Merge pull request #1660 from objectstack-ai/fix/dependabot-128-shell-quote

fix(deps): force shell-quote >=1.8.4 to resolve critical CVE-2026-9277

Author: os-zhuang

package.json

@@ -107,6 +107,7 @@
       "@types/react-dom": "19.2.3",
       "dompurify": "^3.4.5",
       "qs@<6.15.2": "^6.15.2",
+      "shell-quote@<1.8.4": "^1.8.4",
       "tmp@<0.2.6": "^0.2.6",
       "uuid@<11.1.1": "^11.1.1"
     }