Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): bump shell-quote from 1.6.1 to 1.8.0 (#1725)
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.6.1 to 1.8.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.7.4...v1.8.0">v1.8.0</a> - 2023-01-30</h2> <h3>Commits</h3> <ul> <li>[New] extract <code>parse</code> and <code>quote</code> to their own deep imports <a href="https://github.com/ljharb/shell-quote/commit/553fdfc32cc41b4c2f77e061b6957703958ca575"><code>553fdfc</code></a></li> <li>[Tests] add <code>nyc</code> coverage <a href="https://github.com/ljharb/shell-quote/commit/fd7ddcdd84bfef064c6d9a06b055a95531b26897"><code>fd7ddcd</code></a></li> <li>[New] Add support for here strings (<code>&lt;&lt;&lt;</code>) <a href="https://github.com/ljharb/shell-quote/commit/9802fb37c7946e18c672b81122520dc296bde271"><code>9802fb3</code></a></li> <li>[New] <code>parse</code>: Add syntax support for duplicating input file descriptors <a href="https://github.com/ljharb/shell-quote/commit/216b19894f76b14d164c4c5a68f05a51b06336c4"><code>216b198</code></a></li> <li>[Dev Deps] update <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>tape</code> <a href="https://github.com/ljharb/shell-quote/commit/85f8e31dd80e1dde63d58204b653e497a53857e6"><code>85f8e31</code></a></li> <li>[Tests] add <code>evalmd</code> <a href="https://github.com/ljharb/shell-quote/commit/c5549fcd82d70046bdc2b1c34184ae9f9d0191f9"><code>c5549fc</code></a></li> <li>[actions] update checkout action <a href="https://github.com/ljharb/shell-quote/commit/62e9b4958cfa2f9009b7069076612fe33528c1fb"><code>62e9b49</code></a></li> </ul> <h2><a href="https://github.com/ljharb/shell-quote/compare/1.7.3...v1.7.4">v1.7.4</a> - 2022-10-12</h2> <h3>Merged</h3> <ul> <li>Add node_modules to .gitignore <a href="https://github-redirect.dependabot.com/ljharb/shell-quote/pull/48"><code>[#48](https://github.com/ljharb/shell-quote/issues/48)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>[eslint] fix indentation and whitespace <a href="https://github.com/ljharb/shell-quote/commit/aaa9d1f65bf3445e6af1efaa4a8f8c13a21aa593"><code>aaa9d1f</code></a></li> <li>[eslint] additional cleanup <a href="https://github.com/ljharb/shell-quote/commit/397cb628f3d96e4e47763147c0d6074997a13880"><code>397cb62</code></a></li> <li>[meta] add <code>auto-changelog</code> <a href="https://github.com/ljharb/shell-quote/commit/497fca509af3b7d6daaba459bad1f45ac0af3ff1"><code>497fca5</code></a></li> <li>[actions] add reusable workflows <a href="https://github.com/ljharb/shell-quote/commit/4763c36274c5881a2d141ce9f2b17b7d1d95e8cd"><code>4763c36</code></a></li> <li>[eslint] add eslint <a href="https://github.com/ljharb/shell-quote/commit/6ee1437df1b10a79bdf2aaa04f2bacc9f420dc15"><code>6ee1437</code></a></li> <li>[readme] rename, add badges <a href="https://github.com/ljharb/shell-quote/commit/7eb513483d931602452ec572ed456714148acd2b"><code>7eb5134</code></a></li> <li>[meta] update URLs <a href="https://github.com/ljharb/shell-quote/commit/67381b61fa95e57819333463f491428747893186"><code>67381b6</code></a></li> <li>[meta] create FUNDING.yml; add <code>funding</code> in package.json <a href="https://github.com/ljharb/shell-quote/commit/86415722d875578adf1f95f9e649ba42c805bc32"><code>8641572</code></a></li> <li>[meta] use <code>npmignore</code> to autogenerate an npmignore file <a href="https://github.com/ljharb/shell-quote/commit/2e2007a393f90bf079fc556a921120b3508c4fc3"><code>2e2007a</code></a></li> <li>Only apps should have lockfiles <a href="https://github.com/ljharb/shell-quote/commit/f97411ef4d2f183200fc8a28beca9faf9b08a640"><code>f97411e</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/ljharb/shell-quote/commit/051f60857ad5035280208abdc348bf5ba42a6254"><code>051f608</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/ljharb/shell-quote/commit/18cadf95357392fcd78ea8619956fd41eed62649"><code>18cadf9</code></a></li> <li>[Tests] add <code>aud</code> in <code>posttest</code> <a href="https://github.com/ljharb/shell-quote/commit/dc1cc12b956ccd93d58aaaad263bee7d50576d27"><code>dc1cc12</code></a></li> </ul> <!