node-shell-quote (1.7.4+~1.7.1-1ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: command injection vulnerability
    - debian/patches/CVE-2026-9277.patch: `quote`: validate object-token
      shapes in quote.js
    - CVE-2026-9277

 -- Shishir Subedi <shishir.subedi@canonical.com>  Tue, 09 Jun 2026 13:23:02 +0545

node-shell-quote (1.7.4+~1.7.1-1) unstable; urgency=medium

  * Team upload
  * Update homepage
  * New upstream version 1.7.4+~1.7.1
  * Drop dependency to nodejs

 -- Yadd <yadd@debian.org>  Mon, 14 Nov 2022 11:19:44 +0100

node-shell-quote (1.7.3+~1.7.1-1) unstable; urgency=medium

  * Team upload
  * Bump debhelper compatibility level to 13
  * Update standards version to 4.6.0, no changes needed.
  * Fix GitHub tags regex
  * Fix filenamemangle
  * Use dh-sequence-nodejs instead of pkg-js-tools
  * Embed typescript declarations and repack
  * New version 1.7.3+~1.7.1 (Closes: CVE-2021-42740)
  * Don't install example in nodejs dir

 -- Yadd <yadd@debian.org>  Sun, 09 Jan 2022 12:07:45 +0100

node-shell-quote (1.7.2-1) unstable; urgency=medium

  * Team Upload.

  [ Yadd ]
  * Change section to javascript
  * Change VCS fields to salsa
  * Fix copyrights

  [ Nilesh ]
  * Remove patches - fixed with new release
  * Switch to pkg-js-tools
  * Enable tests
  * Install example
  * Drop compat, switch to debhelper-compat
  * Add upstream/metadata
  * Add "Rules-Requires-Root: no"
  * Fix control with cme
  * Bump standards version to 4.5.0
  * Add gbp.conf

 -- Nilesh <npatra974@gmail.com>  Sat, 01 Feb 2020 05:10:31 +0530
