • Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)

    1.7.3

Release by release

  1. 1.11.0

    29 Sep 20261 new · 2 fixes
    • new

      Add permissions 3429b0d

    • fixed

      quote: drop a replace that can never match in the single-quote branch #15

    • fixed

      parse: support bash ANSI-C quoting ($'...') #32

  2. 1.10.0

    10 Jul 20262 fixes
    • fixed

      Fix stale example outputs 2de86f5

    • fixed

      Fix an error TS v6 ignores but v7 fails on 59bbf8b

  3. 1.9.0

    Security fix25 Jun 20261 new
    • security

      parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    • new

      Add types dca6e21

  4. 1.8.4nothing new or fixed in the note

  5. 1.8.3

    2 Jun 20251 fix
    • fixed

      Remove unnecessary backslash escaping in single quotes #15

  6. 1.8.2

    27 Nov 20242 new · 3 fixes
    • new

      Add missing engines.node 843820e

    • new

      Add missing peer dep 4c3b88d

    • fixed

      quote: preserve empty strings #18

    • fixed

      Fix changelog tags 0fb9fd8

    • fixed

      Prevent node 14 on ARM mac from failing 9eecafc

  7. 1.8.1

    7 Apr 20232 fixes
    • fixed

      parse: preserve whitespace in comments #6

    • fixed

      Properly support the escape option #5

  8. 1.8.0

    31 Jan 20231 new
    • new

      Add support for here strings (<<<) 9802fb3

55 other lines we could not sort, mostly version bumps

  • quote: reject line terminators in tokens after a comment 6002b2e

    1.11.0

  • parse: preserve text after special shell parameters 81b08a5

    1.11.0

  • parse: an escaped backslash does not escape the character after it d708019

    1.11.0

  • quote: preserve ! in arguments that also contain ' ad39927

    1.11.0

  • parse: treat $_name as a variable name, not $_ followed by text 28f88cd

    1.11.0

  • quote: preserve empty glob patterns 35c9b97

    1.11.0

  • quote: escape ~ in glob patterns to prevent shell tilde-expansion 239d49c

    1.11.0

  • Update @ljharb/eslint-config, auto-changelog, eslint, evalmd b1e406e

    1.11.0

  • Npmignore some files ebfc308

    1.11.0

  • Set least-privilege cache-mode 36f2394

    1.11.0

10 internal lines (docs, tests, tooling) left out.