-- raw HTML omitted --> <h2>1.7.3</h2> <ul> <li>Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)</li> </ul> <h2>1.7.2</h2> <ul> <li>Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (<a href="https://github.com/ljharb/shell-quote/commit/144e1c20cd57549a414c827fb3032e60b7b8721c">144e1c2</a>)</li> </ul> <h2>1.7.1</h2> <ul> <li>Fix <code>$</code> being removed when not part of an environment variable name. (<a href="https://github.com/Admin"><code>@Adman</code></a> in <a href="https://github-redirect.dependabot.com/ljharb/shell-quote/pull/32">#32</a>)</li> </ul> <h2>1.7.0</h2> <ul> <li>Add support for parsing <code>>></code> and <code>>&</code> redirection operators. (<a href="https://github.com/forivall"><code>@forivall</code></a> in <a href="https://github-redirect.dependabot.com/ljharb/shell-quote/pull/16">#16</a>)</li> <li>Add support for parsing <code><(</code> process substitution operator. (<a href="https://github.com/cuonglm"><code>@cuonglm</code></a> in <a href="https://github-redirect.dependabot.com/ljharb/shell-quote/pull/15">#15</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/shell-quote/commit/508e2f9c6439706cc696407d52fec36f78248a19"><code>508e2f9</code></a> v1.8.0</li> <li><a href="https://github.com/ljharb/shell-quote/commit/fd7ddcdd84bfef064c6d9a06b055a95531b26897"><code>fd7ddcd</code></a> [Tests] add <code>nyc</code> coverage</li> <li><a href="https://github.com/ljharb/shell-quote/commit/9802fb37c7946e18c672b81122520dc296bde271"><code>9802fb3</code></a> [New] Add support for here strings (<code><<<</code>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/216b19894f76b14d164c4c5a68f05a51b06336c4"><code>216b198</code></a> [New] <code>parse</code>: Add syntax support for duplicating input file descriptors</li> <li><a href="https://github.com/ljharb/shell-quote/commit/c5549fcd82d70046bdc2b1c34184ae9f9d0191f9"><code>c5549fc</code></a> [Tests] add <code>evalmd</code></li> <li><a href="https://github.com/ljharb/shell-quote/commit/553fdfc32cc41b4c2f77e061b6957703958ca575"><code>553fdfc</code></a> [New] extract <code>parse</code> and <code>quote</code> to their own deep imports</li> <li><a href="https://github.com/ljharb/shell-quote/commit/85f8e31dd80e1dde63d58204b653e497a53857e6"><code>85f8e31</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>tape</code></li> <li><a href="https://github.com/ljharb/shell-quote/commit/62e9b4958cfa2f9009b7069076612fe33528c1fb"><code>62e9b49</code></a> [actions] update checkout action</li> <li><a href="https://github.com/ljharb/shell-quote/commit/5409e72ef6c905c4d1637883cd394f6f07abd934"><code>5409e72</code></a> v1.7.4</li> <li><a href="https://github.com/ljharb/shell-quote/commit/4763c36274c5881a2d141ce9f2b17b7d1d95e8cd"><code>4763c36</code></a> [actions] add reusable workflows</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/shell-quote/compare/1.6.1...v1.8.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for shell-quote since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/software-mansion/react-native-screens/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information
1 parent
4cbd9cb
commit bdf860e