Skip to content

build(deps): bump shell-quote, appium, @appium/support and @appium/base-driver in /appium - #2819

Merged
FlowCryptRobot merged 1 commit into
masterfrom
dependabot/npm_and_yarn/appium/multi-f35d4d6a39
Nov 12, 2026
Merged

build(deps): bump shell-quote, appium, @appium/support and @appium/base-driver in /appium#2819
FlowCryptRobot merged 1 commit into
masterfrom
dependabot/npm_and_yarn/appium/multi-f35d4d6a39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps shell-quote to 1.12.0 and updates ancestor dependencies shell-quote, appium, @appium/support and @appium/base-driver. These dependencies need to be updated together.

Updates shell-quote from 1.10.0 to 1.12.0

Changelog

Sourced from shell-quote's changelog.

v1.12.0 - 2026-10-02

Fixed

Commits

  • [New] parse: support tab-stripping here-documents (<<-) dbfac37
  • [New] parse: support output process substitution (>() 2053315
  • [New] parse: support the case test-next terminator (;;&) 7d688b9
  • [New] parse: support the case fall-through terminator (;&) f27010e
  • [New] parse: support redirecting output despite noclobber (>|) b78d19c
  • [New] parse: support opening a file for reading and writing (<>) 21cc333
  • [New] parse: support redirecting stdout and stderr (&>) 6ad6cd2
  • [New] parse: support appending stdout and stderr (&>>) 90cde9c
  • [Dev Deps] update @ljharb/eslint-config 3a7b4ae

v1.11.0 - 2026-09-29

Fixed

Commits

  • [Fix] quote: reject line terminators in tokens after a comment 6002b2e
  • [Fix] parse: preserve text after special shell parameters 81b08a5
  • [Fix] parse: an escaped backslash does not escape the character after it d708019
  • [Fix] quote: preserve ! in arguments that also contain ' ad39927
  • [Fix] parse: treat $_name as a variable name, not $_ followed by text 28f88cd
  • [Fix] quote: preserve empty glob patterns 35c9b97
  • [Fix] quote: escape ~ in glob patterns to prevent shell tilde-expansion 239d49c
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, evalmd b1e406e
  • [meta] npmignore some files ebfc308
  • [actions] add permissions 3429b0d
  • [actions] set least-privilege cache-mode 36f2394
  • [Dev Deps] update eslint 6de9a41
Commits
  • 6ecb8aa v1.12.0
  • 3a7b4ae [Dev Deps] update @ljharb/eslint-config
  • 7d688b9 [New] parse: support the case test-next terminator (;;&)
  • f27010e [New] parse: support the case fall-through terminator (;&)
  • 90cde9c [New] parse: support appending stdout and stderr (&>>)
  • 6ad6cd2 [New] parse: support redirecting stdout and stderr (&>)
  • 2053315 [New] parse: support output process substitution (>()
  • b78d19c [New] parse: support redirecting output despite noclobber (>|)
  • 21cc333 [New] parse: support opening a file for reading and writing (\<>)
  • dbfac37 [New] parse: support tab-stripping here-documents (<<-)
  • Additional commits viewable in compare view

Updates appium from 3.8.0 to 3.9.0

Release notes

Sourced from appium's releases.

appium@3.9.0

3.9.0 (2026-10-27)

Features

  • appium: fallback to latest compatible extension version for CLI `install` (#23013) (3c20d79)

Bug Fixes

  • appium: backport bidi close code validation (#22942) (14110e5)
  • appium: prevent recursion when logging the first BiDi event of a method (#22891) (77945dd)
  • base-driver: track and remove BiDi subscriptions by ID (#22895) (6241300)
  • support: prevent zip extraction through symlink chains (#23002) (#23069) (4c753a1)
Changelog

Sourced from appium's changelog.

3.9.0 (2026-10-27)

Features

  • appium: fallback to latest compatible extension version for CLI `install` (#23013) (3c20d79)

Bug Fixes

  • appium: backport bidi close code validation (#22942) (14110e5)
  • appium: prevent recursion when logging the first BiDi event of a method (#22891) (77945dd)
  • base-driver: track and remove BiDi subscriptions by ID (#22895) (6241300)
  • support: prevent zip extraction through symlink chains (#23002) (#23069) (4c753a1)
Commits
  • 2c28202 chore: publish
  • cc531cf docs: add XPath to UiSelector to Ecosystem tools document (#23098)
  • b09e3c5 docs(appium): Update documentation translations (#23093)
  • db41945 docs(appium): add NovaWindows Hybrid mode (since v1.4.0) (#23089)
  • 8b37725 chore(support): update dependency asyncbox to v6.5.0 (#23073)
  • 4c753a1 fix(support): prevent zip extraction through symlink chains (#23002) (#23069)
  • 353e9b1 docs(appium): Update documentation translations (#23065)
  • 8d85580 docs: remove incorrect claim that POST /timeouts no longer accepts type/ms (#...
  • 815fd3e docs(appium): Update documentation translations (#23058)
  • 522f397 docs: update driver repo links to docs sites (#23045)
  • Additional commits viewable in compare view

Updates @appium/support from 7.2.8 to 7.2.9

Release notes

Sourced from @​appium/support's releases.

