From bd07a48eb008ea4f7736c455f0487efc29a6bc80 Mon Sep 17 00:00:00 2001
From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 13:38:35 +0000
Subject: [PATCH 1/2] chore: upgrade shell-quote to ^1.10.0 to address
 CVE-2026-13311

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>
---
 CHANGELOG.md | 3 +++
 yarn.lock    | 6 +++---
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ce01f93fa..57a5f2f68 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- Upgraded `shell-quote` to `^1.10.0` to address CVE-2026-13311. [#1466](https://github.com/sourcebot-dev/sourcebot/pull/1466)
+
 ## [5.1.3] - 2026-07-20
 
 ### Added
diff --git a/yarn.lock b/yarn.lock
index 54653dc8d..85a70f916 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -21946,9 +21946,9 @@ __metadata:
   linkType: hard
 
 "shell-quote@npm:^1.6.1, shell-quote@npm:^1.8.4":
-  version: 1.8.4
-  resolution: "shell-quote@npm:1.8.4"
-  checksum: 10c0/86c93678bc394cb81f5ddcdc87df9c95d279ef9652775cd1cd1eed361404169a8d8cbaacaeed232ab09919e36ee1e5363863570390d78571f8c22b7f6312fb40
+  version: 1.10.0
+  resolution: "shell-quote@npm:1.10.0"
+  checksum: 10c0/46ee59bfd972ce6a45500c44ed130dff2d0a7d6fbac9841e59d548518cad8060a06393c9a5dcbc0cede294ad80b2a2cd8c904679e09265f53efc0a0879f30961
   languageName: node
   linkType: hard
 

From f5f39f78d1ab444151ea66a4d795bc97ae129d98 Mon Sep 17 00:00:00 2001
From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 13:39:01 +0000
Subject: [PATCH 2/2] chore: fix changelog PR link

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 57a5f2f68..1768af42e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,7 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
-- Upgraded `shell-quote` to `^1.10.0` to address CVE-2026-13311. [#1466](https://github.com/sourcebot-dev/sourcebot/pull/1466)
+- Upgraded `shell-quote` to `^1.10.0` to address CVE-2026-13311. [#1469](https://github.com/sourcebot-dev/sourcebot/pull/1469)
 
 ## [5.1.3] - 2026-07-20