Skip to content

chore(deps): bump shell-quote from 1.8.2 to 1.8.4 in /redisinsight/ui/src/packages#6049

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/redisinsight/ui/src/packages/shell-quote-1.8.4
Open

chore(deps): bump shell-quote from 1.8.2 to 1.8.4 in /redisinsight/ui/src/packages#6049
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/redisinsight/ui/src/packages/shell-quote-1.8.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps shell-quote from 1.8.2 to 1.8.4.

Changelog

Sourced from shell-quote's changelog.

v1.8.4 - 2026-05-22

Commits

  • [Fix] quote: validate object-token shapes 4378a6e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
  • [Tests] increase coverage 9f3caa3
  • [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
  • [Dev Deps] update @ljharb/eslint-config 699c511

v1.8.3 - 2025-06-01

Fixed

Commits
  • ff166e2 v1.8.4
  • 4378a6e [Fix] quote: validate object-token shapes
  • 22ebec0 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, `npmig...
  • 9f3caa3 [Tests] increase coverage
  • 3344a04 [readme] replace runkit CI badge with shields.io check-runs badge
  • 699c511 [Dev Deps] update @ljharb/eslint-config
  • 487a9b4 v1.8.3
  • 01faaff [Fix] remove unnecessary backslash escaping in single quotes
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Low Risk
Lockfile-only patch bump of a transitive dev/build dependency with minor quoting fixes and no RedisInsight code changes.

Overview
Bumps shell-quote from 1.8.2 to 1.8.4 in redisinsight/ui/src/packages/yarn.lock. The package is pulled in transitively (e.g. via concurrently); there are no application source changes.

Upstream 1.8.3 fixes single-quote escaping; 1.8.4 adds validation for object-token shapes in quote.

Reviewed by Cursor Bugbot for commit e8ceaa7. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4.
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.2...v1.8.4)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.8.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from a team as a code owner June 10, 2026 14:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 10, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@jit-ci

jit-ci Bot commented Jun 10, 2026

Copy link
Copy Markdown

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

@valkirilov valkirilov added the run-all-tests Trigger the CI to run the front-end, back-end and integration tests label Jun 10, 2026
@valkirilov valkirilov temporarily deployed to staging June 10, 2026 15:00 — with GitHub Actions Inactive
@valkirilov valkirilov temporarily deployed to staging June 10, 2026 15:00 — with GitHub Actions Inactive
@valkirilov valkirilov temporarily deployed to staging June 10, 2026 15:00 — with GitHub Actions Inactive
@valkirilov valkirilov temporarily deployed to staging June 10, 2026 15:00 — with GitHub Actions Inactive
@valkirilov valkirilov deployed to production June 10, 2026 15:04 — with GitHub Actions Active
@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage - Backend unit tests

St.
Category Percentage Covered / Total
🟢 Statements 92.72% 15709/16943
🟡 Branches 74.7% 4949/6625
🟢 Functions 86.87% 2447/2817
🟢 Lines 92.55% 15014/16222

Test suite run success

3454 tests passing in 309 suites.

Report generated by 🧪jest coverage report action from e8ceaa7

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage - Integration Tests

Status Category Percentage Covered / Total
🟡 Statements 78.78% 17500/22212
🟡 Branches 61.54% 8054/13087
🟡 Functions 66.53% 2396/3601
🟡 Lines 78.33% 16452/21002

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code run-all-tests Trigger the CI to run the front-end, back-end and integration tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants