Skip to content

build(deps): bump shell-quote and web-ext - #167

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a67921d442
Open

build(deps): bump shell-quote and web-ext#167
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a67921d442

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps shell-quote to 1.10.0 and updates ancestor dependency web-ext. These dependencies need to be updated together.

Updates shell-quote from 1.7.3 to 1.10.0

Changelog

Sourced from shell-quote's changelog.

v1.10.0 - 2026-07-10

Merged

Commits

  • [Fix] parse: match nested ${...} braces so nested parameter expansion is consumed as one substitution c0842c8
  • [Tests] parse: pin single-quote literalness and unmatched-quote handling a0d03e3
  • [readme] remove the space in js code fences so evalmd evaluates them 2116fa3
  • [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11) 1c36f3f
  • [readme] document that quote outputs POSIX quoting, not cmd.exe/PowerShell 100e96e
  • [readme] document parse's supported parameter-expansion subset e1c75cd
  • [Fix] parse: a backslash inside single quotes must not escape the closing quote 5d460a3
  • [readme] fix stale example outputs 2de86f5
  • [Tests] quote: pin that a backslash with whitespace is not doubled in single quotes (#14) 190e236
  • [readme] quote: use output verbatim; do not re-quote it (#11) 1b36468
  • [Refactor] parse: fix swapped SINGLE_QUOTE/DOUBLE_QUOTE variable names 801af5c
  • [types] fix an error TS v6 ignores but v7 fails on 59bbf8b
  • [Dev Deps] update @arethetypeswrong/cli, evalmd a04d475
  • [Dev Deps] update @arethetypeswrong/ci, eslint d390f9a
  • [Tests] quote: the tilde test escapes every ~, not just a leading one (#9) 617d119

v1.9.0 - 2026-06-24

Commits

  • [New] add types dca6e21
  • [Dev Deps] update eslint 9aa9e8f
  • [Fix] parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488
  • [actions] update workflows 75e8497
  • [actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10@types/esrecurse 3fb739d
  • [actions] retry npm install on Windows to survive npm 2/3 staging-rename flake abe0163
  • [actions] Windows + node 5/7: install deps with a modern node b4bafa2
  • [Fix] quote: escape leading ~ to prevent shell tilde-expansion 7a76c1a
  • [Dev Deps] update auto-changelog, tape 7184b44
  • [Dev Deps] apparently jackspeak is no longer in the graph 9ba368a

v1.8.4 - 2026-05-22

Commits

  • [Fix] quote: validate object-token shapes 4378a6e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
  • [Tests] increase coverage 9f3caa3
  • [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
  • [Dev Deps] update @ljharb/eslint-config 699c511

v1.8.3 - 2025-06-01

... (truncated)

Commits
  • 64988d9 v1.10.0
  • 617d119 [Tests] quote: the tilde test escapes every ~, not just a leading one (#9)
  • 59bbf8b [types] fix an error TS v6 ignores but v7 fails on
  • 190e236 [Tests] quote: pin that a backslash with whitespace is not doubled in singl...
  • a04d475 [Dev Deps] update @arethetypeswrong/cli, evalmd
  • b9545b3 [New] parse: add opt-in splitUnquoted option for shell field-splitting of...
  • 1b36468 [readme] quote: use output verbatim; do not re-quote it (#11)
  • 1c36f3f [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11)
  • e1c75cd [readme] document parse's supported parameter-expansion subset
  • c0842c8 [Fix] parse: match nested ${...} braces so nested parameter expansion is ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.

Install script changes

This version adds prepublish script that runs during installation. Review the package contents before updating.


Updates web-ext from 10.0.0 to 10.6.0

Release notes

Sourced from web-ext's releases.

10.6.0 (2026-08-04)

main changes

  • Added: new Firefox 154.0b4 schema for web-ext lint
  • Fixed: rename default export to webExt (#3789)

dependencies

  • Updated: dependency @devicefarmer/adbkit to 3.3.9 (#3774)
  • Updated: dependency addons-linter to 10.9.0 (#3780)
  • Updated: dependency firefox-profile to 4.7.1 (#3795)

dev dependencies

  • Updated: dependency @babel/cli to 8.0.4 (#3775)
  • Updated: dependency @eslint/eslintrc to 3.3.6 (#3779)
  • Updated: dependency fs-extra to 11.4.0 (#3788)
  • Updated: dependency globals to 17.8.0 (#3791)
  • Updated: dependency prettier to 3.9.6 (#3785)
  • Updated: dependency fast-uri to 3.1.4 (#3784)
  • Updated: dependency fx-runner to 1.6.0 (#3796)

others

  • Add SSDLC and SBOM Actions (#3783)

10.5.0 (2026-07-10)

main changes

  • Added: add a --enterprise CLI flag to the lint command (#3770)
  • Added: log the response data when a PATCH request fails (#3746)
  • Added: new Firefox 153.0b2 schema for web-ext lint

dependencies

  • Updated: dependency @babel/runtime to 8.0.0 (#3749)
  • Updated: dependency addons-linter to 10.8.0 (#3772)
  • Updated: dependency watchpack to 2.5.2 (#3742)
  • Updated: dependencies uuid and istanbul-lib-processinfo (#3745)

dev dependencies

  • Updated: dependency fs-extra to 11.3.6 (#3768)
  • Updated: dependency globals to 17.7.0 (#3761)
  • Updated: dependency prettier to 3.9.4 (#3769)
  • Updated: dependency undici to 7.28.0 (#3743)

others

  • Drop commitlint in this project (#3765)

... (truncated)

Commits
  • 6aeb4b9 10.6.0
  • 8e76d7b chore: rename default export webExt (#3789)
  • a89584c chore(deps-dev): bump @​eslint/eslintrc from 3.3.5 to 3.3.6 (#3779)
  • f40ea4e Bump addons-linter to 10.10.0 (#3797)
  • 8aafbba chore(deps-dev): bump prettier from 3.9.5 to 3.9.6 (#3785)
  • 978d273 chore(deps-dev): bump globals from 17.7.0 to 17.8.0 (#3791)
  • bf72979 chore(deps): bump addons-linter from 10.8.0 to 10.9.0 (#3780)
  • 27054d2 chore(deps-dev): bump fs-extra from 11.3.6 to 11.4.0 (#3788)
  • e5ccd4c Bump fx-runner version to 1.6.0 (#3796)
  • c5c7026 chore(deps): bump mozilla/ssdlc-actions/.github/workflows/code-security-analy...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.10.0 and updates ancestor dependency [web-ext](https://github.com/mozilla/web-ext). These dependencies need to be updated together.


Updates `shell-quote` from 1.7.3 to 1.10.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.7.3...v1.10.0)

Updates `web-ext` from 10.0.0 to 10.6.0
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@10.0.0...10.6.0)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.10.0
  dependency-type: indirect
- dependency-name: web-ext
  dependency-version: 10.6.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-a67921d442 branch from 6230fe8 to f813f3e Compare August 5, 2026 17:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants