chore(deps): bump shell-quote to ^1.8.4 (CVE fix) (#1711)

Browse source

Bumps shell-quote from ^1.8.3 to ^1.8.4 in the root and server
packages to resolve a critical security advisory. Adds an npm
override so concurrency's pinned shell-quote@1.8.3 also resolves to
a patched version, leaving no vulnerable copy in the tree.


Claude-Session: https://claude.ai/code/session_01HiccCEh9mwCfVzE8qYcop1

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Cliff Hall 2026-07-17 20:00:21 -04:00 • committed by GitHub

parent b2025cd47b

commit 3119422932

No known key found for this signature in database

GPG key ID: B5690EEEBB952194

1 changed files with 276 additions and 270 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

539

package-lock.json generated

View file

File diff suppressed because it is too large Load diff