Packages

shell-quote

1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed

Upgrading shell-quote From 1.8.3 to 1.9.0

2 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 1.8.3Newest 1.x, Latest1.12.0
  1. 1.8.3yours
  2. 1.8.4
  3. 1.9.0target
0
changes to make
2
advisories fixed
1
new
0
fixes

Security

1 advisory still affects 1.9.0

Upgrading to 1.11.0 clears it.

Fixes 2 advisories affecting 1.8.3

  • parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    1.9.0

Release by release

  1. 1.9.0

    Security fix25 Jun 20261 new
    • security

      parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488

    • new

      Add types dca6e21

  2. 1.8.4nothing new or fixed in the note

12 other lines we could not sort, mostly version bumps

  • Update eslint 9aa9e8f

    1.9.0

  • Update workflows 75e8497

    1.9.0

  • Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10@types/esrecurse 3fb739d

    1.9.0

  • Retry npm install on Windows to survive npm 2/3 staging-rename flake abe0163

    1.9.0

  • Windows + node 5/7: install deps with a modern node b4bafa2

    1.9.0

  • quote: escape leading ~ to prevent shell tilde-expansion 7a76c1a

    1.9.0

  • Update auto-changelog, tape 7184b44

    1.9.0

  • Apparently jackspeak is no longer in the graph 9ba368a

    1.9.0

  • quote: validate object-token shapes 4378a6e

    1.8.4

  • Update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0

    1.8.4

1 internal line (docs, tests, tooling) left out.