From 7d13275abf75306b4e5441987560129f79de9c3b Mon Sep 17 00:00:00 2001 From: Angie Rojas Date: Wed, 21 Oct 2026 08:12:35 -0500 Subject: [PATCH] chore(deps): fix shell-quote vulnerability (GHSA-pqg4-j6r4-53mv) Bump transitive shell-quote 1.10.0 -> 1.12.0 (CVE-2026-102422, critical) and launch-editor 2.14.1 -> 2.14.2 (GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-587h-7wmj-h5pm). Lockfile-only change. Co-Authored-By: Claude Opus 5.5 (1M context) --- yarn.lock | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/yarn.lock b/yarn.lock index c986504..43ff54f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -10188,12 +10188,12 @@ __metadata: linkType: hard "launch-editor@npm:^2.9.1": - version: 2.14.1 - resolution: "launch-editor@npm:2.14.1" + version: 2.14.2 + resolution: "launch-editor@npm:2.14.2" dependencies: picocolors: "npm:^1.1.1" - shell-quote: "npm:^1.8.4" - checksum: 10/335d12ca437280e77070657531c251b6c91c62bc653f70ab66ddd2a6e50131b1b043480411c5b93d54955a0a6eb8ec01e9a5b5cfe2d887341d878d19394a126b + shell-quote: "npm:^1.10.0" + checksum: 10/8a3a82314ed6705d8f6795c409ea31ed2a106d0f0bc0528a60f8b53ec972cce1db9088bb4647987b2ef4bb16b804fcc85e54529acaa26aae22f39eaba704401b languageName: node linkType: hard @@ -14034,10 +14034,10 @@ __metadata: languageName: node linkType: hard -"shell-quote@npm:^1.6.1, shell-quote@npm:^1.8.4": - version: 1.10.0 - resolution: "shell-quote@npm:1.10.0" - checksum: 10/d4a22aeefe64919290af753ac6098239d7ffee52a5db62c20edef69794bd10b5f86e298f68be26af9606ac435e890dd391994a5405a90bb8aebef1ff1dde839b +"shell-quote@npm:^1.10.0, shell-quote@npm:^1.6.1": + version: 1.12.0 + resolution: "shell-quote@npm:1.12.0" + checksum: 10/18b3e382272804e79fd3187c18877cfd4e736b5afb576bf1ab66a561b0a0e26eada4b7c8eb45473d1f17268ffcf12d0aaa90b9235132123eb673df5d0a5df943 languageName: node linkType: hard