fix(deps): resolve shell-quote critical dependabot alert

Pin shell-quote to 1.8.4 via yarn resolutions so concurrently no longer pulls the vulnerable 1.8.3 release.
This commit is contained in:
Tommaso Casaburi
2026-06-11 15:01:58 +07:00
parent b044202e33
commit fa7cab0699
2 changed files with 5 additions and 4 deletions
+1
View File
@@ -227,6 +227,7 @@
"tar": "7.5.11",
"yauzl": "3.2.1",
"serialize-javascript": "7.0.5",
"shell-quote": "1.8.4",
"@tootallnate/once": "3.0.1",
"rollup": "2.80.0",
"@electron/asar": "4.0.1",
+4 -4
View File
@@ -18152,10 +18152,10 @@ __metadata:
languageName: node
linkType: hard
"shell-quote@npm:^1.8.0":
version: 1.8.3
resolution: "shell-quote@npm:1.8.3"
checksum: 10c0/bee87c34e1e986cfb4c30846b8e6327d18874f10b535699866f368ade11ea4ee45433d97bf5eada22c4320c27df79c3a6a7eb1bf3ecfc47f2c997d9e5e2672fd
"shell-quote@npm:1.8.4":
version: 1.8.4
resolution: "shell-quote@npm:1.8.4"
checksum: 10c0/86c93678bc394cb81f5ddcdc87df9c95d279ef9652775cd1cd1eed361404169a8d8cbaacaeed232ab09919e36ee1e5363863570390d78571f8c22b7f6312fb40
languageName: node
linkType: hard