Bump shell-quote and react-scripts

[dependabot[bot]]

Bumps shell-quote and react-scripts. These dependencies needed to be updated together. Updates shell-quote from 1.6.1 to 1.7.3

Release notes

Sourced from shell-quote's releases.

v1.7.2

• Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2)

v1.7.1

• Fix $ being removed when not part of an environment variable name. (@​Adman in #32)

v1.7.0

• Add support for parsing >> and >& redirection operators. (@​forivall in #16)
• Add support for parsing <( process substitution operator. (@​cuonglm in #15)

v1.6.3

• Fix Windows path quoting problems. (@​dy in #34)

v1.6.2

• Remove dependencies in favour of native methods. (@​zertosh in #21)

Changelog

Sourced from shell-quote's changelog.

1.7.3

• Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)

1.7.2

• Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2)

1.7.1

• Fix $ being removed when not part of an environment variable name. (@​Adman in #32)

1.7.0

• Add support for parsing >> and >& redirection operators. (@​forivall in #16)
• Add support for parsing <( process substitution operator. (@​cuonglm in #15)

1.6.3

• Fix Windows path quoting problems. (@​dy in #34)

1.6.2

• Remove dependencies in favour of native methods. (@​zertosh in #21)

Commits

• 6a8a899 1.7.3
• 5799416 fix for security issue with windows drive letter regex
• c7de931 Add security.md
• 414853f Update readme.markdown (#43)
• 0fc4a97 use Github Actions (#42)
• 89a1993 1.7.2
• df7e4c7 add test for #37
• 144e1c2 revert windows path unescaping, fixes #37
• c24f3aa ci: nvs does not have iojs
• c2950fb 1.7.1
• Additional commits viewable in compare view

Updates react-scripts from 2.1.0 to 5.0.1

Changelog

Sourced from react-scripts's changelog.

3.0.0 and Newer Versions

Please refer to CHANGELOG.md for the newer versions.

2.1.8 (March 7, 2019)

v2.1.8 is a maintenance release that reapplies the TypeScript speed improvements (#6406) in a new major version of react-dev-utils.

Migrating from 2.1.7 to 2.1.8

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@2.1.8

or

yarn add --exact react-scripts@2.1.8

2.1.7 (March 7, 2019)

v2.1.7 is a maintenance release that temporarily reverts the TypeScript speed improvements (#6406) to fix a dependency issue in react-dev-utils.

Migrating from 2.1.6 to 2.1.7

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@2.1.7

or

yarn add --exact react-scripts@2.1.7

2.1.6 (March 6, 2019)

v2.1.6 is a maintenance release that brings a few new improvements, most notably:

• :rocket: Reduced TypeScript rebuild times while running the development server. This was previously introduced in v2.1.4 but had to be reverted. Thanks to @​ianschmitz for getting this ready.

:bug: Bug Fix

• react-dev-utils
  • #6511 Fix deploy instructions to make link clickable. (@​sbimochan)

... (truncated)

Commits

• 19fa58d Publish
• 9802941 fix: webpack noise printed only if error or warning (#12245)
• 2eef1d0 Update templates to use React 18 createRoot (#12220)
• 221e511 Publish
• 5614c87 Add support for Tailwind (#11717)
• 20edab4 fix(webpackDevServer): disable overlay for warnings (#11413)
• 3afbbc0 Update all dependencies (#11624)
• f5467d5 feat(eslint-config-react-app): support ESLint 8.x (#11375)
• c7627ce Update webpack and dev server (#11646)
• 544befe Update package.json (#11597)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by iansu, a new releaser for react-scripts since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rokka-io/rokka-dashboard/network/alerts).

[dependabot[bot]]

Looks like these dependencies are no longer a dependency, so this is no longer needed.