@​appium/support@​7.2.9

7.2.9 (2026-10-27)

Bug Fixes

  • support: keep _extractEntryTo from writing through symlinks (#23101) (60acd1d)
  • support: preserve exclamation marks with apostrophes (#22816) (359ef4b)
  • support: prevent zip extraction through symlink chains (#23002) (#23069) (4c753a1)
  • support: reject Windows drive-relative symlink targets in zip extraction (#23100) (dddd2c3)
Changelog

Sourced from @​appium/support's changelog.

7.2.9 (2026-10-27)

Bug Fixes

  • support: keep _extractEntryTo from writing through symlinks (#23101) (60acd1d)
  • support: preserve exclamation marks with apostrophes (#22816) (359ef4b)
  • support: prevent zip extraction through symlink chains (#23002) (#23069) (4c753a1)
  • support: reject Windows drive-relative symlink targets in zip extraction (#23100) (dddd2c3)
Commits
  • 2c28202 chore: publish
  • 60acd1d fix(support): keep _extractEntryTo from writing through symlinks (#23101)
  • dddd2c3 fix(support): reject Windows drive-relative symlink targets in zip extraction...
  • 8b37725 chore(support): update dependency asyncbox to v6.5.0 (#23073)
  • 4c753a1 fix(support): prevent zip extraction through symlink chains (#23002) (#23069)
  • 613752a chore(support): update dependency uuid to v14.0.3 (#22980)
  • 5fbd98e chore(support): update dependency shell-quote to v1.12.0 (#22904)
  • 01d2b8f chore(support): update dependency shell-quote to v1.11.0 (#22858)
  • 359ef4b fix(support): preserve exclamation marks with apostrophes (#22816)
  • See full diff in compare view

Updates @appium/base-driver from 10.8.1 to 10.8.2

Release notes

Sourced from @​appium/base-driver's releases.

@​appium/base-driver@​10.8.2

10.8.2 (2026-10-27)

Bug Fixes

  • base-driver: reject browser-origin WebSocket upgrades unless CORS is enabled (#23102) (e967b60)
  • base-driver: track and remove BiDi subscriptions by ID (#22895) (6241300)
Changelog

Sourced from @​appium/base-driver's changelog.

10.8.2 (2026-10-27)

Bug Fixes

  • base-driver: reject browser-origin WebSocket upgrades unless CORS is enabled (#23102) (e967b60)
  • base-driver: track and remove BiDi subscriptions by ID (#22895) (6241300)
Commits
  • 2c28202 chore: publish
  • e967b60 fix(base-driver): reject browser-origin WebSocket upgrades unless CORS is ena...
  • e0cf688 chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates ...
  • 8b37725 chore(support): update dependency asyncbox to v6.5.0 (#23073)
  • 6241300 fix(base-driver): track and remove BiDi subscriptions by ID (#22895)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump shell-quote, appium, @appium/support and @appium/ba…
7ec10aa 
…se-driver

Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.12.0 and updates ancestor dependencies [shell-quote](https://github.com/ljharb/shell-quote), [appium](https://github.com/appium/appium/tree/HEAD/packages/appium), [@appium/support](https://github.com/appium/appium/tree/HEAD/packages/support) and [@appium/base-driver](https://github.com/appium/appium/tree/HEAD/packages/base-driver). These dependencies need to be updated together.


Updates `shell-quote` from 1.10.0 to 1.12.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.10.0...v1.12.0)

Updates `appium` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@3.9.0/packages/appium)

Updates `@appium/support` from 7.2.8 to 7.2.9
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/support/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/@appium/support@7.2.9/packages/support)

Updates `@appium/base-driver` from 10.8.1 to 10.8.2
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/base-driver/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/@appium/base-driver@10.8.2/packages/base-driver)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.12.0
  dependency-type: indirect
- dependency-name: appium
  dependency-version: 3.9.0
  dependency-type: direct:development
- dependency-name: "@appium/support"
  dependency-version: 7.2.9
  dependency-type: indirect
- dependency-name: "@appium/base-driver"
  dependency-version: 10.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from sosnovsky as a code owner November 12, 2026 04:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 12, 2026
@FlowCryptRobot
FlowCryptRobot enabled auto-merge (squash) November 12, 2026 04:19
@FlowCryptRobot
FlowCryptRobot merged commit 299d804 into master Nov 12, 2026
9 checks passed
@FlowCryptRobot
FlowCryptRobot deleted the dependabot/npm_and_yarn/appium/multi-f35d4d6a39 branch November 12, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FlowCryptRobot FlowCryptRobot FlowCryptRobot approved these changes
@sosnovsky sosnovsky Awaiting requested review from sosnovsky sosnovsky is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@FlowCryptRobot