chore(deps): bump shell-quote from 1.7.2 to 1.7.4 in /src/web/toManual
Bumps shell-quote from 1.7.2 to 1.7.4.
Changelog
Sourced from shell-quote's changelog.
v1.7.4 - 2022-10-12
Merged
- Add node_modules to .gitignore
[#48](https://github.com/ljharb/shell-quote/issues/48)Commits
- [eslint] fix indentation and whitespace
aaa9d1f- [eslint] additional cleanup
397cb62- [meta] add
auto-changelog497fca5- [actions] add reusable workflows
4763c36- [eslint] add eslint
6ee1437- [readme] rename, add badges
7eb5134- [meta] update URLs
67381b6- [meta] create FUNDING.yml; add
fundingin package.json8641572- [meta] use
npmignoreto autogenerate an npmignore file2e2007a- Only apps should have lockfiles
f97411e- [Dev Deps] update
tape051f608- [meta] add
safe-publish-latest18cadf9- [Tests] add
audinposttestdc1cc121.7.3
- Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)
Commits
5409e72v1.7.44763c36[actions] add reusable workflows8641572[meta] create FUNDING.yml; addfundingin package.json497fca5[meta] addauto-changelog7eb5134[readme] rename, add badges67381b6[meta] update URLs2e2007a[meta] usenpmignoreto autogenerate an npmignore file18cadf9[meta] addsafe-publish-latest397cb62[eslint] additional cleanupaaa9d1f[eslint] fix indentation and whitespace- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
CLA Assistant Lite bot:
如果你是以企业贡献者的身份进行提交,请联系我们签署企业贡献者许可协议
If you submit as corporate contributor, please contact us to sign our Corporate Contributor License Agreement
感谢您的提交,我们非常感谢。 像许多开源项目一样,在接受您的贡献之前,我们要求您签署我们的个人贡献者许可协议。 您只需发布与以下格式相同的评论即可签署个人贡献者许可协议。
Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Individual Contributor License Agreement before we can accept your contribution. You can sign the Individual Contributor License Agreement by just posting a Pull Request Comment same as the below format.
I have read the CLA Document and I hereby sign the CLA.
提交邮箱中包含我们的合作伙伴,但您似乎并非合作伙伴的成员或对接人,请联系相关对接人将您添加至组织之中,或由其重新发起 Pull Request。
The commit email domain belongs to one of our partners, but it seems you are not yet a member of the current organization, please contact the contact person to add you to the organization or let them submit the Pull Request.
deepin-admin-bot seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You can retrigger this bot by commenting recheck in this Pull Request
TAG Bot
New tag: 6.0.7 DISTRIBUTION: stable Suggest: synchronizing this PR through rebase #448
TAG Bot
New tag: 6.0.8 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #453
TAG Bot
New tag: 6.0.9 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #456
TAG Bot
New tag: 6.0.10 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #458
TAG Bot
New tag: 6.0.11 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #461
TAG Bot
New tag: 6.0.12 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #464
TAG Bot
New tag: 6.0.13 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #471
TAG Bot
New tag: 6.0.14 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #473
TAG Bot
New tag: 6.5.0 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #489
TAG Bot
New tag: 6.5.1 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #491
TAG Bot
New tag: 6.5.2 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #497
TAG Bot
New tag: 6.5.3 DISTRIBUTION: unstable Suggest: synchronizing this PR through rebase #500