build(deps-dev): bump shell-quote from 1.8.3 to 1.10.0 - #3415
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
e985aa9 to
3f97a20
Compare
![xrplf-ai-reviewer[bot]](https://avatars.githubusercontent.com/u/67929741?s=60&v=4){kind=small}
There was a problem hiding this comment.
This is a Dependabot dev-dependency bump of shell-quote (1.8.3 → 1.10.0), a dev-only transitive dependency with no source code touching it directly, so the version bump itself is low-risk. However, the accompanying package-lock.json diff also removes the nested packages/xrpl/node_modules/@noble/curves and @noble/hashes resolutions and marks ripple-keypairs as extraneous, which is unrelated to the shell-quote bump and touches the crypto libraries used for signing in this repo.
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to 1.10.0. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.10.0) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.10.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
3f97a20 to
b4d2fb7
Compare
There was a problem hiding this comment.
This MR is a dependabot dev-dependency bump of shell-quote (1.8.3 → 1.10.0), which is straightforward and low-risk on its own. However, the lockfile diff also removes nested override entries for @noble/curves and @noble/hashes under packages/xrpl and marks the nested ripple-keypairs entry as extraneous — changes unrelated to the shell-quote bump that touch crypto-library resolution in a signing-sensitive codebase and should be called out.
Bumps shell-quote from 1.8.3 to 1.10.0.
Changelog
Sourced from shell-quote's changelog.
Commits
64988d9v1.10.0617d119[Tests]quote: the tilde test escapes every~, not just a leading one (#9)59bbf8b[types] fix an error TS v6 ignores but v7 fails on190e236[Tests]quote: pin that a backslash with whitespace is not doubled in singl...a04d475[Dev Deps] update@arethetypeswrong/cli,evalmdb9545b3[New]parse: add opt-insplitUnquotedoption for shell field-splitting of...1b36468[readme]quote: use output verbatim; do not re-quote it (#11)1c36f3f[Tests]quote: pin conservative escaping of=,@,^,,,:,!(#11)e1c75cd[readme] documentparse's supported parameter-expansion subsetc0842c8[Fix]parse: match nested${...}braces so nested parameter expansion is ...