Skip to content

fix: upgrade shell-quote to 1.8.4#120

Merged
wabicai merged 1 commit into
mainfrom
fix/shell-quote-1-8-4
May 27, 2026
Merged

fix: upgrade shell-quote to 1.8.4#120
wabicai merged 1 commit into
mainfrom
fix/shell-quote-1-8-4

Conversation

@wabicai

@wabicai wabicai commented May 26, 2026

Copy link
Copy Markdown
Member

Summary

  • Add a Yarn resolution for shell-quote@1.8.4 to address the reported critical command injection vulnerability.
  • Refresh yarn.lock so react-dev-utils resolves shell-quote to 1.8.4 instead of 1.7.3.

Verification

  • yarn why shell-quote shows shell-quote@1.8.4 hoisted from react-dev-utils#shell-quote.
  • yarn build completes successfully.

Notes

  • Build still reports existing warnings for outdated Browserslist data, an autoprefixer color-adjust deprecation, and unused variables in src/components/Modal/index.tsx.

@revan-zhang

revan-zhang commented May 26, 2026

Copy link
Copy Markdown
Contributor

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@wabicai
wabicai force-pushed the fix/shell-quote-1-8-4 branch from 4a26f40 to 4ca5e30 Compare May 26, 2026 11:59
@wabicai
wabicai enabled auto-merge (squash) May 26, 2026 12:05
@wabicai
wabicai requested a review from originalix May 26, 2026 12:07
@wabicai
wabicai force-pushed the fix/shell-quote-1-8-4 branch from 4ca5e30 to 5646c74 Compare May 27, 2026 02:46
@wabicai
wabicai merged commit 4ba3369 into main May 27, 2026
9 checks passed
@wabicai
wabicai deleted the fix/shell-quote-1-8-4 branch May 27, 2026 02:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants