Packages

shell-quote

1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed

Upgrading shell-quote From 1.8.0 to 1.11.0

7 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 1.8.0Newest 1.x, Latest1.12.0Clears its 2 advisories1.9.0
  1. 1.8.0yours
  2. 1.8.1
  3. 1.8.2
  4. 1.8.3
  5. 1.8.4
  6. 1.9.0security
  7. 1.10.0
  8. 1.11.0target
0
changes to make
2
advisories fixed
4
new
10
fixes

Security

Fixes 2 advisories affecting 1.8.0

  • parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    1.9.0

Release by release

  1. 1.11.0

    29 Sep 20261 new · 2 fixes
    • new

      Add permissions 3429b0d

    • fixed

      quote: drop a replace that can never match in the single-quote branch #15

    • fixed

      parse: support bash ANSI-C quoting ($'...') #32

  2. 1.10.0

    10 Jul 20262 fixes
    • fixed

      Fix stale example outputs 2de86f5

    • fixed

      Fix an error TS v6 ignores but v7 fails on 59bbf8b

  3. 1.9.0

    Security fix25 Jun 20261 new
    • security

      parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    • new

      Add types dca6e21

  4. 1.8.4nothing new or fixed in the note

  5. 1.8.3

    2 Jun 20251 fix
    • fixed

      Remove unnecessary backslash escaping in single quotes #15

  6. 1.8.2

    27 Nov 20242 new · 3 fixes
    • new

      Add missing engines.node 843820e

    • new

      Add missing peer dep 4c3b88d

    • fixed

      quote: preserve empty strings #18

    • fixed

      Fix changelog tags 0fb9fd8

    • fixed

      Prevent node 14 on ARM mac from failing 9eecafc

  7. 1.8.1

    7 Apr 20232 fixes
    • fixed

      parse: preserve whitespace in comments #6

    • fixed

      Properly support the escape option #5

44 other lines we could not sort, mostly version bumps

  • quote: reject line terminators in tokens after a comment 6002b2e

    1.11.0

  • parse: preserve text after special shell parameters 81b08a5

    1.11.0

  • parse: an escaped backslash does not escape the character after it d708019

    1.11.0

  • quote: preserve ! in arguments that also contain ' ad39927

    1.11.0

  • parse: treat $_name as a variable name, not $_ followed by text 28f88cd

    1.11.0

  • quote: preserve empty glob patterns 35c9b97

    1.11.0

  • quote: escape ~ in glob patterns to prevent shell tilde-expansion 239d49c

    1.11.0

  • Update @ljharb/eslint-config, auto-changelog, eslint, evalmd b1e406e

    1.11.0

  • Npmignore some files ebfc308

    1.11.0

  • Set least-privilege cache-mode 36f2394

    1.11.0

7 internal lines (docs, tests, tooling) left out.