actions/claude-code-action
1
0
Fork 0
mirror of https://github.com/anthropics/claude-code-action.git synced 2026-08-22 03:18:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: bump shell-quote to 1.8.4 to remediate CVE-2026-9277 (#1557)

Browse Source 
shell-quote 1.8.3 (root and base-action dependency) is affected by
CVE-2026-9277, a CRITICAL severity vulnerability. 1.8.4 contains the fix.

Co-authored-by: Ashwin Bhat <ashwin@anthropic.com>
This commit is contained in:
Dhaval Doshi
2026-08-14 16:46:34 -07:00
committed by GitHub
co-authored by Ashwin Bhat
parent a2cac87e27
commit 5da4c76dde
5 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+1 -1
View File
@@ -18,7 +18,7 @@
"@octokit/rest": "^21.1.1",
"@octokit/webhooks-types": "^7.6.1",
"node-fetch": "^3.3.2",
"shell-quote": "^1.8.3",
"shell-quote": "^1.8.4",
"zod": "^3.24.4"
},
"devDependencies": {